DELTA

[Bender2009]

pak tady mám ještě jeden PC .. tak nějak mi zmizly z plochy všechny ikony a žádnou další tam ani nejde dát, ikdyž ve složce plocha normálně ikony jsou.. ale tak nějak jsem si na to zvyknul . no pokud by to šlo dát dokupy, toš to by bylo dobré.

tady je log


Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2013-06-19 20:32:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 110 GB (38%) free of 292 GB
Total RAM: 1978 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:32:54, on 19.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Users\user\AppData\Roaming\WebCake\WebCakeDesktop.exe
C:\Windows\SysWOW64\schtasks.exe
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?babsrc=HP_ ... 0&tsp=4918
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ExpressFiles] "C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe" -tray
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WebCake Desktop] "C:\Users\user\AppData\Roaming\WebCake\WebCakeDesktop.exe"
O4 - Startup: Rainmeter.lnk = ?
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BrowserDefendert - Unknown owner - C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WebCake Desktop Updater - WebCake LLC - C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9724 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\milan\win skin\počasí\Rainmeter.exe"
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe"
WLIDSvcM.exe 2228
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\user\AppData\Roaming\WebCake\WebCakeDesktop.exe"
"C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe" "C:\Users\user\AppData\Roaming\WebCake\WebCakeDesktop.exe"
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
"C:\Windows\system32\schtasks.exe" /create /tn "BrowserDefendert" /ru "SYSTEM" /sc minute /mo 1 /tr "C:\Windows\system32\sc.exe start BrowserDefendert" /st 00:00:00
\??\C:\Windows\system32\conhost.exe "1154150511957652638-1377775479-7083400001065902435-14102782691818300421-2058933860
"C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" /PROTECT
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1084.0.1370537094\1374360014" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.1892 --ignored=" --type=renderer " /prefetch:822062411
taskeng.exe {4F01C384-3AD7-4BFB-9C66-43B6D72C4524}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/8/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-accelerated-2d-canvas --channel="1084.6.797875683\1586447415" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/8/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-accelerated-2d-canvas --channel="1084.7.119851117\1860535307" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1084.8.165845317\1601560911" --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/8/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-accelerated-2d-canvas --channel="1084.10.944250915\1665714709" /prefetch:673131151
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\milan\download\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\book\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg64.dll [2010-10-14 317496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-23 10134560]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-03-15 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-03-15 387608]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-03-15 365592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1808168]
"Acer ePower Management"=C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [2010-02-06 860192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-03-30 39408]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background []
"WebCake Desktop"=C:\Users\user\AppData\Roaming\WebCake\WebCakeDesktop.exe [2013-06-07 47896]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-24 284696]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-03-03 1300560]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"ExpressFiles"=C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe -tray []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Rainmeter.lnk - C:\milan\win skin\počasí\Rainmeter.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-02 259584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2013-04-03 247296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2012-03-03 275360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-06-19 18:34:29 ----D---- C:\Users\user\AppData\Roaming\BabSolution
2013-06-19 18:34:15 ----D---- C:\Windows\SYSWOW64\searchplugins
2013-06-19 18:34:15 ----D---- C:\Windows\SYSWOW64\Extensions
2013-06-19 18:34:04 ----D---- C:\ProgramData\BrowserDefender
2013-06-19 18:34:00 ----D---- C:\Program Files (x86)\Delta
2013-06-19 18:33:55 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-06-19 18:32:41 ----D---- C:\Users\user\AppData\Roaming\WebCake
2013-06-19 18:32:40 ----D---- C:\Program Files (x86)\WebCake
2013-06-19 18:32:36 ----D---- C:\ProgramData\Babylon
2013-06-19 18:32:14 ----D---- C:\ProgramData\Tarma Installer
2013-06-19 18:25:57 ----D---- C:\Users\user\AppData\Roaming\Apple Computer
2013-06-19 18:11:48 ----D---- C:\Program Files (x86)\CCleaner
2013-06-19 17:55:42 ----D---- C:\ProgramData\MetaQuotes
2013-06-19 17:31:29 ----D---- C:\ProgramData\Apple Computer
2013-06-19 17:31:29 ----D---- C:\Program Files (x86)\QuickTime
2013-06-19 17:11:49 ----D---- C:\ProgramData\Sun
2013-06-19 17:11:10 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-06-19 17:11:10 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-06-19 17:11:10 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-06-19 17:10:34 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-06-19 17:10:34 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-06-19 17:10:34 ----A---- C:\Windows\SYSWOW64\java.exe
2013-06-19 17:05:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-19 17:05:07 ----D---- C:\Windows\system32\Macromed
2013-06-18 07:55:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-18 07:55:02 ----A---- C:\Windows\system32\urlmon.dll
2013-06-18 07:55:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-18 07:54:56 ----A---- C:\Windows\system32\iertutil.dll
2013-06-18 07:54:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-18 07:54:49 ----A---- C:\Windows\system32\ieui.dll
2013-06-18 07:54:44 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-18 07:54:42 ----A---- C:\Windows\system32\ieframe.dll
2013-06-18 07:54:36 ----A---- C:\Windows\system32\mshtml.dll
2013-06-18 07:54:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-13 07:59:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-13 07:59:36 ----A---- C:\Windows\system32\iesetup.dll
2013-06-13 07:59:35 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-13 07:59:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-13 07:59:35 ----A---- C:\Windows\system32\iernonce.dll
2013-06-13 07:59:35 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-13 07:59:34 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-13 07:59:34 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-13 07:59:34 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-13 07:59:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-13 07:59:29 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-13 07:59:28 ----A---- C:\Windows\system32\jscript.dll
2013-06-13 07:59:27 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-13 07:59:25 ----A---- C:\Windows\system32\jscript9.dll
2013-06-13 07:59:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-13 07:59:16 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-13 07:59:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-13 07:59:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-13 07:59:12 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 21:53:06 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-12 21:53:04 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 21:53:03 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-12 21:52:54 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-06-12 21:52:54 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 21:52:23 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 21:52:22 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-12 21:52:15 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 21:52:14 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-06-12 21:52:13 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 21:52:10 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-12 21:52:09 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 21:52:09 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 21:52:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-12 21:52:06 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-12 21:52:06 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 21:52:05 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-06-12 21:51:20 ----A---- C:\Windows\system32\d3d11.dll
2013-06-12 21:51:18 ----A---- C:\Windows\SYSWOW64\d3d11.dll

======List of files/folders modified in the last 1 month======

2013-06-19 20:32:49 ----D---- C:\Windows\Temp
2013-06-19 20:32:49 ----D---- C:\Program Files\trend micro
2013-06-19 20:18:14 ----D---- C:\Windows\Microsoft.NET
2013-06-19 20:02:49 ----RSD---- C:\Windows\assembly
2013-06-19 19:35:10 ----D---- C:\Windows\System32
2013-06-19 19:35:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-19 19:35:09 ----D---- C:\Windows\inf
2013-06-19 19:01:30 ----D---- C:\Program Files (x86)\Windows Live
2013-06-19 19:01:17 ----D---- C:\Windows\tracing
2013-06-19 18:48:05 ----SHD---- C:\Windows\Installer
2013-06-19 18:46:56 ----D---- C:\Windows\SysWOW64
2013-06-19 18:46:15 ----DC---- C:\Windows\system32\DRVSTORE
2013-06-19 18:46:15 ----D---- C:\Windows\system32\drivers
2013-06-19 18:46:07 ----RD---- C:\Program Files
2013-06-19 18:45:33 ----SHD---- C:\System Volume Information
2013-06-19 18:42:23 ----D---- C:\Windows\system32\config
2013-06-19 18:39:45 ----D---- C:\Users\user\AppData\Roaming\Dropbox
2013-06-19 18:38:10 ----RD---- C:\Program Files (x86)
2013-06-19 18:34:31 ----D---- C:\Windows\system32\Tasks
2013-06-19 18:34:04 ----D---- C:\ProgramData
2013-06-19 18:26:30 ----D---- C:\Windows\Prefetch
2013-06-19 18:24:52 ----D---- C:\Windows
2013-06-19 18:17:57 ----D---- C:\Users\user\AppData\Roaming\Media Player Classic
2013-06-19 18:17:20 ----D---- C:\Windows\debug
2013-06-19 18:00:47 ----D---- C:\Program Files (x86)\SiteRanker
2013-06-19 17:56:14 ----D---- C:\Program Files\HighSky Trader 5
2013-06-19 17:54:38 ----D---- C:\Program Files (x86)\Google
2013-06-19 17:36:18 ----D---- C:\Windows\winsxs
2013-06-19 17:33:37 ----D---- C:\Program Files\Internet Explorer
2013-06-19 17:11:47 ----D---- C:\Program Files (x86)\Common Files
2013-06-19 17:09:22 ----D---- C:\Program Files (x86)\Java
2013-06-19 17:05:20 ----D---- C:\Windows\Tasks
2013-06-19 17:02:42 ----D---- C:\Program Files (x86)\Adobe
2013-06-18 12:08:09 ----D---- C:\Windows\system32\catroot
2013-06-18 08:12:49 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-18 07:55:52 ----D---- C:\Windows\system32\catroot2
2013-06-14 10:04:40 ----D---- C:\Users\user\AppData\Roaming\Skype
2013-06-13 16:22:49 ----D---- C:\Windows\rescache
2013-06-13 08:24:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-13 08:24:36 ----D---- C:\Windows\system32\cs-CZ
2013-06-13 08:06:01 ----D---- C:\ProgramData\Microsoft Help
2013-06-13 08:00:50 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-05-09 189936]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-15 834544]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-05-09 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-05-09 378432]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 64288]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-02 7369728]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-03-23 2304416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-02-22 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\Windows\system32\DRIVERS\rtl8192se.sys [2009-12-16 1084448]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-18 272432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 CdaC15BA;CdaC15BA; \??\C:\Windows\system32\drivers\CdaC15BA.SYS []
S3 agm8jder;agm8jder; C:\Windows\system32\drivers\agm8jder.sys []
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-02-01 3058168]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpudrv64;cpudrv64; \??\C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [2009-12-18 17864]
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-09-02 225280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2011-02-16 14464]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 BrowserDefendert;BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2013-05-23 2827728]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [2010-02-06 865824]
R2 GREGService;GREGService; C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe [2010-01-08 23584]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 Updater Service;Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-29 243232]
R2 WebCake Desktop Updater;WebCake Desktop Updater; C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe [2013-06-07 23552]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-19 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-24 13336]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-19 256904]
S3 GameConsoleService;GameConsoleService; C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe [2009-10-10 238328]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-19 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-01 1255736]
S4 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]

-----------------EOF-----------------

[JaRon]

1. vycisti s ADWCleanerom - volba delete
2. prescanuj s MBAM - log vloz

[Bender2009]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.20.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
user :: MILAN [administrátor]

20.6.2013 10:50:11
MBAM-log-2013-06-20 (11-03-49).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 223854
Uplynulý čas: 8 minut,

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 14
C:\Users\user\AppData\Local\RewardsArcade (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498 (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Chrome (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\defaults (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\defaults\preferences (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\locale (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\locale\en-US (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 49
C:\Users\user\AppData\Local\RewardsArcade\498\uninstall.ico (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Chrome\rewardsarcade.crx (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome.manifest (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\install.rdf (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\background.html (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\browser.xul (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\crossrider.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\crossriderapi.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\dialog.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\manage-apps-style.css (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\manage-apps.html (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\messaging.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\options.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\options.xul (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\push.html (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\search_dialog.xul (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\socialapi.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\update.html (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\utilityapi.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\workers_chain.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\faye-browser-min.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\jquery-1.4.2.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\facebox.css (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\facebox.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\b.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\bl.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\br.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\closelabel.gif (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\loading.gif (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\tl.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\chrome\content\lib\facebox\Images\tr.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\defaults\preferences\prefs.js (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\locale\en-US\translations.dtd (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\button1.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\button2.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\button3.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\button4.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\button5.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\crossrider_statusbar.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\icon128.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\icon16.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\icon24.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\icon48.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\panelarrow-up.png (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\popup.css (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\popup.html (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\popup_binding.xml (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\skin.css (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.
C:\Users\user\AppData\Local\RewardsArcade\498\Firefox\skin\update.css (PUP.RewardsArcade) -> Nebyla provedena žádná instrukce.

(konec)

[JaRon]

najdene nechaj odstranit v MBAM - restart a napis, ci su este problemy

[Bender2009]

restartoval a ikony na ploše pořád nejsou.

[JaRon]

stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim


akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

[Bender2009]

ComboFix 13-06-18.02 - user 20.06.2013 13:18:12.5.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.1978.951 [GMT 2:00]
Spuštěný z: c:\milan\download\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Microsoft Security Essentials *Disabled/Outdated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Microsoft Security Essentials *Disabled/Outdated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-20 do 2013-06-20 )))))))))))))))))))))))))))))))
.
.
2013-06-20 11:30 . 2013-06-20 11:30 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-06-20 11:30 . 2013-06-20 11:30 -------- d-----w- c:\users\MILAN\AppData\Local\temp
2013-06-20 11:30 . 2013-06-20 11:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-20 08:46 . 2013-06-20 08:46 -------- d-----w- c:\users\user\AppData\Local\Programs
2013-06-19 16:34 . 2013-06-19 16:34 -------- d-----w- c:\users\user\AppData\Roaming\BabSolution
2013-06-19 16:34 . 2013-06-19 16:34 -------- d-----w- c:\windows\SysWow64\searchplugins
2013-06-19 16:34 . 2013-06-19 16:34 -------- d-----w- c:\windows\SysWow64\Extensions
2013-06-19 16:32 . 2013-06-19 16:33 -------- d-----w- c:\users\user\AppData\Roaming\WebCake
2013-06-19 16:25 . 2013-06-19 16:25 -------- d-----w- c:\users\user\AppData\Roaming\Apple Computer
2013-06-19 16:11 . 2013-06-19 16:11 -------- d-----w- c:\program files (x86)\CCleaner
2013-06-19 15:55 . 2013-06-19 15:55 -------- d-----w- c:\programdata\MetaQuotes
2013-06-19 15:33 . 2013-06-19 15:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-06-19 15:33 . 2013-06-19 15:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-06-19 15:33 . 2013-06-19 15:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-06-19 15:33 . 2013-06-19 15:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-06-19 15:33 . 2013-06-19 15:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-06-19 15:31 . 2013-06-19 15:33 -------- d-----w- c:\program files (x86)\QuickTime
2013-06-19 15:31 . 2013-06-19 15:31 -------- d-----w- c:\programdata\Apple Computer
2013-06-19 15:23 . 2013-06-20 11:15 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ED002888-A2C2-4F7F-A315-43EDAB9FED3E}\offreg.dll
2013-06-19 15:11 . 2013-06-19 15:11 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-06-19 15:11 . 2013-06-19 15:09 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-06-19 15:11 . 2013-06-19 15:09 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-19 15:10 . 2013-06-19 15:10 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-19 15:05 . 2013-06-19 15:05 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-19 15:05 . 2013-06-19 15:05 -------- d-----w- c:\windows\system32\Macromed
2013-06-18 10:15 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ED002888-A2C2-4F7F-A315-43EDAB9FED3E}\mpengine.dll
2013-06-18 05:55 . 2013-06-08 12:28 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-18 05:55 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-18 05:55 . 2013-06-08 11:41 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-18 05:55 . 2013-06-08 14:08 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-18 05:55 . 2013-06-08 14:08 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-18 05:54 . 2013-06-08 14:06 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-18 05:54 . 2013-06-08 14:06 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-18 05:54 . 2013-06-08 14:06 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-18 05:54 . 2013-06-08 14:07 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-12 19:53 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 19:53 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 19:53 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 19:51 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-12 19:51 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-19 15:05 . 2011-10-04 06:10 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-13 06:00 . 2010-07-16 22:34 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-05-15 22:58 . 2012-07-17 13:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-09 08:59 . 2013-04-28 11:50 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59 . 2013-04-28 11:50 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-09 08:59 . 2012-03-14 22:42 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2012-03-14 22:42 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2012-03-14 22:42 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2012-03-14 22:42 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2012-03-14 22:42 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2012-03-14 22:42 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2012-01-12 19:31 41664 ----a-w- c:\windows\avastSS.scr
2013-05-09 08:58 . 2012-03-14 22:42 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-02 00:06 . 2010-06-28 07:13 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-05-01 01:59 . 2013-05-01 01:59 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2013-05-01 01:59 . 2013-05-01 01:59 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2013-04-13 05:49 . 2013-05-15 22:15 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 22:15 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 22:15 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 22:15 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 22:15 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 22:15 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 16:03 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 06:01 . 2013-05-15 22:15 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 22:15 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 22:13 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-04-04 12:50 . 2011-08-24 23:41 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-04-03 09:03 . 2013-04-03 09:03 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-03 09:03 . 2013-04-03 09:03 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-03 09:03 . 2013-04-03 09:03 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-03 09:03 . 2013-04-03 09:03 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-03 09:03 . 2013-04-03 09:03 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-03 09:03 . 2013-04-03 09:03 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-03 09:03 . 2013-04-03 09:03 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-03 09:03 . 2013-04-03 09:03 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-03 09:03 . 2013-04-03 09:03 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-03 09:03 . 2013-04-03 09:03 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-03 09:03 . 2013-04-03 09:03 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-03 09:03 . 2013-04-03 09:03 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-03 09:03 . 2013-04-03 09:03 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-03 09:03 . 2013-04-03 09:03 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-03 09:03 . 2013-04-03 09:03 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-03 09:03 . 2013-04-03 09:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-03 09:03 . 2013-04-03 09:03 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-03 09:03 . 2013-04-03 09:03 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-03 09:03 . 2013-04-03 09:03 441856 ----a-w- c:\windows\system32\html.iec
2013-04-03 09:03 . 2013-04-03 09:03 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-03 09:03 . 2013-04-03 09:03 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-03 09:03 . 2013-04-03 09:03 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-03 09:03 . 2013-04-03 09:03 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-03 09:03 . 2013-04-03 09:03 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-03 09:03 . 2013-04-03 09:03 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-03 09:03 . 2013-04-03 09:03 235008 ----a-w- c:\windows\system32\url.dll
2013-04-03 09:03 . 2013-04-03 09:03 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-03 09:03 . 2013-04-03 09:03 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-03 09:03 . 2013-04-03 09:03 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-03 09:03 . 2013-04-03 09:03 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-03 09:03 . 2013-04-03 09:03 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-03 09:03 . 2013-04-03 09:03 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-03 09:03 . 2013-04-03 09:03 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-03 09:03 . 2013-04-03 09:03 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-03 09:03 . 2013-04-03 09:03 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-03 09:03 . 2013-04-03 09:03 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-03 09:03 . 2013-04-03 09:03 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-03 09:03 . 2013-04-03 09:03 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-03 09:03 . 2013-04-03 09:03 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-03 09:03 . 2013-04-03 09:03 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-03 09:03 . 2013-04-03 09:03 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-03 09:03 . 2013-04-03 09:03 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-03 09:03 . 2013-04-03 09:03 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-03 09:03 . 2013-04-03 09:03 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-03 09:03 . 2013-04-03 09:03 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-03 09:03 . 2013-04-03 09:03 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-03 09:03 . 2013-04-03 09:03 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-03 09:03 . 2013-04-03 09:03 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-03 09:03 . 2013-04-03 09:03 102912 ----a-w- c:\windows\system32\inseng.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-02-26 . 0862495E0C825893DB75EF44FAEA8E93 . 2870272 . . [6.1.7600.16385] .. c:\windows\ERDNT\cache86\explorer.exe
[7] 2011-02-26 . 3B69712041F3D63605529BD66DC00C48 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[7] 2011-02-25 . 332FEAB1435662FC6C672E25BEB37BE3 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[-] 2010-11-21 . C6B0A01C5DEB543C9DFE865741AA1A13 . 2389504 . . [6.1.7600.16385] .. c:\windows\explorer.exe
[7] 2010-11-21 . AC4C51EB24AA95B77F705AB159189E24 . 2872320 . . [6.1.7600.16385] .. c:\windows\Resources\Themes\Theme Manager\Default\explorer.exe
[7] 2010-11-20 . AC4C51EB24AA95B77F705AB159189E24 . 2872320 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-03-19 10:11 222808 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-03-19 10:11 222808 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-03-19 10:11 222808 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-30 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-24 284696]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
.
c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\milan\win skin\počasí\Rainmeter.exe [2012-2-26 98504]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys;c:\windows\SYSNATIVE\DRIVERS\MpNWMon.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\eMachines\eMachines Power Management\ePowerSvc.exe;c:\program files\eMachines\eMachines Power Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\eMachines\Registration\GREGsvc.exe;c:\program files (x86)\eMachines\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192se.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-18 20:48 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-19 15:05]
.
2013-06-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-19 20:25]
.
2013-06-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-19 20:25]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-03-19 10:11 261704 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-03-19 10:11 261704 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-03-19 10:11 261704 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-03-23 10134560]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-15 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-15 387608]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-15 365592]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"Acer ePower Management"="c:\program files\eMachines\eMachines Power Management\ePowerTray.exe" [2010-02-06 860192]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-ExpressFiles - c:\program files (x86)\ExpressFiles\ExpressFiles.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2013-06-20 13:36:55
ComboFix-quarantined-files.txt 2013-06-20 11:36
ComboFix2.txt 2012-04-10 18:48
ComboFix3.txt 2012-04-06 00:44
.
Před spuštěním: Volných bajtů: 115 175 395 328
Po spuštění: Volných bajtů: 114 700 353 536
.
- - End Of File - - 9A0D070FC1FCBD343022B4368F623F0A
D41D8CD98F00B204E9800998ECF8427E

[JaRon]

mas tam 2 AV - jeden odinstaluj

[Bender2009]

tak ten essential mezi programy nemám. našel jsem jenom nějaké zbytky po něm tak jsem je smáznul.
jinak žádná změna..

[JaRon]

1. otestuj c:\windows\explorer.exe na www.virustotal.com
2. vloz log z TDSSKiller

[Bender2009]

08:16:01.0947 1832 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
08:16:02.0557 1832 ============================================================
08:16:02.0557 1832 Current date / time: 2013/06/21 08:16:02.0557
08:16:02.0557 1832 SystemInfo:
08:16:02.0557 1832
08:16:02.0557 1832 OS Version: 6.1.7601 ServicePack: 1.0
08:16:02.0557 1832 Product type: Workstation
08:16:02.0557 1832 ComputerName: MILAN
08:16:02.0558 1832 UserName: user
08:16:02.0558 1832 Windows directory: C:\Windows
08:16:02.0558 1832 System windows directory: C:\Windows
08:16:02.0558 1832 Running under WOW64
08:16:02.0558 1832 Processor architecture: Intel x64
08:16:02.0558 1832 Number of processors: 2
08:16:02.0558 1832 Page size: 0x1000
08:16:02.0558 1832 Boot type: Normal boot
08:16:02.0558 1832 ============================================================
08:16:03.0522 1832 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
08:16:03.0643 1832 ============================================================
08:16:03.0643 1832 \Device\Harddisk0\DR0:
08:16:03.0643 1832 MBR partitions:
08:16:03.0643 1832 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A03C22, BlocksNum 0x32FCD
08:16:03.0643 1832 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A36BEF, BlocksNum 0x239F76C1
08:16:03.0643 1832 ============================================================
08:16:03.0669 1832 C: <-> \Device\Harddisk0\DR0\Partition2
08:16:03.0697 1832 ============================================================
08:16:03.0697 1832 Initialize success
08:16:03.0697 1832 ============================================================
08:16:26.0604 6240 ============================================================
08:16:26.0604 6240 Scan started
08:16:26.0604 6240 Mode: Manual;
08:16:26.0604 6240 ============================================================
08:16:26.0954 6240 ================ Scan system memory ========================
08:16:26.0954 6240 System memory - ok
08:16:26.0955 6240 ================ Scan services =============================
08:16:27.0155 6240 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
08:16:27.0160 6240 1394ohci - ok
08:16:27.0210 6240 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
08:16:27.0216 6240 ACPI - ok
08:16:27.0257 6240 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
08:16:27.0259 6240 AcpiPmi - ok
08:16:27.0392 6240 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
08:16:27.0397 6240 AdobeFlashPlayerUpdateSvc - ok
08:16:27.0446 6240 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
08:16:27.0454 6240 adp94xx - ok
08:16:27.0489 6240 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
08:16:27.0495 6240 adpahci - ok
08:16:27.0521 6240 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
08:16:27.0525 6240 adpu320 - ok
08:16:27.0578 6240 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
08:16:27.0581 6240 AeLookupSvc - ok
08:16:27.0627 6240 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
08:16:27.0637 6240 AFD - ok
08:16:27.0684 6240 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
08:16:27.0687 6240 agp440 - ok
08:16:27.0718 6240 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
08:16:27.0721 6240 ALG - ok
08:16:27.0739 6240 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
08:16:27.0742 6240 aliide - ok
08:16:27.0767 6240 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
08:16:27.0770 6240 amdide - ok
08:16:27.0803 6240 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
08:16:27.0806 6240 AmdK8 - ok
08:16:27.0841 6240 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
08:16:27.0844 6240 AmdPPM - ok
08:16:27.0882 6240 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
08:16:27.0886 6240 amdsata - ok
08:16:27.0922 6240 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
08:16:27.0927 6240 amdsbs - ok
08:16:27.0948 6240 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
08:16:27.0950 6240 amdxata - ok
08:16:27.0990 6240 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
08:16:27.0993 6240 AppID - ok
08:16:28.0019 6240 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
08:16:28.0022 6240 AppIDSvc - ok
08:16:28.0068 6240 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
08:16:28.0071 6240 Appinfo - ok
08:16:28.0128 6240 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
08:16:28.0131 6240 arc - ok
08:16:28.0152 6240 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
08:16:28.0156 6240 arcsas - ok
08:16:28.0207 6240 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
08:16:28.0210 6240 aswFsBlk - ok
08:16:28.0277 6240 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
08:16:28.0281 6240 aswMonFlt - ok
08:16:28.0327 6240 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
08:16:28.0330 6240 aswRdr - ok
08:16:28.0442 6240 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
08:16:28.0445 6240 aswRvrt - ok
08:16:28.0521 6240 [ 10ED1CAB84AA65983C41A11F60294C9B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
08:16:28.0556 6240 aswSnx - ok
08:16:28.0619 6240 [ 00E5253353717D3CA12A0F5A6F9991EC ] aswSP C:\Windows\system32\drivers\aswSP.sys
08:16:28.0626 6240 aswSP - ok
08:16:28.0673 6240 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
08:16:28.0676 6240 aswTdi - ok
08:16:28.0712 6240 [ 6359B99C955DB9F40B653159A0EED261 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
08:16:28.0717 6240 aswVmm - ok
08:16:28.0733 6240 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
08:16:28.0736 6240 AsyncMac - ok
08:16:28.0768 6240 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
08:16:28.0771 6240 atapi - ok
08:16:28.0836 6240 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
08:16:28.0852 6240 AudioEndpointBuilder - ok
08:16:28.0869 6240 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
08:16:28.0877 6240 AudioSrv - ok
08:16:29.0005 6240 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
08:16:29.0007 6240 avast! Antivirus - ok
08:16:29.0053 6240 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
08:16:29.0057 6240 AxInstSV - ok
08:16:29.0087 6240 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
08:16:29.0097 6240 b06bdrv - ok
08:16:29.0147 6240 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
08:16:29.0153 6240 b57nd60a - ok
08:16:29.0262 6240 [ 5B5C36B2EC500462A715DB6BCBAF5DA7 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
08:16:29.0365 6240 BCM43XX - ok
08:16:29.0409 6240 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
08:16:29.0413 6240 BDESVC - ok
08:16:29.0478 6240 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
08:16:29.0480 6240 Beep - ok
08:16:29.0543 6240 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
08:16:29.0555 6240 BFE - ok
08:16:29.0656 6240 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
08:16:29.0746 6240 BITS - ok
08:16:29.0760 6240 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
08:16:29.0762 6240 blbdrive - ok
08:16:29.0815 6240 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
08:16:29.0818 6240 bowser - ok
08:16:29.0844 6240 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
08:16:29.0847 6240 BrFiltLo - ok
08:16:29.0865 6240 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
08:16:29.0868 6240 BrFiltUp - ok
08:16:29.0931 6240 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
08:16:29.0935 6240 BridgeMP - ok
08:16:29.0979 6240 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
08:16:29.0983 6240 Browser - ok
08:16:30.0007 6240 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
08:16:30.0013 6240 Brserid - ok
08:16:30.0084 6240 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
08:16:30.0087 6240 BrSerWdm - ok
08:16:30.0109 6240 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
08:16:30.0112 6240 BrUsbMdm - ok
08:16:30.0134 6240 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
08:16:30.0137 6240 BrUsbSer - ok
08:16:30.0155 6240 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
08:16:30.0158 6240 BTHMODEM - ok
08:16:30.0188 6240 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
08:16:30.0191 6240 bthserv - ok
08:16:30.0214 6240 catchme - ok
08:16:30.0226 6240 CdaC15BA - ok
08:16:30.0247 6240 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
08:16:30.0250 6240 cdfs - ok
08:16:30.0301 6240 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
08:16:30.0306 6240 cdrom - ok
08:16:30.0344 6240 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
08:16:30.0347 6240 CertPropSvc - ok
08:16:30.0381 6240 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
08:16:30.0384 6240 circlass - ok
08:16:30.0421 6240 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
08:16:30.0428 6240 CLFS - ok
08:16:30.0530 6240 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
08:16:30.0536 6240 clr_optimization_v2.0.50727_32 - ok
08:16:30.0585 6240 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
08:16:30.0593 6240 clr_optimization_v2.0.50727_64 - ok
08:16:30.0668 6240 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
08:16:30.0726 6240 clr_optimization_v4.0.30319_32 - ok
08:16:30.0792 6240 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
08:16:30.0797 6240 clr_optimization_v4.0.30319_64 - ok
08:16:30.0831 6240 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
08:16:30.0833 6240 CmBatt - ok
08:16:30.0878 6240 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
08:16:30.0881 6240 cmdide - ok
08:16:30.0932 6240 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
08:16:30.0942 6240 CNG - ok
08:16:30.0986 6240 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
08:16:30.0989 6240 Compbatt - ok
08:16:31.0031 6240 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
08:16:31.0034 6240 CompositeBus - ok
08:16:31.0043 6240 COMSysApp - ok
08:16:31.0136 6240 [ 3CA734CE373E5675FBC15CA2C45228E5 ] cpudrv64 C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys
08:16:31.0140 6240 cpudrv64 - ok
08:16:31.0173 6240 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
08:16:31.0175 6240 crcdisk - ok
08:16:31.0229 6240 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
08:16:31.0234 6240 CryptSvc - ok
08:16:31.0293 6240 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
08:16:31.0312 6240 DcomLaunch - ok
08:16:31.0363 6240 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
08:16:31.0371 6240 defragsvc - ok
08:16:31.0430 6240 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
08:16:31.0433 6240 DfsC - ok
08:16:31.0475 6240 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
08:16:31.0482 6240 Dhcp - ok
08:16:31.0516 6240 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
08:16:31.0519 6240 discache - ok
08:16:31.0542 6240 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
08:16:31.0545 6240 Disk - ok
08:16:31.0591 6240 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
08:16:31.0596 6240 Dnscache - ok
08:16:31.0647 6240 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
08:16:31.0654 6240 dot3svc - ok
08:16:31.0706 6240 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
08:16:31.0711 6240 DPS - ok
08:16:31.0739 6240 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
08:16:31.0741 6240 drmkaud - ok
08:16:31.0810 6240 [ 61E894FE1E9CC720C909E6E343351794 ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe
08:16:31.0817 6240 DsiWMIService - ok
08:16:31.0898 6240 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
08:16:31.0919 6240 DXGKrnl - ok
08:16:31.0986 6240 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
08:16:31.0991 6240 EapHost - ok
08:16:32.0096 6240 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
08:16:32.0198 6240 ebdrv - ok
08:16:32.0252 6240 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
08:16:32.0258 6240 EFS - ok
08:16:32.0321 6240 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
08:16:32.0339 6240 ehRecvr - ok
08:16:32.0388 6240 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
08:16:32.0392 6240 ehSched - ok
08:16:32.0436 6240 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
08:16:32.0445 6240 elxstor - ok
08:16:32.0553 6240 [ 49EEF52BFB986A2B5D70F4EC12637D7B ] ePowerSvc C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
08:16:32.0573 6240 ePowerSvc - ok
08:16:32.0590 6240 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
08:16:32.0592 6240 ErrDev - ok
08:16:32.0651 6240 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
08:16:32.0660 6240 EventSystem - ok
08:16:32.0693 6240 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
08:16:32.0698 6240 exfat - ok
08:16:32.0713 6240 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
08:16:32.0718 6240 fastfat - ok
08:16:32.0793 6240 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
08:16:32.0810 6240 Fax - ok
08:16:32.0847 6240 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
08:16:32.0850 6240 fdc - ok
08:16:32.0875 6240 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
08:16:32.0879 6240 fdPHost - ok
08:16:32.0898 6240 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
08:16:32.0902 6240 FDResPub - ok
08:16:32.0925 6240 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
08:16:32.0928 6240 FileInfo - ok
08:16:32.0941 6240 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
08:16:32.0943 6240 Filetrace - ok
08:16:32.0993 6240 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
08:16:32.0995 6240 flpydisk - ok
08:16:33.0036 6240 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
08:16:33.0042 6240 FltMgr - ok
08:16:33.0097 6240 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
08:16:33.0133 6240 FontCache - ok
08:16:33.0219 6240 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
08:16:33.0224 6240 FontCache3.0.0.0 - ok
08:16:33.0270 6240 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
08:16:33.0273 6240 FsDepends - ok
08:16:33.0315 6240 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
08:16:33.0318 6240 Fs_Rec - ok
08:16:33.0364 6240 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
08:16:33.0370 6240 fvevol - ok
08:16:33.0391 6240 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
08:16:33.0394 6240 gagp30kx - ok
08:16:33.0463 6240 [ 6858C318E8DAA40E747E6FB9B214E104 ] GameConsoleService C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe
08:16:33.0470 6240 GameConsoleService - ok
08:16:33.0534 6240 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
08:16:33.0555 6240 gpsvc - ok
08:16:33.0651 6240 [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
08:16:33.0654 6240 GREGService - ok
08:16:33.0757 6240 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
08:16:33.0760 6240 gupdate - ok
08:16:33.0780 6240 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
08:16:33.0783 6240 gupdatem - ok
08:16:33.0814 6240 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
08:16:33.0817 6240 hcw85cir - ok
08:16:33.0866 6240 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
08:16:33.0873 6240 HdAudAddService - ok
08:16:33.0919 6240 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
08:16:33.0922 6240 HDAudBus - ok
08:16:33.0942 6240 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
08:16:33.0945 6240 HidBatt - ok
08:16:33.0970 6240 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
08:16:33.0974 6240 HidBth - ok
08:16:33.0991 6240 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
08:16:33.0994 6240 HidIr - ok
08:16:34.0036 6240 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
08:16:34.0040 6240 hidserv - ok
08:16:34.0082 6240 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
08:16:34.0085 6240 HidUsb - ok
08:16:34.0121 6240 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
08:16:34.0127 6240 hkmsvc - ok
08:16:34.0175 6240 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
08:16:34.0183 6240 HomeGroupListener - ok
08:16:34.0229 6240 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
08:16:34.0238 6240 HomeGroupProvider - ok
08:16:34.0258 6240 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
08:16:34.0262 6240 HpSAMD - ok
08:16:34.0315 6240 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
08:16:34.0331 6240 HTTP - ok
08:16:34.0371 6240 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
08:16:34.0374 6240 hwpolicy - ok
08:16:34.0432 6240 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
08:16:34.0436 6240 i8042prt - ok
08:16:34.0481 6240 [ 42E00996DFC13C46366689C0EA8ABC5E ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
08:16:34.0488 6240 iaStor - ok
08:16:34.0544 6240 [ 48362E5DB5CB2C000C514EE1F3890ACD ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
08:16:34.0548 6240 IAStorDataMgrSvc - ok
08:16:34.0600 6240 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
08:16:34.0608 6240 iaStorV - ok
08:16:34.0666 6240 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
08:16:34.0688 6240 idsvc - ok
08:16:34.0879 6240 [ 2D18C9E1F23970DE32D78D3B1CDDA0A7 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
08:16:35.0037 6240 igfx - ok
08:16:35.0087 6240 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
08:16:35.0090 6240 iirsp - ok
08:16:35.0153 6240 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
08:16:35.0188 6240 IKEEXT - ok
08:16:35.0276 6240 [ 1768CCC0CCDA73A5B3D7A17A3C52E870 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
08:16:35.0334 6240 IntcAzAudAddService - ok
08:16:35.0359 6240 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
08:16:35.0362 6240 intelide - ok
08:16:35.0395 6240 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
08:16:35.0398 6240 intelppm - ok
08:16:35.0446 6240 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
08:16:35.0452 6240 IPBusEnum - ok
08:16:35.0491 6240 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
08:16:35.0494 6240 IpFilterDriver - ok
08:16:35.0536 6240 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
08:16:35.0548 6240 iphlpsvc - ok
08:16:35.0599 6240 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
08:16:35.0602 6240 IPMIDRV - ok
08:16:35.0632 6240 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
08:16:35.0635 6240 IPNAT - ok
08:16:35.0653 6240 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
08:16:35.0655 6240 IRENUM - ok
08:16:35.0664 6240 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
08:16:35.0667 6240 isapnp - ok
08:16:35.0710 6240 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
08:16:35.0717 6240 iScsiPrt - ok
08:16:35.0740 6240 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
08:16:35.0743 6240 kbdclass - ok
08:16:35.0763 6240 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
08:16:35.0766 6240 kbdhid - ok
08:16:35.0787 6240 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
08:16:35.0791 6240 KeyIso - ok
08:16:35.0852 6240 [ 07071C1E3CD8F0F9114AAC8B072CA1E5 ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys
08:16:35.0855 6240 KMWDFILTER - ok
08:16:35.0905 6240 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
08:16:35.0909 6240 KSecDD - ok
08:16:35.0924 6240 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
08:16:35.0929 6240 KSecPkg - ok
08:16:35.0958 6240 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
08:16:35.0960 6240 ksthunk - ok
08:16:36.0002 6240 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
08:16:36.0013 6240 KtmRm - ok
08:16:36.0043 6240 [ 55480B9C63F3F91A8EBBADCBF28FE581 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
08:16:36.0047 6240 L1C - ok
08:16:36.0094 6240 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
08:16:36.0105 6240 LanmanServer - ok
08:16:36.0145 6240 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
08:16:36.0154 6240 LanmanWorkstation - ok
08:16:36.0200 6240 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
08:16:36.0203 6240 lltdio - ok
08:16:36.0242 6240 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
08:16:36.0252 6240 lltdsvc - ok
08:16:36.0270 6240 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
08:16:36.0275 6240 lmhosts - ok
08:16:36.0307 6240 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
08:16:36.0311 6240 LSI_FC - ok
08:16:36.0330 6240 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
08:16:36.0334 6240 LSI_SAS - ok
08:16:36.0355 6240 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
08:16:36.0358 6240 LSI_SAS2 - ok
08:16:36.0376 6240 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
08:16:36.0380 6240 LSI_SCSI - ok
08:16:36.0400 6240 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
08:16:36.0404 6240 luafv - ok
08:16:36.0446 6240 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
08:16:36.0453 6240 Mcx2Svc - ok
08:16:36.0468 6240 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
08:16:36.0471 6240 megasas - ok
08:16:36.0493 6240 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
08:16:36.0499 6240 MegaSR - ok
08:16:36.0585 6240 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
08:16:36.0589 6240 Microsoft Office Groove Audit Service - ok
08:16:36.0634 6240 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
08:16:36.0640 6240 MMCSS - ok
08:16:36.0679 6240 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
08:16:36.0682 6240 Modem - ok
08:16:36.0704 6240 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
08:16:36.0707 6240 monitor - ok
08:16:36.0749 6240 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
08:16:36.0753 6240 mouclass - ok
08:16:36.0767 6240 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
08:16:36.0770 6240 mouhid - ok
08:16:36.0809 6240 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
08:16:36.0813 6240 mountmgr - ok
08:16:36.0843 6240 [ C4D8C3031C7CD5884CA856B15307E997 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
08:16:36.0848 6240 MpFilter - ok
08:16:36.0901 6240 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
08:16:36.0906 6240 mpio - ok
08:16:36.0929 6240 [ A768F58C55D3F303E686A7646348AEC3 ] MpNWMon C:\Windows\system32\DRIVERS\MpNWMon.sys
08:16:36.0932 6240 MpNWMon - ok
08:16:36.0970 6240 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
08:16:36.0974 6240 mpsdrv - ok
08:16:37.0034 6240 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
08:16:37.0056 6240 MpsSvc - ok
08:16:37.0094 6240 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
08:16:37.0100 6240 MRxDAV - ok
08:16:37.0129 6240 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
08:16:37.0134 6240 mrxsmb - ok
08:16:37.0160 6240 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
08:16:37.0167 6240 mrxsmb10 - ok
08:16:37.0203 6240 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
08:16:37.0207 6240 mrxsmb20 - ok
08:16:37.0248 6240 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
08:16:37.0252 6240 msahci - ok
08:16:37.0274 6240 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
08:16:37.0279 6240 msdsm - ok
08:16:37.0303 6240 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
08:16:37.0310 6240 MSDTC - ok
08:16:37.0350 6240 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
08:16:37.0353 6240 Msfs - ok
08:16:37.0375 6240 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
08:16:37.0378 6240 mshidkmdf - ok
08:16:37.0421 6240 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
08:16:37.0424 6240 msisadrv - ok
08:16:37.0455 6240 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
08:16:37.0463 6240 MSiSCSI - ok
08:16:37.0471 6240 msiserver - ok
08:16:37.0522 6240 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
08:16:37.0524 6240 MSKSSRV - ok
08:16:37.0531 6240 MsMpSvc - ok
08:16:37.0551 6240 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
08:16:37.0553 6240 MSPCLOCK - ok
08:16:37.0567 6240 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
08:16:37.0570 6240 MSPQM - ok
08:16:37.0621 6240 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
08:16:37.0628 6240 MsRPC - ok
08:16:37.0671 6240 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
08:16:37.0674 6240 mssmbios - ok
08:16:37.0705 6240 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
08:16:37.0708 6240 MSTEE - ok
08:16:37.0728 6240 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
08:16:37.0731 6240 MTConfig - ok
08:16:37.0756 6240 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
08:16:37.0759 6240 Mup - ok
08:16:37.0816 6240 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
08:16:37.0835 6240 napagent - ok
08:16:37.0861 6240 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
08:16:37.0867 6240 NativeWifiP - ok
08:16:37.0930 6240 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
08:16:37.0951 6240 NDIS - ok
08:16:37.0970 6240 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
08:16:37.0973 6240 NdisCap - ok
08:16:37.0989 6240 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
08:16:37.0992 6240 NdisTapi - ok
08:16:38.0039 6240 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
08:16:38.0042 6240 Ndisuio - ok
08:16:38.0083 6240 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
08:16:38.0087 6240 NdisWan - ok
08:16:38.0141 6240 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
08:16:38.0144 6240 NDProxy - ok
08:16:38.0172 6240 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
08:16:38.0174 6240 NetBIOS - ok
08:16:38.0222 6240 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
08:16:38.0228 6240 NetBT - ok
08:16:38.0242 6240 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
08:16:38.0247 6240 Netlogon - ok
08:16:38.0281 6240 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
08:16:38.0291 6240 Netman - ok
08:16:38.0325 6240 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
08:16:38.0337 6240 netprofm - ok
08:16:38.0368 6240 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
08:16:38.0371 6240 NetTcpPortSharing - ok
08:16:38.0393 6240 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
08:16:38.0396 6240 nfrd960 - ok
08:16:38.0449 6240 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
08:16:38.0460 6240 NlaSvc - ok
08:16:38.0483 6240 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
08:16:38.0486 6240 Npfs - ok
08:16:38.0520 6240 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
08:16:38.0526 6240 nsi - ok
08:16:38.0560 6240 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
08:16:38.0563 6240 nsiproxy - ok
08:16:38.0642 6240 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
08:16:38.0689 6240 Ntfs - ok
08:16:38.0770 6240 [ 15221DD637D9D0FFC60848EBBF1DF538 ] NTIBackupSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
08:16:38.0775 6240 NTIBackupSvc - ok
08:16:38.0815 6240 [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
08:16:38.0818 6240 NTIDrvr - ok
08:16:38.0834 6240 [ B5071E15D4C3F5EF5018AFF7E85A85E5 ] NTISchedulerSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
08:16:38.0868 6240 NTISchedulerSvc - ok
08:16:38.0899 6240 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
08:16:38.0901 6240 Null - ok
08:16:38.0920 6240 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
08:16:38.0925 6240 nvraid - ok
08:16:38.0970 6240 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
08:16:38.0975 6240 nvstor - ok
08:16:38.0999 6240 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
08:16:39.0003 6240 nv_agp - ok
08:16:39.0076 6240 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
08:16:39.0084 6240 odserv - ok
08:16:39.0131 6240 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
08:16:39.0135 6240 ohci1394 - ok
08:16:39.0176 6240 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
08:16:39.0181 6240 ose - ok
08:16:39.0235 6240 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
08:16:39.0245 6240 p2pimsvc - ok
08:16:39.0307 6240 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
08:16:39.0319 6240 p2psvc - ok
08:16:39.0355 6240 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
08:16:39.0359 6240 Parport - ok
08:16:39.0401 6240 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
08:16:39.0405 6240 partmgr - ok
08:16:39.0439 6240 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
08:16:39.0448 6240 PcaSvc - ok
08:16:39.0479 6240 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
08:16:39.0483 6240 pci - ok
08:16:39.0534 6240 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
08:16:39.0537 6240 pciide - ok
08:16:39.0566 6240 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
08:16:39.0571 6240 pcmcia - ok
08:16:39.0592 6240 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
08:16:39.0595 6240 pcw - ok
08:16:39.0627 6240 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
08:16:39.0639 6240 PEAUTH - ok
08:16:39.0766 6240 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
08:16:39.0772 6240 PerfHost - ok
08:16:39.0864 6240 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
08:16:39.0911 6240 pla - ok
08:16:39.0979 6240 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
08:16:39.0992 6240 PlugPlay - ok
08:16:40.0022 6240 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
08:16:40.0029 6240 PNRPAutoReg - ok
08:16:40.0057 6240 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
08:16:40.0066 6240 PNRPsvc - ok
08:16:40.0124 6240 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
08:16:40.0135 6240 PolicyAgent - ok
08:16:40.0163 6240 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
08:16:40.0174 6240 Power - ok
08:16:40.0210 6240 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
08:16:40.0214 6240 PptpMiniport - ok
08:16:40.0240 6240 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
08:16:40.0243 6240 Processor - ok
08:16:40.0294 6240 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
08:16:40.0305 6240 ProfSvc - ok
08:16:40.0331 6240 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
08:16:40.0336 6240 ProtectedStorage - ok
08:16:40.0395 6240 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
08:16:40.0399 6240 Psched - ok
08:16:40.0743 6240 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
08:16:40.0809 6240 ql2300 - ok
08:16:40.0843 6240 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
08:16:40.0848 6240 ql40xx - ok
08:16:40.0895 6240 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
08:16:40.0905 6240 QWAVE - ok
08:16:40.0920 6240 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
08:16:40.0923 6240 QWAVEdrv - ok
08:16:40.0954 6240 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
08:16:40.0956 6240 RasAcd - ok
08:16:40.0990 6240 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
08:16:40.0993 6240 RasAgileVpn - ok
08:16:41.0023 6240 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
08:16:41.0032 6240 RasAuto - ok
08:16:41.0080 6240 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
08:16:41.0084 6240 Rasl2tp - ok
08:16:41.0134 6240 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
08:16:41.0145 6240 RasMan - ok
08:16:41.0179 6240 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
08:16:41.0183 6240 RasPppoe - ok
08:16:41.0203 6240 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
08:16:41.0207 6240 RasSstp - ok
08:16:41.0251 6240 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
08:16:41.0257 6240 rdbss - ok
08:16:41.0274 6240 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
08:16:41.0277 6240 rdpbus - ok
08:16:41.0295 6240 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
08:16:41.0297 6240 RDPCDD - ok
08:16:41.0320 6240 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
08:16:41.0334 6240 RDPENCDD - ok
08:16:41.0349 6240 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
08:16:41.0363 6240 RDPREFMP - ok
08:16:41.0415 6240 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
08:16:41.0421 6240 RDPWD - ok
08:16:41.0473 6240 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
08:16:41.0479 6240 rdyboost - ok
08:16:41.0522 6240 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
08:16:41.0529 6240 RemoteAccess - ok
08:16:41.0555 6240 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
08:16:41.0564 6240 RemoteRegistry - ok
08:16:41.0580 6240 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
08:16:41.0587 6240 RpcEptMapper - ok
08:16:41.0616 6240 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
08:16:41.0621 6240 RpcLocator - ok
08:16:41.0671 6240 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
08:16:41.0682 6240 RpcSs - ok
08:16:41.0719 6240 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
08:16:41.0722 6240 rspndr - ok
08:16:41.0763 6240 [ DB30AA4DAA0D492FA5D7717D8181FFA1 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
08:16:41.0769 6240 RSUSBSTOR - ok
08:16:41.0827 6240 [ 21D19AEE157A98355AC80A7BB2608775 ] rtl8192se C:\Windows\system32\DRIVERS\rtl8192se.sys
08:16:41.0862 6240 rtl8192se - ok
08:16:41.0875 6240 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
08:16:41.0880 6240 SamSs - ok
08:16:41.0922 6240 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
08:16:41.0926 6240 sbp2port - ok
08:16:41.0957 6240 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
08:16:41.0968 6240 SCardSvr - ok
08:16:42.0011 6240 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
08:16:42.0014 6240 scfilter - ok
08:16:42.0073 6240 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
08:16:42.0109 6240 Schedule - ok
08:16:42.0155 6240 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
08:16:42.0158 6240 SCPolicySvc - ok
08:16:42.0210 6240 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
08:16:42.0220 6240 SDRSVC - ok
08:16:42.0250 6240 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
08:16:42.0253 6240 secdrv - ok
08:16:42.0295 6240 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
08:16:42.0302 6240 seclogon - ok
08:16:42.0333 6240 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
08:16:42.0340 6240 SENS - ok
08:16:42.0356 6240 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
08:16:42.0364 6240 SensrSvc - ok
08:16:42.0379 6240 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
08:16:42.0381 6240 Serenum - ok
08:16:42.0406 6240 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
08:16:42.0410 6240 Serial - ok
08:16:42.0429 6240 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
08:16:42.0432 6240 sermouse - ok
08:16:42.0514 6240 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
08:16:42.0522 6240 SessionEnv - ok
08:16:42.0559 6240 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
08:16:42.0561 6240 sffdisk - ok
08:16:42.0574 6240 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
08:16:42.0578 6240 sffp_mmc - ok
08:16:42.0595 6240 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
08:16:42.0598 6240 sffp_sd - ok
08:16:42.0627 6240 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
08:16:42.0630 6240 sfloppy - ok
08:16:42.0694 6240 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
08:16:42.0704 6240 SharedAccess - ok
08:16:42.0747 6240 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
08:16:42.0759 6240 ShellHWDetection - ok
08:16:42.0780 6240 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
08:16:42.0784 6240 SiSRaid2 - ok
08:16:42.0804 6240 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
08:16:42.0808 6240 SiSRaid4 - ok
08:16:42.0893 6240 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
08:16:42.0898 6240 SkypeUpdate - ok
08:16:42.0918 6240 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
08:16:42.0922 6240 Smb - ok
08:16:42.0963 6240 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
08:16:42.0971 6240 SNMPTRAP - ok
08:16:43.0017 6240 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
08:16:43.0020 6240 spldr - ok
08:16:43.0081 6240 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
08:16:43.0099 6240 Spooler - ok
08:16:43.0218 6240 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
08:16:43.0321 6240 sppsvc - ok
08:16:43.0413 6240 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
08:16:43.0422 6240 sppuinotify - ok
08:16:43.0463 6240 [ 602884696850C86434530790B110E8EB ] sptd C:\Windows\system32\Drivers\sptd.sys
08:16:43.0464 6240 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850C86434530790B110E8EB
08:16:43.0467 6240 sptd ( LockedFile.Multi.Generic ) - warning
08:16:43.0467 6240 sptd - detected LockedFile.Multi.Generic (1)
08:16:43.0513 6240 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
08:16:43.0522 6240 srv - ok
08:16:43.0562 6240 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
08:16:43.0570 6240 srv2 - ok
08:16:43.0596 6240 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
08:16:43.0601 6240 srvnet - ok
08:16:43.0636 6240 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
08:16:43.0645 6240 SSDPSRV - ok
08:16:43.0668 6240 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
08:16:43.0677 6240 SstpSvc - ok
08:16:43.0710 6240 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
08:16:43.0713 6240 stexstor - ok
08:16:43.0760 6240 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
08:16:43.0783 6240 stisvc - ok
08:16:43.0833 6240 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
08:16:43.0837 6240 swenum - ok
08:16:43.0880 6240 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
08:16:43.0900 6240 swprv - ok
08:16:43.0930 6240 [ BCF305959B53B200CEB2AD25AD22F8A7 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
08:16:43.0937 6240 SynTP - ok
08:16:44.0033 6240 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
08:16:44.0090 6240 SysMain - ok
08:16:44.0133 6240 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
08:16:44.0142 6240 TabletInputService - ok
08:16:44.0190 6240 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
08:16:44.0202 6240 TapiSrv - ok
08:16:44.0234 6240 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
08:16:44.0243 6240 TBS - ok
08:16:44.0331 6240 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
08:16:44.0378 6240 Tcpip - ok
08:16:44.0424 6240 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
08:16:44.0443 6240 TCPIP6 - ok
08:16:44.0492 6240 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
08:16:44.0496 6240 tcpipreg - ok
08:16:44.0546 6240 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
08:16:44.0549 6240 TDPIPE - ok
08:16:44.0578 6240 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
08:16:44.0581 6240 TDTCP - ok
08:16:44.0628 6240 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
08:16:44.0632 6240 tdx - ok
08:16:44.0671 6240 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
08:16:44.0675 6240 TermDD - ok
08:16:44.0710 6240 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
08:16:44.0744 6240 TermService - ok
08:16:44.0787 6240 [ 9201BE2BAB8A9FF8E20D8439AE3BB04D ] Themes C:\Windows\system32\themeservice.dll
08:16:44.0795 6240 Themes - ok
08:16:44.0822 6240 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
08:16:44.0828 6240 THREADORDER - ok
08:16:44.0869 6240 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
08:16:44.0878 6240 TrkWks - ok
08:16:44.0944 6240 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
08:16:44.0949 6240 TrustedInstaller - ok
08:16:44.0996 6240 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
08:16:44.0999 6240 tssecsrv - ok
08:16:45.0049 6240 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
08:16:45.0053 6240 TsUsbFlt - ok
08:16:45.0101 6240 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
08:16:45.0105 6240 tunnel - ok
08:16:45.0129 6240 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
08:16:45.0132 6240 uagp35 - ok
08:16:45.0155 6240 [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
08:16:45.0158 6240 UBHelper - ok
08:16:45.0199 6240 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
08:16:45.0207 6240 udfs - ok
08:16:45.0253 6240 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
08:16:45.0262 6240 UI0Detect - ok
08:16:45.0286 6240 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
08:16:45.0289 6240 uliagpkx - ok
08:16:45.0328 6240 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
08:16:45.0331 6240 umbus - ok
08:16:45.0367 6240 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
08:16:45.0370 6240 UmPass - ok
08:16:45.0437 6240 [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
08:16:45.0443 6240 Updater Service - ok
08:16:45.0476 6240 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
08:16:45.0489 6240 upnphost - ok
08:16:45.0535 6240 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
08:16:45.0539 6240 usbccgp - ok
08:16:45.0582 6240 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
08:16:45.0586 6240 usbcir - ok
08:16:45.0605 6240 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
08:16:45.0608 6240 usbehci - ok
08:16:45.0632 6240 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
08:16:45.0639 6240 usbhub - ok
08:16:45.0662 6240 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
08:16:45.0666 6240 usbohci - ok
08:16:45.0701 6240 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
08:16:45.0704 6240 usbprint - ok
08:16:45.0756 6240 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
08:16:45.0760 6240 usbscan - ok
08:16:45.0811 6240 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
08:16:45.0816 6240 USBSTOR - ok
08:16:45.0859 6240 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
08:16:45.0862 6240 usbuhci - ok
08:16:45.0905 6240 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
08:16:45.0910 6240 usbvideo - ok
08:16:45.0947 6240 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
08:16:45.0956 6240 UxSms - ok
08:16:45.0975 6240 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
08:16:45.0997 6240 VaultSvc - ok
08:16:46.0019 6240 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
08:16:46.0022 6240 vdrvroot - ok
08:16:46.0074 6240 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
08:16:46.0096 6240 vds - ok
08:16:46.0129 6240 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
08:16:46.0132 6240 vga - ok
08:16:46.0152 6240 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
08:16:46.0155 6240 VgaSave - ok
08:16:46.0196 6240 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
08:16:46.0202 6240 vhdmp - ok
08:16:46.0235 6240 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
08:16:46.0238 6240 viaide - ok
08:16:46.0259 6240 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
08:16:46.0262 6240 volmgr - ok
08:16:46.0315 6240 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
08:16:46.0322 6240 volmgrx - ok
08:16:46.0364 6240 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
08:16:46.0370 6240 volsnap - ok
08:16:46.0415 6240 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
08:16:46.0420 6240 vsmraid - ok
08:16:46.0500 6240 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
08:16:46.0548 6240 VSS - ok
08:16:46.0564 6240 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
08:16:46.0567 6240 vwifibus - ok
08:16:46.0581 6240 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
08:16:46.0584 6240 vwififlt - ok
08:16:46.0596 6240 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
08:16:46.0599 6240 vwifimp - ok
08:16:46.0637 6240 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
08:16:46.0655 6240 W32Time - ok
08:16:46.0682 6240 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
08:16:46.0685 6240 WacomPen - ok
08:16:46.0737 6240 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
08:16:46.0741 6240 WANARP - ok
08:16:46.0749 6240 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
08:16:46.0752 6240 Wanarpv6 - ok
08:16:46.0810 6240 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
08:16:46.0846 6240 WatAdminSvc - ok
08:16:46.0918 6240 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
08:16:46.0965 6240 wbengine - ok
08:16:46.0996 6240 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
08:16:47.0007 6240 WbioSrvc - ok
08:16:47.0055 6240 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
08:16:47.0068 6240 wcncsvc - ok
08:16:47.0090 6240 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
08:16:47.0103 6240 WcsPlugInService - ok
08:16:47.0141 6240 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
08:16:47.0145 6240 Wd - ok
08:16:47.0191 6240 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
08:16:47.0195 6240 WDC_SAM - ok
08:16:47.0251 6240 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
08:16:47.0271 6240 Wdf01000 - ok
08:16:47.0308 6240 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
08:16:47.0317 6240 WdiServiceHost - ok
08:16:47.0325 6240 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
08:16:47.0334 6240 WdiSystemHost - ok
08:16:47.0386 6240 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
08:16:47.0398 6240 WebClient - ok
08:16:47.0419 6240 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
08:16:47.0431 6240 Wecsvc - ok
08:16:47.0449 6240 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
08:16:47.0458 6240 wercplsupport - ok
08:16:47.0476 6240 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
08:16:47.0487 6240 WerSvc - ok
08:16:47.0515 6240 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
08:16:47.0518 6240 WfpLwf - ok
08:16:47.0542 6240 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
08:16:47.0545 6240 WIMMount - ok
08:16:47.0564 6240 WinDefend - ok
08:16:47.0576 6240 WinHttpAutoProxySvc - ok
08:16:47.0638 6240 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
08:16:47.0646 6240 Winmgmt - ok
08:16:47.0728 6240 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
08:16:47.0797 6240 WinRM - ok
08:16:47.0867 6240 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
08:16:47.0871 6240 WinUsb - ok
08:16:47.0917 6240 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
08:16:47.0951 6240 Wlansvc - ok
08:16:48.0103 6240 [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
08:16:48.0161 6240 wlidsvc - ok
08:16:48.0221 6240 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
08:16:48.0224 6240 WmiAcpi - ok
08:16:48.0270 6240 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
08:16:48.0276 6240 wmiApSrv - ok
08:16:48.0303 6240 WMPNetworkSvc - ok
08:16:48.0329 6240 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
08:16:48.0337 6240 WPCSvc - ok
08:16:48.0381 6240 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
08:16:48.0391 6240 WPDBusEnum - ok
08:16:48.0420 6240 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
08:16:48.0422 6240 ws2ifsl - ok
08:16:48.0457 6240 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
08:16:48.0467 6240 wscsvc - ok
08:16:48.0515 6240 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
08:16:48.0519 6240 WSDPrintDevice - ok
08:16:48.0527 6240 WSearch - ok
08:16:48.0634 6240 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
08:16:48.0704 6240 wuauserv - ok
08:16:48.0755 6240 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
08:16:48.0759 6240 WudfPf - ok
08:16:48.0793 6240 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
08:16:48.0799 6240 WUDFRd - ok
08:16:48.0859 6240 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
08:16:48.0868 6240 wudfsvc - ok
08:16:48.0913 6240 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
08:16:48.0963 6240 WwanSvc - ok
08:16:48.0987 6240 ================ Scan global ===============================
08:16:49.0037 6240 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
08:16:49.0067 6240 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
08:16:49.0090 6240 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
08:16:49.0165 6240 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
08:16:49.0207 6240 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
08:16:49.0218 6240 [Global] - ok
08:16:49.0219 6240 ================ Scan MBR ==================================
08:16:49.0245 6240 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
08:16:49.0542 6240 \Device\Harddisk0\DR0 - ok
08:16:49.0543 6240 ================ Scan VBR ==================================
08:16:49.0549 6240 [ 612E6EF38DBC0471FD31556462B008AE ] \Device\Harddisk0\DR0\Partition1
08:16:49.0551 6240 \Device\Harddisk0\DR0\Partition1 - ok
08:16:49.0573 6240 [ AA68632CCD9841D2FE06667209C6C52A ] \Device\Harddisk0\DR0\Partition2
08:16:49.0576 6240 \Device\Harddisk0\DR0\Partition2 - ok
08:16:49.0576 6240 ============================================================
08:16:49.0577 6240 Scan finished
08:16:49.0577 6240 ============================================================
08:16:49.0597 1812 Detected object count: 1
08:16:49.0597 1812 Actual detected object count: 1
08:17:20.0098 1812 sptd ( LockedFile.Multi.Generic ) - skipped by user
08:17:20.0098 1812 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
08:18:28.0910 4552 Deinitialize success

[Bender2009]

SHA256: 2fd9f973547f9ee89e26f7e526be079c2e37072fe97a640f5e430c138aa560ac
File name: explorer.exe
Detection ratio: 0 / 32
Analysis date: 2013-06-21 06:10:35 UTC ( 1 minuta ago )

[JaRon]

no neviem, nejak mi to pripada ako poskodeny profil
bol by problem vytvorit noveho uzivatela a preniest mu udaje

[Bender2009]

do toho se mi ted moc nechce.. ono s tím profilem to bude ono. ale jestli to nejde nějak opravit, tak na to dlabu je výhoda že to nebrzdí PC při staru a všechno ostatní se dá dohledat
no kdyby tě k tomu něco napadlo. tak klidně můžem pokračovat. ale ten profil, to ne ...

[JaRon]

pozri toto http://www.itnews.sk/tituly/pc-revue/po ... -ich-nazvy