bitcoin - miner

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
boss382
2. Stupeň Varování
Příspěvky: 86
Registrován: 03 Ún 2011 15:55

bitcoin - miner

#1 Příspěvek od boss382 »

zdravím, dneska som si všimol obrovšký pokles rýchlosti počítača tak som sa pozrel do spravcu a našiel som tam 2x "bitcoin - miner" využivaju cca 70 - 80 % CPU dal som ich zastaviť a už ide normalne ako ho mam prosim vás odstraniť.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: bitcoin - miner

#2 Příspěvek od JaRon »

ahoj,
vloz log RSIT - pozrieme :James008:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
boss382
2. Stupeň Varování
Příspěvky: 86
Registrován: 03 Ún 2011 15:55

Re: bitcoin - miner

#3 Příspěvek od boss382 »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Tibor at 2013-01-28 14:09:36
Microsoft Windows 8 Pro
System drive C: has 281 GB (61%) free of 464 GB
Total RAM: 2551 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:09:40, on 28.1.2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhostex.exe
C:\Windows\system32\rundll32.exe
C:\Windows\Explorer.EXE
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x86__8wekyb3d8bbwe\LiveComm.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Garena Plus\GarenaMessenger.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\Taskmgr.exe
C:\Program Files\Internet Explorer\IELowutil.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Opera\opera.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Tibor\Desktop\RSIT.exe
C:\Program Files\trend micro\Tibor.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [GarenaPlus] "C:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Nero] C:\Users\Tibor\AppData\Ncts.exe
O4 - HKCU\..\Run: [Microsoft Windows Service] C:\Users\Tibor\6438640620394286720310355\winsvc.exe
O4 - HKCU\..\Run: [pdoubrhgfjkxeiqndts] C:\Users\Tibor\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
O4 - HKCU\..\Run: [Hewlett-Packard] C:\Users\Tibor\AppData\Roaming\C1DA18\C1DA18.exe
O4 - HKCU\..\Run: [HotKeysCmds] C:\Users\Tibor\AppData\Local\Temp\342B.EXE
O4 - HKCU\..\Run: [uchwcrmxwvqotpocurb] C:\Users\Tibor\AppData\Roaming\uchwcrmxwvqotpocurb.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 4895 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Tibor\AppData\Roaming\Mozilla\Firefox\Profiles\azsl1cjw.default

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-26 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-26 170416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2009-12-19 500208]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2012-12-09 336992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files\Steam\steam.exe [2012-12-26 1354736]
"GarenaPlus"=C:\Program Files\Garena Plus\GarenaMessenger.exe [2013-01-16 9398576]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-01-08 18705664]
"Nero"=C:\Users\Tibor\AppData\Ncts.exe [2013-01-12 466432]
"Microsoft Windows Service"=C:\Users\Tibor\6438640620394286720310355\winsvc.exe [2013-01-28 82944]
"pdoubrhgfjkxeiqndts"=C:\Users\Tibor\AppData\Roaming\pdoubrhgfjkxeiqndts.exe [2013-01-28 684032]
"Hewlett-Packard"=C:\Users\Tibor\AppData\Roaming\C1DA18\C1DA18.exe [2012-07-26 33280]
"HotKeysCmds"=C:\Users\Tibor\AppData\Local\Temp\342B.EXE []
"uchwcrmxwvqotpocurb"=C:\Users\Tibor\AppData\Roaming\uchwcrmxwvqotpocurb.exe [2013-01-28 684032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"vidc.cvid"=iccvid.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-28 14:09:36 ----D---- C:\Program Files\trend micro
2013-01-28 14:07:19 ----A---- C:\Windows\system32\drivers\rzhytdgb.sys
2013-01-28 14:06:43 ----A---- C:\Users\Tibor\AppData\Roaming\uchwcrmxwvqotpocurb.exe
2013-01-28 14:04:57 ----D---- C:\Windows\Minidump
2013-01-28 14:02:10 ----A---- C:\Windows\system32\netcfg-20058718.txt
2013-01-28 14:02:10 ----A---- C:\Windows\system32\netcfg-20058359.txt
2013-01-28 11:30:31 ----A---- C:\Windows\system32\netcfg-10959046.txt
2013-01-28 11:30:31 ----A---- C:\Windows\system32\netcfg-10958890.txt
2013-01-28 08:28:18 ----A---- C:\Windows\system32\netcfg-26078.txt
2013-01-28 08:27:30 ----A---- C:\Windows\system32\netcfg-1453031.txt
2013-01-28 08:26:48 ----A---- C:\Windows\system32\netcfg-1411687.txt
2013-01-28 08:26:48 ----A---- C:\Windows\system32\netcfg-1411625.txt
2013-01-28 08:03:53 ----A---- C:\Windows\system32\netcfg-35921.txt
2013-01-28 08:02:52 ----A---- C:\Windows\system32\netcfg-769125906.txt
2013-01-28 07:57:18 ----A---- C:\Users\Tibor\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
2013-01-28 07:45:35 ----A---- C:\Windows\system32\netcfg-768088140.txt
2013-01-28 07:45:34 ----A---- C:\Windows\system32\netcfg-768087781.txt
2013-01-27 18:50:03 ----A---- C:\Windows\system32\netcfg-721556593.txt
2013-01-27 18:50:03 ----A---- C:\Windows\system32\netcfg-721556437.txt
2013-01-27 15:58:26 ----A---- C:\Windows\system32\netcfg-711259812.txt
2013-01-27 15:58:26 ----A---- C:\Windows\system32\netcfg-711259765.txt
2013-01-27 14:37:21 ----D---- C:\Users\Tibor\AppData\Roaming\Systweak
2013-01-27 14:37:17 ----A---- C:\Windows\system32\roboot.exe
2013-01-27 14:17:09 ----A---- C:\Windows\system32\netcfg-705182375.txt
2013-01-27 14:17:09 ----A---- C:\Windows\system32\netcfg-705182250.txt
2013-01-27 11:58:17 ----A---- C:\Windows\system32\netcfg-696850203.txt
2013-01-27 11:58:16 ----A---- C:\Windows\system32\netcfg-696849375.txt
2013-01-27 03:47:01 ----D---- C:\Users\Tibor\AppData\Roaming\vlc
2013-01-27 03:40:49 ----A---- C:\Windows\system32\netcfg-667002828.txt
2013-01-27 03:40:49 ----A---- C:\Windows\system32\netcfg-667002781.txt
2013-01-27 01:46:26 ----A---- C:\Windows\system32\netcfg-660139656.txt
2013-01-27 01:46:26 ----A---- C:\Windows\system32\netcfg-660139578.txt
2013-01-26 21:31:43 ----A---- C:\Windows\system32\netcfg-644856187.txt
2013-01-26 21:31:41 ----A---- C:\Windows\system32\netcfg-644855109.txt
2013-01-26 19:18:04 ----A---- C:\Users\Tibor\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe
2013-01-26 19:17:55 ----A---- C:\Users\Tibor\AppData\Roaming\nMNtffsdf5ev.exe
2013-01-26 19:17:37 ----AH---- C:\Users\Tibor\AppData\Roaming\winsvcns.sys
2013-01-26 16:53:00 ----A---- C:\Windows\system32\yeqc.ini
2013-01-26 16:53:00 ----A---- C:\Windows\system32\xhepiahgu.ini
2013-01-26 16:53:00 ----A---- C:\Windows\system32\uaqqwmjt.ini
2013-01-26 16:53:00 ----A---- C:\Windows\system32\tgp.dat
2013-01-26 16:53:00 ----A---- C:\Windows\system32\netcd.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\zyadeizbstq.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\zmpm.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\zlvlgaoro.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\zbu.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\yruogei.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\yqwnxmuqkr.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ynbpico.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\yft.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\yfddtyco.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xnrwoffi.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xkiazoygsu.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xitroqxj.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xhliavnncf.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xhi.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xei.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xdu.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xbwudob.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\xabxrnwognq.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wztapis.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wvpmojcpagc.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wuienx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wmaeoulj.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wjd.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\wgfzxqxc.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vwx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vwvpxtf.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vtccpjjxhbl.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vpymgh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vky.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vhgdwwy.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\vexcv.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\uuknvmo.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\uilhoi.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ugh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\tubh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\tmksiwyo.ini
2013-01DescriptionVIDC.IYUV-26 16:52:5VIDC.IYUV9 ----A---- C:\Windows\system32\tjerrruiu.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\tgysztaa.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\szanch.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\swrosmstc.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\surl.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\sthnpbr.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\skjqlknoa.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rvitifkhda.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ruwy.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rtsquze.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rnaxcorvnpm.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rmkgnn.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rfbddh.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\rbou.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qzegqoobxiy.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qqqewpfdl.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qpghwlpi.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qnretzig.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qheefqe.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\qbdvroefxtf.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\pvsbacopgo.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\puxozpwjj.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ptfcgaof.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\psxulyb.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\psuezqksw.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\pqjjgvrcrr.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\pplmagu.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\pefaimbebk.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\onuhfaqdr.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\okbzdweogsf.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ogn.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ogknbwh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ocduhsoaeky.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ndpxrjvfik.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\mxdvmytw.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\mpuqpwyjjoe.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\mlfml.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\mcrrrdylbyb.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\mbpbf.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\lxjydaq.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\lvjfqnrfy.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\lmkwvtfa.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\liif.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\lhlcj.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ldna.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\kgqeevfnt.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\kfkegdfzsmf.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\kblu.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\kaddzumq.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\jxqxva.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\itshnv.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ifvbafbi.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ibqvywo.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hxpuo.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\htzs.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hqwxnfwmq.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hoboh.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hmzimwaq.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hhxjfatux.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hgdxppghmnp.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hfaptb.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\hbqnkzjqm.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gzswrdxw.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gxveh.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gxiglgpq.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gswxesatox.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gksspjwk.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gjrxn.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\giemuzl.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ggjxmqh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gecrm.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\gbx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\fyvyvw.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\fqat.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\fnyj.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\fkuuzbgv.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ezafudvoiyt.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ehe.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\egskehx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\edsljcdivuy.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\dqajfj.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\dmtlsnues.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\cqbt.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\cntaml.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\civwzqm.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\cfclssx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\cdntf.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\cbgvboorrjj.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\blxcchdo.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\aso.dat
2013-01-26 16:52:59 ----A---- C:\Windows\system32\arembuqqlhl.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\apluecjxljh.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\ajfm.ini
2013-01-26 16:52:59 ----A---- C:\Windows\system32\aclcvmx.ini
2013-01-26 16:52:59 ----A---- C:\Windows\rnni.ini
2013-01-26 16:52:59 ----A---- C:\Windows\qgqkumwr.ini
2013-01-26 16:52:59 ----A---- C:\Windows\fas.ini
2013-01-26 16:52:59 ----A---- C:\Windows\err.ini
2013-01-26 16:52:59 ----A---- C:\Windows\ecisfvuhpa.ini
2013-01-26 16:52:58 ----A---- C:\Windows\xibfo.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\zzmbkjttcv.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\zvxuplfqaiv.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\zmulmsalvp.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\zhbezzk.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\zgtn.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\yztg.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ywcotf.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\yfguqg.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ybcwdcj.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\xrjmwls.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\xratz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\xhxj.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\xbeumyws.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\wvmaql.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\wtkvqxla.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\wmcwjfwebcg.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\wjjkwjxof.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\vuzy.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\vekhfmquvd.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\uvhkeoo.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\upqsk.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ujupkolaxz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\uhgxcxne.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\udixx.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ubomomrwsdk.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\tttpgilubhz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\tixbprzs.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\tcu.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\swmx.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\svh.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\srt.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\sqrvkkbktxz.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\sntlrnm.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\slfzi.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\skcx.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\sjzadmi.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\sfsz.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rzuc.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rumiqlhw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rpz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\riffaw.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rifbww.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rhw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\rckntimj.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\qxbus.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\qttwzyei.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\qsopsnklrnj.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\qrpcq.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\qqqt.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pqognjycvt.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pjtdqi.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\phcioojd.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pedcjlq.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pcpmvigyknw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pclkwlz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\pathdekgnl.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\oxxpcqneqfk.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ousspnt.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\otvbczqzr.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\otorwgb.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\oofzxmm.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\oofsbkfk.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ooaomuyhvz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\olhdsirhbjm.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\olcfhmx.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\oicryjbsxhd.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ntpp.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\npuailglpt.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\narceunvfsr.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mwzhlh.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mwuwz.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mvhxlyyr.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\minowwpnhw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mhymnl.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mhefcltipun.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mflohpswrxl.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\mbufohzbd.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\maynwlp.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\lwcnbd.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\lvzw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\lqya.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\lnm.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\lffhqjpt.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ktkvvqws.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\kppamcnflm.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\kokjkgnayl.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\knk.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\kkrk.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\kjvzwobzke.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\jvpytddxshm.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\jvanbm.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\jscxtijpp.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\jecbuzopv.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\jazdltqdat.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ixrmyzmuf.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ivz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ithugwck.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\isnvgwxvzx.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\imisiwl.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ilppyukvb.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ikvd.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\iduxw.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ict.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\hxokmtz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\hulemjbpzih.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\htubwk.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\hrfumedgw.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\hiushfclfla.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\hgu.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\gwegf.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ghdvcccqxcv.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\gcgii.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\fzzu.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\fnxe.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\fmlgoxxnn.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\fhagevihj.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\epuzw.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\eesejbzog.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dxrnzku.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dmuuqmc.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dkfd.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\djzobvavx.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dgppwo.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dgckkqqq.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\dfswulgomz.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\detwvkklv.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\defhdp.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ctxnogspj.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\cbqynozbpo.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\bzyz.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\byoqvakieh.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\bxqecmpfn.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\bulcyfilrrd.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\bsxkwl.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\bsmobir.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\betjex.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\azuxhafgo.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ayyyufnvi.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\auemdu.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\akjgqsepny.ini
2013-01-26 16:52:58 ----A---- C:\Windows\system32\ajnzyssdz.dat
2013-01-26 16:52:58 ----A---- C:\Windows\system32\aesvs.dat
2013-01-26 16:52:58 ----A---- C:\Windows\refyhravcw.dat
2013-01-26 16:52:58 ----A---- C:\Windows\pxluctu.dat
2013-01-26 16:52:58 ----A---- C:\Windows\kragnbr.dat
2013-01-26 16:52:58 ----A---- C:\Windows\eewo.ini
2013-01-26 16:52:58 ----A---- C:\Windows\baxqskha.dat
2013-01-26 16:26:09 ----A---- C:\Windows\system32\netcfg-626522750.txt
2013-01-26 16:26:08 ----A---- C:\Windows\system32\netcfg-626521859.txt
2013-01-26 10:56:29 ----A---- C:\Windows\system32\netcfg-606742781.txt
2013-01-26 10:56:29 ----A---- C:\Windows\system32\netcfg-606742671.txt
2013-01-26 10:06:27 ----A---- C:\Windows\system32\netcfg-603740984.txt
2013-01-26 10:06:27 ----A---- C:\Windows\system32\netcfg-603740906.txt
2013-01-25 22:40:34 ----A---- C:\Windows\system32\netcfg-562587375.txt
2013-01-25 22:40:31 ----A---- C:\Windows\system32\netcfg-562584578.txt
2013-01-25 19:10:59 ----A---- C:\Windows\system32\netcfg-550012281.txt
2013-01-25 19:10:58 ----A---- C:\Windows\system32\netcfg-550012156.txt
2013-01-25 16:26:25 ----A---- C:\Windows\system32\netcfg-540138500.txt
2013-01-25 16:26:24 ----A---- C:\Windows\system32\netcfg-540137546.txt
2013-01-24 20:23:53 ----A---- C:\Windows\system32\netcfg-467957953.txt
2013-01-24 20:23:53 ----A---- C:\Windows\system32\netcfg-467957890.txt
2013-01-23 19:09:30 ----A---- C:\Windows\system32\netcfg-377094781.txt
2013-01-23 19:09:29 ----A---- C:\Windows\system32\netcfg-377094156.txt
2013-01-21 21:08:05 ----A---- C:\Windows\system32\netcfg-211410343.txt
2013-01-21 21:08:05 ----A---- C:\Windows\system32\netcfg-211410187.txt
2013-01-20 22:36:07 ----A---- C:\Windows\system32\netcfg-130291890.txt
2013-01-20 22:36:07 ----A---- C:\Windows\system32\netcfg-130291781.txt
2013-01-20 22:19:41 ----A---- C:\Windows\system32\netcfg-129306296.txt
2013-01-20 22:19:41 ----A---- C:\Windows\system32\netcfg-129306125.txt
2013-01-20 15:33:39 ----A---- C:\Windows\system32\netcfg-104944562.txt
2013-01-20 15:33:39 ----A---- C:\Windows\system32\netcfg-104944093.txt
2013-01-20 11:57:20 ----A---- C:\Windows\system32\netcfg-91965156.txt
2013-01-20 11:57:20 ----A---- C:\Windows\system32\netcfg-91964812.txt
2013-01-20 09:51:50 ----A---- C:\Windows\system32\netcfg-84435390.txt
2013-01-20 09:51:50 ----A---- C:\Windows\system32\netcfg-84435250.txt
2013-01-19 20:59:29 ----A---- C:\Windows\system32\netcfg-38094781.txt
2013-01-19 20:59:29 ----A---- C:\Windows\system32\netcfg-38094656.txt
2013-01-19 16:26:57 ----A---- C:\Windows\system32\netcfg-21742546.txt
2013-01-19 16:26:56 ----A---- C:\Windows\system32\netcfg-21741750.txt
2013-01-19 16:25:59 ----A---- C:\Windows\system32\netcfg-21684015.txt
2013-01-19 16:25:54 ----A---- C:\Windows\system32\netcfg-21679171.txt
2013-01-19 16:13:13 ----D---- C:\Program Files\Google
2013-01-19 10:48:04 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-19 10:10:09 ----HD---- C:\$SysReset
2013-01-19 09:18:49 ----D---- C:\Users\Tibor\AppData\Roaming\Synaptics
2013-01-19 09:14:31 ----D---- C:\Program Files\Synaptics
2013-01-19 08:37:51 ----A---- C:\Windows\system32\netcfg-1009777296.txt
2013-01-19 08:37:51 ----A---- C:\Windows\system32\netcfg-1009777234.txt
2013-01-18 16:48:19 ----A---- C:\Windows\system32\netcfg-952805515.txt
2013-01-18 16:48:19 ----A---- C:\Windows\system32\netcfg-952805390.txt
2013-01-17 18:39:49 ----A---- C:\Windows\system32\netcfg-873095406.txt
2013-01-17 18:39:49 ----A---- C:\Windows\system32\netcfg-873095046.txt
2013-01-16 17:54:11 ----A---- C:\Windows\system32\netcfg-783956781.txt
2013-01-16 17:54:10 ----A---- C:\Windows\system32\netcfg-783956234.txt
2013-01-14 19:10:41 ----A---- C:\Windows\system32\netcfg-615746609.txt
2013-01-14 19:10:40 ----A---- C:\Windows\system32\netcfg-615746000.txt
2013-01-13 09:34:00 ----A---- C:\Windows\system32\netcfg-494745718.txt
2013-01-13 09:33:59 ----A---- C:\Windows\system32\netcfg-494745328.txt
2013-01-12 21:45:32 ----D---- C:\Program Files\Counter-Strike 1.6 Non-Steam
2013-01-12 21:31:26 ----D---- C:\Users\Tibor\AppData\Roaming\dclogs
2013-01-12 16:27:27 ----D---- C:\Users\Tibor\AppData\Roaming\Skype
2013-01-12 16:27:20 ----D---- C:\Program Files\Common Files\Skype
2013-01-12 16:27:14 ----RD---- C:\Program Files\Skype
2013-01-12 16:27:10 ----D---- C:\ProgramData\Skype
2013-01-12 10:32:15 ----A---- C:\Windows\system32\netcfg-411840875.txt
2013-01-12 10:32:15 ----A---- C:\Windows\system32\netcfg-411840781.txt
2013-01-12 09:03:48 ----A---- C:\Windows\system32\netcfg-406533734.txt
2013-01-12 09:03:47 ----A---- C:\Windows\system32\netcfg-406533687.txt
2013-01-12 08:20:07 ----A---- C:\Windows\system32\netcfg-403913250.txt
2013-01-12 08:20:07 ----A---- C:\Windows\system32\netcfg-403913156.txt
2013-01-12 03:35:54 ----A---- C:\Windows\system32\netcfg-386860093.txt
2013-01-12 03:35:50 ----A---- C:\Windows\system32\netcfg-386856296.txt
2013-01-11 15:42:09 ----A---- C:\Windows\system32\netcfg-344035218.txt
2013-01-11 15:42:08 ----A---- C:\Windows\system32\netcfg-344033875.txt
2013-01-10 17:41:54 ----A---- C:\Windows\system32\netcfg-264820171.txt
2013-01-10 17:41:53 ----A---- C:\Windows\system32\netcfg-264819703.txt
2013-01-08 18:47:40 ----A---- C:\Windows\system32\netcfg-95965875.txt
2013-01-08 18:47:39 ----A---- C:\Windows\system32\netcfg-95965500.txt
2013-01-07 16:09:14 ----A---- C:\Windows\system32\netcfg-59765.txt
2013-01-07 16:07:52 ----A---- C:\Windows\system32\netcfg-283940796.txt
2013-01-07 10:26:40 ----A---- C:\Windows\system32\netcfg-263469359.txt
2013-01-07 10:26:40 ----A---- C:\Windows\system32\netcfg-263469281.txt
2013-01-06 22:47:54 ----D---- C:\Program Files\Microsoft Works
2013-01-06 22:47:16 ----D---- C:\Program Files\Microsoft Visual Studio
2013-01-06 22:47:15 ----D---- C:\Program Files\Common Files\DESIGNER
2013-01-06 22:46:11 ----D---- C:\Windows\PCHEALTH
2013-01-06 22:44:29 ----D---- C:\Program Files\Microsoft Visual Studio 8
2013-01-06 22:43:46 ----D---- C:\Program Files\Microsoft Office
2013-01-06 22:41:09 ----D---- C:\ProgramData\Microsoft Help
2013-01-06 22:38:46 ----D---- C:\Users\Tibor\AppData\Roaming\PowerISO
2013-01-06 22:37:37 ----D---- C:\Program Files\PowerISO
2013-01-06 18:16:48 ----D---- C:\Program Files\Jed's Half-Life Model Viewer 1.3.6
2013-01-06 17:00:15 ----D---- C:\Program Files\Resource Hacker
2013-01-06 11:52:01 ----A---- C:\Windows\system32\netcfg-182190656.txt
2013-01-06 11:52:01 ----A---- C:\Windows\system32\netcfg-182190234.txt
2013-01-06 04:14:52 ----A---- C:\Windows\system32\netcfg-154761671.txt
2013-01-06 04:14:50 ----A---- C:\Windows\system32\netcfg-154759000.txt
2013-01-04 22:32:40 ----D---- C:\Program Files\Cheat Engine 6.2
2013-01-03 15:08:00 ----D---- C:\Program Files\AMX Mod X
2013-01-03 00:28:36 ----D---- C:\Program Files\TC UP
2012-12-31 10:17:26 ----D---- C:\Users\Tibor\AppData\Roaming\GoforFiles

======List of files/folders modified in the last 1 month======

2013-01-28 14:09:36 ----RD---- C:\Program Files
2013-01-28 14:09:24 ----D---- C:\ProgramData\GarenaMessenger
2013-01-28 14:08:11 ----D---- C:\Windows\Prefetch
2013-01-28 14:07:19 ----D---- C:\Windows\Temp
2013-01-28 14:07:19 ----D---- C:\Windows\system32\Drivers
2013-01-28 14:06:14 ----D---- C:\Windows\system32\Tasks
2013-01-28 14:04:57 ----D---- C:\Windows
2013-01-28 14:04:56 ----D---- C:\ProgramData\NVIDIA
2013-01-28 14:03:05 ----D---- C:\Users\Tibor\AppData\Roaming\GarenaPlus
2013-01-28 14:02:10 ----RD---- C:\Windows\System32
2013-01-28 11:30:36 ----D---- C:\Windows\system32\sru
2013-01-28 08:19:32 ----D---- C:\Program Files\Steam
2013-01-28 08:03:43 ----D---- C:\Windows\system32\config
2013-01-28 08:03:25 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-01-28 08:01:50 ----HD---- C:\ProgramData
2013-01-28 08:01:35 ----D---- C:\Windows\Tasks
2013-01-28 07:57:21 ----D---- C:\Users\Tibor\AppData\Roaming\NVIDIA
2013-01-28 07:56:11 ----D---- C:\Windows\Microsoft.NET
2013-01-27 21:56:26 ----D---- C:\Users\Tibor\AppData\Roaming\TS3Client
2013-01-27 14:39:25 ----SHD---- C:\System Volume Information
2013-01-24 00:18:05 ----SHD---- C:\$Recycle.Bin
2013-01-19 21:00:28 ----D---- C:\Program Files\Mozilla Firefox
2013-01-19 17:18:00 ----SHD---- C:\Windows\Installer
2013-01-19 17:18:00 ----SHD---- C:\Config.Msi
2013-01-19 10:31:33 ----D---- C:\Program Files\Common Files\Steam
2013-01-19 10:28:08 ----D---- C:\Windows\system32\catroot2
2013-01-19 10:18:38 ----D---- C:\Windows\system32\sk-SK
2013-01-19 10:18:36 ----D---- C:\Windows\system32\CodeIntegrity
2013-01-19 10:18:36 ----D---- C:\Windows\inf
2013-01-19 10:18:24 ----D---- C:\Program Files\NVIDIA Corporation
2013-01-19 10:16:41 ----D---- C:\Windows\system32\wbem
2013-01-19 10:16:41 ----D---- C:\Windows\registration
2013-01-19 10:16:33 ----D---- C:\Windows\system32\DriverStore
2013-01-19 10:16:23 ----SD---- C:\Users\Tibor\AppData\Roaming\Microsoft
2013-01-18 17:25:26 ----D---- C:\Program Files\Garena Plus
2013-01-12 21:28:46 ----D---- C:\Program Files\Valve
2013-01-12 16:27:20 ----D---- C:\Program Files\Common Files
2013-01-08 19:04:57 ----D---- C:\Windows\WinSxS
2013-01-06 22:49:17 ----RD---- C:\Windows\assembly
2013-01-06 22:47:50 ----D---- C:\Program Files\Common Files\microsoft shared
2013-01-06 22:47:36 ----D---- C:\Program Files\MSBuild
2013-01-06 22:47:08 ----D---- C:\Windows\ShellNew
2013-01-06 22:46:26 ----RSD---- C:\Windows\Fonts
2013-01-06 22:46:11 ----SD---- C:\ProgramData\Microsoft
2013-01-06 22:46:11 ----D---- C:\Program Files\Microsoft.NET
2013-01-06 22:44:15 ----A---- C:\Windows\win.ini
2013-01-06 22:44:14 ----D---- C:\Program Files\Common Files\System
2013-01-04 22:10:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-04 16:13:07 ----D---- C:\Windows\rescache
2013-01-04 09:14:15 ----D---- C:\Windows\system32\WinMetadata
2013-01-04 09:07:45 ----D---- C:\ProgramData\Adobe
2013-01-03 09:27:53 ----D---- C:\Users\Tibor\AppData\Roaming\Adobe
2013-01-02 21:14:58 ----D---- C:\Windows\system32\LogFiles
2013-01-02 20:09:08 ----D---- C:\Windows\Logs
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: bitcoin - miner

#4 Příspěvek od JaRon »

O4 - HKCU\..\Run: [Nero] C:\Users\Tibor\AppData\Ncts.exe
O4 - HKCU\..\Run: [Microsoft Windows Service] C:\Users\Tibor\6438640620394286720310355\winsvc.exe
O4 - HKCU\..\Run: [pdoubrhgfjkxeiqndts] C:\Users\Tibor\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
O4 - HKCU\..\Run: [HotKeysCmds] C:\Users\Tibor\AppData\Local\Temp\342B.EXE
O4 - HKCU\..\Run: [uchwcrmxwvqotpocurb] C:\Users\Tibor\AppData\Roaming\uchwcrmxwvqotpocurb.exe
FIXni v HiijackThis a restart PC
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
boss382
2. Stupeň Varování
Příspěvky: 86
Registrován: 03 Ún 2011 15:55

Re: bitcoin - miner

#5 Příspěvek od boss382 »

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys [2012-07-26 337648]
R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys [2012-07-26 58608]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys [2012-07-26 256240]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2012-07-26 493136]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys [2012-07-26 84208]
R0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys [2012-07-26 70384]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys [2012-07-26 59632]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys [2012-07-26 293104]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2012-07-26 406768]
R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [2012-07-26 81136]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2012-07-26 155888]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys [2012-07-26 78064]
R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys [2012-07-26 15088]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys [2012-07-26 57584]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys [2012-07-26 830192]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys [2012-07-26 74992]
R0 pci;@machine.inf,%pci_svcdesc%;PCI Bus Driver; C:\Windows\System32\drivers\pci.sys [2012-07-26 191216]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2012-07-26 43760]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys [2012-07-26 57072]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-07-26 173296]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys [2012-07-26 238320]
R0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\Windows\System32\drivers\storahci.sys [2012-07-26 66288]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys [2012-07-26 1817328]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys [2012-07-26 32496]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys [2012-07-26 66288]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2012-07-26 313072]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys [2012-07-26 282352]
R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\Windows\system32\drivers\Wdf01000.sys [2012-07-26 526952]
R0 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\Windows\system32\drivers\WdFilter.sys [2012-07-26 199920]
R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\Windows\system32\DRIVERS\wfplwfs.sys [2012-07-26 38640]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys [2012-07-26 438272]
R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [2012-07-26 42496]
R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys [2012-07-26 24576]
R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys [2012-07-26 6144]
R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys [2012-07-26 135680]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2012-07-26 436736]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys [2012-07-26 92160]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2012-07-26 41472]
R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys [2012-07-26 21504]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys [2012-07-26 33008]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys [2012-07-26 36864]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys [2012-07-26 254464]
R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys [2012-07-26 38912]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys [2012-07-26 17920]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2012-07-26 23552]
R1 Null;Null; C:\Windows\system32\drivers\Null.sys [2012-07-26 5120]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys [2012-07-26 131584]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys [2012-07-26 321536]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2012-12-09 113168]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2012-07-26 97792]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 52224]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 70656]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys [2012-07-26 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2012-07-26 102400]
R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys [2012-07-26 355328]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys [2012-07-26 84480]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2012-07-26 709632]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys [2012-07-26 62976]
R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys [2012-07-26 20480]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2012-07-26 36352]
R3 athr;@netathr.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2012-06-02 2273280]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2012-07-26 84992]
R3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys [2012-07-26 20480]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys [2012-07-26 30720]
R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys [2012-07-26 25600]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2012-07-26 1229552]
R3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2012-07-26 275456]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys [2012-07-26 62464]
R3 HECI;@oem1.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\Windows\System32\drivers\HECI.sys [2009-09-17 41088]
R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys [2012-07-26 19456]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys [2012-07-26 640000]
R3 i8042prt;@keyboard.inf,%i8042prt.SvcDesc%;i8042 Keyboard and PS/2 Mouse Port Driver; C:\Windows\System32\drivers\i8042prt.sys [2012-07-26 89600]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys [2012-07-26 78848]
R3 k57nd60x;@netk57x.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60x.sys [2012-07-25 361984]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\Windows\System32\drivers\kbdclass.sys [2012-07-26 39664]
R3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys [2012-07-26 23040]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Microsoft Kernel Debug Network Miniport (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys [2012-07-26 15360]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\Windows\system32\DRIVERS\monitor.sys [2012-07-26 24064]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\Windows\System32\drivers\mouclass.sys [2012-07-26 39152]
R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys [2012-07-26 20992]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2012-07-26 56832]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys [2012-07-26 310272]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2012-07-26 244736]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2012-07-26 168448]
R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys [2012-07-26 20480]
R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys [2012-07-26 47104]
R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 140288]
R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys [2012-07-26 48640]
R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys [2012-07-26 1614576]
R3 NVHDA;@oem3.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2012-07-03 149352]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-03 9373032]
R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys [2012-07-26 82944]
R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2012-07-26 53760]
R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys [2012-07-26 88064]
R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys [2012-07-26 66560]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2012-07-26 74752]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys [2012-07-26 16896]
R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys [2012-07-26 338432]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2012-07-26 492544]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2012-07-26 195072]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys [2012-07-26 13296]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys [2012-07-26 121584]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2012-07-26 118784]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys [2012-07-26 39424]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver; C:\Windows\System32\drivers\usbccgp.sys [2012-07-26 84992]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\Windows\System32\drivers\usbehci.sys [2012-07-26 63728]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\Windows\System32\drivers\usbhub.sys [2012-07-26 331504]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2012-07-26 175488]
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2012-07-26 18944]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 13824]
R3 WmiAcpi;@wmiacpi.inf,%WMIMAP.SvcDesc%;Microsoft Windows Management Interface for ACPI; C:\Windows\System32\drivers\wmiacpi.sys [2012-07-26 11264]
S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys [2012-07-26 85232]
S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys [2012-07-26 424176]
S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys [2012-07-26 298736]
S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys [2012-07-26 147696]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys [2012-07-26 55536]
S0 amdagp;@machine.inf,%amdagp_svcdesc%;AMD AGP Bus Filter Driver; C:\Windows\System32\drivers\amdagp.sys [2012-07-26 56048]
S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys [2012-07-26 67312]
S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys [2012-07-26 213744]
S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys [2012-07-26 22256]
S0 arc;arc; C:\Windows\System32\drivers\arc.sys [2012-07-26 91888]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys [2012-07-26 94448]
S0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys [2012-07-26 22768]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys [2012-07-26 99056]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\System32\drivers\gagp30kx.sys [2012-07-26 59120]
S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [2012-07-26 56048]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2012-07-26 24304]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys [2012-07-26 333552]
S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys [2012-07-26 42224]
S0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys [2012-07-26 16624]
S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys [2012-07-26 47856]
S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [2012-07-26 93424]
S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [2012-07-26 78576]
S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys [2012-07-26 100592]
S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [2012-07-26 68848]
S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys [2012-07-26 45296]
S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys [2012-07-26 283888]
S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys [2012-07-26 59120]
S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys [2012-07-26 45808]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys [2012-07-26 106736]
S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys [2012-07-26 120048]
S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys [2012-07-26 141552]
S0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys [2012-07-26 13552]
S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys [2012-07-26 194288]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys [2012-07-26 89840]
S0 sisagp;@machine.inf,%sisagp_svcdesc%;SIS AGP Bus Filter; C:\Windows\System32\drivers\sisagp.sys [2012-07-26 53488]
S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [2012-07-26 41200]
S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [2012-07-26 79088]
S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys [2012-07-26 26352]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2012-07-26 42344]
S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys [2012-07-26 32872]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Microsoft AGPv3.5 Filter; C:\Windows\System32\drivers\uagp35.sys [2012-07-26 58096]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys [2012-07-26 58608]
S0 viaagp;@machine.inf,%agpvia_svcdesc%;VIA AGP Bus Filter; C:\Windows\System32\drivers\viaagp.sys [2012-07-26 55536]
S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys [2012-07-26 18160]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys [2012-07-26 130024]
S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys [2012-07-26 155376]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys [2012-07-26 285424]
S0 Wd;@wd.inf,%WdServiceDisplayName%;Microsoft Watchdog Timer Driver; C:\Windows\System32\drivers\wd.sys [2012-07-26 20720]
S0 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\Windows\system32\drivers\WdBoot.sys [2012-07-26 28072]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys [2012-07-26 49392]
S1 rzhytdgb;rzhytdgb; \??\C:\Windows\system32\drivers\rzhytdgb.sys [2013-01-28 43600]
S2 Parvdm;Parvdm; C:\Windows\System32\drivers\parvdm.sys [2012-07-26 8704]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys [2012-07-26 173056]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys [2012-07-26 8704]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys [2012-07-26 9216]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys [2012-07-26 8704]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys [2012-07-26 80384]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys [2012-07-26 78336]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2012-07-26 67072]
S3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys [2012-07-26 21504]
S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2012-07-26 25856]
S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 44032]
S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-07-26 22528]
S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\Windows\System32\drivers\bthmodem.sys [2012-07-26 50176]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys [2012-07-26 38400]
S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys [2012-07-26 28672]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers; C:\Windows\system32\drivers\drmkaud.sys [2012-07-26 5120]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys [2012-07-26 7168]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2012-07-26 155648]
S3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys [2012-07-26 168688]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys [2012-07-26 25600]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2012-07-26 29696]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys [2012-07-26 19968]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2012-07-26 49392]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys [2012-07-26 17920]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter; C:\Windows\System32\drivers\vmgencounter.sys [2012-07-26 9856]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys [2012-07-26 97008]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys [2012-07-26 20992]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys [2012-07-26 81920]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys [2012-07-26 29696]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys [2012-07-26 38400]
S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [2012-07-26 10496]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2012-07-26 19456]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys [2012-07-26 65024]
S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [2012-07-26 65536]
S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys [2012-07-26 126976]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys [2012-07-26 13312]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys [2012-07-26 237808]
S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys [2012-07-26 31744]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys [2012-07-26 122368]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-07-26 102912]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys [2012-07-26 24304]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2012-07-26 6656]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys [2012-07-26 7680]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2012-07-26 8192]
S3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys [2012-07-26 57344]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2012-07-26 6144]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2012-07-26 5888]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2012-07-26 211696]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2012-07-26 6272]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys [2012-07-26 11264]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys [2012-07-26 30720]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [2012-07-26 110592]
S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 140288]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\Windows\System32\drivers\parport.sys [2012-07-26 90624]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys [2012-07-26 77312]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2012-07-26 31744]
S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys [2012-07-26 11776]
S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys [2012-07-26 156160]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-07-26 23280]
S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys [2012-07-26 179200]
S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys [2012-07-26 6528]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2012-07-26 32768]
S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys [2012-07-26 157424]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys [2012-07-26 46832]
S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys [2012-07-26 51200]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\Windows\System32\drivers\serenum.sys [2012-07-26 17920]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\Windows\System32\drivers\serial.sys [2012-07-26 86528]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys [2012-07-26 19968]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys [2012-07-26 13312]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys [2012-07-26 46080]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2012-07-26 1817328]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys [2012-07-26 29936]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-07-26 49152]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys [2012-07-26 27264]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys [2012-07-26 76016]
S3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys [2012-07-26 179952]
S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys [2012-07-26 8704]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys [2012-07-26 87040]
S3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys [2012-07-26 361200]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys [2012-07-26 22016]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys [2012-07-26 18944]
S3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\Windows\System32\drivers\USBSTOR.SYS [2012-07-26 97008]
S3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys [2012-07-26 24576]
S3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS [2012-07-26 267504]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys [2012-07-26 80112]
S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys [2012-07-26 368368]
S3 ViaC7;@cpu.inf,%ViaC7.SvcDesc%;VIA C7 Processor Driver; C:\Windows\System32\drivers\viac7.sys [2012-07-26 77824]
S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [2012-07-26 18304]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys [2012-07-26 20608]
S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 70656]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2012-07-26 27376]
S3 wpcfltr;Family Safety Filter Driver; C:\Windows\system32\DRIVERS\wpcfltr.sys [2012-07-26 35328]
S3 WpdUpFltr;@%systemroot%\System32\drivers\WpdUpFltr.sys,-100; C:\Windows\System32\drivers\WpdUpFltr.sys [2012-07-26 15360]
S3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S3 WUDFRd;@hidbthle.inf,%WudfRdDisplayName%;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\Windows\System32\drivers\WUDFRd.sys [2012-07-26 155136]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;UMDF Reflector service for LocationProvider; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys [2012-07-26 89088]
S4 cnghwassist;@%SystemRoot%\system32\drivers\cnghwassist.sys,-100; C:\Windows\System32\DRIVERS\cnghwassist.sys [2012-07-26 30448]
S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys [2012-07-26 260608]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys [2012-07-26 16384]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-01 645480]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe [2012-07-26 23552]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe [2012-07-26 496640]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-11-30 382824]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310; C:\Program Files\Windows Defender\MsMpEng.exe [2012-07-26 13864]
R2 winmgmt;@%Systemroot%\system32\wbem\wmisvc.dll,-205; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 WlanSvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files\Windows Media Player\wmpnetwk.exe [2012-07-26 1025536]
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2012-07-26 671232]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2012-07-26 23552]
R3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe [2012-07-26 62976]
R3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2012-07-26 23552]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 23040]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
R3 wlidsvc;@%SystemRoot%\system32\wlidsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-19 116648]
S2 IpHlpSvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2012-07-26 3802624]
S2 wscsvc;@%SystemRoot%\System32\wscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe [2012-07-26 71168]
S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe [2012-07-26 8704]
S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 EapHost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2012-07-26 23552]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2012-07-26 529920]
S3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-19 116648]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-19 115608]
S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe [2012-07-26 136192]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe [2012-07-26 23552]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\W32X86\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe [2012-07-26 9728]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2012-07-26 13312]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-01-19 541608]
S3 StiSvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2012-07-26 82432]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2012-07-26 35840]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2012-07-26 581120]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\Windows\system32\vssvc.exe [2012-07-26 1150464]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2012-07-26 1350144]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 WebClient;@%systemroot%\system32\webclnt.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 wmiApSrv;@%Systemroot%\system32\wbem\wmiapsrv.exe,-110; C:\Windows\system32\wbem\WmiApSrv.exe [2012-07-26 142336]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 WSService;@%SystemRoot%\system32\WSService.dll,-103; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S3 wuauserv;@%systemroot%\system32\wuaueng.dll,-105; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2012-07-12 139696]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 23040]
S4 RemoteRegistry;@regsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 23040]
S4 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\Windows\System32\svchost.exe [2012-07-26 23040]

-----------------EOF-----------------
Nahoru
boss382
2. Stupeň Varování
Příspěvky: 86
Registrován: 03 Ún 2011 15:55

Re: bitcoin - miner

#6 Příspěvek od boss382 »

neviem ako myslíš fixpnuť v podpise maš "RSIT" dal som stiahnuť 32 bit posledný link a ked dam scan tak mi napíše: autolt error line -1 eror: varaiable used without begin declared.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: bitcoin - miner

#7 Příspěvek od JaRon »

spust C:\Program Files\trend micro\Tibor.exe
vytvor log - zaskrtni hore uvedene polozky a klikni na FIX Checked
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
boss382
2. Stupeň Varování
Příspěvky: 86
Registrován: 03 Ún 2011 15:55

Re: bitcoin - miner

#8 Příspěvek od boss382 »

ok fixnul som to

edit: v procesoch to už nemam
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: bitcoin - miner

#9 Příspěvek od JaRon »

teraz ked si uz mimo "ohrozenia zivota" tak v klude spust uplnu kontrolu s MBAM - trva dlhsie ako hodinu ,,,
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“