ESET hlásí že nejde smazat nvm co s tím...(předem se omlouvám asi to nebude se mnou lehké, nejsem moc počítačově nadaný
)Win32/Olmarik TDL4
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Win32/Olmarik TDL4
Dobrý den mám problém s touto havětí, problém je že nejde spustit centrum zabezpečení windows. Nelze instalovat nové aktualizace.
ESET hlásí že nejde smazat nvm co s tím...(předem se omlouvám asi to nebude se mnou lehké, nejsem moc počítačově nadaný )
ESET hlásí že nejde smazat nvm co s tím...(předem se omlouvám asi to nebude se mnou lehké, nejsem moc počítačově nadaný
)
Re: Win32/Olmarik TDL4
ahoj,
vloz logy z TDSSKiller + RSIT
vloz logy z TDSSKiller + RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Win32/Olmarik TDL4
Logfile of random's system information tool 1.09 (written by random/random)
Run by User at 2012-09-28 12:01:35
Microsoft Windows 7 Home Premium
System drive C: has 157 GB (33%) free of 477 GB
Total RAM: 3005 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:02:11, on 28.9.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16930)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Users\User\AppData\Local\Temp\A9D2FF26-230B-43E0-8C9A-C019E7390640.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\User\Downloads\RSIT.exe
C:\Program Files\trend micro\User.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: (no name) - {FCCC63D1-D8E4-458D-BC4F-B0C3CABF31AB} - C:\PROGRA~1\FaceMod\FACEMO~1.DLL
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IMSS] "C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NVIDIA driver monitor] c:\windows\nvsvc32.exe
O4 - HKCU\..\Run: [Hpoiop] C:\Users\User\AppData\Roaming\Hpoiop.exe
O4 - HKCU\..\Run: [KYQ8ZBOAXR] C:\Users\User\AppData\Local\Temp\Np1.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
--
End of file - 9463 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
=========Mozilla firefox=========
ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll
npwachk.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default\searchplugins\
sweetim.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-07-15 329520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-07-15 59184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCCC63D1-D8E4-458D-BC4F-B0C3CABF31AB}]
C:\PROGRA~1\FaceMod\FACEMO~1.DLL [2010-07-02 453120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-09-16 7739936]
"IMSS"=C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2009-10-01 111640]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-07-31 38872]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-11 919008]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files\AMD AVT\bin\kdbsync.exe aml []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-11 641704]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2012-02-16 114992]
"Sweetpacks Communicator"=C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files\Steam\steam.exe [2012-08-31 1353080]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"NVIDIA driver monitor"=c:\windows\nvsvc32.exe []
"Hpoiop"=C:\Users\User\AppData\Roaming\Hpoiop.exe []
"KYQ8ZBOAXR"=C:\Users\User\AppData\Local\Temp\Np1.exe []
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\73251645.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\73251645.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\User\Downloads\image96523489.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Users\User\Downloads\facebook-img001915632.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Windows\system32\MDM32.exe"="C:\Windows\system32\MDM32.exe:*:Enabled:LANMG"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Windows\system32\MDM32.exe"="C:\Windows\system32\MDM32.exe:*:Enabled:LANMG"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"VIDC.FPS1"=frapsvid.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-09-28 12:00:48 ----A---- C:\TDSSKiller.2.8.10.0_28.09.2012_12.00.48_log.txt
2012-09-28 11:59:07 ----D---- C:\TDSSKiller_Quarantine
2012-09-28 11:58:42 ----D---- C:\rsit
2012-09-28 11:58:42 ----D---- C:\Program Files\trend micro
2012-09-28 11:58:27 ----A---- C:\TDSSKiller.2.8.10.0_28.09.2012_11.58.27_log.txt
2012-09-28 10:37:30 ----SHD---- C:\Config.Msi
2012-09-14 21:35:12 ----D---- C:\ProgramData\McAfee Security Scan
2012-09-14 21:35:10 ----D---- C:\Program Files\McAfee Security Scan
2012-09-08 12:30:15 ----D---- C:\Program Files\Mozilla Firefox
2012-08-29 07:33:14 ----D---- C:\World_of_Tanks_Setup
======List of files/folders modified in the last 1 month======
2012-09-28 12:02:11 ----D---- C:\Windows\Temp
2012-09-28 12:01:19 ----D---- C:\Program Files\Steam
2012-09-28 12:01:06 ----D---- C:\Windows\Prefetch
2012-09-28 12:00:50 ----D---- C:\Windows\system32\drivers
2012-09-28 12:00:09 ----A---- C:\Windows\system32\log.txt
2012-09-28 11:59:29 ----D---- C:\Windows\system32\config
2012-09-28 11:58:42 ----RD---- C:\Program Files
2012-09-28 10:54:34 ----SHD---- C:\Windows\System32
2012-09-28 10:54:34 ----D---- C:\Windows\inf
2012-09-28 10:54:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-28 10:37:54 ----SHD---- C:\Windows\Installer
2012-09-27 12:46:49 ----D---- C:\Users\User\AppData\Roaming\wargaming.net
2012-09-26 18:34:34 ----D---- C:\Windows\system32\directx
2012-09-26 18:34:30 ----HD---- C:\Windows\msdownld.tmp
2012-09-26 18:34:22 ----D---- C:\Games
2012-09-21 03:41:46 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-09-16 10:06:45 ----A---- C:\Windows\system32\PnkBstrB.exe
2012-09-16 07:57:06 ----D---- C:\Program Files\Common Files\Steam
2012-09-15 09:29:39 ----D---- C:\Program Files\Rigs of Rods 0.38
2012-09-14 21:35:23 ----D---- C:\ProgramData\Adobe
2012-09-14 21:35:12 ----HD---- C:\ProgramData
2012-09-08 18:19:28 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-08-31 18:33:30 ----D---- C:\Users\User\AppData\Roaming\Winamp
2012-08-30 12:42:46 ----D---- C:\Users\User\AppData\Roaming\uTorrent
2012-08-29 07:52:05 ----RSD---- C:\Windows\assembly
2012-08-29 07:41:51 ----D---- C:\Windows\system32\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-16 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-08-05 281760]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-08-05 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-06-11 8733696]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-06-11 295936]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k6232.sys [2011-07-20 268968]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-09-16 2771104]
S3 aca0wxhn;aca0wxhn; C:\Windows\system32\drivers\aca0wxhn.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2008-04-22 27672]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [2011-05-06 13904]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-06-11 217600]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2011-06-29 112800]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-10-01 268824]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-08-08 76888]
R2 SpyHunter 4 Service;SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [2012-07-11 763840]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-09-15 529744]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-21 250288]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-08 114144]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-06-15 3583592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-14 1343400]
-----------------EOF-----------------
Run by User at 2012-09-28 12:01:35
Microsoft Windows 7 Home Premium
System drive C: has 157 GB (33%) free of 477 GB
Total RAM: 3005 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:02:11, on 28.9.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16930)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Users\User\AppData\Local\Temp\A9D2FF26-230B-43E0-8C9A-C019E7390640.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\User\Downloads\RSIT.exe
C:\Program Files\trend micro\User.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: (no name) - {FCCC63D1-D8E4-458D-BC4F-B0C3CABF31AB} - C:\PROGRA~1\FaceMod\FACEMO~1.DLL
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IMSS] "C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NVIDIA driver monitor] c:\windows\nvsvc32.exe
O4 - HKCU\..\Run: [Hpoiop] C:\Users\User\AppData\Roaming\Hpoiop.exe
O4 - HKCU\..\Run: [KYQ8ZBOAXR] C:\Users\User\AppData\Local\Temp\Np1.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
--
End of file - 9463 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
=========Mozilla firefox=========
ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll
npwachk.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default\searchplugins\
sweetim.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-07-15 329520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-07-15 59184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCCC63D1-D8E4-458D-BC4F-B0C3CABF31AB}]
C:\PROGRA~1\FaceMod\FACEMO~1.DLL [2010-07-02 453120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-09-16 7739936]
"IMSS"=C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2009-10-01 111640]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-07-31 38872]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-11 919008]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files\AMD AVT\bin\kdbsync.exe aml []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-11 641704]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2012-02-16 114992]
"Sweetpacks Communicator"=C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files\Steam\steam.exe [2012-08-31 1353080]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"NVIDIA driver monitor"=c:\windows\nvsvc32.exe []
"Hpoiop"=C:\Users\User\AppData\Roaming\Hpoiop.exe []
"KYQ8ZBOAXR"=C:\Users\User\AppData\Local\Temp\Np1.exe []
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\73251645.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\73251645.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\User\Downloads\image96523489.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Users\User\Downloads\facebook-img001915632.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Windows\system32\MDM32.exe"="C:\Windows\system32\MDM32.exe:*:Enabled:LANMG"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Windows\system32\MDM32.exe"="C:\Windows\system32\MDM32.exe:*:Enabled:LANMG"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"VIDC.FPS1"=frapsvid.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-09-28 12:00:48 ----A---- C:\TDSSKiller.2.8.10.0_28.09.2012_12.00.48_log.txt
2012-09-28 11:59:07 ----D---- C:\TDSSKiller_Quarantine
2012-09-28 11:58:42 ----D---- C:\rsit
2012-09-28 11:58:42 ----D---- C:\Program Files\trend micro
2012-09-28 11:58:27 ----A---- C:\TDSSKiller.2.8.10.0_28.09.2012_11.58.27_log.txt
2012-09-28 10:37:30 ----SHD---- C:\Config.Msi
2012-09-14 21:35:12 ----D---- C:\ProgramData\McAfee Security Scan
2012-09-14 21:35:10 ----D---- C:\Program Files\McAfee Security Scan
2012-09-08 12:30:15 ----D---- C:\Program Files\Mozilla Firefox
2012-08-29 07:33:14 ----D---- C:\World_of_Tanks_Setup
======List of files/folders modified in the last 1 month======
2012-09-28 12:02:11 ----D---- C:\Windows\Temp
2012-09-28 12:01:19 ----D---- C:\Program Files\Steam
2012-09-28 12:01:06 ----D---- C:\Windows\Prefetch
2012-09-28 12:00:50 ----D---- C:\Windows\system32\drivers
2012-09-28 12:00:09 ----A---- C:\Windows\system32\log.txt
2012-09-28 11:59:29 ----D---- C:\Windows\system32\config
2012-09-28 11:58:42 ----RD---- C:\Program Files
2012-09-28 10:54:34 ----SHD---- C:\Windows\System32
2012-09-28 10:54:34 ----D---- C:\Windows\inf
2012-09-28 10:54:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-28 10:37:54 ----SHD---- C:\Windows\Installer
2012-09-27 12:46:49 ----D---- C:\Users\User\AppData\Roaming\wargaming.net
2012-09-26 18:34:34 ----D---- C:\Windows\system32\directx
2012-09-26 18:34:30 ----HD---- C:\Windows\msdownld.tmp
2012-09-26 18:34:22 ----D---- C:\Games
2012-09-21 03:41:46 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-09-16 10:06:45 ----A---- C:\Windows\system32\PnkBstrB.exe
2012-09-16 07:57:06 ----D---- C:\Program Files\Common Files\Steam
2012-09-15 09:29:39 ----D---- C:\Program Files\Rigs of Rods 0.38
2012-09-14 21:35:23 ----D---- C:\ProgramData\Adobe
2012-09-14 21:35:12 ----HD---- C:\ProgramData
2012-09-08 18:19:28 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-08-31 18:33:30 ----D---- C:\Users\User\AppData\Roaming\Winamp
2012-08-30 12:42:46 ----D---- C:\Users\User\AppData\Roaming\uTorrent
2012-08-29 07:52:05 ----RSD---- C:\Windows\assembly
2012-08-29 07:41:51 ----D---- C:\Windows\system32\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-16 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-08-05 281760]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-08-05 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-06-11 8733696]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-06-11 295936]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k6232.sys [2011-07-20 268968]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-09-16 2771104]
S3 aca0wxhn;aca0wxhn; C:\Windows\system32\drivers\aca0wxhn.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2008-04-22 27672]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [2011-05-06 13904]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-06-11 217600]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2011-06-29 112800]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-10-01 268824]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-08-08 76888]
R2 SpyHunter 4 Service;SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [2012-07-11 763840]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-09-15 529744]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-21 250288]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-08 114144]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-06-15 3583592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-14 1343400]
-----------------EOF-----------------
Re: Win32/Olmarik TDL4
12:00:48.0502 2928 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
12:00:48.0518 2928 ============================================================
12:00:48.0518 2928 Current date / time: 2012/09/28 12:00:48.0518
12:00:48.0518 2928 SystemInfo:
12:00:48.0518 2928
12:00:48.0518 2928 OS Version: 6.1.7600 ServicePack: 0.0
12:00:48.0518 2928 Product type: Workstation
12:00:48.0518 2928 ComputerName: USER-PC
12:00:48.0518 2928 UserName: User
12:00:48.0518 2928 Windows directory: C:\Windows
12:00:48.0518 2928 System windows directory: C:\Windows
12:00:48.0518 2928 Processor architecture: Intel x86
12:00:48.0518 2928 Number of processors: 4
12:00:48.0518 2928 Page size: 0x1000
12:00:48.0518 2928 Boot type: Normal boot
12:00:48.0518 2928 ============================================================
12:00:50.0296 2928 BG loaded
12:00:51.0560 2928 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
12:00:51.0580 2928 ============================================================
12:00:51.0580 2928 \Device\Harddisk0\DR0:
12:00:51.0590 2928 MBR partitions:
12:00:51.0590 2928 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
12:00:51.0590 2928 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
12:00:51.0590 2928 ============================================================
12:00:51.0710 2928 C: <-> \Device\Harddisk0\DR0\Partition2
12:00:51.0710 2928 ============================================================
12:00:51.0710 2928 Initialize success
12:00:51.0710 2928 ============================================================
12:00:58.0917 2436 ============================================================
12:00:58.0917 2436 Scan started
12:00:58.0917 2436 Mode: Manual;
12:00:58.0917 2436 ============================================================
12:01:01.0960 2436 ================ Scan system memory ========================
12:01:01.0960 2436 System memory - ok
12:01:01.0960 2436 ================ Scan services =============================
12:01:02.0054 2436 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
12:01:02.0069 2436 1394ohci - ok
12:01:02.0085 2436 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
12:01:02.0085 2436 ACPI - ok
12:01:02.0100 2436 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
12:01:02.0100 2436 AcpiPmi - ok
12:01:02.0163 2436 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:01:02.0163 2436 AdobeFlashPlayerUpdateSvc - ok
12:01:02.0194 2436 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:01:02.0225 2436 adp94xx - ok
12:01:02.0225 2436 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:01:02.0241 2436 adpahci - ok
12:01:02.0256 2436 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:01:02.0272 2436 adpu320 - ok
12:01:02.0303 2436 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:01:02.0303 2436 AeLookupSvc - ok
12:01:02.0350 2436 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
12:01:02.0366 2436 AFD - ok
12:01:02.0381 2436 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
12:01:02.0397 2436 agp440 - ok
12:01:02.0412 2436 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
12:01:02.0428 2436 aic78xx - ok
12:01:02.0428 2436 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
12:01:02.0428 2436 ALG - ok
12:01:02.0444 2436 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
12:01:02.0459 2436 aliide - ok
12:01:02.0490 2436 [ B90A4332CF4C6580C845266A656DE4AB ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
12:01:03.0099 2436 AMD External Events Utility - ok
12:01:03.0114 2436 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
12:01:03.0130 2436 amdagp - ok
12:01:03.0130 2436 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
12:01:03.0146 2436 amdide - ok
12:01:03.0161 2436 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:01:03.0177 2436 AmdK8 - ok
12:01:03.0348 2436 [ 7844984A5E1E6F18D93AF9E9BCC65436 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
12:01:03.0395 2436 amdkmdag - ok
12:01:03.0473 2436 [ 202DEF509D76105B08741D36C3A7E4D7 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
12:01:03.0489 2436 amdkmdap - ok
12:01:03.0536 2436 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:01:03.0567 2436 AmdPPM - ok
12:01:03.0645 2436 [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:01:03.0676 2436 amdsata - ok
12:01:03.0785 2436 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:01:03.0801 2436 amdsbs - ok
12:01:03.0848 2436 [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:01:03.0879 2436 amdxata - ok
12:01:03.0910 2436 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
12:01:03.0941 2436 AppID - ok
12:01:03.0988 2436 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:01:04.0004 2436 AppIDSvc - ok
12:01:04.0050 2436 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
12:01:04.0050 2436 Appinfo - ok
12:01:04.0206 2436 [ 2E3E53A6AEF23E24F402C7855B9B1542 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:01:04.0206 2436 Apple Mobile Device - ok
12:01:04.0269 2436 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
12:01:04.0300 2436 arc - ok
12:01:04.0316 2436 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:01:04.0331 2436 arcsas - ok
12:01:04.0362 2436 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:01:04.0409 2436 AsyncMac - ok
12:01:04.0425 2436 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
12:01:04.0440 2436 atapi - ok
12:01:04.0690 2436 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
12:01:04.0706 2436 atksgt - ok
12:01:04.0768 2436 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:01:04.0784 2436 AudioEndpointBuilder - ok
12:01:04.0784 2436 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
12:01:04.0784 2436 Audiosrv - ok
12:01:04.0799 2436 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:01:04.0799 2436 AxInstSV - ok
12:01:04.0846 2436 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
12:01:04.0846 2436 b06bdrv - ok
12:01:04.0862 2436 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
12:01:04.0893 2436 b57nd60x - ok
12:01:04.0908 2436 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
12:01:04.0908 2436 BDESVC - ok
12:01:04.0924 2436 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
12:01:04.0940 2436 Beep - ok
12:01:04.0955 2436 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
12:01:04.0971 2436 BFE - ok
12:01:04.0986 2436 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
12:01:05.0002 2436 BITS - ok
12:01:05.0002 2436 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:01:05.0018 2436 blbdrive - ok
12:01:05.0111 2436 [ 5AB58C337AC65837FE404462AD6265AB ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:01:05.0111 2436 Bonjour Service - ok
12:01:05.0142 2436 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:01:05.0158 2436 bowser - ok
12:01:05.0189 2436 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:01:05.0205 2436 BrFiltLo - ok
12:01:05.0205 2436 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:01:05.0205 2436 BrFiltUp - ok
12:01:05.0236 2436 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
12:01:05.0236 2436 Browser - ok
12:01:05.0236 2436 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:01:05.0252 2436 Brserid - ok
12:01:05.0252 2436 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:01:05.0252 2436 BrSerWdm - ok
12:01:05.0267 2436 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:01:05.0267 2436 BrUsbMdm - ok
12:01:05.0283 2436 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:01:05.0283 2436 BrUsbSer - ok
12:01:05.0283 2436 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:01:05.0298 2436 BTHMODEM - ok
12:01:05.0314 2436 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
12:01:05.0314 2436 bthserv - ok
12:01:05.0314 2436 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:01:05.0330 2436 cdfs - ok
12:01:05.0345 2436 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:01:05.0361 2436 cdrom - ok
12:01:05.0376 2436 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
12:01:05.0376 2436 CertPropSvc - ok
12:01:05.0392 2436 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:01:05.0392 2436 circlass - ok
12:01:05.0408 2436 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
12:01:05.0408 2436 CLFS - ok
12:01:05.0501 2436 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:01:05.0517 2436 clr_optimization_v2.0.50727_32 - ok
12:01:05.0595 2436 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:01:05.0735 2436 clr_optimization_v4.0.30319_32 - ok
12:01:05.0735 2436 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:01:05.0766 2436 CmBatt - ok
12:01:05.0798 2436 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
12:01:05.0813 2436 cmdide - ok
12:01:05.0891 2436 [ 36C252E474B2FFA0F0FBBFF20D92A640 ] CNG C:\Windows\system32\Drivers\cng.sys
12:01:05.0954 2436 CNG - ok
12:01:05.0969 2436 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:01:05.0985 2436 Compbatt - ok
12:01:06.0016 2436 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
12:01:06.0016 2436 CompositeBus - ok
12:01:06.0032 2436 COMSysApp - ok
12:01:06.0047 2436 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:01:06.0078 2436 crcdisk - ok
12:01:06.0110 2436 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:01:06.0125 2436 CryptSvc - ok
12:01:06.0141 2436 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
12:01:06.0141 2436 DcomLaunch - ok
12:01:06.0172 2436 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
12:01:06.0203 2436 defragsvc - ok
12:01:06.0266 2436 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:01:06.0266 2436 DfsC - ok
12:01:06.0312 2436 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
12:01:06.0312 2436 Dhcp - ok
12:01:06.0344 2436 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
12:01:06.0344 2436 discache - ok
12:01:06.0375 2436 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:01:06.0390 2436 Disk - ok
12:01:06.0437 2436 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:01:06.0437 2436 Dnscache - ok
12:01:06.0468 2436 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
12:01:06.0500 2436 dot3svc - ok
12:01:06.0515 2436 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
12:01:06.0531 2436 DPS - ok
12:01:06.0546 2436 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:01:06.0562 2436 drmkaud - ok
12:01:06.0671 2436 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:01:06.0702 2436 DXGKrnl - ok
12:01:06.0780 2436 [ 341F236953B2ABBE8C9DBEFA1215ECD4 ] e1kexpress C:\Windows\system32\DRIVERS\e1k6232.sys
12:01:06.0796 2436 e1kexpress - ok
12:01:06.0858 2436 [ 04CBA07E73F152970FC34D66D3892E2A ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
12:01:06.0874 2436 eamonm - ok
12:01:06.0890 2436 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
12:01:06.0983 2436 EapHost - ok
12:01:07.0233 2436 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
12:01:07.0342 2436 ebdrv - ok
12:01:07.0373 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
12:01:07.0373 2436 EFS - ok
12:01:07.0451 2436 [ FE7824239D132AD9EBD8645FE1199B30 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
12:01:07.0451 2436 ehdrv - ok
12:01:07.0623 2436 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:01:07.0685 2436 ehRecvr - ok
12:01:07.0732 2436 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
12:01:07.0748 2436 ehSched - ok
12:01:07.0841 2436 [ 68D91A34CE51CF15C45DD68F7F1257E8 ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
12:01:07.0841 2436 EhttpSrv - ok
12:01:07.0950 2436 [ 191D8ECCC40F05B52FAC0513F35BA01D ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
12:01:07.0966 2436 ekrn - ok
12:01:08.0106 2436 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:01:08.0169 2436 elxstor - ok
12:01:08.0262 2436 [ 16EBD8BF1D5090923694CC972C7CE1B4 ] ENTECH C:\Windows\system32\DRIVERS\ENTECH.sys
12:01:08.0278 2436 ENTECH - ok
12:01:08.0372 2436 [ DDB45F6371714601A43E8BE38145BE18 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
12:01:08.0387 2436 epfwwfpr - ok
12:01:08.0450 2436 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
12:01:08.0496 2436 ErrDev - ok
12:01:08.0668 2436 [ 2407B8164E966755BC6A4242FC9DE31E ] esgiguard C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
12:01:08.0699 2436 esgiguard - ok
12:01:08.0793 2436 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
12:01:08.0793 2436 EventSystem - ok
12:01:08.0871 2436 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
12:01:08.0996 2436 exfat - ok
12:01:09.0136 2436 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:01:09.0245 2436 fastfat - ok
12:01:09.0464 2436 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
12:01:09.0464 2436 Fax - ok
12:01:09.0495 2436 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:01:09.0542 2436 fdc - ok
12:01:09.0588 2436 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
12:01:09.0620 2436 fdPHost - ok
12:01:09.0666 2436 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
12:01:09.0666 2436 FDResPub - ok
12:01:09.0713 2436 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:01:09.0791 2436 FileInfo - ok
12:01:09.0822 2436 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:01:09.0869 2436 Filetrace - ok
12:01:09.0900 2436 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:01:09.0932 2436 flpydisk - ok
12:01:09.0978 2436 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:01:09.0994 2436 FltMgr - ok
12:01:10.0150 2436 [ 7FE4995528A7529A761875151EE3D512 ] FontCache C:\Windows\system32\FntCache.dll
12:01:10.0166 2436 FontCache - ok
12:01:10.0337 2436 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:01:10.0384 2436 FontCache3.0.0.0 - ok
12:01:10.0400 2436 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:01:10.0462 2436 FsDepends - ok
12:01:10.0524 2436 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:01:10.0587 2436 Fs_Rec - ok
12:01:10.0727 2436 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:01:10.0821 2436 fvevol - ok
12:01:10.0868 2436 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:01:10.0914 2436 gagp30kx - ok
12:01:11.0039 2436 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:01:11.0055 2436 GEARAspiWDM - ok
12:01:11.0258 2436 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
12:01:11.0273 2436 giveio - ok
12:01:11.0429 2436 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
12:01:11.0445 2436 gpsvc - ok
12:01:11.0492 2436 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:01:11.0554 2436 hcw85cir - ok
12:01:11.0679 2436 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:01:11.0710 2436 HdAudAddService - ok
12:01:11.0741 2436 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:01:11.0741 2436 HDAudBus - ok
12:01:11.0788 2436 [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI C:\Windows\system32\DRIVERS\HECI.sys
12:01:11.0804 2436 HECI - ok
12:01:11.0866 2436 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:01:11.0897 2436 HidBatt - ok
12:01:11.0928 2436 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:01:11.0975 2436 HidBth - ok
12:01:12.0053 2436 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:01:12.0084 2436 HidIr - ok
12:01:12.0147 2436 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
12:01:12.0147 2436 hidserv - ok
12:01:12.0272 2436 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:01:12.0287 2436 HidUsb - ok
12:01:12.0365 2436 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:01:12.0412 2436 hkmsvc - ok
12:01:12.0459 2436 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:01:12.0490 2436 HomeGroupListener - ok
12:01:12.0568 2436 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:01:12.0568 2436 HomeGroupProvider - ok
12:01:12.0630 2436 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
12:01:12.0677 2436 HpSAMD - ok
12:01:12.0849 2436 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:01:12.0864 2436 HTTP - ok
12:01:12.0896 2436 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:01:12.0927 2436 hwpolicy - ok
12:01:12.0989 2436 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:01:13.0005 2436 i8042prt - ok
12:01:13.0098 2436 [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:01:13.0176 2436 iaStorV - ok
12:01:13.0332 2436 [ 86B750CC384F3A8B8C1D12F3188307AE ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
12:01:13.0332 2436 ICQ Service - ok
12:01:13.0613 2436 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:01:13.0754 2436 idsvc - ok
12:01:13.0832 2436 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:01:13.0878 2436 iirsp - ok
12:01:14.0050 2436 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
12:01:14.0050 2436 IKEEXT - ok
12:01:14.0502 2436 [ 1E12D06BA971B862C0A2255246EA9EA0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
12:01:14.0580 2436 IntcAzAudAddService - ok
12:01:14.0768 2436 [ 1A97E12E4037492CBF22F94D3A0CEBE9 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
12:01:14.0768 2436 Intel(R) PROSet Monitoring Service - ok
12:01:14.0799 2436 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
12:01:14.0830 2436 intelide - ok
12:01:14.0924 2436 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:01:14.0939 2436 intelppm - ok
12:01:14.0970 2436 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:01:15.0002 2436 IPBusEnum - ok
12:01:15.0064 2436 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:01:15.0095 2436 IpFilterDriver - ok
12:01:15.0220 2436 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:01:15.0220 2436 iphlpsvc - ok
12:01:15.0267 2436 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
12:01:15.0298 2436 IPMIDRV - ok
12:01:15.0392 2436 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:01:15.0438 2436 IPNAT - ok
12:01:15.0532 2436 [ 8F610078437A459948480407F4DB91EA ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:01:15.0532 2436 iPod Service - ok
12:01:15.0594 2436 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:01:15.0610 2436 IRENUM - ok
12:01:15.0719 2436 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
12:01:15.0766 2436 isapnp - ok
12:01:15.0813 2436 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
12:01:15.0922 2436 iScsiPrt - ok
12:01:16.0016 2436 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:01:16.0031 2436 kbdclass - ok
12:01:16.0094 2436 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:01:16.0125 2436 kbdhid - ok
12:01:16.0172 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
12:01:16.0172 2436 KeyIso - ok
12:01:16.0218 2436 [ 0263364ACB9C834ACE52FB85C2C064EC ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:01:16.0265 2436 KSecDD - ok
12:01:16.0328 2436 [ 27391DB553BE2A4E2B0ADEEA2873B2AF ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:01:16.0421 2436 KSecPkg - ok
12:01:16.0515 2436 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
12:01:16.0546 2436 KtmRm - ok
12:01:16.0608 2436 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
12:01:16.0608 2436 LanmanServer - ok
12:01:16.0655 2436 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:01:16.0655 2436 LanmanWorkstation - ok
12:01:16.0764 2436 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
12:01:16.0780 2436 lirsgt - ok
12:01:16.0874 2436 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:01:16.0874 2436 lltdio - ok
12:01:16.0998 2436 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:01:17.0045 2436 lltdsvc - ok
12:01:17.0076 2436 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
12:01:17.0076 2436 lmhosts - ok
12:01:17.0279 2436 [ 0B4F38AA22D5634C48EDB18FE257F005 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
12:01:17.0279 2436 LMS - ok
12:01:17.0357 2436 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:01:17.0373 2436 LSI_FC - ok
12:01:17.0420 2436 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:01:17.0544 2436 LSI_SAS - ok
12:01:17.0654 2436 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:01:17.0685 2436 LSI_SAS2 - ok
12:01:17.0747 2436 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:01:17.0810 2436 LSI_SCSI - ok
12:01:18.0059 2436 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
12:01:18.0075 2436 luafv - ok
12:01:18.0278 2436 [ 22A7776C5D8EB5930EDF9C8DD0884259 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
12:01:18.0356 2436 McComponentHostService - ok
12:01:18.0434 2436 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:01:18.0449 2436 Mcx2Svc - ok
12:01:18.0496 2436 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:01:18.0543 2436 megasas - ok
12:01:18.0621 2436 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:01:18.0777 2436 MegaSR - ok
12:01:19.0182 2436 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
12:01:19.0182 2436 MMCSS - ok
12:01:20.0208 2436 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
12:01:20.0224 2436 Modem - ok
12:01:20.0505 2436 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:01:20.0536 2436 monitor - ok
12:01:21.0535 2436 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:01:21.0551 2436 mouclass - ok
12:01:21.0754 2436 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:01:21.0769 2436 mouhid - ok
12:01:22.0081 2436 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:01:22.0112 2436 mountmgr - ok
12:01:22.0315 2436 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
12:01:22.0331 2436 MozillaMaintenance - ok
12:01:22.0643 2436 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
12:01:22.0721 2436 mpio - ok
12:01:23.0345 2436 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:01:23.0360 2436 mpsdrv - ok
12:01:23.0797 2436 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
12:01:23.0813 2436 MpsSvc - ok
12:01:24.0296 2436 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:01:24.0328 2436 MRxDAV - ok
12:01:24.0484 2436 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:01:24.0515 2436 mrxsmb - ok
12:01:24.0577 2436 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:01:24.0593 2436 mrxsmb10 - ok
12:01:24.0624 2436 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:01:24.0655 2436 mrxsmb20 - ok
12:01:24.0733 2436 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
12:01:24.0780 2436 msahci - ok
12:01:24.0796 2436 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
12:01:24.0827 2436 msdsm - ok
12:01:24.0874 2436 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
12:01:24.0936 2436 MSDTC - ok
12:01:25.0061 2436 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:01:25.0123 2436 Msfs - ok
12:01:25.0248 2436 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:01:25.0279 2436 mshidkmdf - ok
12:01:25.0310 2436 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
12:01:25.0342 2436 msisadrv - ok
12:01:25.0435 2436 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:01:25.0482 2436 MSiSCSI - ok
12:01:25.0482 2436 msiserver - ok
12:01:25.0544 2436 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:01:25.0622 2436 MSKSSRV - ok
12:01:25.0685 2436 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:01:25.0700 2436 MSPCLOCK - ok
12:01:25.0763 2436 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:01:25.0778 2436 MSPQM - ok
12:01:25.0888 2436 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:01:25.0997 2436 MsRPC - ok
12:01:26.0028 2436 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:01:26.0028 2436 mssmbios - ok
12:01:26.0059 2436 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:01:26.0075 2436 MSTEE - ok
12:01:26.0106 2436 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:01:26.0153 2436 MTConfig - ok
12:01:26.0168 2436 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
12:01:26.0184 2436 Mup - ok
12:01:26.0231 2436 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
12:01:26.0231 2436 napagent - ok
12:01:26.0262 2436 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:01:26.0278 2436 NativeWifiP - ok
12:01:26.0293 2436 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:01:26.0293 2436 NDIS - ok
12:01:26.0293 2436 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:01:26.0309 2436 NdisCap - ok
12:01:26.0324 2436 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:01:26.0324 2436 NdisTapi - ok
12:01:26.0340 2436 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:01:26.0356 2436 Ndisuio - ok
12:01:26.0371 2436 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:01:26.0387 2436 NdisWan - ok
12:01:26.0387 2436 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:01:26.0402 2436 NDProxy - ok
12:01:26.0402 2436 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:01:26.0434 2436 NetBIOS - ok
12:01:26.0434 2436 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:01:26.0449 2436 NetBT - ok
12:01:26.0449 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
12:01:26.0449 2436 Netlogon - ok
12:01:26.0480 2436 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
12:01:26.0480 2436 Netman - ok
12:01:26.0512 2436 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
12:01:26.0512 2436 netprofm - ok
12:01:26.0527 2436 [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:01:26.0527 2436 NetTcpPortSharing - ok
12:01:26.0558 2436 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:01:26.0574 2436 nfrd960 - ok
12:01:26.0574 2436 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
12:01:26.0590 2436 NlaSvc - ok
12:01:26.0590 2436 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:01:26.0605 2436 Npfs - ok
12:01:26.0636 2436 npggsvc - ok
12:01:26.0668 2436 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
12:01:26.0668 2436 nsi - ok
12:01:26.0668 2436 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:01:26.0683 2436 nsiproxy - ok
12:01:26.0777 2436 [ 187002CE05693C306F43C873F821381F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:01:26.0808 2436 Ntfs - ok
12:01:26.0824 2436 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
12:01:26.0824 2436 Null - ok
12:01:26.0902 2436 [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:01:26.0917 2436 nvraid - ok
12:01:26.0964 2436 [ 4520B63899E867F354EE012D34E11536 ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:01:26.0980 2436 nvstor - ok
12:01:26.0980 2436 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
12:01:26.0995 2436 nv_agp - ok
12:01:27.0011 2436 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
12:01:27.0011 2436 ohci1394 - ok
12:01:27.0026 2436 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:01:27.0026 2436 p2pimsvc - ok
12:01:27.0042 2436 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
12:01:27.0058 2436 p2psvc - ok
12:01:27.0073 2436 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:01:27.0073 2436 Parport - ok
12:01:27.0089 2436 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:01:27.0120 2436 partmgr - ok
12:01:27.0136 2436 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
12:01:27.0136 2436 Parvdm - ok
12:01:27.0151 2436 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:01:27.0151 2436 PcaSvc - ok
12:01:27.0167 2436 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
12:01:27.0167 2436 pci - ok
12:01:27.0182 2436 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
12:01:27.0198 2436 pciide - ok
12:01:27.0198 2436 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:01:27.0214 2436 pcmcia - ok
12:01:27.0229 2436 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
12:01:27.0245 2436 pcw - ok
12:01:27.0245 2436 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:01:27.0260 2436 PEAUTH - ok
12:01:27.0292 2436 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
12:01:27.0323 2436 pla - ok
12:01:27.0370 2436 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:01:27.0370 2436 PlugPlay - ok
12:01:27.0448 2436 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
12:01:27.0448 2436 PnkBstrA - ok
12:01:27.0494 2436 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:01:27.0494 2436 PNRPAutoReg - ok
12:01:27.0510 2436 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:01:27.0510 2436 PNRPsvc - ok
12:01:27.0526 2436 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:01:27.0526 2436 PolicyAgent - ok
12:01:27.0541 2436 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
12:01:27.0541 2436 Power - ok
12:01:27.0572 2436 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:01:27.0572 2436 PptpMiniport - ok
12:01:27.0588 2436 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:01:27.0604 2436 Processor - ok
12:01:27.0619 2436 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
12:01:27.0635 2436 ProfSvc - ok
12:01:27.0635 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:01:27.0635 2436 ProtectedStorage - ok
12:01:27.0666 2436 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:01:27.0666 2436 Psched - ok
12:01:27.0713 2436 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:01:27.0728 2436 ql2300 - ok
12:01:27.0760 2436 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:01:27.0775 2436 ql40xx - ok
12:01:27.0791 2436 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
12:01:27.0791 2436 QWAVE - ok
12:01:27.0806 2436 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:01:27.0822 2436 QWAVEdrv - ok
12:01:27.0822 2436 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:01:27.0838 2436 RasAcd - ok
12:01:27.0869 2436 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:01:27.0869 2436 RasAgileVpn - ok
12:01:27.0869 2436 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
12:01:27.0884 2436 RasAuto - ok
12:01:27.0884 2436 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:01:27.0900 2436 Rasl2tp - ok
12:01:27.0916 2436 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
12:01:27.0916 2436 RasMan - ok
12:01:27.0916 2436 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:01:27.0931 2436 RasPppoe - ok
12:01:27.0962 2436 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:01:27.0962 2436 RasSstp - ok
12:01:27.0978 2436 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:01:27.0994 2436 rdbss - ok
12:01:28.0009 2436 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:01:28.0025 2436 rdpbus - ok
12:01:28.0040 2436 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:01:28.0040 2436 RDPCDD - ok
12:01:28.0056 2436 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:01:28.0072 2436 RDPENCDD - ok
12:01:28.0072 2436 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:01:28.0087 2436 RDPREFMP - ok
12:01:28.0150 2436 [ 0399C725A9C95A6F1862B93F008DDF4A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:01:28.0181 2436 RDPWD - ok
12:01:28.0212 2436 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:01:28.0228 2436 rdyboost - ok
12:01:28.0243 2436 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
12:01:28.0259 2436 RemoteAccess - ok
12:01:28.0274 2436 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:01:28.0274 2436 RemoteRegistry - ok
12:01:28.0290 2436 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:01:28.0290 2436 RpcEptMapper - ok
12:01:28.0290 2436 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
12:01:28.0290 2436 RpcLocator - ok
12:01:28.0306 2436 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
12:01:28.0306 2436 RpcSs - ok
12:01:28.0337 2436 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:01:28.0352 2436 rspndr - ok
12:01:28.0368 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
12:01:28.0368 2436 SamSs - ok
12:01:28.0399 2436 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
12:01:28.0415 2436 sbp2port - ok
12:01:28.0618 2436 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
12:01:28.0680 2436 SBSDWSCService - ok
12:01:28.0696 2436 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:01:28.0711 2436 SCardSvr - ok
12:01:28.0774 2436 [ 20B2751CD4C8F3FD989739CA661B9F30 ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
12:01:28.0789 2436 SCDEmu - ok
12:01:28.0789 2436 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:01:28.0805 2436 scfilter - ok
12:01:28.0898 2436 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
12:01:28.0914 2436 Schedule - ok
12:01:28.0914 2436 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:01:28.0914 2436 SCPolicySvc - ok
12:01:28.0945 2436 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:01:28.0961 2436 SDRSVC - ok
12:01:28.0992 2436 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:01:29.0008 2436 secdrv - ok
12:01:29.0054 2436 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
12:01:29.0070 2436 seclogon - ok
12:01:29.0086 2436 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
12:01:29.0086 2436 SENS - ok
12:01:29.0164 2436 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:01:29.0164 2436 SensrSvc - ok
12:01:29.0210 2436 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:01:29.0226 2436 Serenum - ok
12:01:29.0257 2436 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:01:29.0273 2436 Serial - ok
12:01:29.0304 2436 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:01:29.0366 2436 sermouse - ok
12:01:29.0398 2436 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
12:01:29.0398 2436 SessionEnv - ok
12:01:29.0413 2436 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
12:01:29.0429 2436 sffdisk - ok
12:01:29.0444 2436 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
12:01:29.0444 2436 sffp_mmc - ok
12:01:29.0476 2436 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
12:01:29.0491 2436 sffp_sd - ok
12:01:29.0538 2436 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:01:29.0569 2436 sfloppy - ok
12:01:29.0647 2436 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:01:29.0663 2436 SharedAccess - ok
12:01:29.0725 2436 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:01:29.0741 2436 ShellHWDetection - ok
12:01:29.0741 2436 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
12:01:29.0788 2436 sisagp - ok
12:01:29.0850 2436 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:01:29.0928 2436 SiSRaid2 - ok
12:01:29.0959 2436 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:01:29.0990 2436 SiSRaid4 - ok
12:01:30.0068 2436 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:01:30.0084 2436 SkypeUpdate - ok
12:01:30.0131 2436 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:01:30.0178 2436 Smb - ok
12:01:30.0193 2436 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:01:30.0209 2436 SNMPTRAP - ok
12:01:30.0256 2436 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\Windows\system32\speedfan.sys
12:01:30.0287 2436 speedfan - ok
12:01:30.0302 2436 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
12:01:30.0302 2436 spldr - ok
12:01:30.0365 2436 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
12:01:30.0365 2436 Spooler - ok
12:01:30.0427 2436 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
12:01:30.0490 2436 sppsvc - ok
12:01:30.0505 2436 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:01:30.0505 2436 sppuinotify - ok
12:01:30.0568 2436 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
12:01:30.0568 2436 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
12:01:30.0568 2436 sptd ( LockedFile.Multi.Generic ) - warning
12:01:30.0568 2436 sptd - detected LockedFile.Multi.Generic (1)
12:01:30.0692 2436 [ F9EC94E35F5019A8E82665E1EF4B4D02 ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
12:01:30.0692 2436 SpyHunter 4 Service - ok
12:01:30.0786 2436 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:01:30.0802 2436 srv - ok
12:01:30.0817 2436 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:01:30.0817 2436 srv2 - ok
12:01:30.0833 2436 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:01:30.0864 2436 srvnet - ok
12:01:30.0895 2436 [ D5DFFEAA1E15D4EFFABB9D9A3068AC5B ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys
12:01:30.0911 2436 sscdbus - ok
12:01:30.0926 2436 [ 8A1BE0C347814F482F493AEA619D57F6 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys
12:01:30.0958 2436 sscdmdfl - ok
12:01:30.0973 2436 [ 5AB0B1987F682A59B15B78F84C6AD7D0 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys
12:01:30.0989 2436 sscdmdm - ok
12:01:31.0020 2436 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:01:31.0020 2436 SSDPSRV - ok
12:01:31.0020 2436 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:01:31.0036 2436 SstpSvc - ok
12:01:31.0051 2436 Steam Client Service - ok
12:01:31.0082 2436 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:01:31.0129 2436 stexstor - ok
12:01:31.0270 2436 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
12:01:31.0285 2436 StiSvc - ok
12:01:31.0301 2436 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:01:31.0301 2436 swenum - ok
12:01:31.0472 2436 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
12:01:31.0472 2436 swprv - ok
12:01:31.0628 2436 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
12:01:31.0644 2436 SysMain - ok
12:01:31.0675 2436 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:01:31.0691 2436 TabletInputService - ok
12:01:31.0706 2436 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
12:01:31.0738 2436 TapiSrv - ok
12:01:31.0753 2436 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
12:01:31.0769 2436 TBS - ok
12:01:31.0862 2436 [ 56C198AC82EFA622DD93E9E43575F79C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:01:31.0987 2436 Tcpip - ok
12:01:32.0034 2436 [ 56C198AC82EFA622DD93E9E43575F79C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:01:32.0034 2436 TCPIP6 - ok
12:01:32.0065 2436 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:01:32.0081 2436 tcpipreg - ok
12:01:32.0221 2436 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:01:32.0252 2436 TDPIPE - ok
12:01:32.0268 2436 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:01:32.0268 2436 TDTCP - ok
12:01:32.0284 2436 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:01:32.0309 2436 tdx - ok
12:01:32.0329 2436 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:01:32.0329 2436 TermDD - ok
12:01:32.0459 2436 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
12:01:32.0459 2436 TermService - ok
12:01:32.0479 2436 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
12:01:32.0479 2436 Themes - ok
12:01:32.0499 2436 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
12:01:32.0499 2436 THREADORDER - ok
12:01:32.0509 2436 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
12:01:32.0509 2436 TrkWks - ok
12:01:32.0629 2436 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:01:32.0639 2436 TrustedInstaller - ok
12:01:32.0659 2436 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:01:32.0689 2436 tssecsrv - ok
12:01:32.0719 2436 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:01:32.0739 2436 tunnel - ok
12:01:32.0759 2436 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:01:32.0809 2436 uagp35 - ok
12:01:32.0839 2436 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:01:32.0859 2436 udfs - ok
12:01:32.0885 2436 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:01:32.0885 2436 UI0Detect - ok
12:01:32.0916 2436 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
12:01:32.0932 2436 uliagpkx - ok
12:01:32.0947 2436 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:01:32.0947 2436 umbus - ok
12:01:32.0978 2436 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:01:32.0994 2436 UmPass - ok
12:01:33.0181 2436 [ 6FDB1CA1ADD261F893C90738EBA37197 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
12:01:33.0259 2436 UNS - ok
12:01:33.0290 2436 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
12:01:33.0306 2436 upnphost - ok
12:01:33.0353 2436 [ 2436A42AAB4AD48A9B714E5B0F344627 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:01:33.0353 2436 usbaudio - ok
12:01:33.0384 2436 [ C31AE588E403042632DC796CF09E30B0 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:01:33.0415 2436 usbccgp - ok
12:01:33.0462 2436 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
12:01:33.0493 2436 usbcir - ok
12:01:33.0509 2436 [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:01:33.0524 2436 usbehci - ok
12:01:33.0540 2436 [ BDCD7156EC37448F08633FD899823620 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:01:33.0556 2436 usbhub - ok
12:01:33.0602 2436 [ EB2D819A639015253C871CDA09D91D58 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:01:33.0618 2436 usbohci - ok
12:01:33.0658 2436 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:01:33.0673 2436 usbprint - ok
12:01:33.0702 2436 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:01:33.0733 2436 usbscan - ok
12:01:33.0780 2436 [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:01:33.0811 2436 USBSTOR - ok
12:01:33.0873 2436 [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:01:33.0889 2436 usbuhci - ok
12:01:33.0936 2436 [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
12:01:33.0936 2436 usbvideo - ok
12:01:33.0967 2436 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
12:01:33.0967 2436 UxSms - ok
12:01:33.0983 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
12:01:33.0983 2436 VaultSvc - ok
12:01:34.0029 2436 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
12:01:34.0045 2436 vdrvroot - ok
12:01:34.0123 2436 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
12:01:34.0139 2436 vds - ok
12:01:34.0263 2436 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:01:34.0279 2436 vga - ok
12:01:34.0310 2436 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
12:01:34.0326 2436 VgaSave - ok
12:01:34.0357 2436 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
12:01:34.0373 2436 vhdmp - ok
12:01:34.0388 2436 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
12:01:34.0388 2436 viaagp - ok
12:01:34.0404 2436 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
12:01:34.0419 2436 ViaC7 - ok
12:01:34.0435 2436 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
12:01:34.0451 2436 viaide - ok
12:01:34.0451 2436 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
12:01:34.0466 2436 volmgr - ok
12:01:34.0482 2436 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:01:34.0513 2436 volmgrx - ok
12:01:34.0529 2436 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
12:01:34.0544 2436 volsnap - ok
12:01:34.0591 2436 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:01:34.0591 2436 vsmraid - ok
12:01:34.0638 2436 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
12:01:34.0638 2436 VSS - ok
12:01:34.0653 2436 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
12:01:34.0669 2436 vwifibus - ok
12:01:34.0716 2436 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
12:01:34.0716 2436 W32Time - ok
12:01:34.0731 2436 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:01:34.0747 2436 WacomPen - ok
12:01:34.0763 2436 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:01:34.0778 2436 WANARP - ok
12:01:34.0778 2436 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:01:34.0778 2436 Wanarpv6 - ok
12:01:34.0841 2436 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:01:34.0872 2436 WatAdminSvc - ok
12:01:34.0903 2436 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
12:01:34.0919 2436 wbengine - ok
12:01:34.0934 2436 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:01:34.0934 2436 WbioSrvc - ok
12:01:34.0997 2436 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:01:35.0012 2436 wcncsvc - ok
12:01:35.0028 2436 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:01:35.0028 2436 WcsPlugInService - ok
12:01:35.0043 2436 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:01:35.0059 2436 Wd - ok
12:01:35.0075 2436 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:01:35.0106 2436 Wdf01000 - ok
12:01:35.0121 2436 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:01:35.0121 2436 WdiServiceHost - ok
12:01:35.0153 2436 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:01:35.0153 2436 WdiSystemHost - ok
12:01:35.0231 2436 [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient C:\Windows\System32\webclnt.dll
12:01:35.0246 2436 WebClient - ok
12:01:35.0262 2436 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:01:35.0262 2436 Wecsvc - ok
12:01:35.0277 2436 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:01:35.0293 2436 wercplsupport - ok
12:01:35.0324 2436 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
12:01:35.0324 2436 WerSvc - ok
12:01:35.0355 2436 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:01:35.0355 2436 WfpLwf - ok
12:01:35.0371 2436 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:01:35.0402 2436 WIMMount - ok
12:01:35.0449 2436 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
12:01:35.0449 2436 WinDefend - ok
12:01:35.0449 2436 WinHttpAutoProxySvc - ok
12:01:35.0543 2436 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:01:35.0543 2436 Winmgmt - ok
12:01:35.0621 2436 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
12:01:35.0652 2436 WinRM - ok
12:01:35.0730 2436 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:01:35.0745 2436 WinUsb - ok
12:01:35.0777 2436 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:01:35.0792 2436 Wlansvc - ok
12:01:35.0886 2436 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:01:35.0886 2436 wlidsvc - ok
12:01:35.0901 2436 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
12:01:35.0917 2436 WmiAcpi - ok
12:01:35.0933 2436 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:01:35.0948 2436 wmiApSrv - ok
12:01:36.0120 2436 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
12:01:36.0135 2436 WMPNetworkSvc - ok
12:01:36.0167 2436 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:01:36.0182 2436 WPCSvc - ok
12:01:36.0245 2436 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:01:36.0260 2436 WPDBusEnum - ok
12:01:36.0307 2436 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:01:36.0338 2436 ws2ifsl - ok
12:01:36.0385 2436 [ A661A76333057B383A06E65F0073222F ] wscsvc C:\Windows\System32\wscsvc.dll
12:01:36.0385 2436 wscsvc - ok
12:01:36.0385 2436 WSearch - ok
12:01:36.0619 2436 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
12:01:36.0681 2436 wuauserv - ok
12:01:36.0697 2436 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:01:36.0728 2436 WudfPf - ok
12:01:36.0759 2436 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:01:36.0759 2436 WUDFRd - ok
12:01:36.0775 2436 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:01:36.0775 2436 wudfsvc - ok
12:01:36.0791 2436 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
12:01:36.0791 2436 WwanSvc - ok
12:01:36.0806 2436 ================ Scan global ===============================
12:01:36.0822 2436 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
12:01:36.0884 2436 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:01:36.0915 2436 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:01:36.0947 2436 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
12:01:36.0978 2436 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
12:01:36.0993 2436 [Global] - ok
12:01:36.0993 2436 ================ Scan MBR ==================================
12:01:37.0009 2436 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:01:38.0429 2436 \Device\Harddisk0\DR0 - ok
12:01:38.0429 2436 ================ Scan VBR ==================================
12:01:38.0460 2436 [ 0C16EB25A1523E0AAC21ED02D4ACAFCE ] \Device\Harddisk0\DR0\Partition1
12:01:38.0460 2436 \Device\Harddisk0\DR0\Partition1 - ok
12:01:38.0460 2436 [ 3A0CC01B2CEF289B819469F89F87B9DE ] \Device\Harddisk0\DR0\Partition2
12:01:38.0460 2436 \Device\Harddisk0\DR0\Partition2 - ok
12:01:38.0460 2436 ============================================================
12:01:38.0460 2436 Scan finished
12:01:38.0460 2436 ============================================================
12:01:38.0475 2380 Detected object count: 1
12:01:38.0475 2380 Actual detected object count: 1
12:01:46.0572 2380 sptd ( LockedFile.Multi.Generic ) - skipped by user
12:01:46.0572 2380 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
12:04:18.0642 5228 ============================================================
12:04:18.0642 5228 Scan started
12:04:18.0642 5228 Mode: Manual;
12:04:18.0642 5228 ============================================================
12:04:23.0482 5228 ================ Scan system memory ========================
12:04:23.0482 5228 System memory - ok
12:04:23.0482 5228 ================ Scan services =============================
12:04:24.0252 5228 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
12:04:24.0262 5228 1394ohci - ok
12:04:24.0302 5228 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
12:04:24.0312 5228 ACPI - ok
12:04:24.0312 5228 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
12:04:24.0322 5228 AcpiPmi - ok
12:04:24.0482 5228 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:04:24.0482 5228 AdobeFlashPlayerUpdateSvc - ok
12:04:24.0592 5228 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:04:24.0602 5228 adp94xx - ok
12:04:24.0632 5228 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:04:24.0652 5228 adpahci - ok
12:04:24.0672 5228 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:00:48.0518 2928 ============================================================
12:00:48.0518 2928 Current date / time: 2012/09/28 12:00:48.0518
12:00:48.0518 2928 SystemInfo:
12:00:48.0518 2928
12:00:48.0518 2928 OS Version: 6.1.7600 ServicePack: 0.0
12:00:48.0518 2928 Product type: Workstation
12:00:48.0518 2928 ComputerName: USER-PC
12:00:48.0518 2928 UserName: User
12:00:48.0518 2928 Windows directory: C:\Windows
12:00:48.0518 2928 System windows directory: C:\Windows
12:00:48.0518 2928 Processor architecture: Intel x86
12:00:48.0518 2928 Number of processors: 4
12:00:48.0518 2928 Page size: 0x1000
12:00:48.0518 2928 Boot type: Normal boot
12:00:48.0518 2928 ============================================================
12:00:50.0296 2928 BG loaded
12:00:51.0560 2928 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
12:00:51.0580 2928 ============================================================
12:00:51.0580 2928 \Device\Harddisk0\DR0:
12:00:51.0590 2928 MBR partitions:
12:00:51.0590 2928 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
12:00:51.0590 2928 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
12:00:51.0590 2928 ============================================================
12:00:51.0710 2928 C: <-> \Device\Harddisk0\DR0\Partition2
12:00:51.0710 2928 ============================================================
12:00:51.0710 2928 Initialize success
12:00:51.0710 2928 ============================================================
12:00:58.0917 2436 ============================================================
12:00:58.0917 2436 Scan started
12:00:58.0917 2436 Mode: Manual;
12:00:58.0917 2436 ============================================================
12:01:01.0960 2436 ================ Scan system memory ========================
12:01:01.0960 2436 System memory - ok
12:01:01.0960 2436 ================ Scan services =============================
12:01:02.0054 2436 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
12:01:02.0069 2436 1394ohci - ok
12:01:02.0085 2436 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
12:01:02.0085 2436 ACPI - ok
12:01:02.0100 2436 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
12:01:02.0100 2436 AcpiPmi - ok
12:01:02.0163 2436 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:01:02.0163 2436 AdobeFlashPlayerUpdateSvc - ok
12:01:02.0194 2436 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:01:02.0225 2436 adp94xx - ok
12:01:02.0225 2436 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:01:02.0241 2436 adpahci - ok
12:01:02.0256 2436 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:01:02.0272 2436 adpu320 - ok
12:01:02.0303 2436 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:01:02.0303 2436 AeLookupSvc - ok
12:01:02.0350 2436 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
12:01:02.0366 2436 AFD - ok
12:01:02.0381 2436 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
12:01:02.0397 2436 agp440 - ok
12:01:02.0412 2436 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
12:01:02.0428 2436 aic78xx - ok
12:01:02.0428 2436 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
12:01:02.0428 2436 ALG - ok
12:01:02.0444 2436 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
12:01:02.0459 2436 aliide - ok
12:01:02.0490 2436 [ B90A4332CF4C6580C845266A656DE4AB ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
12:01:03.0099 2436 AMD External Events Utility - ok
12:01:03.0114 2436 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
12:01:03.0130 2436 amdagp - ok
12:01:03.0130 2436 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
12:01:03.0146 2436 amdide - ok
12:01:03.0161 2436 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:01:03.0177 2436 AmdK8 - ok
12:01:03.0348 2436 [ 7844984A5E1E6F18D93AF9E9BCC65436 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
12:01:03.0395 2436 amdkmdag - ok
12:01:03.0473 2436 [ 202DEF509D76105B08741D36C3A7E4D7 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
12:01:03.0489 2436 amdkmdap - ok
12:01:03.0536 2436 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:01:03.0567 2436 AmdPPM - ok
12:01:03.0645 2436 [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:01:03.0676 2436 amdsata - ok
12:01:03.0785 2436 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:01:03.0801 2436 amdsbs - ok
12:01:03.0848 2436 [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:01:03.0879 2436 amdxata - ok
12:01:03.0910 2436 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
12:01:03.0941 2436 AppID - ok
12:01:03.0988 2436 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:01:04.0004 2436 AppIDSvc - ok
12:01:04.0050 2436 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
12:01:04.0050 2436 Appinfo - ok
12:01:04.0206 2436 [ 2E3E53A6AEF23E24F402C7855B9B1542 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:01:04.0206 2436 Apple Mobile Device - ok
12:01:04.0269 2436 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
12:01:04.0300 2436 arc - ok
12:01:04.0316 2436 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:01:04.0331 2436 arcsas - ok
12:01:04.0362 2436 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:01:04.0409 2436 AsyncMac - ok
12:01:04.0425 2436 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
12:01:04.0440 2436 atapi - ok
12:01:04.0690 2436 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
12:01:04.0706 2436 atksgt - ok
12:01:04.0768 2436 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:01:04.0784 2436 AudioEndpointBuilder - ok
12:01:04.0784 2436 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
12:01:04.0784 2436 Audiosrv - ok
12:01:04.0799 2436 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:01:04.0799 2436 AxInstSV - ok
12:01:04.0846 2436 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
12:01:04.0846 2436 b06bdrv - ok
12:01:04.0862 2436 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
12:01:04.0893 2436 b57nd60x - ok
12:01:04.0908 2436 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
12:01:04.0908 2436 BDESVC - ok
12:01:04.0924 2436 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
12:01:04.0940 2436 Beep - ok
12:01:04.0955 2436 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
12:01:04.0971 2436 BFE - ok
12:01:04.0986 2436 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
12:01:05.0002 2436 BITS - ok
12:01:05.0002 2436 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:01:05.0018 2436 blbdrive - ok
12:01:05.0111 2436 [ 5AB58C337AC65837FE404462AD6265AB ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:01:05.0111 2436 Bonjour Service - ok
12:01:05.0142 2436 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:01:05.0158 2436 bowser - ok
12:01:05.0189 2436 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:01:05.0205 2436 BrFiltLo - ok
12:01:05.0205 2436 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:01:05.0205 2436 BrFiltUp - ok
12:01:05.0236 2436 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
12:01:05.0236 2436 Browser - ok
12:01:05.0236 2436 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:01:05.0252 2436 Brserid - ok
12:01:05.0252 2436 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:01:05.0252 2436 BrSerWdm - ok
12:01:05.0267 2436 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:01:05.0267 2436 BrUsbMdm - ok
12:01:05.0283 2436 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:01:05.0283 2436 BrUsbSer - ok
12:01:05.0283 2436 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:01:05.0298 2436 BTHMODEM - ok
12:01:05.0314 2436 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
12:01:05.0314 2436 bthserv - ok
12:01:05.0314 2436 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:01:05.0330 2436 cdfs - ok
12:01:05.0345 2436 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:01:05.0361 2436 cdrom - ok
12:01:05.0376 2436 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
12:01:05.0376 2436 CertPropSvc - ok
12:01:05.0392 2436 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:01:05.0392 2436 circlass - ok
12:01:05.0408 2436 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
12:01:05.0408 2436 CLFS - ok
12:01:05.0501 2436 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:01:05.0517 2436 clr_optimization_v2.0.50727_32 - ok
12:01:05.0595 2436 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:01:05.0735 2436 clr_optimization_v4.0.30319_32 - ok
12:01:05.0735 2436 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:01:05.0766 2436 CmBatt - ok
12:01:05.0798 2436 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
12:01:05.0813 2436 cmdide - ok
12:01:05.0891 2436 [ 36C252E474B2FFA0F0FBBFF20D92A640 ] CNG C:\Windows\system32\Drivers\cng.sys
12:01:05.0954 2436 CNG - ok
12:01:05.0969 2436 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:01:05.0985 2436 Compbatt - ok
12:01:06.0016 2436 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
12:01:06.0016 2436 CompositeBus - ok
12:01:06.0032 2436 COMSysApp - ok
12:01:06.0047 2436 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:01:06.0078 2436 crcdisk - ok
12:01:06.0110 2436 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:01:06.0125 2436 CryptSvc - ok
12:01:06.0141 2436 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
12:01:06.0141 2436 DcomLaunch - ok
12:01:06.0172 2436 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
12:01:06.0203 2436 defragsvc - ok
12:01:06.0266 2436 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:01:06.0266 2436 DfsC - ok
12:01:06.0312 2436 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
12:01:06.0312 2436 Dhcp - ok
12:01:06.0344 2436 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
12:01:06.0344 2436 discache - ok
12:01:06.0375 2436 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:01:06.0390 2436 Disk - ok
12:01:06.0437 2436 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:01:06.0437 2436 Dnscache - ok
12:01:06.0468 2436 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
12:01:06.0500 2436 dot3svc - ok
12:01:06.0515 2436 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
12:01:06.0531 2436 DPS - ok
12:01:06.0546 2436 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:01:06.0562 2436 drmkaud - ok
12:01:06.0671 2436 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:01:06.0702 2436 DXGKrnl - ok
12:01:06.0780 2436 [ 341F236953B2ABBE8C9DBEFA1215ECD4 ] e1kexpress C:\Windows\system32\DRIVERS\e1k6232.sys
12:01:06.0796 2436 e1kexpress - ok
12:01:06.0858 2436 [ 04CBA07E73F152970FC34D66D3892E2A ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
12:01:06.0874 2436 eamonm - ok
12:01:06.0890 2436 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
12:01:06.0983 2436 EapHost - ok
12:01:07.0233 2436 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
12:01:07.0342 2436 ebdrv - ok
12:01:07.0373 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
12:01:07.0373 2436 EFS - ok
12:01:07.0451 2436 [ FE7824239D132AD9EBD8645FE1199B30 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
12:01:07.0451 2436 ehdrv - ok
12:01:07.0623 2436 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:01:07.0685 2436 ehRecvr - ok
12:01:07.0732 2436 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
12:01:07.0748 2436 ehSched - ok
12:01:07.0841 2436 [ 68D91A34CE51CF15C45DD68F7F1257E8 ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
12:01:07.0841 2436 EhttpSrv - ok
12:01:07.0950 2436 [ 191D8ECCC40F05B52FAC0513F35BA01D ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
12:01:07.0966 2436 ekrn - ok
12:01:08.0106 2436 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:01:08.0169 2436 elxstor - ok
12:01:08.0262 2436 [ 16EBD8BF1D5090923694CC972C7CE1B4 ] ENTECH C:\Windows\system32\DRIVERS\ENTECH.sys
12:01:08.0278 2436 ENTECH - ok
12:01:08.0372 2436 [ DDB45F6371714601A43E8BE38145BE18 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
12:01:08.0387 2436 epfwwfpr - ok
12:01:08.0450 2436 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
12:01:08.0496 2436 ErrDev - ok
12:01:08.0668 2436 [ 2407B8164E966755BC6A4242FC9DE31E ] esgiguard C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
12:01:08.0699 2436 esgiguard - ok
12:01:08.0793 2436 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
12:01:08.0793 2436 EventSystem - ok
12:01:08.0871 2436 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
12:01:08.0996 2436 exfat - ok
12:01:09.0136 2436 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:01:09.0245 2436 fastfat - ok
12:01:09.0464 2436 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
12:01:09.0464 2436 Fax - ok
12:01:09.0495 2436 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:01:09.0542 2436 fdc - ok
12:01:09.0588 2436 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
12:01:09.0620 2436 fdPHost - ok
12:01:09.0666 2436 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
12:01:09.0666 2436 FDResPub - ok
12:01:09.0713 2436 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:01:09.0791 2436 FileInfo - ok
12:01:09.0822 2436 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:01:09.0869 2436 Filetrace - ok
12:01:09.0900 2436 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:01:09.0932 2436 flpydisk - ok
12:01:09.0978 2436 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:01:09.0994 2436 FltMgr - ok
12:01:10.0150 2436 [ 7FE4995528A7529A761875151EE3D512 ] FontCache C:\Windows\system32\FntCache.dll
12:01:10.0166 2436 FontCache - ok
12:01:10.0337 2436 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:01:10.0384 2436 FontCache3.0.0.0 - ok
12:01:10.0400 2436 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:01:10.0462 2436 FsDepends - ok
12:01:10.0524 2436 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:01:10.0587 2436 Fs_Rec - ok
12:01:10.0727 2436 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:01:10.0821 2436 fvevol - ok
12:01:10.0868 2436 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:01:10.0914 2436 gagp30kx - ok
12:01:11.0039 2436 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:01:11.0055 2436 GEARAspiWDM - ok
12:01:11.0258 2436 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
12:01:11.0273 2436 giveio - ok
12:01:11.0429 2436 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
12:01:11.0445 2436 gpsvc - ok
12:01:11.0492 2436 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:01:11.0554 2436 hcw85cir - ok
12:01:11.0679 2436 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:01:11.0710 2436 HdAudAddService - ok
12:01:11.0741 2436 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:01:11.0741 2436 HDAudBus - ok
12:01:11.0788 2436 [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI C:\Windows\system32\DRIVERS\HECI.sys
12:01:11.0804 2436 HECI - ok
12:01:11.0866 2436 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:01:11.0897 2436 HidBatt - ok
12:01:11.0928 2436 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:01:11.0975 2436 HidBth - ok
12:01:12.0053 2436 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:01:12.0084 2436 HidIr - ok
12:01:12.0147 2436 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
12:01:12.0147 2436 hidserv - ok
12:01:12.0272 2436 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:01:12.0287 2436 HidUsb - ok
12:01:12.0365 2436 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:01:12.0412 2436 hkmsvc - ok
12:01:12.0459 2436 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:01:12.0490 2436 HomeGroupListener - ok
12:01:12.0568 2436 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:01:12.0568 2436 HomeGroupProvider - ok
12:01:12.0630 2436 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
12:01:12.0677 2436 HpSAMD - ok
12:01:12.0849 2436 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:01:12.0864 2436 HTTP - ok
12:01:12.0896 2436 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:01:12.0927 2436 hwpolicy - ok
12:01:12.0989 2436 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:01:13.0005 2436 i8042prt - ok
12:01:13.0098 2436 [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:01:13.0176 2436 iaStorV - ok
12:01:13.0332 2436 [ 86B750CC384F3A8B8C1D12F3188307AE ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
12:01:13.0332 2436 ICQ Service - ok
12:01:13.0613 2436 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:01:13.0754 2436 idsvc - ok
12:01:13.0832 2436 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:01:13.0878 2436 iirsp - ok
12:01:14.0050 2436 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
12:01:14.0050 2436 IKEEXT - ok
12:01:14.0502 2436 [ 1E12D06BA971B862C0A2255246EA9EA0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
12:01:14.0580 2436 IntcAzAudAddService - ok
12:01:14.0768 2436 [ 1A97E12E4037492CBF22F94D3A0CEBE9 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
12:01:14.0768 2436 Intel(R) PROSet Monitoring Service - ok
12:01:14.0799 2436 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
12:01:14.0830 2436 intelide - ok
12:01:14.0924 2436 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:01:14.0939 2436 intelppm - ok
12:01:14.0970 2436 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:01:15.0002 2436 IPBusEnum - ok
12:01:15.0064 2436 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:01:15.0095 2436 IpFilterDriver - ok
12:01:15.0220 2436 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:01:15.0220 2436 iphlpsvc - ok
12:01:15.0267 2436 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
12:01:15.0298 2436 IPMIDRV - ok
12:01:15.0392 2436 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:01:15.0438 2436 IPNAT - ok
12:01:15.0532 2436 [ 8F610078437A459948480407F4DB91EA ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:01:15.0532 2436 iPod Service - ok
12:01:15.0594 2436 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:01:15.0610 2436 IRENUM - ok
12:01:15.0719 2436 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
12:01:15.0766 2436 isapnp - ok
12:01:15.0813 2436 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
12:01:15.0922 2436 iScsiPrt - ok
12:01:16.0016 2436 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:01:16.0031 2436 kbdclass - ok
12:01:16.0094 2436 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:01:16.0125 2436 kbdhid - ok
12:01:16.0172 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
12:01:16.0172 2436 KeyIso - ok
12:01:16.0218 2436 [ 0263364ACB9C834ACE52FB85C2C064EC ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:01:16.0265 2436 KSecDD - ok
12:01:16.0328 2436 [ 27391DB553BE2A4E2B0ADEEA2873B2AF ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:01:16.0421 2436 KSecPkg - ok
12:01:16.0515 2436 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
12:01:16.0546 2436 KtmRm - ok
12:01:16.0608 2436 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
12:01:16.0608 2436 LanmanServer - ok
12:01:16.0655 2436 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:01:16.0655 2436 LanmanWorkstation - ok
12:01:16.0764 2436 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
12:01:16.0780 2436 lirsgt - ok
12:01:16.0874 2436 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:01:16.0874 2436 lltdio - ok
12:01:16.0998 2436 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:01:17.0045 2436 lltdsvc - ok
12:01:17.0076 2436 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
12:01:17.0076 2436 lmhosts - ok
12:01:17.0279 2436 [ 0B4F38AA22D5634C48EDB18FE257F005 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
12:01:17.0279 2436 LMS - ok
12:01:17.0357 2436 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:01:17.0373 2436 LSI_FC - ok
12:01:17.0420 2436 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:01:17.0544 2436 LSI_SAS - ok
12:01:17.0654 2436 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:01:17.0685 2436 LSI_SAS2 - ok
12:01:17.0747 2436 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:01:17.0810 2436 LSI_SCSI - ok
12:01:18.0059 2436 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
12:01:18.0075 2436 luafv - ok
12:01:18.0278 2436 [ 22A7776C5D8EB5930EDF9C8DD0884259 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
12:01:18.0356 2436 McComponentHostService - ok
12:01:18.0434 2436 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:01:18.0449 2436 Mcx2Svc - ok
12:01:18.0496 2436 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:01:18.0543 2436 megasas - ok
12:01:18.0621 2436 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:01:18.0777 2436 MegaSR - ok
12:01:19.0182 2436 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
12:01:19.0182 2436 MMCSS - ok
12:01:20.0208 2436 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
12:01:20.0224 2436 Modem - ok
12:01:20.0505 2436 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:01:20.0536 2436 monitor - ok
12:01:21.0535 2436 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:01:21.0551 2436 mouclass - ok
12:01:21.0754 2436 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:01:21.0769 2436 mouhid - ok
12:01:22.0081 2436 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:01:22.0112 2436 mountmgr - ok
12:01:22.0315 2436 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
12:01:22.0331 2436 MozillaMaintenance - ok
12:01:22.0643 2436 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
12:01:22.0721 2436 mpio - ok
12:01:23.0345 2436 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:01:23.0360 2436 mpsdrv - ok
12:01:23.0797 2436 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
12:01:23.0813 2436 MpsSvc - ok
12:01:24.0296 2436 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:01:24.0328 2436 MRxDAV - ok
12:01:24.0484 2436 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:01:24.0515 2436 mrxsmb - ok
12:01:24.0577 2436 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:01:24.0593 2436 mrxsmb10 - ok
12:01:24.0624 2436 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:01:24.0655 2436 mrxsmb20 - ok
12:01:24.0733 2436 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
12:01:24.0780 2436 msahci - ok
12:01:24.0796 2436 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
12:01:24.0827 2436 msdsm - ok
12:01:24.0874 2436 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
12:01:24.0936 2436 MSDTC - ok
12:01:25.0061 2436 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:01:25.0123 2436 Msfs - ok
12:01:25.0248 2436 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:01:25.0279 2436 mshidkmdf - ok
12:01:25.0310 2436 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
12:01:25.0342 2436 msisadrv - ok
12:01:25.0435 2436 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:01:25.0482 2436 MSiSCSI - ok
12:01:25.0482 2436 msiserver - ok
12:01:25.0544 2436 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:01:25.0622 2436 MSKSSRV - ok
12:01:25.0685 2436 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:01:25.0700 2436 MSPCLOCK - ok
12:01:25.0763 2436 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:01:25.0778 2436 MSPQM - ok
12:01:25.0888 2436 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:01:25.0997 2436 MsRPC - ok
12:01:26.0028 2436 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:01:26.0028 2436 mssmbios - ok
12:01:26.0059 2436 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:01:26.0075 2436 MSTEE - ok
12:01:26.0106 2436 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:01:26.0153 2436 MTConfig - ok
12:01:26.0168 2436 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
12:01:26.0184 2436 Mup - ok
12:01:26.0231 2436 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
12:01:26.0231 2436 napagent - ok
12:01:26.0262 2436 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:01:26.0278 2436 NativeWifiP - ok
12:01:26.0293 2436 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:01:26.0293 2436 NDIS - ok
12:01:26.0293 2436 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:01:26.0309 2436 NdisCap - ok
12:01:26.0324 2436 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:01:26.0324 2436 NdisTapi - ok
12:01:26.0340 2436 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:01:26.0356 2436 Ndisuio - ok
12:01:26.0371 2436 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:01:26.0387 2436 NdisWan - ok
12:01:26.0387 2436 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:01:26.0402 2436 NDProxy - ok
12:01:26.0402 2436 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:01:26.0434 2436 NetBIOS - ok
12:01:26.0434 2436 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:01:26.0449 2436 NetBT - ok
12:01:26.0449 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
12:01:26.0449 2436 Netlogon - ok
12:01:26.0480 2436 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
12:01:26.0480 2436 Netman - ok
12:01:26.0512 2436 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
12:01:26.0512 2436 netprofm - ok
12:01:26.0527 2436 [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:01:26.0527 2436 NetTcpPortSharing - ok
12:01:26.0558 2436 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:01:26.0574 2436 nfrd960 - ok
12:01:26.0574 2436 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
12:01:26.0590 2436 NlaSvc - ok
12:01:26.0590 2436 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:01:26.0605 2436 Npfs - ok
12:01:26.0636 2436 npggsvc - ok
12:01:26.0668 2436 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
12:01:26.0668 2436 nsi - ok
12:01:26.0668 2436 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:01:26.0683 2436 nsiproxy - ok
12:01:26.0777 2436 [ 187002CE05693C306F43C873F821381F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:01:26.0808 2436 Ntfs - ok
12:01:26.0824 2436 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
12:01:26.0824 2436 Null - ok
12:01:26.0902 2436 [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:01:26.0917 2436 nvraid - ok
12:01:26.0964 2436 [ 4520B63899E867F354EE012D34E11536 ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:01:26.0980 2436 nvstor - ok
12:01:26.0980 2436 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
12:01:26.0995 2436 nv_agp - ok
12:01:27.0011 2436 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
12:01:27.0011 2436 ohci1394 - ok
12:01:27.0026 2436 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:01:27.0026 2436 p2pimsvc - ok
12:01:27.0042 2436 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
12:01:27.0058 2436 p2psvc - ok
12:01:27.0073 2436 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:01:27.0073 2436 Parport - ok
12:01:27.0089 2436 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:01:27.0120 2436 partmgr - ok
12:01:27.0136 2436 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
12:01:27.0136 2436 Parvdm - ok
12:01:27.0151 2436 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:01:27.0151 2436 PcaSvc - ok
12:01:27.0167 2436 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
12:01:27.0167 2436 pci - ok
12:01:27.0182 2436 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
12:01:27.0198 2436 pciide - ok
12:01:27.0198 2436 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:01:27.0214 2436 pcmcia - ok
12:01:27.0229 2436 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
12:01:27.0245 2436 pcw - ok
12:01:27.0245 2436 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:01:27.0260 2436 PEAUTH - ok
12:01:27.0292 2436 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
12:01:27.0323 2436 pla - ok
12:01:27.0370 2436 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:01:27.0370 2436 PlugPlay - ok
12:01:27.0448 2436 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
12:01:27.0448 2436 PnkBstrA - ok
12:01:27.0494 2436 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:01:27.0494 2436 PNRPAutoReg - ok
12:01:27.0510 2436 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:01:27.0510 2436 PNRPsvc - ok
12:01:27.0526 2436 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:01:27.0526 2436 PolicyAgent - ok
12:01:27.0541 2436 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
12:01:27.0541 2436 Power - ok
12:01:27.0572 2436 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:01:27.0572 2436 PptpMiniport - ok
12:01:27.0588 2436 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:01:27.0604 2436 Processor - ok
12:01:27.0619 2436 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
12:01:27.0635 2436 ProfSvc - ok
12:01:27.0635 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:01:27.0635 2436 ProtectedStorage - ok
12:01:27.0666 2436 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:01:27.0666 2436 Psched - ok
12:01:27.0713 2436 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:01:27.0728 2436 ql2300 - ok
12:01:27.0760 2436 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:01:27.0775 2436 ql40xx - ok
12:01:27.0791 2436 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
12:01:27.0791 2436 QWAVE - ok
12:01:27.0806 2436 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:01:27.0822 2436 QWAVEdrv - ok
12:01:27.0822 2436 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:01:27.0838 2436 RasAcd - ok
12:01:27.0869 2436 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:01:27.0869 2436 RasAgileVpn - ok
12:01:27.0869 2436 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
12:01:27.0884 2436 RasAuto - ok
12:01:27.0884 2436 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:01:27.0900 2436 Rasl2tp - ok
12:01:27.0916 2436 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
12:01:27.0916 2436 RasMan - ok
12:01:27.0916 2436 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:01:27.0931 2436 RasPppoe - ok
12:01:27.0962 2436 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:01:27.0962 2436 RasSstp - ok
12:01:27.0978 2436 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:01:27.0994 2436 rdbss - ok
12:01:28.0009 2436 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:01:28.0025 2436 rdpbus - ok
12:01:28.0040 2436 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:01:28.0040 2436 RDPCDD - ok
12:01:28.0056 2436 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:01:28.0072 2436 RDPENCDD - ok
12:01:28.0072 2436 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:01:28.0087 2436 RDPREFMP - ok
12:01:28.0150 2436 [ 0399C725A9C95A6F1862B93F008DDF4A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:01:28.0181 2436 RDPWD - ok
12:01:28.0212 2436 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:01:28.0228 2436 rdyboost - ok
12:01:28.0243 2436 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
12:01:28.0259 2436 RemoteAccess - ok
12:01:28.0274 2436 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:01:28.0274 2436 RemoteRegistry - ok
12:01:28.0290 2436 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:01:28.0290 2436 RpcEptMapper - ok
12:01:28.0290 2436 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
12:01:28.0290 2436 RpcLocator - ok
12:01:28.0306 2436 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
12:01:28.0306 2436 RpcSs - ok
12:01:28.0337 2436 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:01:28.0352 2436 rspndr - ok
12:01:28.0368 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
12:01:28.0368 2436 SamSs - ok
12:01:28.0399 2436 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
12:01:28.0415 2436 sbp2port - ok
12:01:28.0618 2436 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
12:01:28.0680 2436 SBSDWSCService - ok
12:01:28.0696 2436 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:01:28.0711 2436 SCardSvr - ok
12:01:28.0774 2436 [ 20B2751CD4C8F3FD989739CA661B9F30 ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
12:01:28.0789 2436 SCDEmu - ok
12:01:28.0789 2436 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:01:28.0805 2436 scfilter - ok
12:01:28.0898 2436 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
12:01:28.0914 2436 Schedule - ok
12:01:28.0914 2436 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:01:28.0914 2436 SCPolicySvc - ok
12:01:28.0945 2436 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:01:28.0961 2436 SDRSVC - ok
12:01:28.0992 2436 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:01:29.0008 2436 secdrv - ok
12:01:29.0054 2436 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
12:01:29.0070 2436 seclogon - ok
12:01:29.0086 2436 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
12:01:29.0086 2436 SENS - ok
12:01:29.0164 2436 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:01:29.0164 2436 SensrSvc - ok
12:01:29.0210 2436 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:01:29.0226 2436 Serenum - ok
12:01:29.0257 2436 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:01:29.0273 2436 Serial - ok
12:01:29.0304 2436 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:01:29.0366 2436 sermouse - ok
12:01:29.0398 2436 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
12:01:29.0398 2436 SessionEnv - ok
12:01:29.0413 2436 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
12:01:29.0429 2436 sffdisk - ok
12:01:29.0444 2436 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
12:01:29.0444 2436 sffp_mmc - ok
12:01:29.0476 2436 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
12:01:29.0491 2436 sffp_sd - ok
12:01:29.0538 2436 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:01:29.0569 2436 sfloppy - ok
12:01:29.0647 2436 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:01:29.0663 2436 SharedAccess - ok
12:01:29.0725 2436 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:01:29.0741 2436 ShellHWDetection - ok
12:01:29.0741 2436 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
12:01:29.0788 2436 sisagp - ok
12:01:29.0850 2436 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:01:29.0928 2436 SiSRaid2 - ok
12:01:29.0959 2436 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:01:29.0990 2436 SiSRaid4 - ok
12:01:30.0068 2436 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:01:30.0084 2436 SkypeUpdate - ok
12:01:30.0131 2436 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:01:30.0178 2436 Smb - ok
12:01:30.0193 2436 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:01:30.0209 2436 SNMPTRAP - ok
12:01:30.0256 2436 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\Windows\system32\speedfan.sys
12:01:30.0287 2436 speedfan - ok
12:01:30.0302 2436 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
12:01:30.0302 2436 spldr - ok
12:01:30.0365 2436 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
12:01:30.0365 2436 Spooler - ok
12:01:30.0427 2436 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
12:01:30.0490 2436 sppsvc - ok
12:01:30.0505 2436 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:01:30.0505 2436 sppuinotify - ok
12:01:30.0568 2436 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
12:01:30.0568 2436 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
12:01:30.0568 2436 sptd ( LockedFile.Multi.Generic ) - warning
12:01:30.0568 2436 sptd - detected LockedFile.Multi.Generic (1)
12:01:30.0692 2436 [ F9EC94E35F5019A8E82665E1EF4B4D02 ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
12:01:30.0692 2436 SpyHunter 4 Service - ok
12:01:30.0786 2436 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:01:30.0802 2436 srv - ok
12:01:30.0817 2436 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:01:30.0817 2436 srv2 - ok
12:01:30.0833 2436 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:01:30.0864 2436 srvnet - ok
12:01:30.0895 2436 [ D5DFFEAA1E15D4EFFABB9D9A3068AC5B ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys
12:01:30.0911 2436 sscdbus - ok
12:01:30.0926 2436 [ 8A1BE0C347814F482F493AEA619D57F6 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys
12:01:30.0958 2436 sscdmdfl - ok
12:01:30.0973 2436 [ 5AB0B1987F682A59B15B78F84C6AD7D0 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys
12:01:30.0989 2436 sscdmdm - ok
12:01:31.0020 2436 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:01:31.0020 2436 SSDPSRV - ok
12:01:31.0020 2436 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:01:31.0036 2436 SstpSvc - ok
12:01:31.0051 2436 Steam Client Service - ok
12:01:31.0082 2436 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:01:31.0129 2436 stexstor - ok
12:01:31.0270 2436 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
12:01:31.0285 2436 StiSvc - ok
12:01:31.0301 2436 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:01:31.0301 2436 swenum - ok
12:01:31.0472 2436 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
12:01:31.0472 2436 swprv - ok
12:01:31.0628 2436 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
12:01:31.0644 2436 SysMain - ok
12:01:31.0675 2436 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:01:31.0691 2436 TabletInputService - ok
12:01:31.0706 2436 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
12:01:31.0738 2436 TapiSrv - ok
12:01:31.0753 2436 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
12:01:31.0769 2436 TBS - ok
12:01:31.0862 2436 [ 56C198AC82EFA622DD93E9E43575F79C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:01:31.0987 2436 Tcpip - ok
12:01:32.0034 2436 [ 56C198AC82EFA622DD93E9E43575F79C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:01:32.0034 2436 TCPIP6 - ok
12:01:32.0065 2436 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:01:32.0081 2436 tcpipreg - ok
12:01:32.0221 2436 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:01:32.0252 2436 TDPIPE - ok
12:01:32.0268 2436 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:01:32.0268 2436 TDTCP - ok
12:01:32.0284 2436 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:01:32.0309 2436 tdx - ok
12:01:32.0329 2436 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:01:32.0329 2436 TermDD - ok
12:01:32.0459 2436 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
12:01:32.0459 2436 TermService - ok
12:01:32.0479 2436 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
12:01:32.0479 2436 Themes - ok
12:01:32.0499 2436 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
12:01:32.0499 2436 THREADORDER - ok
12:01:32.0509 2436 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
12:01:32.0509 2436 TrkWks - ok
12:01:32.0629 2436 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:01:32.0639 2436 TrustedInstaller - ok
12:01:32.0659 2436 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:01:32.0689 2436 tssecsrv - ok
12:01:32.0719 2436 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:01:32.0739 2436 tunnel - ok
12:01:32.0759 2436 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:01:32.0809 2436 uagp35 - ok
12:01:32.0839 2436 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:01:32.0859 2436 udfs - ok
12:01:32.0885 2436 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:01:32.0885 2436 UI0Detect - ok
12:01:32.0916 2436 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
12:01:32.0932 2436 uliagpkx - ok
12:01:32.0947 2436 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:01:32.0947 2436 umbus - ok
12:01:32.0978 2436 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:01:32.0994 2436 UmPass - ok
12:01:33.0181 2436 [ 6FDB1CA1ADD261F893C90738EBA37197 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
12:01:33.0259 2436 UNS - ok
12:01:33.0290 2436 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
12:01:33.0306 2436 upnphost - ok
12:01:33.0353 2436 [ 2436A42AAB4AD48A9B714E5B0F344627 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:01:33.0353 2436 usbaudio - ok
12:01:33.0384 2436 [ C31AE588E403042632DC796CF09E30B0 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:01:33.0415 2436 usbccgp - ok
12:01:33.0462 2436 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
12:01:33.0493 2436 usbcir - ok
12:01:33.0509 2436 [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:01:33.0524 2436 usbehci - ok
12:01:33.0540 2436 [ BDCD7156EC37448F08633FD899823620 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:01:33.0556 2436 usbhub - ok
12:01:33.0602 2436 [ EB2D819A639015253C871CDA09D91D58 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:01:33.0618 2436 usbohci - ok
12:01:33.0658 2436 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:01:33.0673 2436 usbprint - ok
12:01:33.0702 2436 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:01:33.0733 2436 usbscan - ok
12:01:33.0780 2436 [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:01:33.0811 2436 USBSTOR - ok
12:01:33.0873 2436 [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:01:33.0889 2436 usbuhci - ok
12:01:33.0936 2436 [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
12:01:33.0936 2436 usbvideo - ok
12:01:33.0967 2436 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
12:01:33.0967 2436 UxSms - ok
12:01:33.0983 2436 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
12:01:33.0983 2436 VaultSvc - ok
12:01:34.0029 2436 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
12:01:34.0045 2436 vdrvroot - ok
12:01:34.0123 2436 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
12:01:34.0139 2436 vds - ok
12:01:34.0263 2436 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:01:34.0279 2436 vga - ok
12:01:34.0310 2436 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
12:01:34.0326 2436 VgaSave - ok
12:01:34.0357 2436 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
12:01:34.0373 2436 vhdmp - ok
12:01:34.0388 2436 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
12:01:34.0388 2436 viaagp - ok
12:01:34.0404 2436 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
12:01:34.0419 2436 ViaC7 - ok
12:01:34.0435 2436 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
12:01:34.0451 2436 viaide - ok
12:01:34.0451 2436 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
12:01:34.0466 2436 volmgr - ok
12:01:34.0482 2436 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:01:34.0513 2436 volmgrx - ok
12:01:34.0529 2436 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
12:01:34.0544 2436 volsnap - ok
12:01:34.0591 2436 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:01:34.0591 2436 vsmraid - ok
12:01:34.0638 2436 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
12:01:34.0638 2436 VSS - ok
12:01:34.0653 2436 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
12:01:34.0669 2436 vwifibus - ok
12:01:34.0716 2436 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
12:01:34.0716 2436 W32Time - ok
12:01:34.0731 2436 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:01:34.0747 2436 WacomPen - ok
12:01:34.0763 2436 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:01:34.0778 2436 WANARP - ok
12:01:34.0778 2436 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:01:34.0778 2436 Wanarpv6 - ok
12:01:34.0841 2436 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:01:34.0872 2436 WatAdminSvc - ok
12:01:34.0903 2436 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
12:01:34.0919 2436 wbengine - ok
12:01:34.0934 2436 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:01:34.0934 2436 WbioSrvc - ok
12:01:34.0997 2436 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:01:35.0012 2436 wcncsvc - ok
12:01:35.0028 2436 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:01:35.0028 2436 WcsPlugInService - ok
12:01:35.0043 2436 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:01:35.0059 2436 Wd - ok
12:01:35.0075 2436 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:01:35.0106 2436 Wdf01000 - ok
12:01:35.0121 2436 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:01:35.0121 2436 WdiServiceHost - ok
12:01:35.0153 2436 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:01:35.0153 2436 WdiSystemHost - ok
12:01:35.0231 2436 [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient C:\Windows\System32\webclnt.dll
12:01:35.0246 2436 WebClient - ok
12:01:35.0262 2436 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:01:35.0262 2436 Wecsvc - ok
12:01:35.0277 2436 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:01:35.0293 2436 wercplsupport - ok
12:01:35.0324 2436 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
12:01:35.0324 2436 WerSvc - ok
12:01:35.0355 2436 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:01:35.0355 2436 WfpLwf - ok
12:01:35.0371 2436 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:01:35.0402 2436 WIMMount - ok
12:01:35.0449 2436 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
12:01:35.0449 2436 WinDefend - ok
12:01:35.0449 2436 WinHttpAutoProxySvc - ok
12:01:35.0543 2436 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:01:35.0543 2436 Winmgmt - ok
12:01:35.0621 2436 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
12:01:35.0652 2436 WinRM - ok
12:01:35.0730 2436 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:01:35.0745 2436 WinUsb - ok
12:01:35.0777 2436 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:01:35.0792 2436 Wlansvc - ok
12:01:35.0886 2436 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:01:35.0886 2436 wlidsvc - ok
12:01:35.0901 2436 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
12:01:35.0917 2436 WmiAcpi - ok
12:01:35.0933 2436 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:01:35.0948 2436 wmiApSrv - ok
12:01:36.0120 2436 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
12:01:36.0135 2436 WMPNetworkSvc - ok
12:01:36.0167 2436 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:01:36.0182 2436 WPCSvc - ok
12:01:36.0245 2436 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:01:36.0260 2436 WPDBusEnum - ok
12:01:36.0307 2436 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:01:36.0338 2436 ws2ifsl - ok
12:01:36.0385 2436 [ A661A76333057B383A06E65F0073222F ] wscsvc C:\Windows\System32\wscsvc.dll
12:01:36.0385 2436 wscsvc - ok
12:01:36.0385 2436 WSearch - ok
12:01:36.0619 2436 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
12:01:36.0681 2436 wuauserv - ok
12:01:36.0697 2436 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:01:36.0728 2436 WudfPf - ok
12:01:36.0759 2436 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:01:36.0759 2436 WUDFRd - ok
12:01:36.0775 2436 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:01:36.0775 2436 wudfsvc - ok
12:01:36.0791 2436 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
12:01:36.0791 2436 WwanSvc - ok
12:01:36.0806 2436 ================ Scan global ===============================
12:01:36.0822 2436 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
12:01:36.0884 2436 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:01:36.0915 2436 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:01:36.0947 2436 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
12:01:36.0978 2436 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
12:01:36.0993 2436 [Global] - ok
12:01:36.0993 2436 ================ Scan MBR ==================================
12:01:37.0009 2436 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:01:38.0429 2436 \Device\Harddisk0\DR0 - ok
12:01:38.0429 2436 ================ Scan VBR ==================================
12:01:38.0460 2436 [ 0C16EB25A1523E0AAC21ED02D4ACAFCE ] \Device\Harddisk0\DR0\Partition1
12:01:38.0460 2436 \Device\Harddisk0\DR0\Partition1 - ok
12:01:38.0460 2436 [ 3A0CC01B2CEF289B819469F89F87B9DE ] \Device\Harddisk0\DR0\Partition2
12:01:38.0460 2436 \Device\Harddisk0\DR0\Partition2 - ok
12:01:38.0460 2436 ============================================================
12:01:38.0460 2436 Scan finished
12:01:38.0460 2436 ============================================================
12:01:38.0475 2380 Detected object count: 1
12:01:38.0475 2380 Actual detected object count: 1
12:01:46.0572 2380 sptd ( LockedFile.Multi.Generic ) - skipped by user
12:01:46.0572 2380 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
12:04:18.0642 5228 ============================================================
12:04:18.0642 5228 Scan started
12:04:18.0642 5228 Mode: Manual;
12:04:18.0642 5228 ============================================================
12:04:23.0482 5228 ================ Scan system memory ========================
12:04:23.0482 5228 System memory - ok
12:04:23.0482 5228 ================ Scan services =============================
12:04:24.0252 5228 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
12:04:24.0262 5228 1394ohci - ok
12:04:24.0302 5228 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
12:04:24.0312 5228 ACPI - ok
12:04:24.0312 5228 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
12:04:24.0322 5228 AcpiPmi - ok
12:04:24.0482 5228 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:04:24.0482 5228 AdobeFlashPlayerUpdateSvc - ok
12:04:24.0592 5228 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:04:24.0602 5228 adp94xx - ok
12:04:24.0632 5228 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:04:24.0652 5228 adpahci - ok
12:04:24.0672 5228 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
Re: Win32/Olmarik TDL4
A zbytek
12:04:24.0682 5228 adpu320 - ok
12:04:24.0732 5228 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:04:24.0732 5228 AeLookupSvc - ok
12:04:24.0772 5228 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
12:04:24.0772 5228 AFD - ok
12:04:24.0792 5228 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
12:04:24.0792 5228 agp440 - ok
12:04:24.0802 5228 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
12:04:24.0812 5228 aic78xx - ok
12:04:24.0852 5228 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
12:04:24.0852 5228 ALG - ok
12:04:24.0862 5228 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
12:04:24.0882 5228 aliide - ok
12:04:24.0922 5228 [ B90A4332CF4C6580C845266A656DE4AB ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
12:04:24.0922 5228 AMD External Events Utility - ok
12:04:24.0932 5228 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
12:04:24.0942 5228 amdagp - ok
12:04:24.0942 5228 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
12:04:24.0942 5228 amdide - ok
12:04:24.0952 5228 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:04:24.0952 5228 AmdK8 - ok
12:04:25.0112 5228 [ 7844984A5E1E6F18D93AF9E9BCC65436 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
12:04:25.0142 5228 amdkmdag - ok
12:04:25.0182 5228 [ 202DEF509D76105B08741D36C3A7E4D7 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
12:04:25.0202 5228 amdkmdap - ok
12:04:25.0202 5228 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:04:25.0202 5228 AmdPPM - ok
12:04:25.0242 5228 [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:04:25.0242 5228 amdsata - ok
12:04:25.0272 5228 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:04:25.0272 5228 amdsbs - ok
12:04:25.0302 5228 [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:04:25.0302 5228 amdxata - ok
12:04:25.0312 5228 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
12:04:25.0312 5228 AppID - ok
12:04:25.0332 5228 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:04:25.0332 5228 AppIDSvc - ok
12:04:25.0342 5228 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
12:04:25.0342 5228 Appinfo - ok
12:04:25.0422 5228 [ 2E3E53A6AEF23E24F402C7855B9B1542 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:04:25.0422 5228 Apple Mobile Device - ok
12:04:25.0442 5228 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
12:04:25.0442 5228 arc - ok
12:04:25.0452 5228 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:04:25.0452 5228 arcsas - ok
12:04:25.0472 5228 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:04:25.0482 5228 AsyncMac - ok
12:04:25.0492 5228 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
12:04:25.0492 5228 atapi - ok
12:04:25.0522 5228 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
12:04:25.0522 5228 atksgt - ok
12:04:25.0542 5228 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:04:25.0542 5228 AudioEndpointBuilder - ok
12:04:25.0552 5228 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
12:04:25.0552 5228 Audiosrv - ok
12:04:25.0562 5228 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:04:25.0562 5228 AxInstSV - ok
12:04:25.0592 5228 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
12:04:25.0592 5228 b06bdrv - ok
12:04:25.0612 5228 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
12:04:25.0612 5228 b57nd60x - ok
12:04:25.0632 5228 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
12:04:25.0632 5228 BDESVC - ok
12:04:25.0642 5228 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
12:04:25.0652 5228 Beep - ok
12:04:25.0672 5228 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
12:04:25.0672 5228 BFE - ok
12:04:25.0692 5228 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
12:04:25.0692 5228 BITS - ok
12:04:25.0702 5228 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:04:25.0702 5228 blbdrive - ok
12:04:25.0762 5228 [ 5AB58C337AC65837FE404462AD6265AB ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:04:25.0772 5228 Bonjour Service - ok
12:04:25.0802 5228 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:04:25.0802 5228 bowser - ok
12:04:25.0822 5228 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:04:25.0822 5228 BrFiltLo - ok
12:04:25.0832 5228 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:04:25.0832 5228 BrFiltUp - ok
12:04:25.0852 5228 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
12:04:25.0852 5228 Browser - ok
12:04:25.0872 5228 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:04:25.0872 5228 Brserid - ok
12:04:25.0882 5228 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:04:25.0882 5228 BrSerWdm - ok
12:04:25.0902 5228 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:04:25.0902 5228 BrUsbMdm - ok
12:04:25.0922 5228 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:04:25.0922 5228 BrUsbSer - ok
12:04:25.0932 5228 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:04:25.0932 5228 BTHMODEM - ok
12:04:25.0952 5228 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
12:04:25.0952 5228 bthserv - ok
12:04:25.0962 5228 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:04:25.0962 5228 cdfs - ok
12:04:26.0002 5228 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:04:26.0042 5228 cdrom - ok
12:04:26.0062 5228 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
12:04:26.0062 5228 CertPropSvc - ok
12:04:26.0092 5228 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:04:26.0092 5228 circlass - ok
12:04:26.0112 5228 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
12:04:26.0122 5228 CLFS - ok
12:04:26.0202 5228 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:04:26.0202 5228 clr_optimization_v2.0.50727_32 - ok
12:04:26.0342 5228 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:04:26.0342 5228 clr_optimization_v4.0.30319_32 - ok
12:04:26.0352 5228 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:04:26.0352 5228 CmBatt - ok
12:04:26.0372 5228 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
12:04:26.0372 5228 cmdide - ok
12:04:26.0442 5228 [ 36C252E474B2FFA0F0FBBFF20D92A640 ] CNG C:\Windows\system32\Drivers\cng.sys
12:04:26.0442 5228 CNG - ok
12:04:26.0462 5228 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:04:26.0462 5228 Compbatt - ok
12:04:26.0482 5228 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
12:04:26.0482 5228 CompositeBus - ok
12:04:26.0492 5228 COMSysApp - ok
12:04:26.0502 5228 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:04:26.0502 5228 crcdisk - ok
12:04:26.0552 5228 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:04:26.0552 5228 CryptSvc - ok
12:04:26.0632 5228 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
12:04:26.0642 5228 DcomLaunch - ok
12:04:26.0662 5228 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
12:04:26.0662 5228 defragsvc - ok
12:04:26.0702 5228 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:04:26.0702 5228 DfsC - ok
12:04:26.0712 5228 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
12:04:26.0722 5228 Dhcp - ok
12:04:26.0732 5228 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
12:04:26.0732 5228 discache - ok
12:04:26.0742 5228 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:04:26.0742 5228 Disk - ok
12:04:26.0792 5228 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:04:26.0792 5228 Dnscache - ok
12:04:26.0812 5228 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
12:04:26.0812 5228 dot3svc - ok
12:04:26.0822 5228 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
12:04:26.0832 5228 DPS - ok
12:04:26.0842 5228 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:04:26.0842 5228 drmkaud - ok
12:04:26.0892 5228 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:04:26.0962 5228 DXGKrnl - ok
12:04:27.0002 5228 [ 341F236953B2ABBE8C9DBEFA1215ECD4 ] e1kexpress C:\Windows\system32\DRIVERS\e1k6232.sys
12:04:27.0002 5228 e1kexpress - ok
12:04:27.0032 5228 [ 04CBA07E73F152970FC34D66D3892E2A ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
12:04:27.0032 5228 eamonm - ok
12:04:27.0062 5228 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
12:04:27.0062 5228 EapHost - ok
12:04:27.0142 5228 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
12:04:27.0162 5228 ebdrv - ok
12:04:27.0202 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
12:04:27.0202 5228 EFS - ok
12:04:27.0222 5228 [ FE7824239D132AD9EBD8645FE1199B30 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
12:04:27.0232 5228 ehdrv - ok
12:04:27.0292 5228 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:04:27.0302 5228 ehRecvr - ok
12:04:27.0322 5228 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
12:04:27.0322 5228 ehSched - ok
12:04:27.0382 5228 [ 68D91A34CE51CF15C45DD68F7F1257E8 ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
12:04:27.0382 5228 EhttpSrv - ok
12:04:27.0412 5228 [ 191D8ECCC40F05B52FAC0513F35BA01D ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
12:04:27.0412 5228 ekrn - ok
12:04:27.0442 5228 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:04:27.0452 5228 elxstor - ok
12:04:27.0472 5228 [ 16EBD8BF1D5090923694CC972C7CE1B4 ] ENTECH C:\Windows\system32\DRIVERS\ENTECH.sys
12:04:27.0472 5228 ENTECH - ok
12:04:27.0502 5228 [ DDB45F6371714601A43E8BE38145BE18 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
12:04:27.0502 5228 epfwwfpr - ok
12:04:27.0512 5228 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
12:04:27.0512 5228 ErrDev - ok
12:04:27.0592 5228 [ 2407B8164E966755BC6A4242FC9DE31E ] esgiguard C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
12:04:27.0592 5228 esgiguard - ok
12:04:27.0642 5228 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
12:04:27.0642 5228 EventSystem - ok
12:04:27.0672 5228 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
12:04:27.0692 5228 exfat - ok
12:04:27.0732 5228 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:04:27.0762 5228 fastfat - ok
12:04:27.0792 5228 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
12:04:27.0802 5228 Fax - ok
12:04:27.0812 5228 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:04:27.0812 5228 fdc - ok
12:04:27.0822 5228 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
12:04:27.0822 5228 fdPHost - ok
12:04:27.0832 5228 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
12:04:27.0842 5228 FDResPub - ok
12:04:27.0852 5228 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:04:27.0852 5228 FileInfo - ok
12:04:27.0862 5228 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:04:27.0862 5228 Filetrace - ok
12:04:27.0872 5228 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:04:27.0872 5228 flpydisk - ok
12:04:27.0882 5228 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:04:27.0882 5228 FltMgr - ok
12:04:27.0932 5228 [ 7FE4995528A7529A761875151EE3D512 ] FontCache C:\Windows\system32\FntCache.dll
12:04:27.0942 5228 FontCache - ok
12:04:27.0992 5228 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:04:28.0002 5228 FontCache3.0.0.0 - ok
12:04:28.0012 5228 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:04:28.0012 5228 FsDepends - ok
12:04:28.0042 5228 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:04:28.0042 5228 Fs_Rec - ok
12:04:28.0072 5228 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:04:28.0072 5228 fvevol - ok
12:04:28.0102 5228 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:04:28.0102 5228 gagp30kx - ok
12:04:28.0152 5228 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:04:28.0152 5228 GEARAspiWDM - ok
12:04:28.0202 5228 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
12:04:28.0202 5228 giveio - ok
12:04:28.0242 5228 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
12:04:28.0242 5228 gpsvc - ok
12:04:28.0262 5228 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:04:28.0262 5228 hcw85cir - ok
12:04:28.0302 5228 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:04:28.0302 5228 HdAudAddService - ok
12:04:28.0312 5228 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:04:28.0312 5228 HDAudBus - ok
12:04:28.0342 5228 [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI C:\Windows\system32\DRIVERS\HECI.sys
12:04:28.0342 5228 HECI - ok
12:04:28.0362 5228 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:04:28.0362 5228 HidBatt - ok
12:04:28.0382 5228 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:04:28.0392 5228 HidBth - ok
12:04:28.0402 5228 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:04:28.0402 5228 HidIr - ok
12:04:28.0422 5228 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
12:04:28.0422 5228 hidserv - ok
12:04:28.0442 5228 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:04:28.0442 5228 HidUsb - ok
12:04:28.0462 5228 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:04:28.0462 5228 hkmsvc - ok
12:04:28.0482 5228 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:04:28.0482 5228 HomeGroupListener - ok
12:04:28.0492 5228 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:04:28.0502 5228 HomeGroupProvider - ok
12:04:28.0512 5228 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
12:04:28.0512 5228 HpSAMD - ok
12:04:28.0562 5228 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:04:28.0562 5228 HTTP - ok
12:04:28.0582 5228 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:04:28.0582 5228 hwpolicy - ok
12:04:28.0612 5228 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:04:28.0612 5228 i8042prt - ok
12:04:28.0662 5228 [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:04:28.0672 5228 iaStorV - ok
12:04:28.0792 5228 [ 86B750CC384F3A8B8C1D12F3188307AE ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
12:04:28.0792 5228 ICQ Service - ok
12:04:28.0882 5228 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:04:28.0892 5228 idsvc - ok
12:04:28.0912 5228 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:04:28.0912 5228 iirsp - ok
12:04:28.0952 5228 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
12:04:28.0952 5228 IKEEXT - ok
12:04:29.0042 5228 [ 1E12D06BA971B862C0A2255246EA9EA0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
12:04:29.0052 5228 IntcAzAudAddService - ok
12:04:29.0102 5228 [ 1A97E12E4037492CBF22F94D3A0CEBE9 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
12:04:29.0102 5228 Intel(R) PROSet Monitoring Service - ok
12:04:29.0112 5228 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
12:04:29.0112 5228 intelide - ok
12:04:29.0132 5228 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:04:29.0132 5228 intelppm - ok
12:04:29.0162 5228 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:04:29.0172 5228 IPBusEnum - ok
12:04:29.0182 5228 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:04:29.0182 5228 IpFilterDriver - ok
12:04:29.0202 5228 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:04:29.0212 5228 iphlpsvc - ok
12:04:29.0222 5228 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
12:04:29.0222 5228 IPMIDRV - ok
12:04:29.0232 5228 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:04:29.0232 5228 IPNAT - ok
12:04:29.0282 5228 [ 8F610078437A459948480407F4DB91EA ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:04:29.0282 5228 iPod Service - ok
12:04:29.0292 5228 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:04:29.0292 5228 IRENUM - ok
12:04:29.0302 5228 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
12:04:29.0302 5228 isapnp - ok
12:04:29.0312 5228 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
12:04:29.0312 5228 iScsiPrt - ok
12:04:29.0322 5228 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:04:29.0322 5228 kbdclass - ok
12:04:29.0332 5228 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:04:29.0332 5228 kbdhid - ok
12:04:29.0342 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
12:04:29.0342 5228 KeyIso - ok
12:04:29.0372 5228 [ 0263364ACB9C834ACE52FB85C2C064EC ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:04:29.0372 5228 KSecDD - ok
12:04:29.0392 5228 [ 27391DB553BE2A4E2B0ADEEA2873B2AF ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:04:29.0392 5228 KSecPkg - ok
12:04:29.0412 5228 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
12:04:29.0412 5228 KtmRm - ok
12:04:29.0452 5228 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
12:04:29.0452 5228 LanmanServer - ok
12:04:29.0482 5228 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:04:29.0482 5228 LanmanWorkstation - ok
12:04:29.0512 5228 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
12:04:29.0512 5228 lirsgt - ok
12:04:29.0542 5228 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:04:29.0572 5228 lltdio - ok
12:04:29.0622 5228 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:04:29.0622 5228 lltdsvc - ok
12:04:29.0662 5228 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
12:04:29.0672 5228 lmhosts - ok
12:04:29.0752 5228 [ 0B4F38AA22D5634C48EDB18FE257F005 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
12:04:29.0752 5228 LMS - ok
12:04:29.0772 5228 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:04:29.0772 5228 LSI_FC - ok
12:04:29.0892 5228 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:04:29.0892 5228 LSI_SAS - ok
12:04:29.0902 5228 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:04:29.0902 5228 LSI_SAS2 - ok
12:04:29.0902 5228 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:04:29.0932 5228 LSI_SCSI - ok
12:04:29.0932 5228 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
12:04:29.0932 5228 luafv - ok
12:04:30.0042 5228 [ 22A7776C5D8EB5930EDF9C8DD0884259 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
12:04:30.0042 5228 McComponentHostService - ok
12:04:30.0072 5228 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:04:30.0082 5228 Mcx2Svc - ok
12:04:30.0102 5228 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:04:30.0102 5228 megasas - ok
12:04:30.0122 5228 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:04:30.0152 5228 MegaSR - ok
12:04:30.0172 5228 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
12:04:30.0182 5228 MMCSS - ok
12:04:30.0182 5228 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
12:04:30.0202 5228 Modem - ok
12:04:30.0212 5228 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:04:30.0212 5228 monitor - ok
12:04:30.0212 5228 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:04:30.0212 5228 mouclass - ok
12:04:30.0222 5228 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:04:30.0222 5228 mouhid - ok
12:04:30.0232 5228 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:04:30.0232 5228 mountmgr - ok
12:04:30.0282 5228 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
12:04:30.0292 5228 MozillaMaintenance - ok
12:04:30.0302 5228 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
12:04:30.0302 5228 mpio - ok
12:04:30.0322 5228 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:04:30.0322 5228 mpsdrv - ok
12:04:30.0362 5228 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
12:04:30.0372 5228 MpsSvc - ok
12:04:30.0382 5228 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:04:30.0382 5228 MRxDAV - ok
12:04:30.0422 5228 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:04:30.0422 5228 mrxsmb - ok
12:04:30.0472 5228 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:04:30.0502 5228 mrxsmb10 - ok
12:04:30.0512 5228 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:04:30.0512 5228 mrxsmb20 - ok
12:04:30.0542 5228 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
12:04:30.0542 5228 msahci - ok
12:04:30.0552 5228 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
12:04:30.0562 5228 msdsm - ok
12:04:30.0622 5228 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
12:04:30.0622 5228 MSDTC - ok
12:04:30.0632 5228 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:04:30.0632 5228 Msfs - ok
12:04:30.0642 5228 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:04:30.0652 5228 mshidkmdf - ok
12:04:30.0662 5228 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
12:04:30.0662 5228 msisadrv - ok
12:04:30.0692 5228 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:04:30.0692 5228 MSiSCSI - ok
12:04:30.0692 5228 msiserver - ok
12:04:30.0702 5228 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:04:30.0702 5228 MSKSSRV - ok
12:04:30.0712 5228 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:04:30.0712 5228 MSPCLOCK - ok
12:04:30.0722 5228 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:04:30.0722 5228 MSPQM - ok
12:04:30.0732 5228 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:04:30.0732 5228 MsRPC - ok
12:04:30.0742 5228 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:04:30.0742 5228 mssmbios - ok
12:04:30.0752 5228 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:04:30.0752 5228 MSTEE - ok
12:04:30.0772 5228 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:04:30.0772 5228 MTConfig - ok
12:04:30.0782 5228 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
12:04:30.0782 5228 Mup - ok
12:04:30.0812 5228 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
12:04:30.0812 5228 napagent - ok
12:04:30.0832 5228 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:04:30.0832 5228 NativeWifiP - ok
12:04:30.0852 5228 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:04:30.0862 5228 NDIS - ok
12:04:30.0872 5228 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:04:30.0872 5228 NdisCap - ok
12:04:30.0882 5228 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:04:30.0882 5228 NdisTapi - ok
12:04:30.0892 5228 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:04:30.0892 5228 Ndisuio - ok
12:04:30.0902 5228 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:04:30.0902 5228 NdisWan - ok
12:04:30.0912 5228 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:04:30.0912 5228 NDProxy - ok
12:04:30.0932 5228 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:04:30.0932 5228 NetBIOS - ok
12:04:30.0962 5228 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:04:30.0982 5228 NetBT - ok
12:04:30.0992 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
12:04:30.0992 5228 Netlogon - ok
12:04:31.0052 5228 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
12:04:31.0062 5228 Netman - ok
12:04:31.0082 5228 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
12:04:31.0092 5228 netprofm - ok
12:04:31.0122 5228 [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:04:31.0122 5228 NetTcpPortSharing - ok
12:04:31.0162 5228 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:04:31.0162 5228 nfrd960 - ok
12:04:31.0182 5228 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
12:04:31.0192 5228 NlaSvc - ok
12:04:31.0212 5228 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:04:31.0242 5228 Npfs - ok
12:04:31.0242 5228 npggsvc - ok
12:04:31.0262 5228 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
12:04:31.0262 5228 nsi - ok
12:04:31.0272 5228 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:04:31.0272 5228 nsiproxy - ok
12:04:31.0352 5228 [ 187002CE05693C306F43C873F821381F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:04:31.0372 5228 Ntfs - ok
12:04:31.0402 5228 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
12:04:31.0402 5228 Null - ok
12:04:31.0452 5228 [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:04:31.0452 5228 nvraid - ok
12:04:31.0502 5228 [ 4520B63899E867F354EE012D34E11536 ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:04:31.0502 5228 nvstor - ok
12:04:31.0512 5228 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
12:04:31.0512 5228 nv_agp - ok
12:04:31.0522 5228 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
12:04:31.0522 5228 ohci1394 - ok
12:04:31.0542 5228 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:04:31.0552 5228 p2pimsvc - ok
12:04:31.0572 5228 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
12:04:31.0582 5228 p2psvc - ok
12:04:31.0592 5228 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:04:31.0592 5228 Parport - ok
12:04:31.0602 5228 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:04:31.0602 5228 partmgr - ok
12:04:31.0612 5228 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
12:04:31.0612 5228 Parvdm - ok
12:04:31.0622 5228 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:04:31.0632 5228 PcaSvc - ok
12:04:31.0642 5228 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
12:04:31.0642 5228 pci - ok
12:04:31.0652 5228 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
12:04:31.0652 5228 pciide - ok
12:04:31.0682 5228 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:04:31.0682 5228 pcmcia - ok
12:04:31.0692 5228 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
12:04:31.0692 5228 pcw - ok
12:04:31.0712 5228 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:04:31.0712 5228 PEAUTH - ok
12:04:31.0762 5228 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
12:04:31.0772 5228 pla - ok
12:04:31.0812 5228 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:04:31.0822 5228 PlugPlay - ok
12:04:31.0862 5228 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
12:04:31.0862 5228 PnkBstrA - ok
12:04:31.0872 5228 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:04:31.0882 5228 PNRPAutoReg - ok
12:04:31.0892 5228 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:04:31.0902 5228 PNRPsvc - ok
12:04:31.0922 5228 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:04:31.0922 5228 PolicyAgent - ok
12:04:31.0952 5228 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
12:04:31.0952 5228 Power - ok
12:04:31.0962 5228 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:04:31.0962 5228 PptpMiniport - ok
12:04:31.0982 5228 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:04:31.0982 5228 Processor - ok
12:04:32.0002 5228 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
12:04:32.0002 5228 ProfSvc - ok
12:04:32.0012 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:04:32.0012 5228 ProtectedStorage - ok
12:04:32.0032 5228 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:04:32.0032 5228 Psched - ok
12:04:32.0082 5228 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:04:32.0102 5228 ql2300 - ok
12:04:32.0112 5228 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:04:32.0112 5228 ql40xx - ok
12:04:32.0122 5228 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
12:04:32.0122 5228 QWAVE - ok
12:04:32.0132 5228 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:04:32.0132 5228 QWAVEdrv - ok
12:04:32.0142 5228 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:04:32.0142 5228 RasAcd - ok
12:04:32.0162 5228 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:04:32.0162 5228 RasAgileVpn - ok
12:04:32.0172 5228 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
12:04:32.0172 5228 RasAuto - ok
12:04:32.0182 5228 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:04:32.0182 5228 Rasl2tp - ok
12:04:32.0192 5228 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
12:04:32.0192 5228 RasMan - ok
12:04:32.0202 5228 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:04:32.0202 5228 RasPppoe - ok
12:04:32.0212 5228 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:04:32.0212 5228 RasSstp - ok
12:04:32.0242 5228 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:04:32.0242 5228 rdbss - ok
12:04:32.0252 5228 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:04:32.0252 5228 rdpbus - ok
12:04:32.0262 5228 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:04:32.0262 5228 RDPCDD - ok
12:04:32.0272 5228 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:04:32.0282 5228 RDPENCDD - ok
12:04:32.0282 5228 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:04:32.0282 5228 RDPREFMP - ok
12:04:32.0322 5228 [ 0399C725A9C95A6F1862B93F008DDF4A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:04:32.0352 5228 RDPWD - ok
12:04:32.0382 5228 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:04:32.0382 5228 rdyboost - ok
12:04:32.0402 5228 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
12:04:32.0402 5228 RemoteAccess - ok
12:04:32.0432 5228 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:04:32.0432 5228 RemoteRegistry - ok
12:04:32.0452 5228 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:04:32.0452 5228 RpcEptMapper - ok
12:04:32.0472 5228 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
12:04:32.0472 5228 RpcLocator - ok
12:04:32.0492 5228 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
12:04:32.0492 5228 RpcSs - ok
12:04:32.0512 5228 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:04:32.0512 5228 rspndr - ok
12:04:32.0522 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
12:04:32.0532 5228 SamSs - ok
12:04:32.0532 5228 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
12:04:32.0532 5228 sbp2port - ok
12:04:32.0582 5228 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
12:04:32.0592 5228 SBSDWSCService - ok
12:04:32.0612 5228 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:04:32.0622 5228 SCardSvr - ok
12:04:32.0652 5228 [ 20B2751CD4C8F3FD989739CA661B9F30 ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
12:04:32.0652 5228 SCDEmu - ok
12:04:32.0662 5228 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:04:32.0662 5228 scfilter - ok
12:04:32.0722 5228 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
12:04:32.0732 5228 Schedule - ok
12:04:32.0742 5228 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:04:32.0742 5228 SCPolicySvc - ok
12:04:32.0762 5228 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:04:32.0772 5228 SDRSVC - ok
12:04:32.0782 5228 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:04:32.0782 5228 secdrv - ok
12:04:32.0792 5228 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
12:04:32.0792 5228 seclogon - ok
12:04:32.0802 5228 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
12:04:32.0802 5228 SENS - ok
12:04:32.0812 5228 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:04:32.0812 5228 SensrSvc - ok
12:04:32.0822 5228 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:04:32.0822 5228 Serenum - ok
12:04:32.0832 5228 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:04:32.0832 5228 Serial - ok
12:04:32.0842 5228 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:04:32.0842 5228 sermouse - ok
12:04:32.0872 5228 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
12:04:32.0872 5228 SessionEnv - ok
12:04:32.0882 5228 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
12:04:32.0882 5228 sffdisk - ok
12:04:32.0882 5228 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
12:04:32.0882 5228 sffp_mmc - ok
12:04:32.0892 5228 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
12:04:32.0892 5228 sffp_sd - ok
12:04:32.0902 5228 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:04:32.0902 5228 sfloppy - ok
12:04:32.0912 5228 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:04:32.0912 5228 SharedAccess - ok
12:04:32.0942 5228 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:04:32.0942 5228 ShellHWDetection - ok
12:04:32.0952 5228 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
12:04:32.0952 5228 sisagp - ok
12:04:32.0962 5228 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:04:32.0962 5228 SiSRaid2 - ok
12:04:32.0972 5228 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:04:32.0972 5228 SiSRaid4 - ok
12:04:33.0032 5228 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:04:33.0032 5228 SkypeUpdate - ok
12:04:33.0092 5228 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:04:33.0122 5228 Smb - ok
12:04:33.0152 5228 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:04:33.0152 5228 SNMPTRAP - ok
12:04:33.0192 5228 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\Windows\system32\speedfan.sys
12:04:33.0192 5228 speedfan - ok
12:04:33.0202 5228 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
12:04:33.0202 5228 spldr - ok
12:04:33.0242 5228 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
12:04:33.0252 5228 Spooler - ok
12:04:33.0302 5228 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
12:04:33.0322 5228 sppsvc - ok
12:04:33.0342 5228 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:04:33.0342 5228 sppuinotify - ok
12:04:33.0432 5228 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
12:04:33.0432 5228 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
12:04:33.0442 5228 sptd ( LockedFile.Multi.Generic ) - warning
12:04:33.0442 5228 sptd - detected LockedFile.Multi.Generic (1)
12:04:33.0532 5228 [ F9EC94E35F5019A8E82665E1EF4B4D02 ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
12:04:33.0542 5228 SpyHunter 4 Service - ok
12:04:33.0612 5228 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:04:33.0622 5228 srv - ok
12:04:33.0642 5228 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:04:33.0652 5228 srv2 - ok
12:04:33.0672 5228 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:04:33.0672 5228 srvnet - ok
12:04:33.0712 5228 [ D5DFFEAA1E15D4EFFABB9D9A3068AC5B ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys
12:04:33.0712 5228 sscdbus - ok
12:04:33.0722 5228 [ 8A1BE0C347814F482F493AEA619D57F6 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys
12:04:33.0722 5228 sscdmdfl - ok
12:04:33.0742 5228 [ 5AB0B1987F682A59B15B78F84C6AD7D0 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys
12:04:33.0742 5228 sscdmdm - ok
12:04:33.0782 5228 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:04:33.0792 5228 SSDPSRV - ok
12:04:33.0802 5228 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:04:33.0802 5228 SstpSvc - ok
12:04:33.0832 5228 Steam Client Service - ok
12:04:33.0872 5228 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:04:33.0872 5228 stexstor - ok
12:04:33.0922 5228 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
12:04:33.0932 5228 StiSvc - ok
12:04:33.0952 5228 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:04:33.0952 5228 swenum - ok
12:04:33.0982 5228 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
12:04:33.0992 5228 swprv - ok
12:04:34.0022 5228 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
12:04:34.0042 5228 SysMain - ok
12:04:34.0052 5228 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:04:34.0062 5228 TabletInputService - ok
12:04:34.0072 5228 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
12:04:34.0082 5228 TapiSrv - ok
12:04:34.0092 5228 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
12:04:34.0092 5228 TBS - ok
12:04:34.0142 5228 [ 56C198AC82EFA622DD93E9E43575F79C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:04:34.0152 5228 Tcpip - ok
12:04:34.0182 5228 [ 56C198AC82EFA622DD93E9E43575F79C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:04:34.0192 5228 TCPIP6 - ok
12:04:34.0202 5228 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:04:34.0202 5228 tcpipreg - ok
12:04:34.0212 5228 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:04:34.0212 5228 TDPIPE - ok
12:04:34.0232 5228 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:04:34.0232 5228 TDTCP - ok
12:04:34.0242 5228 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:04:34.0242 5228 tdx - ok
12:04:34.0252 5228 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:04:34.0252 5228 TermDD - ok
12:04:34.0282 5228 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
12:04:34.0282 5228 TermService - ok
12:04:34.0292 5228 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
12:04:34.0302 5228 Themes - ok
12:04:34.0302 5228 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
12:04:34.0312 5228 THREADORDER - ok
12:04:34.0312 5228 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
12:04:34.0312 5228 TrkWks - ok
12:04:34.0352 5228 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:04:34.0362 5228 TrustedInstaller - ok
12:04:34.0362 5228 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:04:34.0372 5228 tssecsrv - ok
12:04:34.0382 5228 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:04:34.0382 5228 tunnel - ok
12:04:34.0402 5228 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:04:34.0402 5228 uagp35 - ok
12:04:34.0412 5228 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:04:34.0412 5228 udfs - ok
12:04:34.0432 5228 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:04:34.0432 5228 UI0Detect - ok
12:04:34.0442 5228 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
12:04:34.0442 5228 uliagpkx - ok
12:04:34.0462 5228 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:04:34.0462 5228 umbus - ok
12:04:34.0472 5228 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:04:34.0492 5228 UmPass - ok
12:04:34.0532 5228 [ 6FDB1CA1ADD261F893C90738EBA37197 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
12:04:34.0552 5228 UNS - ok
12:04:34.0582 5228 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
12:04:34.0592 5228 upnphost - ok
12:04:34.0642 5228 [ 2436A42AAB4AD48A9B714E5B0F344627 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:04:34.0642 5228 usbaudio - ok
12:04:34.0692 5228 [ C31AE588E403042632DC796CF09E30B0 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:04:34.0692 5228 usbccgp - ok
12:04:34.0722 5228 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
12:04:34.0752 5228 usbcir - ok
12:04:34.0772 5228 [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:04:34.0772 5228 usbehci - ok
12:04:34.0782 5228 [ BDCD7156EC37448F08633FD899823620 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:04:34.0792 5228 usbhub - ok
12:04:34.0802 5228 [ EB2D819A639015253C871CDA09D91D58 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:04:34.0822 5228 usbohci - ok
12:04:34.0852 5228 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:04:34.0852 5228 usbprint - ok
12:04:34.0882 5228 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:04:34.0882 5228 usbscan - ok
12:04:34.0912 5228 [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:04:34.0912 5228 USBSTOR - ok
12:04:34.0922 5228 [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:04:34.0922 5228 usbuhci - ok
12:04:34.0952 5228 [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
12:04:34.0952 5228 usbvideo - ok
12:04:34.0972 5228 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
12:04:34.0972 5228 UxSms - ok
12:04:34.0982 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
12:04:34.0982 5228 VaultSvc - ok
12:04:35.0012 5228 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
12:04:35.0012 5228 vdrvroot - ok
12:04:35.0052 5228 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
12:04:35.0062 5228 vds - ok
12:04:35.0082 5228 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:04:35.0092 5228 vga - ok
12:04:35.0102 5228 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
12:04:35.0102 5228 VgaSave - ok
12:04:35.0122 5228 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
12:04:35.0122 5228 vhdmp - ok
12:04:35.0142 5228 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
12:04:35.0142 5228 viaagp - ok
12:04:35.0172 5228 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
12:04:35.0182 5228 ViaC7 - ok
12:04:35.0212 5228 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
12:04:35.0212 5228 viaide - ok
12:04:35.0232 5228 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
12:04:35.0232 5228 volmgr - ok
12:04:35.0272 5228 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:04:35.0272 5228 volmgrx - ok
12:04:35.0282 5228 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
12:04:35.0282 5228 volsnap - ok
12:04:35.0332 5228 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:04:35.0332 5228 vsmraid - ok
12:04:35.0402 5228 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
12:04:35.0412 5228 VSS - ok
12:04:35.0432 5228 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
12:04:35.0432 5228 vwifibus - ok
12:04:35.0442 5228 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
12:04:35.0452 5228 W32Time - ok
12:04:35.0472 5228 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:04:35.0502 5228 WacomPen - ok
12:04:35.0532 5228 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:04:35.0562 5228 WANARP - ok
12:04:35.0562 5228 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:04:35.0562 5228 Wanarpv6 - ok
12:04:35.0642 5228 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:04:35.0652 5228 WatAdminSvc - ok
12:04:35.0722 5228 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
12:04:35.0732 5228 wbengine - ok
12:04:35.0742 5228 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:04:35.0742 5228 WbioSrvc - ok
12:04:35.0782 5228 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:04:35.0782 5228 wcncsvc - ok
12:04:35.0792 5228 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:04:35.0792 5228 WcsPlugInService - ok
12:04:35.0802 5228 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:04:35.0802 5228 Wd - ok
12:04:35.0812 5228 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:04:35.0822 5228 Wdf01000 - ok
12:04:35.0832 5228 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:04:35.0832 5228 WdiServiceHost - ok
12:04:35.0832 5228 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:04:35.0832 5228 WdiSystemHost - ok
12:04:35.0882 5228 [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient C:\Windows\System32\webclnt.dll
12:04:35.0882 5228 WebClient - ok
12:04:35.0892 5228 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:04:35.0892 5228 Wecsvc - ok
12:04:35.0902 5228 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:04:35.0902 5228 wercplsupport - ok
12:04:35.0912 5228 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
12:04:35.0922 5228 WerSvc - ok
12:04:35.0922 5228 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:04:35.0922 5228 WfpLwf - ok
12:04:35.0942 5228 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:04:35.0942 5228 WIMMount - ok
12:04:36.0012 5228 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
12:04:36.0012 5228 WinDefend - ok
12:04:36.0022 5228 WinHttpAutoProxySvc - ok
12:04:36.0102 5228 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:04:36.0102 5228 Winmgmt - ok
12:04:36.0182 5228 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
12:04:36.0202 5228 WinRM - ok
12:04:36.0252 5228 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:04:36.0252 5228 WinUsb - ok
12:04:36.0312 5228 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:04:36.0322 5228 Wlansvc - ok
12:04:36.0452 5228 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:04:36.0472 5228 wlidsvc - ok
12:04:36.0482 5228 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
12:04:36.0492 5228 WmiAcpi - ok
12:04:36.0502 5228 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:04:36.0512 5228 wmiApSrv - ok
12:04:36.0552 5228 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
12:04:36.0572 5228 WMPNetworkSvc - ok
12:04:36.0602 5228 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:04:36.0602 5228 WPCSvc - ok
12:04:36.0632 5228 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:04:36.0632 5228 WPDBusEnum - ok
12:04:36.0682 5228 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:04:36.0682 5228 ws2ifsl - ok
12:04:36.0722 5228 [ A661A76333057B383A06E65F0073222F ] wscsvc C:\Windows\System32\wscsvc.dll
12:04:36.0732 5228 wscsvc - ok
12:04:36.0732 5228 WSearch - ok
12:04:36.0912 5228 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
12:04:36.0932 5228 wuauserv - ok
12:04:36.0942 5228 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:04:36.0942 5228 WudfPf - ok
12:04:36.0952 5228 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:04:36.0962 5228 WUDFRd - ok
12:04:36.0972 5228 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:04:36.0982 5228 wudfsvc - ok
12:04:36.0992 5228 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
12:04:36.0992 5228 WwanSvc - ok
12:04:37.0012 5228 ================ Scan global ===============================
12:04:37.0022 5228 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
12:04:37.0062 5228 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:04:37.0072 5228 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:04:37.0082 5228 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
12:04:37.0112 5228 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
12:04:37.0122 5228 [Global] - ok
12:04:37.0122 5228 ================ Scan MBR ==================================
12:04:37.0122 5228 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:04:37.0292 5228 \Device\Harddisk0\DR0 - ok
12:04:37.0292 5228 ================ Scan VBR ==================================
12:04:37.0302 5228 [ 0C16EB25A1523E0AAC21ED02D4ACAFCE ] \Device\Harddisk0\DR0\Partition1
12:04:37.0312 5228 \Device\Harddisk0\DR0\Partition1 - ok
12:04:37.0312 5228 [ 3A0CC01B2CEF289B819469F89F87B9DE ] \Device\Harddisk0\DR0\Partition2
12:04:37.0312 5228 \Device\Harddisk0\DR0\Partition2 - ok
12:04:37.0312 5228 ============================================================
12:04:37.0312 5228 Scan finished
12:04:37.0312 5228 ============================================================
12:04:37.0322 5220 Detected object count: 1
12:04:37.0322 5220 Actual detected object count: 1
12:04:42.0522 5220 sptd ( LockedFile.Multi.Generic ) - skipped by user
12:04:42.0522 5220 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
12:04:24.0682 5228 adpu320 - ok
12:04:24.0732 5228 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:04:24.0732 5228 AeLookupSvc - ok
12:04:24.0772 5228 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
12:04:24.0772 5228 AFD - ok
12:04:24.0792 5228 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
12:04:24.0792 5228 agp440 - ok
12:04:24.0802 5228 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
12:04:24.0812 5228 aic78xx - ok
12:04:24.0852 5228 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
12:04:24.0852 5228 ALG - ok
12:04:24.0862 5228 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
12:04:24.0882 5228 aliide - ok
12:04:24.0922 5228 [ B90A4332CF4C6580C845266A656DE4AB ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
12:04:24.0922 5228 AMD External Events Utility - ok
12:04:24.0932 5228 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
12:04:24.0942 5228 amdagp - ok
12:04:24.0942 5228 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
12:04:24.0942 5228 amdide - ok
12:04:24.0952 5228 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:04:24.0952 5228 AmdK8 - ok
12:04:25.0112 5228 [ 7844984A5E1E6F18D93AF9E9BCC65436 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
12:04:25.0142 5228 amdkmdag - ok
12:04:25.0182 5228 [ 202DEF509D76105B08741D36C3A7E4D7 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
12:04:25.0202 5228 amdkmdap - ok
12:04:25.0202 5228 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:04:25.0202 5228 AmdPPM - ok
12:04:25.0242 5228 [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:04:25.0242 5228 amdsata - ok
12:04:25.0272 5228 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:04:25.0272 5228 amdsbs - ok
12:04:25.0302 5228 [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:04:25.0302 5228 amdxata - ok
12:04:25.0312 5228 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
12:04:25.0312 5228 AppID - ok
12:04:25.0332 5228 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:04:25.0332 5228 AppIDSvc - ok
12:04:25.0342 5228 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
12:04:25.0342 5228 Appinfo - ok
12:04:25.0422 5228 [ 2E3E53A6AEF23E24F402C7855B9B1542 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:04:25.0422 5228 Apple Mobile Device - ok
12:04:25.0442 5228 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
12:04:25.0442 5228 arc - ok
12:04:25.0452 5228 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:04:25.0452 5228 arcsas - ok
12:04:25.0472 5228 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:04:25.0482 5228 AsyncMac - ok
12:04:25.0492 5228 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
12:04:25.0492 5228 atapi - ok
12:04:25.0522 5228 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
12:04:25.0522 5228 atksgt - ok
12:04:25.0542 5228 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:04:25.0542 5228 AudioEndpointBuilder - ok
12:04:25.0552 5228 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
12:04:25.0552 5228 Audiosrv - ok
12:04:25.0562 5228 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:04:25.0562 5228 AxInstSV - ok
12:04:25.0592 5228 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
12:04:25.0592 5228 b06bdrv - ok
12:04:25.0612 5228 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
12:04:25.0612 5228 b57nd60x - ok
12:04:25.0632 5228 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
12:04:25.0632 5228 BDESVC - ok
12:04:25.0642 5228 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
12:04:25.0652 5228 Beep - ok
12:04:25.0672 5228 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
12:04:25.0672 5228 BFE - ok
12:04:25.0692 5228 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
12:04:25.0692 5228 BITS - ok
12:04:25.0702 5228 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:04:25.0702 5228 blbdrive - ok
12:04:25.0762 5228 [ 5AB58C337AC65837FE404462AD6265AB ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:04:25.0772 5228 Bonjour Service - ok
12:04:25.0802 5228 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:04:25.0802 5228 bowser - ok
12:04:25.0822 5228 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:04:25.0822 5228 BrFiltLo - ok
12:04:25.0832 5228 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:04:25.0832 5228 BrFiltUp - ok
12:04:25.0852 5228 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
12:04:25.0852 5228 Browser - ok
12:04:25.0872 5228 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:04:25.0872 5228 Brserid - ok
12:04:25.0882 5228 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:04:25.0882 5228 BrSerWdm - ok
12:04:25.0902 5228 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:04:25.0902 5228 BrUsbMdm - ok
12:04:25.0922 5228 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:04:25.0922 5228 BrUsbSer - ok
12:04:25.0932 5228 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:04:25.0932 5228 BTHMODEM - ok
12:04:25.0952 5228 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
12:04:25.0952 5228 bthserv - ok
12:04:25.0962 5228 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:04:25.0962 5228 cdfs - ok
12:04:26.0002 5228 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:04:26.0042 5228 cdrom - ok
12:04:26.0062 5228 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
12:04:26.0062 5228 CertPropSvc - ok
12:04:26.0092 5228 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:04:26.0092 5228 circlass - ok
12:04:26.0112 5228 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
12:04:26.0122 5228 CLFS - ok
12:04:26.0202 5228 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:04:26.0202 5228 clr_optimization_v2.0.50727_32 - ok
12:04:26.0342 5228 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:04:26.0342 5228 clr_optimization_v4.0.30319_32 - ok
12:04:26.0352 5228 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:04:26.0352 5228 CmBatt - ok
12:04:26.0372 5228 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
12:04:26.0372 5228 cmdide - ok
12:04:26.0442 5228 [ 36C252E474B2FFA0F0FBBFF20D92A640 ] CNG C:\Windows\system32\Drivers\cng.sys
12:04:26.0442 5228 CNG - ok
12:04:26.0462 5228 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:04:26.0462 5228 Compbatt - ok
12:04:26.0482 5228 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
12:04:26.0482 5228 CompositeBus - ok
12:04:26.0492 5228 COMSysApp - ok
12:04:26.0502 5228 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:04:26.0502 5228 crcdisk - ok
12:04:26.0552 5228 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:04:26.0552 5228 CryptSvc - ok
12:04:26.0632 5228 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
12:04:26.0642 5228 DcomLaunch - ok
12:04:26.0662 5228 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
12:04:26.0662 5228 defragsvc - ok
12:04:26.0702 5228 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:04:26.0702 5228 DfsC - ok
12:04:26.0712 5228 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
12:04:26.0722 5228 Dhcp - ok
12:04:26.0732 5228 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
12:04:26.0732 5228 discache - ok
12:04:26.0742 5228 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:04:26.0742 5228 Disk - ok
12:04:26.0792 5228 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:04:26.0792 5228 Dnscache - ok
12:04:26.0812 5228 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
12:04:26.0812 5228 dot3svc - ok
12:04:26.0822 5228 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
12:04:26.0832 5228 DPS - ok
12:04:26.0842 5228 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:04:26.0842 5228 drmkaud - ok
12:04:26.0892 5228 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:04:26.0962 5228 DXGKrnl - ok
12:04:27.0002 5228 [ 341F236953B2ABBE8C9DBEFA1215ECD4 ] e1kexpress C:\Windows\system32\DRIVERS\e1k6232.sys
12:04:27.0002 5228 e1kexpress - ok
12:04:27.0032 5228 [ 04CBA07E73F152970FC34D66D3892E2A ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
12:04:27.0032 5228 eamonm - ok
12:04:27.0062 5228 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
12:04:27.0062 5228 EapHost - ok
12:04:27.0142 5228 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
12:04:27.0162 5228 ebdrv - ok
12:04:27.0202 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
12:04:27.0202 5228 EFS - ok
12:04:27.0222 5228 [ FE7824239D132AD9EBD8645FE1199B30 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
12:04:27.0232 5228 ehdrv - ok
12:04:27.0292 5228 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:04:27.0302 5228 ehRecvr - ok
12:04:27.0322 5228 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
12:04:27.0322 5228 ehSched - ok
12:04:27.0382 5228 [ 68D91A34CE51CF15C45DD68F7F1257E8 ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
12:04:27.0382 5228 EhttpSrv - ok
12:04:27.0412 5228 [ 191D8ECCC40F05B52FAC0513F35BA01D ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
12:04:27.0412 5228 ekrn - ok
12:04:27.0442 5228 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:04:27.0452 5228 elxstor - ok
12:04:27.0472 5228 [ 16EBD8BF1D5090923694CC972C7CE1B4 ] ENTECH C:\Windows\system32\DRIVERS\ENTECH.sys
12:04:27.0472 5228 ENTECH - ok
12:04:27.0502 5228 [ DDB45F6371714601A43E8BE38145BE18 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
12:04:27.0502 5228 epfwwfpr - ok
12:04:27.0512 5228 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
12:04:27.0512 5228 ErrDev - ok
12:04:27.0592 5228 [ 2407B8164E966755BC6A4242FC9DE31E ] esgiguard C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
12:04:27.0592 5228 esgiguard - ok
12:04:27.0642 5228 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
12:04:27.0642 5228 EventSystem - ok
12:04:27.0672 5228 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
12:04:27.0692 5228 exfat - ok
12:04:27.0732 5228 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:04:27.0762 5228 fastfat - ok
12:04:27.0792 5228 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
12:04:27.0802 5228 Fax - ok
12:04:27.0812 5228 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:04:27.0812 5228 fdc - ok
12:04:27.0822 5228 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
12:04:27.0822 5228 fdPHost - ok
12:04:27.0832 5228 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
12:04:27.0842 5228 FDResPub - ok
12:04:27.0852 5228 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:04:27.0852 5228 FileInfo - ok
12:04:27.0862 5228 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:04:27.0862 5228 Filetrace - ok
12:04:27.0872 5228 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:04:27.0872 5228 flpydisk - ok
12:04:27.0882 5228 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:04:27.0882 5228 FltMgr - ok
12:04:27.0932 5228 [ 7FE4995528A7529A761875151EE3D512 ] FontCache C:\Windows\system32\FntCache.dll
12:04:27.0942 5228 FontCache - ok
12:04:27.0992 5228 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:04:28.0002 5228 FontCache3.0.0.0 - ok
12:04:28.0012 5228 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:04:28.0012 5228 FsDepends - ok
12:04:28.0042 5228 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:04:28.0042 5228 Fs_Rec - ok
12:04:28.0072 5228 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:04:28.0072 5228 fvevol - ok
12:04:28.0102 5228 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:04:28.0102 5228 gagp30kx - ok
12:04:28.0152 5228 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:04:28.0152 5228 GEARAspiWDM - ok
12:04:28.0202 5228 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
12:04:28.0202 5228 giveio - ok
12:04:28.0242 5228 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
12:04:28.0242 5228 gpsvc - ok
12:04:28.0262 5228 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:04:28.0262 5228 hcw85cir - ok
12:04:28.0302 5228 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:04:28.0302 5228 HdAudAddService - ok
12:04:28.0312 5228 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:04:28.0312 5228 HDAudBus - ok
12:04:28.0342 5228 [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI C:\Windows\system32\DRIVERS\HECI.sys
12:04:28.0342 5228 HECI - ok
12:04:28.0362 5228 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:04:28.0362 5228 HidBatt - ok
12:04:28.0382 5228 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:04:28.0392 5228 HidBth - ok
12:04:28.0402 5228 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:04:28.0402 5228 HidIr - ok
12:04:28.0422 5228 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
12:04:28.0422 5228 hidserv - ok
12:04:28.0442 5228 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:04:28.0442 5228 HidUsb - ok
12:04:28.0462 5228 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:04:28.0462 5228 hkmsvc - ok
12:04:28.0482 5228 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:04:28.0482 5228 HomeGroupListener - ok
12:04:28.0492 5228 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:04:28.0502 5228 HomeGroupProvider - ok
12:04:28.0512 5228 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
12:04:28.0512 5228 HpSAMD - ok
12:04:28.0562 5228 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:04:28.0562 5228 HTTP - ok
12:04:28.0582 5228 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:04:28.0582 5228 hwpolicy - ok
12:04:28.0612 5228 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:04:28.0612 5228 i8042prt - ok
12:04:28.0662 5228 [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:04:28.0672 5228 iaStorV - ok
12:04:28.0792 5228 [ 86B750CC384F3A8B8C1D12F3188307AE ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
12:04:28.0792 5228 ICQ Service - ok
12:04:28.0882 5228 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:04:28.0892 5228 idsvc - ok
12:04:28.0912 5228 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:04:28.0912 5228 iirsp - ok
12:04:28.0952 5228 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
12:04:28.0952 5228 IKEEXT - ok
12:04:29.0042 5228 [ 1E12D06BA971B862C0A2255246EA9EA0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
12:04:29.0052 5228 IntcAzAudAddService - ok
12:04:29.0102 5228 [ 1A97E12E4037492CBF22F94D3A0CEBE9 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
12:04:29.0102 5228 Intel(R) PROSet Monitoring Service - ok
12:04:29.0112 5228 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
12:04:29.0112 5228 intelide - ok
12:04:29.0132 5228 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:04:29.0132 5228 intelppm - ok
12:04:29.0162 5228 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:04:29.0172 5228 IPBusEnum - ok
12:04:29.0182 5228 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:04:29.0182 5228 IpFilterDriver - ok
12:04:29.0202 5228 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:04:29.0212 5228 iphlpsvc - ok
12:04:29.0222 5228 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
12:04:29.0222 5228 IPMIDRV - ok
12:04:29.0232 5228 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:04:29.0232 5228 IPNAT - ok
12:04:29.0282 5228 [ 8F610078437A459948480407F4DB91EA ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:04:29.0282 5228 iPod Service - ok
12:04:29.0292 5228 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:04:29.0292 5228 IRENUM - ok
12:04:29.0302 5228 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
12:04:29.0302 5228 isapnp - ok
12:04:29.0312 5228 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
12:04:29.0312 5228 iScsiPrt - ok
12:04:29.0322 5228 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:04:29.0322 5228 kbdclass - ok
12:04:29.0332 5228 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:04:29.0332 5228 kbdhid - ok
12:04:29.0342 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
12:04:29.0342 5228 KeyIso - ok
12:04:29.0372 5228 [ 0263364ACB9C834ACE52FB85C2C064EC ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:04:29.0372 5228 KSecDD - ok
12:04:29.0392 5228 [ 27391DB553BE2A4E2B0ADEEA2873B2AF ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:04:29.0392 5228 KSecPkg - ok
12:04:29.0412 5228 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
12:04:29.0412 5228 KtmRm - ok
12:04:29.0452 5228 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
12:04:29.0452 5228 LanmanServer - ok
12:04:29.0482 5228 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:04:29.0482 5228 LanmanWorkstation - ok
12:04:29.0512 5228 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
12:04:29.0512 5228 lirsgt - ok
12:04:29.0542 5228 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:04:29.0572 5228 lltdio - ok
12:04:29.0622 5228 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:04:29.0622 5228 lltdsvc - ok
12:04:29.0662 5228 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
12:04:29.0672 5228 lmhosts - ok
12:04:29.0752 5228 [ 0B4F38AA22D5634C48EDB18FE257F005 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
12:04:29.0752 5228 LMS - ok
12:04:29.0772 5228 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:04:29.0772 5228 LSI_FC - ok
12:04:29.0892 5228 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:04:29.0892 5228 LSI_SAS - ok
12:04:29.0902 5228 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:04:29.0902 5228 LSI_SAS2 - ok
12:04:29.0902 5228 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:04:29.0932 5228 LSI_SCSI - ok
12:04:29.0932 5228 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
12:04:29.0932 5228 luafv - ok
12:04:30.0042 5228 [ 22A7776C5D8EB5930EDF9C8DD0884259 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
12:04:30.0042 5228 McComponentHostService - ok
12:04:30.0072 5228 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:04:30.0082 5228 Mcx2Svc - ok
12:04:30.0102 5228 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:04:30.0102 5228 megasas - ok
12:04:30.0122 5228 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:04:30.0152 5228 MegaSR - ok
12:04:30.0172 5228 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
12:04:30.0182 5228 MMCSS - ok
12:04:30.0182 5228 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
12:04:30.0202 5228 Modem - ok
12:04:30.0212 5228 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:04:30.0212 5228 monitor - ok
12:04:30.0212 5228 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:04:30.0212 5228 mouclass - ok
12:04:30.0222 5228 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:04:30.0222 5228 mouhid - ok
12:04:30.0232 5228 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:04:30.0232 5228 mountmgr - ok
12:04:30.0282 5228 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
12:04:30.0292 5228 MozillaMaintenance - ok
12:04:30.0302 5228 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
12:04:30.0302 5228 mpio - ok
12:04:30.0322 5228 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:04:30.0322 5228 mpsdrv - ok
12:04:30.0362 5228 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
12:04:30.0372 5228 MpsSvc - ok
12:04:30.0382 5228 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:04:30.0382 5228 MRxDAV - ok
12:04:30.0422 5228 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:04:30.0422 5228 mrxsmb - ok
12:04:30.0472 5228 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:04:30.0502 5228 mrxsmb10 - ok
12:04:30.0512 5228 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:04:30.0512 5228 mrxsmb20 - ok
12:04:30.0542 5228 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
12:04:30.0542 5228 msahci - ok
12:04:30.0552 5228 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
12:04:30.0562 5228 msdsm - ok
12:04:30.0622 5228 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
12:04:30.0622 5228 MSDTC - ok
12:04:30.0632 5228 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:04:30.0632 5228 Msfs - ok
12:04:30.0642 5228 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:04:30.0652 5228 mshidkmdf - ok
12:04:30.0662 5228 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
12:04:30.0662 5228 msisadrv - ok
12:04:30.0692 5228 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:04:30.0692 5228 MSiSCSI - ok
12:04:30.0692 5228 msiserver - ok
12:04:30.0702 5228 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:04:30.0702 5228 MSKSSRV - ok
12:04:30.0712 5228 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:04:30.0712 5228 MSPCLOCK - ok
12:04:30.0722 5228 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:04:30.0722 5228 MSPQM - ok
12:04:30.0732 5228 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:04:30.0732 5228 MsRPC - ok
12:04:30.0742 5228 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:04:30.0742 5228 mssmbios - ok
12:04:30.0752 5228 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:04:30.0752 5228 MSTEE - ok
12:04:30.0772 5228 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:04:30.0772 5228 MTConfig - ok
12:04:30.0782 5228 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
12:04:30.0782 5228 Mup - ok
12:04:30.0812 5228 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
12:04:30.0812 5228 napagent - ok
12:04:30.0832 5228 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:04:30.0832 5228 NativeWifiP - ok
12:04:30.0852 5228 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:04:30.0862 5228 NDIS - ok
12:04:30.0872 5228 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:04:30.0872 5228 NdisCap - ok
12:04:30.0882 5228 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:04:30.0882 5228 NdisTapi - ok
12:04:30.0892 5228 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:04:30.0892 5228 Ndisuio - ok
12:04:30.0902 5228 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:04:30.0902 5228 NdisWan - ok
12:04:30.0912 5228 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:04:30.0912 5228 NDProxy - ok
12:04:30.0932 5228 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:04:30.0932 5228 NetBIOS - ok
12:04:30.0962 5228 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:04:30.0982 5228 NetBT - ok
12:04:30.0992 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
12:04:30.0992 5228 Netlogon - ok
12:04:31.0052 5228 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
12:04:31.0062 5228 Netman - ok
12:04:31.0082 5228 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
12:04:31.0092 5228 netprofm - ok
12:04:31.0122 5228 [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:04:31.0122 5228 NetTcpPortSharing - ok
12:04:31.0162 5228 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:04:31.0162 5228 nfrd960 - ok
12:04:31.0182 5228 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
12:04:31.0192 5228 NlaSvc - ok
12:04:31.0212 5228 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:04:31.0242 5228 Npfs - ok
12:04:31.0242 5228 npggsvc - ok
12:04:31.0262 5228 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
12:04:31.0262 5228 nsi - ok
12:04:31.0272 5228 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:04:31.0272 5228 nsiproxy - ok
12:04:31.0352 5228 [ 187002CE05693C306F43C873F821381F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:04:31.0372 5228 Ntfs - ok
12:04:31.0402 5228 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
12:04:31.0402 5228 Null - ok
12:04:31.0452 5228 [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:04:31.0452 5228 nvraid - ok
12:04:31.0502 5228 [ 4520B63899E867F354EE012D34E11536 ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:04:31.0502 5228 nvstor - ok
12:04:31.0512 5228 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
12:04:31.0512 5228 nv_agp - ok
12:04:31.0522 5228 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
12:04:31.0522 5228 ohci1394 - ok
12:04:31.0542 5228 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:04:31.0552 5228 p2pimsvc - ok
12:04:31.0572 5228 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
12:04:31.0582 5228 p2psvc - ok
12:04:31.0592 5228 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:04:31.0592 5228 Parport - ok
12:04:31.0602 5228 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:04:31.0602 5228 partmgr - ok
12:04:31.0612 5228 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
12:04:31.0612 5228 Parvdm - ok
12:04:31.0622 5228 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:04:31.0632 5228 PcaSvc - ok
12:04:31.0642 5228 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
12:04:31.0642 5228 pci - ok
12:04:31.0652 5228 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
12:04:31.0652 5228 pciide - ok
12:04:31.0682 5228 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:04:31.0682 5228 pcmcia - ok
12:04:31.0692 5228 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
12:04:31.0692 5228 pcw - ok
12:04:31.0712 5228 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:04:31.0712 5228 PEAUTH - ok
12:04:31.0762 5228 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
12:04:31.0772 5228 pla - ok
12:04:31.0812 5228 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:04:31.0822 5228 PlugPlay - ok
12:04:31.0862 5228 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
12:04:31.0862 5228 PnkBstrA - ok
12:04:31.0872 5228 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:04:31.0882 5228 PNRPAutoReg - ok
12:04:31.0892 5228 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:04:31.0902 5228 PNRPsvc - ok
12:04:31.0922 5228 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:04:31.0922 5228 PolicyAgent - ok
12:04:31.0952 5228 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
12:04:31.0952 5228 Power - ok
12:04:31.0962 5228 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:04:31.0962 5228 PptpMiniport - ok
12:04:31.0982 5228 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:04:31.0982 5228 Processor - ok
12:04:32.0002 5228 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
12:04:32.0002 5228 ProfSvc - ok
12:04:32.0012 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:04:32.0012 5228 ProtectedStorage - ok
12:04:32.0032 5228 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:04:32.0032 5228 Psched - ok
12:04:32.0082 5228 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:04:32.0102 5228 ql2300 - ok
12:04:32.0112 5228 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:04:32.0112 5228 ql40xx - ok
12:04:32.0122 5228 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
12:04:32.0122 5228 QWAVE - ok
12:04:32.0132 5228 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:04:32.0132 5228 QWAVEdrv - ok
12:04:32.0142 5228 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:04:32.0142 5228 RasAcd - ok
12:04:32.0162 5228 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:04:32.0162 5228 RasAgileVpn - ok
12:04:32.0172 5228 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
12:04:32.0172 5228 RasAuto - ok
12:04:32.0182 5228 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:04:32.0182 5228 Rasl2tp - ok
12:04:32.0192 5228 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
12:04:32.0192 5228 RasMan - ok
12:04:32.0202 5228 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:04:32.0202 5228 RasPppoe - ok
12:04:32.0212 5228 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:04:32.0212 5228 RasSstp - ok
12:04:32.0242 5228 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:04:32.0242 5228 rdbss - ok
12:04:32.0252 5228 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:04:32.0252 5228 rdpbus - ok
12:04:32.0262 5228 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:04:32.0262 5228 RDPCDD - ok
12:04:32.0272 5228 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:04:32.0282 5228 RDPENCDD - ok
12:04:32.0282 5228 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:04:32.0282 5228 RDPREFMP - ok
12:04:32.0322 5228 [ 0399C725A9C95A6F1862B93F008DDF4A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:04:32.0352 5228 RDPWD - ok
12:04:32.0382 5228 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:04:32.0382 5228 rdyboost - ok
12:04:32.0402 5228 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
12:04:32.0402 5228 RemoteAccess - ok
12:04:32.0432 5228 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:04:32.0432 5228 RemoteRegistry - ok
12:04:32.0452 5228 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:04:32.0452 5228 RpcEptMapper - ok
12:04:32.0472 5228 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
12:04:32.0472 5228 RpcLocator - ok
12:04:32.0492 5228 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
12:04:32.0492 5228 RpcSs - ok
12:04:32.0512 5228 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:04:32.0512 5228 rspndr - ok
12:04:32.0522 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
12:04:32.0532 5228 SamSs - ok
12:04:32.0532 5228 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
12:04:32.0532 5228 sbp2port - ok
12:04:32.0582 5228 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
12:04:32.0592 5228 SBSDWSCService - ok
12:04:32.0612 5228 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:04:32.0622 5228 SCardSvr - ok
12:04:32.0652 5228 [ 20B2751CD4C8F3FD989739CA661B9F30 ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
12:04:32.0652 5228 SCDEmu - ok
12:04:32.0662 5228 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:04:32.0662 5228 scfilter - ok
12:04:32.0722 5228 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
12:04:32.0732 5228 Schedule - ok
12:04:32.0742 5228 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:04:32.0742 5228 SCPolicySvc - ok
12:04:32.0762 5228 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:04:32.0772 5228 SDRSVC - ok
12:04:32.0782 5228 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:04:32.0782 5228 secdrv - ok
12:04:32.0792 5228 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
12:04:32.0792 5228 seclogon - ok
12:04:32.0802 5228 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
12:04:32.0802 5228 SENS - ok
12:04:32.0812 5228 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:04:32.0812 5228 SensrSvc - ok
12:04:32.0822 5228 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:04:32.0822 5228 Serenum - ok
12:04:32.0832 5228 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:04:32.0832 5228 Serial - ok
12:04:32.0842 5228 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:04:32.0842 5228 sermouse - ok
12:04:32.0872 5228 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
12:04:32.0872 5228 SessionEnv - ok
12:04:32.0882 5228 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
12:04:32.0882 5228 sffdisk - ok
12:04:32.0882 5228 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
12:04:32.0882 5228 sffp_mmc - ok
12:04:32.0892 5228 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
12:04:32.0892 5228 sffp_sd - ok
12:04:32.0902 5228 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:04:32.0902 5228 sfloppy - ok
12:04:32.0912 5228 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:04:32.0912 5228 SharedAccess - ok
12:04:32.0942 5228 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:04:32.0942 5228 ShellHWDetection - ok
12:04:32.0952 5228 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
12:04:32.0952 5228 sisagp - ok
12:04:32.0962 5228 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:04:32.0962 5228 SiSRaid2 - ok
12:04:32.0972 5228 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:04:32.0972 5228 SiSRaid4 - ok
12:04:33.0032 5228 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:04:33.0032 5228 SkypeUpdate - ok
12:04:33.0092 5228 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:04:33.0122 5228 Smb - ok
12:04:33.0152 5228 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:04:33.0152 5228 SNMPTRAP - ok
12:04:33.0192 5228 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\Windows\system32\speedfan.sys
12:04:33.0192 5228 speedfan - ok
12:04:33.0202 5228 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
12:04:33.0202 5228 spldr - ok
12:04:33.0242 5228 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
12:04:33.0252 5228 Spooler - ok
12:04:33.0302 5228 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
12:04:33.0322 5228 sppsvc - ok
12:04:33.0342 5228 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:04:33.0342 5228 sppuinotify - ok
12:04:33.0432 5228 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
12:04:33.0432 5228 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
12:04:33.0442 5228 sptd ( LockedFile.Multi.Generic ) - warning
12:04:33.0442 5228 sptd - detected LockedFile.Multi.Generic (1)
12:04:33.0532 5228 [ F9EC94E35F5019A8E82665E1EF4B4D02 ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
12:04:33.0542 5228 SpyHunter 4 Service - ok
12:04:33.0612 5228 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:04:33.0622 5228 srv - ok
12:04:33.0642 5228 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:04:33.0652 5228 srv2 - ok
12:04:33.0672 5228 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:04:33.0672 5228 srvnet - ok
12:04:33.0712 5228 [ D5DFFEAA1E15D4EFFABB9D9A3068AC5B ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys
12:04:33.0712 5228 sscdbus - ok
12:04:33.0722 5228 [ 8A1BE0C347814F482F493AEA619D57F6 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys
12:04:33.0722 5228 sscdmdfl - ok
12:04:33.0742 5228 [ 5AB0B1987F682A59B15B78F84C6AD7D0 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys
12:04:33.0742 5228 sscdmdm - ok
12:04:33.0782 5228 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:04:33.0792 5228 SSDPSRV - ok
12:04:33.0802 5228 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:04:33.0802 5228 SstpSvc - ok
12:04:33.0832 5228 Steam Client Service - ok
12:04:33.0872 5228 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:04:33.0872 5228 stexstor - ok
12:04:33.0922 5228 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
12:04:33.0932 5228 StiSvc - ok
12:04:33.0952 5228 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:04:33.0952 5228 swenum - ok
12:04:33.0982 5228 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
12:04:33.0992 5228 swprv - ok
12:04:34.0022 5228 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
12:04:34.0042 5228 SysMain - ok
12:04:34.0052 5228 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:04:34.0062 5228 TabletInputService - ok
12:04:34.0072 5228 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
12:04:34.0082 5228 TapiSrv - ok
12:04:34.0092 5228 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
12:04:34.0092 5228 TBS - ok
12:04:34.0142 5228 [ 56C198AC82EFA622DD93E9E43575F79C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:04:34.0152 5228 Tcpip - ok
12:04:34.0182 5228 [ 56C198AC82EFA622DD93E9E43575F79C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:04:34.0192 5228 TCPIP6 - ok
12:04:34.0202 5228 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:04:34.0202 5228 tcpipreg - ok
12:04:34.0212 5228 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:04:34.0212 5228 TDPIPE - ok
12:04:34.0232 5228 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:04:34.0232 5228 TDTCP - ok
12:04:34.0242 5228 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:04:34.0242 5228 tdx - ok
12:04:34.0252 5228 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:04:34.0252 5228 TermDD - ok
12:04:34.0282 5228 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
12:04:34.0282 5228 TermService - ok
12:04:34.0292 5228 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
12:04:34.0302 5228 Themes - ok
12:04:34.0302 5228 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
12:04:34.0312 5228 THREADORDER - ok
12:04:34.0312 5228 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
12:04:34.0312 5228 TrkWks - ok
12:04:34.0352 5228 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:04:34.0362 5228 TrustedInstaller - ok
12:04:34.0362 5228 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:04:34.0372 5228 tssecsrv - ok
12:04:34.0382 5228 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:04:34.0382 5228 tunnel - ok
12:04:34.0402 5228 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:04:34.0402 5228 uagp35 - ok
12:04:34.0412 5228 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:04:34.0412 5228 udfs - ok
12:04:34.0432 5228 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:04:34.0432 5228 UI0Detect - ok
12:04:34.0442 5228 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
12:04:34.0442 5228 uliagpkx - ok
12:04:34.0462 5228 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:04:34.0462 5228 umbus - ok
12:04:34.0472 5228 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:04:34.0492 5228 UmPass - ok
12:04:34.0532 5228 [ 6FDB1CA1ADD261F893C90738EBA37197 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
12:04:34.0552 5228 UNS - ok
12:04:34.0582 5228 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
12:04:34.0592 5228 upnphost - ok
12:04:34.0642 5228 [ 2436A42AAB4AD48A9B714E5B0F344627 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:04:34.0642 5228 usbaudio - ok
12:04:34.0692 5228 [ C31AE588E403042632DC796CF09E30B0 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:04:34.0692 5228 usbccgp - ok
12:04:34.0722 5228 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
12:04:34.0752 5228 usbcir - ok
12:04:34.0772 5228 [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:04:34.0772 5228 usbehci - ok
12:04:34.0782 5228 [ BDCD7156EC37448F08633FD899823620 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:04:34.0792 5228 usbhub - ok
12:04:34.0802 5228 [ EB2D819A639015253C871CDA09D91D58 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:04:34.0822 5228 usbohci - ok
12:04:34.0852 5228 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:04:34.0852 5228 usbprint - ok
12:04:34.0882 5228 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:04:34.0882 5228 usbscan - ok
12:04:34.0912 5228 [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:04:34.0912 5228 USBSTOR - ok
12:04:34.0922 5228 [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:04:34.0922 5228 usbuhci - ok
12:04:34.0952 5228 [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
12:04:34.0952 5228 usbvideo - ok
12:04:34.0972 5228 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
12:04:34.0972 5228 UxSms - ok
12:04:34.0982 5228 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
12:04:34.0982 5228 VaultSvc - ok
12:04:35.0012 5228 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
12:04:35.0012 5228 vdrvroot - ok
12:04:35.0052 5228 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
12:04:35.0062 5228 vds - ok
12:04:35.0082 5228 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:04:35.0092 5228 vga - ok
12:04:35.0102 5228 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
12:04:35.0102 5228 VgaSave - ok
12:04:35.0122 5228 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
12:04:35.0122 5228 vhdmp - ok
12:04:35.0142 5228 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
12:04:35.0142 5228 viaagp - ok
12:04:35.0172 5228 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
12:04:35.0182 5228 ViaC7 - ok
12:04:35.0212 5228 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
12:04:35.0212 5228 viaide - ok
12:04:35.0232 5228 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
12:04:35.0232 5228 volmgr - ok
12:04:35.0272 5228 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:04:35.0272 5228 volmgrx - ok
12:04:35.0282 5228 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
12:04:35.0282 5228 volsnap - ok
12:04:35.0332 5228 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:04:35.0332 5228 vsmraid - ok
12:04:35.0402 5228 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
12:04:35.0412 5228 VSS - ok
12:04:35.0432 5228 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
12:04:35.0432 5228 vwifibus - ok
12:04:35.0442 5228 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
12:04:35.0452 5228 W32Time - ok
12:04:35.0472 5228 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:04:35.0502 5228 WacomPen - ok
12:04:35.0532 5228 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:04:35.0562 5228 WANARP - ok
12:04:35.0562 5228 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:04:35.0562 5228 Wanarpv6 - ok
12:04:35.0642 5228 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:04:35.0652 5228 WatAdminSvc - ok
12:04:35.0722 5228 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
12:04:35.0732 5228 wbengine - ok
12:04:35.0742 5228 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:04:35.0742 5228 WbioSrvc - ok
12:04:35.0782 5228 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:04:35.0782 5228 wcncsvc - ok
12:04:35.0792 5228 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:04:35.0792 5228 WcsPlugInService - ok
12:04:35.0802 5228 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:04:35.0802 5228 Wd - ok
12:04:35.0812 5228 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:04:35.0822 5228 Wdf01000 - ok
12:04:35.0832 5228 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:04:35.0832 5228 WdiServiceHost - ok
12:04:35.0832 5228 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:04:35.0832 5228 WdiSystemHost - ok
12:04:35.0882 5228 [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient C:\Windows\System32\webclnt.dll
12:04:35.0882 5228 WebClient - ok
12:04:35.0892 5228 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:04:35.0892 5228 Wecsvc - ok
12:04:35.0902 5228 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:04:35.0902 5228 wercplsupport - ok
12:04:35.0912 5228 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
12:04:35.0922 5228 WerSvc - ok
12:04:35.0922 5228 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:04:35.0922 5228 WfpLwf - ok
12:04:35.0942 5228 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:04:35.0942 5228 WIMMount - ok
12:04:36.0012 5228 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
12:04:36.0012 5228 WinDefend - ok
12:04:36.0022 5228 WinHttpAutoProxySvc - ok
12:04:36.0102 5228 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:04:36.0102 5228 Winmgmt - ok
12:04:36.0182 5228 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
12:04:36.0202 5228 WinRM - ok
12:04:36.0252 5228 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:04:36.0252 5228 WinUsb - ok
12:04:36.0312 5228 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:04:36.0322 5228 Wlansvc - ok
12:04:36.0452 5228 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:04:36.0472 5228 wlidsvc - ok
12:04:36.0482 5228 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
12:04:36.0492 5228 WmiAcpi - ok
12:04:36.0502 5228 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:04:36.0512 5228 wmiApSrv - ok
12:04:36.0552 5228 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
12:04:36.0572 5228 WMPNetworkSvc - ok
12:04:36.0602 5228 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:04:36.0602 5228 WPCSvc - ok
12:04:36.0632 5228 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:04:36.0632 5228 WPDBusEnum - ok
12:04:36.0682 5228 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:04:36.0682 5228 ws2ifsl - ok
12:04:36.0722 5228 [ A661A76333057B383A06E65F0073222F ] wscsvc C:\Windows\System32\wscsvc.dll
12:04:36.0732 5228 wscsvc - ok
12:04:36.0732 5228 WSearch - ok
12:04:36.0912 5228 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
12:04:36.0932 5228 wuauserv - ok
12:04:36.0942 5228 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:04:36.0942 5228 WudfPf - ok
12:04:36.0952 5228 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:04:36.0962 5228 WUDFRd - ok
12:04:36.0972 5228 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:04:36.0982 5228 wudfsvc - ok
12:04:36.0992 5228 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
12:04:36.0992 5228 WwanSvc - ok
12:04:37.0012 5228 ================ Scan global ===============================
12:04:37.0022 5228 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
12:04:37.0062 5228 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:04:37.0072 5228 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
12:04:37.0082 5228 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
12:04:37.0112 5228 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
12:04:37.0122 5228 [Global] - ok
12:04:37.0122 5228 ================ Scan MBR ==================================
12:04:37.0122 5228 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:04:37.0292 5228 \Device\Harddisk0\DR0 - ok
12:04:37.0292 5228 ================ Scan VBR ==================================
12:04:37.0302 5228 [ 0C16EB25A1523E0AAC21ED02D4ACAFCE ] \Device\Harddisk0\DR0\Partition1
12:04:37.0312 5228 \Device\Harddisk0\DR0\Partition1 - ok
12:04:37.0312 5228 [ 3A0CC01B2CEF289B819469F89F87B9DE ] \Device\Harddisk0\DR0\Partition2
12:04:37.0312 5228 \Device\Harddisk0\DR0\Partition2 - ok
12:04:37.0312 5228 ============================================================
12:04:37.0312 5228 Scan finished
12:04:37.0312 5228 ============================================================
12:04:37.0322 5220 Detected object count: 1
12:04:37.0322 5220 Actual detected object count: 1
12:04:42.0522 5220 sptd ( LockedFile.Multi.Generic ) - skipped by user
12:04:42.0522 5220 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
Re: Win32/Olmarik TDL4
Presun ComboFix
na plochu (ak tam este nie je)
otvor si Poznamkovy blok - notepad
do neho zkopiruj skript z nasledujiceho okna:
uloz vytvoreny textovy soubor ako CFScript.txt na plochu
po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:
po aplikacii by mal vzniknut dalsi log, ten vloz sem
na plochu (ak tam este nie je)
otvor si Poznamkovy blok - notepad
do neho zkopiruj skript z nasledujiceho okna:
Kód: Vybrat vše
Registry::
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""NVIDIA driver monitor"=-
"Hpoiop"=-
"KYQ8ZBOAXR"=-
po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:
po aplikacii by mal vzniknut dalsi log, ten vloz sem
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Win32/Olmarik TDL4
ComboFix 12-09-27.03 - User 28.09.2012 12:36:30.2.4 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3005.2088 [GMT 2:00]
Spuštěný z: c:\users\User\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\User\Desktop\CFScript.txt
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-28 do 2012-09-28 )))))))))))))))))))))))))))))))
.
.
2012-09-28 10:42 . 2012-09-28 10:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-28 10:25 . 2012-09-28 10:42 -------- d-----w- c:\users\User\AppData\Local\temp
2012-09-28 09:59 . 2012-09-28 09:59 -------- d-----w- C:\TDSSKiller_Quarantine
2012-09-28 09:58 . 2012-09-28 10:01 -------- d-----w- c:\program files\trend micro
2012-09-28 09:58 . 2012-09-28 09:58 -------- d-----w- C:\rsit
2012-09-14 19:35 . 2012-09-14 19:35 -------- d-----w- c:\programdata\McAfee Security Scan
2012-09-14 19:35 . 2012-09-14 20:12 -------- d-----w- c:\program files\McAfee Security Scan
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 01:41 . 2012-04-06 09:06 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-21 01:41 . 2011-05-28 10:30 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-16 08:07 . 2011-09-10 11:33 139112 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-09-16 08:06 . 2011-09-10 11:34 280792 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-09-16 08:06 . 2011-09-10 11:32 280792 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-09-16 08:06 . 2011-09-10 11:32 280856 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-08-08 18:51 . 2011-09-10 11:32 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconF7A21AF7.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconD7F16134.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconCF33A0CE.exe
2012-07-14 22:24 . 2012-07-14 22:24 476976 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-07-14 22:24 . 2011-10-30 11:07 472880 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-08 10:30 . 2012-09-08 10:30 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2012-02-19 130864]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2012-02-19 12:46 1337648 ----a-r- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-02-19 1337648]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-02-19 1337648]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2012-08-31 1353080]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-09-16 7739936]
"IMSS"="c:\program files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2009-10-01 111640]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2012-02-16 114992]
"Sweetpacks Communicator"="c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-02-26 295728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.207\McCHSvc.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k6232.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 73251645
*NewlyCreated* - 85280058
*Deregistered* - 73251645
*Deregistered* - 85280058
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 01:41]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default\
FF - prefs.js: network.proxy.type - 0
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-57930202-2179328788-383702926-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:9e,5c,f0,37,bd,0d,8f,6f,ac,dc,f1,01,b8,00,65,8b,04,12,da,db,f3,2f,14,
ed,01,d0,f0,fe,18,7a,80,d1,8d,f7,72,96,eb,f4,19,99,e2,55,9d,06,4e,76,26,b2,\
"??"=hex:a5,1f,9a,1f,9e,28,e7,40,68,89,c6,de,19,13,93,7a
.
[HKEY_USERS\S-1-5-21-57930202-2179328788-383702926-1000\Software\SecuROM\License information*]
"datasecu"=hex:6a,3d,00,09,40,73,5f,1d,f0,14,08,9a,be,48,ca,3f,0c,9c,d1,b2,fc,
fa,fd,c0,c5,94,05,6b,12,bd,3c,ae,3a,38,ad,c7,06,51,3b,d5,f5,ab,3e,6e,28,b3,\
"rkeysecu"=hex:47,bb,b6,b5,15,4a,63,e0,41,05,b1,b8,b0,11,bf,31
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-09-28 12:44:14
ComboFix-quarantined-files.txt 2012-09-28 10:44
ComboFix2.txt 2012-09-28 10:25
.
Před spuštěním: Volných bajtů: 169 996 996 608
Po spuštění: Volných bajtů: 169 955 708 928
.
- - End Of File - - D002F0BF62C9354485A8C549C33C6C5D
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3005.2088 [GMT 2:00]
Spuštěný z: c:\users\User\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\User\Desktop\CFScript.txt
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-28 do 2012-09-28 )))))))))))))))))))))))))))))))
.
.
2012-09-28 10:42 . 2012-09-28 10:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-28 10:25 . 2012-09-28 10:42 -------- d-----w- c:\users\User\AppData\Local\temp
2012-09-28 09:59 . 2012-09-28 09:59 -------- d-----w- C:\TDSSKiller_Quarantine
2012-09-28 09:58 . 2012-09-28 10:01 -------- d-----w- c:\program files\trend micro
2012-09-28 09:58 . 2012-09-28 09:58 -------- d-----w- C:\rsit
2012-09-14 19:35 . 2012-09-14 19:35 -------- d-----w- c:\programdata\McAfee Security Scan
2012-09-14 19:35 . 2012-09-14 20:12 -------- d-----w- c:\program files\McAfee Security Scan
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 01:41 . 2012-04-06 09:06 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-21 01:41 . 2011-05-28 10:30 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-16 08:07 . 2011-09-10 11:33 139112 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-09-16 08:06 . 2011-09-10 11:34 280792 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-09-16 08:06 . 2011-09-10 11:32 280792 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-09-16 08:06 . 2011-09-10 11:32 280856 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-08-08 18:51 . 2011-09-10 11:32 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconF7A21AF7.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconD7F16134.exe
2012-07-30 17:21 . 2012-07-30 17:21 110080 ----a-r- c:\users\User\AppData\Roaming\Microsoft\Installer\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}\IconCF33A0CE.exe
2012-07-14 22:24 . 2012-07-14 22:24 476976 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-07-14 22:24 . 2011-10-30 11:07 472880 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-08 10:30 . 2012-09-08 10:30 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2012-02-19 130864]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2012-02-19 12:46 1337648 ----a-r- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-02-19 1337648]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-02-19 1337648]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2012-08-31 1353080]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-09-16 7739936]
"IMSS"="c:\program files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2009-10-01 111640]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2012-02-16 114992]
"Sweetpacks Communicator"="c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-02-26 295728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.207\McCHSvc.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k6232.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 73251645
*NewlyCreated* - 85280058
*Deregistered* - 73251645
*Deregistered* - 85280058
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 01:41]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\xuka3jgl.default\
FF - prefs.js: network.proxy.type - 0
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-57930202-2179328788-383702926-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:9e,5c,f0,37,bd,0d,8f,6f,ac,dc,f1,01,b8,00,65,8b,04,12,da,db,f3,2f,14,
ed,01,d0,f0,fe,18,7a,80,d1,8d,f7,72,96,eb,f4,19,99,e2,55,9d,06,4e,76,26,b2,\
"??"=hex:a5,1f,9a,1f,9e,28,e7,40,68,89,c6,de,19,13,93,7a
.
[HKEY_USERS\S-1-5-21-57930202-2179328788-383702926-1000\Software\SecuROM\License information*]
"datasecu"=hex:6a,3d,00,09,40,73,5f,1d,f0,14,08,9a,be,48,ca,3f,0c,9c,d1,b2,fc,
fa,fd,c0,c5,94,05,6b,12,bd,3c,ae,3a,38,ad,c7,06,51,3b,d5,f5,ab,3e,6e,28,b3,\
"rkeysecu"=hex:47,bb,b6,b5,15,4a,63,e0,41,05,b1,b8,b0,11,bf,31
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-09-28 12:44:14
ComboFix-quarantined-files.txt 2012-09-28 10:44
ComboFix2.txt 2012-09-28 10:25
.
Před spuštěním: Volných bajtů: 169 996 996 608
Po spuštění: Volných bajtů: 169 955 708 928
.
- - End Of File - - D002F0BF62C9354485A8C549C33C6C5D
Re: Win32/Olmarik TDL4
odinstaluj SpyBot a prescanuj PC s NOD-om
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Win32/Olmarik TDL4
OK, teď to projíždím a pak dám vědět. Děkuji za pomoc 
Re: Win32/Olmarik TDL4
najdene potvory by uz mali ist zmazat
nemas zac
nemas zac
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Win32/Olmarik TDL4
Scan !NIC! nenašel, znamená to že jsme zvítězili? 
Re: Win32/Olmarik TDL4
Mockrát DĚKUJI, za vyřešení mého problému, podařilo se nainstalovat i všechny aktualizace a nod už nic neukazuje.
Takže to považuji za
Takže to považuji za
Re: Win32/Olmarik TDL4
Za kolegu není zač, zde
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Přispějete na provoz fóra?