Pomalý ntb, občasné zamrzání touchpadu, velké zatížení CPU

Zpráva

#16 Příspěvek od **altrok** » 13 pro 2014 15:29

Pouzijte tyto utility dle navodu kolegy

vyosek píše: Stahnete si TDSSKiller http://media.kaspersky.com/utilities/Vi ... killer.exe
Po spusteni odsouhlaste licencni podminky (klik na Accept)

Kliknete na volbu Change parametrs

V okne Additional Option zakliknete vsechny moznosti

Kliknete na OK

Utilite prikazte, at skenuje - klik na Start Scan

Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip

Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip

Pokud mate vsude Skip, kliknete na Continue

Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte
Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/
Ulozte nejlepe na Plochu a rozbalte

Spustte kliknutim na mbar

Nyni postupne kliknete na Next a Update

Po dokonceni update (aktualizace) databaze kliknete opet na Next

Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC

Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko

Tez zkontrolujte, jetsli je zatrzitko u Create Restore point

Nyni kliknete na CleanUp cimz nalezenou infekci odstranime

PC bude restartovan

Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

autoprd · #17 Příspěvek od **autoprd** » 13 pro 2014 15:48

15:45:20.0707 0x17c0 TDSS rootkit removing tool 3.0.0.42 Dec 12 2014 00:35:20
15:45:25.0420 0x17c0 ============================================================
15:45:25.0420 0x17c0 Current date / time: 2014/12/13 15:45:25.0420
15:45:25.0420 0x17c0 SystemInfo:
15:45:25.0420 0x17c0
15:45:25.0420 0x17c0 OS Version: 6.2.9200 ServicePack: 0.0
15:45:25.0420 0x17c0 Product type: Workstation
15:45:25.0420 0x17c0 ComputerName: HROŠÍK
15:45:25.0420 0x17c0 UserName: Hrosík
15:45:25.0420 0x17c0 Windows directory: C:\Windows
15:45:25.0420 0x17c0 System windows directory: C:\Windows
15:45:25.0420 0x17c0 Running under WOW64
15:45:25.0420 0x17c0 Processor architecture: Intel x64
15:45:25.0420 0x17c0 Number of processors: 2
15:45:25.0420 0x17c0 Page size: 0x1000
15:45:25.0420 0x17c0 Boot type: Normal boot
15:45:25.0420 0x17c0 ============================================================
15:45:26.0234 0x17c0 KLMD registered as C:\Windows\system32\drivers\62878390.sys
15:45:26.0464 0x17c0 System UUID: {3F05519A-A0AD-F28F-8676-21E9BDA7F333}
15:45:27.0096 0x17c0 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:45:27.0112 0x17c0 ============================================================
15:45:27.0112 0x17c0 \Device\Harddisk0\DR0:
15:45:27.0112 0x17c0 MBR partitions:
15:45:27.0112 0x17c0 \Device\Harddisk0\DR0\Partition1: MBR, Type 0xB, StartLBA 0x800, BlocksNum 0x200000
15:45:27.0112 0x17c0 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x200800, BlocksNum 0x74505800
15:45:27.0112 0x17c0 ============================================================
15:45:27.0127 0x17c0 C: <-> \Device\Harddisk0\DR0\Partition2
15:45:27.0127 0x17c0 ============================================================
15:45:27.0127 0x17c0 Initialize success
15:45:27.0127 0x17c0 ============================================================
15:45:49.0170 0x146c ============================================================
15:45:49.0170 0x146c Scan started
15:45:49.0170 0x146c Mode: Manual; SigCheck; TDLFS;
15:45:49.0170 0x146c ============================================================
15:45:49.0170 0x146c KSN ping started
15:45:51.0608 0x146c KSN ping finished: true
15:45:52.0540 0x146c ================ Scan system memory ========================
15:45:52.0540 0x146c System memory - ok
15:45:52.0540 0x146c ================ Scan services =============================
15:45:52.0717 0x146c [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
15:45:52.0811 0x146c 1394ohci - ok
15:45:52.0864 0x146c [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware C:\Windows\system32\drivers\3ware.sys
15:45:52.0880 0x146c 3ware - ok
15:45:52.0927 0x146c [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:45:52.0956 0x146c ACPI - ok
15:45:52.0964 0x146c [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex C:\Windows\system32\Drivers\acpiex.sys
15:45:52.0980 0x146c acpiex - ok
15:45:52.0996 0x146c [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
15:45:53.0027 0x146c acpipagr - ok
15:45:53.0027 0x146c [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
15:45:53.0103 0x146c AcpiPmi - ok
15:45:53.0103 0x146c [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime C:\Windows\System32\drivers\acpitime.sys
15:45:53.0150 0x146c acpitime - ok
15:45:53.0228 0x146c [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:45:53.0251 0x146c AdobeARMservice - ok
15:45:53.0328 0x146c [ F79623288F2A357AB20288B5DC4F452A, AA6F70A4C12E390E08074D6FD0EA0D1856D8274DA833E56A8811BF820A2D41D4 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:45:53.0328 0x146c AdobeFlashPlayerUpdateSvc - ok
15:45:53.0379 0x146c [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
15:45:53.0410 0x146c adp94xx - ok
15:45:53.0448 0x146c [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci C:\Windows\system32\drivers\adpahci.sys
15:45:53.0463 0x146c adpahci - ok
15:45:53.0463 0x146c [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
15:45:53.0479 0x146c adpu320 - ok
15:45:53.0510 0x146c [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:45:53.0594 0x146c AeLookupSvc - ok
15:45:53.0624 0x146c [ FE7FB9612D354EB41DF4F0FF5D6FB259, 98D5BD9C1300195C49CB0717A831A06D99F7AE631D5EA065E10BFE7C2FA57A18 ] AFD C:\Windows\system32\drivers\afd.sys
15:45:53.0691 0x146c AFD - ok
15:45:53.0722 0x146c [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440 C:\Windows\system32\drivers\agp440.sys
15:45:53.0738 0x146c agp440 - ok
15:45:53.0769 0x146c [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG C:\Windows\System32\alg.exe
15:45:53.0855 0x146c ALG - ok
15:45:53.0865 0x146c [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\Windows\system32\AUInstallAgent.dll
15:45:53.0927 0x146c AllUserInstallAgent - ok
15:45:53.0958 0x146c [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
15:45:54.0036 0x146c AmdK8 - ok
15:45:54.0051 0x146c [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
15:45:54.0094 0x146c AmdPPM - ok
15:45:54.0112 0x146c [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:45:54.0123 0x146c amdsata - ok
15:45:54.0153 0x146c [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
15:45:54.0171 0x146c amdsbs - ok
15:45:54.0186 0x146c [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:45:54.0196 0x146c amdxata - ok
15:45:54.0204 0x146c [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID C:\Windows\system32\drivers\appid.sys
15:45:54.0307 0x146c AppID - ok
15:45:54.0322 0x146c [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:45:54.0338 0x146c AppIDSvc - ok
15:45:54.0370 0x146c [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo C:\Windows\System32\appinfo.dll
15:45:54.0478 0x146c Appinfo - ok
15:45:54.0497 0x146c [ 2D14788C5D0836292BEB27BBE109BE56, D032FDBD9E1708F77348655DE00DB395E38EB27A7EC3FB2EF3BA07D22CBC1402 ] AppMgmt C:\Windows\System32\appmgmts.dll
15:45:54.0560 0x146c AppMgmt - ok
15:45:54.0591 0x146c [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc C:\Windows\system32\drivers\arc.sys
15:45:54.0607 0x146c arc - ok
15:45:54.0622 0x146c [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas C:\Windows\system32\drivers\arcsas.sys
15:45:54.0622 0x146c arcsas - ok
15:45:54.0669 0x146c [ E4ABC023E251D2BB6B98C9FCAF5CF16D, 2A94320A3EF16E641B693BF6EABABB57C891B914B00F73ACD7ADB8CA5089EC40 ] aswTap C:\Windows\system32\DRIVERS\aswTap.sys
15:45:54.0685 0x146c aswTap - ok
15:45:54.0685 0x146c [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:45:54.0732 0x146c AsyncMac - ok
15:45:54.0750 0x146c [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi C:\Windows\system32\drivers\atapi.sys
15:45:54.0760 0x146c atapi - ok
15:45:54.0793 0x146c [ 09149D03629A44F4773E621C432D1D89, 0A52E647DEE3CEB37F18FB7D8CD64D9359B47E9DBF0E86613395F7F292480DCC ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
15:45:54.0809 0x146c atksgt - ok
15:45:54.0840 0x146c [ 8FB10919E1283FD108334FDBFB173574, EAD11C6FA884AAC9E8534C267E9B1D2EAB1F2A396EACC900525465A2AEAB84D3 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
15:45:54.0902 0x146c AudioEndpointBuilder - ok
15:45:54.0934 0x146c [ 37B2C3BFD6E259A5CBC0053100908157, BB2103C67ED00D2A6C19D97BDFC8D7695F1957910743CA406038262DB1BB9339 ] Audiosrv C:\Windows\System32\Audiosrv.dll
15:45:54.0996 0x146c Audiosrv - ok
15:45:55.0027 0x146c [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:45:55.0079 0x146c AxInstSV - ok
15:45:55.0126 0x146c [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
15:45:55.0157 0x146c b06bdrv - ok
15:45:55.0173 0x146c [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
15:45:55.0219 0x146c BasicDisplay - ok
15:45:55.0251 0x146c [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
15:45:55.0266 0x146c BasicRender - ok
15:45:55.0320 0x146c [ 656B7660FB8FD2D3D015172486A2DB04, CF2F71EAE9413346F509E4C8D25199C040485CEBDD7AD3967889D9CE06479881 ] bcbtums C:\Windows\system32\drivers\bcbtums.sys
15:45:55.0323 0x146c bcbtums - ok
15:45:55.0477 0x146c [ 2FE2E0EBCDF1EF22A34B44CED1E59893, CAAF05E0F2ADE9057323FCDE4452DEF1911120BCC0854B8F447F9ACCA036FB86 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl63a.sys
15:45:55.0730 0x146c BCM43XX - ok
15:45:55.0820 0x146c [ 47F0FE026652F601F367ECE2DFFCFC40, 93986523D33FEF323727A15BF5FB7BA7472CEBC1E185917897AF212E4EA9302D ] BcmBtRSupport C:\Windows\system32\BtwRSupportService.exe
15:45:55.0935 0x146c BcmBtRSupport - ok
15:45:55.0975 0x146c [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC C:\Windows\System32\bdesvc.dll
15:45:56.0048 0x146c BDESVC - ok
15:45:56.0058 0x146c [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep C:\Windows\system32\drivers\Beep.sys
15:45:56.0094 0x146c Beep - ok
15:45:56.0141 0x146c [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] BFE C:\Windows\System32\bfe.dll
15:45:56.0224 0x146c BFE - ok
15:45:56.0295 0x146c [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS C:\Windows\System32\qmgr.dll
15:45:56.0404 0x146c BITS - ok
15:45:56.0451 0x146c [ 73686FE0B2E0469F89FD2075BE724704, 4BC5BBA7ACB5BDA77251B82B9CF16C6A9EBBCC29760860A0F37ABDDF9288143F ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe
15:45:56.0467 0x146c Bonjour Service - detected UnsignedFile.Multi.Generic ( 1 )
15:45:59.0011 0x146c Detect skipped due to KSN trusted
15:45:59.0011 0x146c Bonjour Service - ok
15:45:59.0089 0x146c [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:45:59.0151 0x146c bowser - ok
15:45:59.0187 0x146c [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
15:45:59.0236 0x146c BrokerInfrastructure - ok
15:45:59.0280 0x146c [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser C:\Windows\System32\browser.dll
15:45:59.0355 0x146c Browser - ok
15:45:59.0380 0x146c [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
15:45:59.0424 0x146c BthAvrcpTg - ok
15:45:59.0440 0x146c [ A8B20D852B07AE19A13B5D47EC4E4C3B, 86571C9E2BA15BB169CAB2D24C4D0598154C02FD173638CAFC685A7F6B09472D ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
15:45:59.0522 0x146c BthEnum - ok
15:45:59.0556 0x146c [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
15:45:59.0584 0x146c BthHFEnum - ok
15:45:59.0615 0x146c [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
15:45:59.0750 0x146c bthhfhid - ok
15:45:59.0766 0x146c [ 42201C346F0B8C458E1E9CDE04D68A2C, 6168FD0D10CD06B00B5C79D5D2B5C353AAC22FD99CE8D417DDBA33ED63CFB8BF ] BthLEEnum C:\Windows\system32\DRIVERS\BthLEEnum.sys
15:45:59.0813 0x146c BthLEEnum - ok
15:45:59.0829 0x146c [ EB4CBCB3288233CD964716D0A5E1CFC5, 0CE67B2D7855117B924ACC3A2979CE12F8DE45227B37AF95F9ABCC7406AD1EC3 ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
15:45:59.0879 0x146c BTHMODEM - ok
15:45:59.0895 0x146c [ 091BB978E9504D0AD14586929431A957, ACED02B879026A228E35F40847C210BC30A5AFC948FFE922DB21663E4A8DFF1D ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
15:45:59.0910 0x146c BthPan - ok
15:45:59.0962 0x146c [ 13795CAA34239D97A7211E7F9D96E012, C4F3402B063A7CFCE386D1AE9255975A199164BA9E7DCDB6129725213A0642B1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
15:46:00.0055 0x146c BTHPORT - ok
15:46:00.0087 0x146c [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv C:\Windows\system32\bthserv.dll
15:46:00.0102 0x146c bthserv - ok
15:46:00.0118 0x146c [ 1F715957F5236D30B6020A19A4271F6A, C06B637C2C6919E2DE1055AE249AE3EAF7B4890799F22BF5757CC10CEF145043 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
15:46:00.0155 0x146c BTHUSB - ok
15:46:00.0170 0x146c [ 55D13AE8E3B73671448D863CBBE4927C, D83101CB325DEA35BED277F39519D23B44E9EAFF09BEAE079CFEB253EDFA9EC3 ] btwampfl C:\Windows\system32\drivers\btwampfl.sys
15:46:00.0182 0x146c btwampfl - ok
15:46:00.0188 0x146c [ B9B1682C2767FB1FD67927C10E37DC40, 98DBBD560F008FCB791271469149262A907B322EA9E5971D6C19BAC192F358ED ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
15:46:00.0204 0x146c btwaudio - ok
15:46:00.0251 0x146c [ 32074046D197BC0C5CEB010F27DB6FC7, 5FA51A0C36E8EB4B7D5F7796785B5A4528EDB65B658DDC48D72BB5D36CE85215 ] btwavdt C:\Windows\System32\drivers\btwavdt.sys
15:46:00.0266 0x146c btwavdt - ok
15:46:00.0360 0x146c [ B8BE97DFDCE5EB3C64D90E49218BCCCE, C2CF254E82FCF63F8FE4AFCD53E77B1C494BB08BEA57C47AF591D992D558A223 ] btwdins C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
15:46:00.0407 0x146c btwdins - ok
15:46:00.0423 0x146c [ C3C8974D99F976C927165363855690CD, 2B73E11FE341DE581CFF655E58C5671B83F4331529C30DADCAA9B6BE615D5E1F ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
15:46:00.0438 0x146c btwl2cap - ok
15:46:00.0457 0x146c [ 1D1591BB5356D4160C15F754886EEE98, 1DEF03F2B716026166047D83150C285561E159A26B15A38161368074A178E4ED ] BTWPANFL C:\Windows\system32\drivers\btwpanfl.sys
15:46:00.0467 0x146c BTWPANFL - ok
15:46:00.0482 0x146c [ 4A1C22DB524D766B00BBDD6108600F42, 9C00E21C638A999FAA7C4DE417501C948AE95923E85434E2195415B06E779ABC ] btwrchid C:\Windows\System32\drivers\btwrchid.sys
15:46:00.0490 0x146c btwrchid - ok
15:46:00.0507 0x146c catchme - ok
15:46:00.0524 0x146c [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:46:00.0587 0x146c cdfs - ok
15:46:00.0602 0x146c [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom C:\Windows\System32\drivers\cdrom.sys
15:46:00.0653 0x146c cdrom - ok
15:46:00.0670 0x146c [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc C:\Windows\System32\certprop.dll
15:46:00.0705 0x146c CertPropSvc - ok
15:46:00.0720 0x146c [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass C:\Windows\System32\drivers\circlass.sys
15:46:00.0768 0x146c circlass - ok
15:46:00.0783 0x146c [ 9905168708DB68849B879B5548F68AB3, B7A495E57B9398704988DC472126CBC5B8D76761A34F51732FBF6CC88E3AB79A ] CLFS C:\Windows\system32\drivers\CLFS.sys
15:46:00.0815 0x146c CLFS - ok
15:46:00.0830 0x146c [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
15:46:00.0862 0x146c CmBatt - ok
15:46:00.0920 0x146c [ DBF9E5346431557BF56F41E7F8EC0DC1, D5FA34C873DA9BE40301D53198355556506AB5145B78B14D0AA88570A0058589 ] CNG C:\Windows\system32\Drivers\cng.sys
15:46:00.0967 0x146c CNG - ok
15:46:01.0081 0x146c [ 574A90ABAF275B11994C1ADE428CA2E6, 157C49AD077BC8B615711EAF5885C89803B4FC37B8C11D60AB71F8C84069CD96 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys
15:46:01.0127 0x146c CnxtHdAudService - ok
15:46:01.0148 0x146c [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
15:46:01.0164 0x146c CompositeBus - ok
15:46:01.0179 0x146c COMSysApp - ok
15:46:01.0179 0x146c [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv C:\Windows\system32\drivers\condrv.sys
15:46:01.0253 0x146c condrv - ok
15:46:01.0326 0x146c [ 59C2A9C6B3253054A89D5E7CBBAD6783, B0763B46B9C901F95A99251722675D91F6BF7513FBDD69874FBAA6B3792A4A9A ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
15:46:01.0415 0x146c cphs - ok
15:46:01.0424 0x146c [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:46:01.0502 0x146c CryptSvc - ok
15:46:01.0549 0x146c [ F2C69C3D98249DE14D4B2832516D4FD5, 5F622A61A99202802B35532036CFCFDFB1FDEC32465BA8CCAB4C4FAFA336FC2A ] CSC C:\Windows\system32\drivers\csc.sys
15:46:01.0604 0x146c CSC - ok
15:46:01.0635 0x146c [ 22CCB6AFF617AAC6121DF6CDA5ABF3F4, 7F6F888CF4D7EF93144A791891E41858F7C0CDDC0B65ED09B9CD55EE3734FCCF ] CscService C:\Windows\System32\cscsvc.dll
15:46:01.0736 0x146c CscService - ok
15:46:01.0767 0x146c [ 48AED45DF009081AF3F5144F7D624674, 4425C15EB9E1177EE5134A33F63DAF7FF876577946DBF1EAD92C5614025113BB ] CxAudMsg C:\Windows\system32\CxAudMsg64.exe
15:46:01.0767 0x146c CxAudMsg - ok
15:46:01.0818 0x146c [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam C:\Windows\system32\drivers\dam.sys
15:46:01.0834 0x146c dam - ok
15:46:01.0911 0x146c [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch C:\Windows\system32\rpcss.dll
15:46:01.0979 0x146c DcomLaunch - ok
15:46:02.0055 0x146c [ FC1569B5705887D74FE7C8A39BE1C71C, 7DEB8FE472C72C439A2F54B6277C0A87AC2083869BD9AF8226071B7AA33B09FF ] defragsvc C:\Windows\System32\defragsvc.dll
15:46:02.0155 0x146c defragsvc - ok
15:46:02.0202 0x146c [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\Windows\system32\das.dll
15:46:02.0308 0x146c DeviceAssociationService - ok
15:46:02.0355 0x146c [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
15:46:02.0371 0x146c DeviceInstall - ok
15:46:02.0418 0x146c [ 431141C6859990824D17F71C30A78728, 448B3DC20C8FDD5B66217E0E01DBCC4904F94BDA0826F109D139DDD2C2D7FBF2 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
15:46:02.0480 0x146c Dfsc - ok
15:46:02.0512 0x146c [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp C:\Windows\system32\dhcpcore.dll
15:46:02.0580 0x146c Dhcp - ok
15:46:02.0595 0x146c [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache C:\Windows\system32\drivers\discache.sys
15:46:02.0611 0x146c discache - ok
15:46:02.0642 0x146c [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk C:\Windows\system32\drivers\disk.sys
15:46:02.0658 0x146c disk - ok
15:46:02.0673 0x146c [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
15:46:02.0736 0x146c dmvsc - ok
15:46:02.0767 0x146c [ B9450BC3F1820A99D010D7426BCA60E9, FC7C35A0C522E5DA52B0616CF99F4903EAC14946180A18A8D8A0FF555BAA87C5 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:46:02.0855 0x146c Dnscache - ok
15:46:02.0879 0x146c [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc C:\Windows\System32\dot3svc.dll
15:46:02.0911 0x146c dot3svc - ok
15:46:02.0942 0x146c [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS C:\Windows\system32\dps.dll
15:46:02.0958 0x146c DPS - ok
15:46:03.0004 0x146c [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:46:03.0139 0x146c drmkaud - ok
15:46:03.0175 0x146c [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
15:46:03.0234 0x146c DsmSvc - ok
15:46:03.0275 0x146c [ 33F90B202E9DD9B7D489EB59310FDC34, 6ECF6669433E090E9CF6B1875AF18D2C06F8CDB3901D58BF89C3E2202574ABBD ] dtsoftbus01 C:\Windows\System32\drivers\dtsoftbus01.sys
15:46:03.0287 0x146c dtsoftbus01 - ok
15:46:03.0352 0x146c [ 2BB5627EB587FA995086C3D8C21B6D3F, 871E35BBE66180781324D38823B74263B660CF9254EE348A15421FAC5667F294 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:46:03.0419 0x146c DXGKrnl - ok
15:46:03.0481 0x146c [ FE96AA1A36E76588C80DF1040286DDE1, 86EED8A0B59CD1930E6282997537ED94333FC7D45E3FE5A4D82057E1C8E5C2CD ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
15:46:03.0504 0x146c eamonm - ok
15:46:03.0520 0x146c [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost C:\Windows\System32\eapsvc.dll
15:46:03.0551 0x146c Eaphost - ok
15:46:03.0723 0x146c [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv C:\Windows\system32\drivers\evbda.sys
15:46:03.0895 0x146c ebdrv - ok
15:46:03.0942 0x146c [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] EFS C:\Windows\System32\lsass.exe
15:46:03.0989 0x146c EFS - ok
15:46:04.0055 0x146c [ 807BA90D47F8885C09E1D6AFBB706E18, A803FE639C9C87733CA73D8F6C04A8CEB28DC45EEEA6CEC01ED3D4124C8E48EA ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
15:46:04.0067 0x146c ehdrv - ok
15:46:04.0083 0x146c [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
15:46:04.0099 0x146c EhStorClass - ok
15:46:04.0099 0x146c [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
15:46:04.0114 0x146c EhStorTcgDrv - ok
15:46:04.0302 0x146c [ 4CB575D97653FA91FFB02DA3105EB084, 59FB4D2485EEDBCC56D92C1F5DF3FEAE67D751F3AD7AEA7590F3C73107C829E8 ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
15:46:04.0333 0x146c ekrn - ok
15:46:04.0424 0x146c [ FEE856E92AFCC61DA146F186E291FFD7, 37F703320EFBA75B9AEF1969CAFFBF32463E1D3B1C4BD05DC9E4C6CA60AA81AB ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
15:46:04.0424 0x146c epfwwfpr - ok
15:46:04.0455 0x146c [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev C:\Windows\System32\drivers\errdev.sys
15:46:04.0487 0x146c ErrDev - ok
15:46:04.0524 0x146c [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem C:\Windows\system32\es.dll
15:46:04.0605 0x146c EventSystem - ok
15:46:04.0623 0x146c [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat C:\Windows\system32\drivers\exfat.sys
15:46:04.0659 0x146c exfat - ok
15:46:04.0681 0x146c [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:46:04.0698 0x146c fastfat - ok
15:46:04.0786 0x146c [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax C:\Windows\system32\fxssvc.exe
15:46:04.0864 0x146c Fax - ok
15:46:04.0896 0x146c [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc C:\Windows\System32\drivers\fdc.sys
15:46:04.0927 0x146c fdc - ok
15:46:04.0961 0x146c [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost C:\Windows\system32\fdPHost.dll
15:46:04.0995 0x146c fdPHost - ok
15:46:04.0995 0x146c [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub C:\Windows\system32\fdrespub.dll
15:46:05.0011 0x146c FDResPub - ok
15:46:05.0042 0x146c [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc C:\Windows\system32\fhsvc.dll
15:46:05.0151 0x146c fhsvc - ok
15:46:05.0182 0x146c [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:46:05.0198 0x146c FileInfo - ok
15:46:05.0214 0x146c [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:46:05.0229 0x146c Filetrace - ok
15:46:05.0295 0x146c [ 227846995AFEEFA70D328BF5334A86A5, B8EF22DE552B44E7DC352742C775BB6B4992B653AF4B66B231A60182CE7A7201 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
15:46:05.0358 0x146c FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
15:46:07.0804 0x146c Detect skipped due to KSN trusted
15:46:07.0804 0x146c FLEXnet Licensing Service - ok
15:46:07.0851 0x146c [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
15:46:07.0867 0x146c flpydisk - ok
15:46:07.0898 0x146c [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:46:07.0929 0x146c FltMgr - ok
15:46:07.0979 0x146c [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache C:\Windows\system32\FntCache.dll
15:46:08.0104 0x146c FontCache - ok
15:46:08.0167 0x146c [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:46:08.0198 0x146c FontCache3.0.0.0 - ok
15:46:08.0198 0x146c [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:46:08.0214 0x146c FsDepends - ok
15:46:08.0229 0x146c [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:46:08.0229 0x146c Fs_Rec - ok
15:46:08.0278 0x146c [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:46:08.0301 0x146c fvevol - ok
15:46:08.0324 0x146c [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
15:46:08.0339 0x146c FxPPM - ok
15:46:08.0355 0x146c [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
15:46:08.0371 0x146c gagp30kx - ok
15:46:08.0386 0x146c [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
15:46:08.0418 0x146c gencounter - ok
15:46:08.0487 0x146c [ A27A06D8359BC5202F2F8E3240DE205F, C2BB64106D6894E6CF45121FE3ECCDE2A00CAE9268CF5ECA11F436C10DBFC6F0 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
15:46:08.0536 0x146c GfExperienceService - ok
15:46:08.0584 0x146c [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
15:46:08.0600 0x146c GPIOClx0101 - ok
15:46:08.0662 0x146c [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc C:\Windows\System32\gpsvc.dll
15:46:08.0740 0x146c gpsvc - ok
15:46:08.0803 0x146c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:46:08.0818 0x146c gupdate - ok
15:46:08.0818 0x146c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:46:08.0818 0x146c gupdatem - ok
15:46:08.0874 0x146c [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
15:46:08.0893 0x146c gusvc - ok
15:46:08.0924 0x146c [ EE3DB7455A1766D551F5607CEC4755A0, 24F1615148F22E5E286AA166B7C30D6AE0B78D1435357C7CB486D1F3BE7128D7 ] Hamachi C:\Windows\system32\DRIVERS\Hamdrv.sys
15:46:08.0924 0x146c Hamachi - ok
15:46:08.0979 0x146c [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:46:09.0042 0x146c HdAudAddService - ok
15:46:09.0064 0x146c [ 58CC013EFA9893057160EDA018D8ADCE, BE8AA220CFBD90202C1B130DF349C3198E3447F3C2DC7BC5FC8816F57F78BA00 ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
15:46:09.0111 0x146c HDAudBus - ok
15:46:09.0126 0x146c [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
15:46:09.0159 0x146c HidBatt - ok
15:46:09.0194 0x146c [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth C:\Windows\System32\drivers\hidbth.sys
15:46:09.0224 0x146c HidBth - ok
15:46:09.0239 0x146c [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
15:46:09.0400 0x146c hidi2c - ok
15:46:09.0419 0x146c [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr C:\Windows\System32\drivers\hidir.sys
15:46:09.0460 0x146c HidIr - ok
15:46:09.0487 0x146c [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv C:\Windows\System32\hidserv.dll
15:46:09.0504 0x146c hidserv - ok
15:46:09.0520 0x146c [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb C:\Windows\System32\drivers\hidusb.sys
15:46:09.0614 0x146c HidUsb - ok
15:46:09.0629 0x146c [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:46:09.0661 0x146c hkmsvc - ok
15:46:09.0696 0x146c [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:46:09.0724 0x146c HomeGroupListener - ok
15:46:09.0758 0x146c [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:46:09.0824 0x146c HomeGroupProvider - ok
15:46:09.0839 0x146c [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:46:09.0855 0x146c HpSAMD - ok
15:46:09.0886 0x146c [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:46:09.0986 0x146c HTTP - ok
15:46:10.0001 0x146c [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:46:10.0001 0x146c hwpolicy - ok
15:46:10.0032 0x146c [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
15:46:10.0055 0x146c hyperkbd - ok
15:46:10.0060 0x146c [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
15:46:10.0065 0x146c HyperVideo - ok
15:46:10.0096 0x146c [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
15:46:10.0143 0x146c i8042prt - ok
15:46:10.0174 0x146c [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:46:10.0206 0x146c iaStorV - ok
15:46:10.0221 0x146c [ 6C7FE2FD06EF34A7972E34C876FC78DF, B545A10DEEF59B8145D3D20361DA7F1C0FD27B6273B126B500594D6456C3FC06 ] IBMPMDRV C:\Windows\system32\DRIVERS\ibmpmdrv.sys
15:46:10.0237 0x146c IBMPMDRV - ok
15:46:10.0237 0x146c [ 5A1E3B4BA187327DF5FF122F96FA753A, AED93AA268F75D46752FCE5189392EE41225DA45F7D67C73B77629C8227E5084 ] IBMPMSVC C:\Windows\system32\ibmpmsvc.exe
15:46:10.0252 0x146c IBMPMSVC - ok
15:46:10.0299 0x146c [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
15:46:10.0299 0x146c ICCS - ok
15:46:10.0396 0x146c [ DEA2F976E7327716AA0038EBF550003A, 5EA4666874F1D03879EA95F28228AC9EA3D7DF0F2E199EEE9B5BC6C81CA290B3 ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
15:46:10.0489 0x146c IconMan_R - ok
15:46:10.0664 0x146c [ 682FB40EF71631C581F499406A022CD2, D5C92EB9E47A63A959DFFF712DFB38BDFBD0507FD395130E03799F2C8E1E854D ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
15:46:10.0915 0x146c igfx - ok
15:46:10.0946 0x146c [ 7A510A9AFC7955DEE63F8DC243E31292, 13906F6212F4C116BE224F2A8AFFF089ACFED8F543E26FC6208FF38463366173 ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
15:46:10.0962 0x146c igfxCUIService1.0.0.0 - ok
15:46:10.0976 0x146c [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
15:46:10.0985 0x146c iirsp - ok
15:46:11.0032 0x146c [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] IKEEXT C:\Windows\System32\ikeext.dll
15:46:11.0097 0x146c IKEEXT - ok
15:46:11.0128 0x146c [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
15:46:11.0159 0x146c IntcDAud - ok
15:46:11.0222 0x146c [ C6128F2E3DC6156C6F8828F9F1B96010, 612C1191AFB8F69BA5634E8C52BDDE608F57D98FA4C76C5A337676A5F1E8191D ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
15:46:11.0299 0x146c Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
15:46:13.0677 0x146c Detect skipped due to KSN trusted
15:46:13.0677 0x146c Intel(R) Capability Licensing Service Interface - ok
15:46:13.0740 0x146c [ 729AB4F0608E95EFF8FDEF23596283E2, 62A2091FF440C65505AB3E38436A86D9B0978BCB9485960EFCE0C5CBC8E06201 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
15:46:13.0771 0x146c Intel(R) Capability Licensing Service TCP IP Interface - ok
15:46:13.0818 0x146c [ C4C5DEB8AC4D8E623CA1CC8981A2AE1B, A06E0BD4872CEFA14460C553FADADCE3774397CF712A249938ABF7388B4F20D4 ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
15:46:13.0818 0x146c Intel(R) ME Service - ok
15:46:13.0849 0x146c [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide C:\Windows\system32\drivers\intelide.sys
15:46:13.0849 0x146c intelide - ok
15:46:13.0881 0x146c [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm C:\Windows\System32\drivers\intelppm.sys
15:46:13.0912 0x146c intelppm - ok
15:46:13.0912 0x146c [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:46:13.0951 0x146c IpFilterDriver - ok
15:46:13.0995 0x146c [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:46:14.0073 0x146c iphlpsvc - ok
15:46:14.0120 0x146c [ A4071DA3AE419F9694BFCB267C7DB8D7, 392DEE1DA51606C29418A98D2861F115E9F67C688B4281C53E87BA73A98809FB ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
15:46:14.0182 0x146c IPMIDRV - ok
15:46:14.0200 0x146c [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:46:14.0216 0x146c IPNAT - ok
15:46:14.0231 0x146c [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:46:14.0279 0x146c IRENUM - ok
15:46:14.0279 0x146c [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:46:14.0295 0x146c isapnp - ok
15:46:14.0326 0x146c [ E6530FD4F61B40F338BF4355A21B9A09, FE9BF039B9901BEC260A69F7C49ACFA9881AD470DCCBA70C7EC36F518DA71702 ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
15:46:14.0342 0x146c iScsiPrt - ok
15:46:14.0410 0x146c [ 5C9B001D8970C2DA36254A916F3DA8F7, 625AC5C3DFAE52BD34EC3F93742D1D2C229785E4F0F3484CFB7B8728A1C830DF ] iumsvc C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
15:46:14.0424 0x146c iumsvc - ok
15:46:14.0456 0x146c [ A3B59E5887B294F2ED06A522F0FDC9D3, 38B8453FC100C74376E6B36D71F27228D1EBE1094ED0175F96C018C958B1B37A ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
15:46:14.0472 0x146c jhi_service - ok
15:46:14.0487 0x146c [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
15:46:14.0503 0x146c kbdclass - ok
15:46:14.0519 0x146c [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
15:46:14.0555 0x146c kbdhid - ok
15:46:14.0560 0x146c [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
15:46:14.0604 0x146c kdnic - ok
15:46:14.0620 0x146c [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] KeyIso C:\Windows\system32\lsass.exe
15:46:14.0620 0x146c KeyIso - ok
15:46:14.0620 0x146c KMService - ok
15:46:14.0651 0x146c [ 8B3EB6372436195B8EA8AE09A184BCE2, 9AFB7A9D6AEEBF5994C85B355155024768116E2D537C9FA169BC3F4594ECD35C ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:46:14.0667 0x146c KSecDD - ok
15:46:14.0704 0x146c [ 0EB535ADDC065F2D0CBFC089630A6065, F6DD544227A5B7A0C80E401EB5461963567A24834C60AF520FBABC1A9FB4E631 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:46:14.0720 0x146c KSecPkg - ok
15:46:14.0736 0x146c [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
15:46:14.0767 0x146c ksthunk - ok
15:46:14.0804 0x146c [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm C:\Windows\system32\msdtckrm.dll
15:46:14.0835 0x146c KtmRm - ok
15:46:14.0880 0x146c [ 05A5B36592BB5F371B6AB020A2691E42, 384230A10EA0394E260282509B7D8EFCBFF8814611F6EFAB2DD346B97963EC55 ] LanmanServer C:\Windows\System32\srvsvc.dll
15:46:14.0970 0x146c LanmanServer - ok
15:46:15.0020 0x146c [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:46:15.0039 0x146c LanmanWorkstation - ok
15:46:15.0070 0x146c [ BC381F006A302D01D20B0B5768AE3A94, 5DCBC9F6992C62D11001EF0340CA7813BD5AA84B74C990AC6889B81DBC8B9DBA ] LENOVO.MICMUTE C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
15:46:15.0070 0x146c LENOVO.MICMUTE - ok
15:46:15.0104 0x146c [ 5EA407821BB3104C31A705175AB4F309, 32A350065990047E80B452FD2B82BC9B8E68AF3F8EA8CCD60E59FFD6D24CDF7C ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
15:46:15.0112 0x146c lirsgt - ok
15:46:15.0124 0x146c [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:46:15.0150 0x146c lltdio - ok
15:46:15.0180 0x146c [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:46:15.0211 0x146c lltdsvc - ok
15:46:15.0227 0x146c [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts C:\Windows\System32\lmhsvc.dll
15:46:15.0290 0x146c lmhosts - ok
15:46:15.0290 0x146c LMIGuardianSvc - ok
15:46:15.0336 0x146c [ 3142FC089FE8FCF79B442B91BC4F0C16, ECF8E9CC84B87D19C4762E73EA2DD80B336A9C42A67512F2E73179F49484592A ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
15:46:15.0352 0x146c LMS - ok
15:46:15.0368 0x146c [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
15:46:15.0383 0x146c LSI_SAS - ok
15:46:15.0383 0x146c [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
15:46:15.0399 0x146c LSI_SAS2 - ok
15:46:15.0415 0x146c [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
15:46:15.0415 0x146c LSI_SCSI - ok
15:46:15.0430 0x146c [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
15:46:15.0448 0x146c LSI_SSS - ok
15:46:15.0479 0x146c [ 1DC9B701F8EB7D67774035AC9C3104F6, 77371267CDA605F78674BF8FA14B134B22299CD96EADA60A68762207595F0B46 ] LSM C:\Windows\System32\lsm.dll
15:46:15.0604 0x146c LSM - ok
15:46:15.0636 0x146c [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv C:\Windows\system32\drivers\luafv.sys
15:46:15.0651 0x146c luafv - ok
15:46:15.0667 0x146c [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas C:\Windows\system32\drivers\megasas.sys
15:46:15.0683 0x146c megasas - ok
15:46:15.0698 0x146c [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
15:46:15.0714 0x146c MegaSR - ok
15:46:15.0730 0x146c [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64 C:\Windows\System32\drivers\HECIx64.sys
15:46:15.0730 0x146c MEIx64 - ok
15:46:15.0780 0x146c Microsoft SharePoint Workspace Audit Service - ok
15:46:15.0811 0x146c [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS C:\Windows\system32\mmcss.dll
15:46:15.0858 0x146c MMCSS - ok
15:46:15.0874 0x146c [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem C:\Windows\system32\drivers\modem.sys
15:46:15.0898 0x146c Modem - ok
15:46:15.0904 0x146c [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor C:\Windows\System32\drivers\monitor.sys
15:46:15.0936 0x146c monitor - ok
15:46:15.0951 0x146c [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass C:\Windows\System32\drivers\mouclass.sys
15:46:15.0967 0x146c mouclass - ok
15:46:15.0998 0x146c [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid C:\Windows\System32\drivers\mouhid.sys
15:46:16.0030 0x146c mouhid - ok
15:46:16.0067 0x146c [ E7E9DBFDD3F25ED0C05B99AE9FA18BDE, 6D0204BA271FD3262DAE6E6BF9C12C0D49E3C9AF40EB1E072BD5CA5E2B8598D5 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:46:16.0080 0x146c mountmgr - ok
15:46:16.0117 0x146c [ B4E9C7383A705628AD491CF0F87D901F, 5C0CD7133D4F5B1E0466CDB2A2210ECA57206A8BC41F37BC6324120AE5501C70 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:46:16.0117 0x146c MozillaMaintenance - ok
15:46:16.0148 0x146c [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:46:16.0212 0x146c mpsdrv - ok
15:46:16.0255 0x146c [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:46:16.0311 0x146c MpsSvc - ok
15:46:16.0327 0x146c [ 3D70147F55F1EC84EB9139ED7FFE48BC, 12429C2FDDDA13815F0E18F9009011AA5360955759A23A38175543F480CB92EF ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:46:16.0395 0x146c MRxDAV - ok
15:46:16.0426 0x146c [ 14EE56050E1637926F5CFA65B1F4209B, C654280B4BB461898B43DF350B5BB76C2FDEBD6B49A19D08B2F28D92E2FA3D0D ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:46:16.0504 0x146c mrxsmb - ok
15:46:16.0535 0x146c [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:46:16.0551 0x146c mrxsmb10 - ok
15:46:16.0582 0x146c [ 0AA400AB21745F1153ECE75E0186509A, E26696A00008BB8D88ABED6F379FFFAE21ACE9AA7108D9E89A7D99CAF2F23FEF ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:46:16.0710 0x146c mrxsmb20 - ok
15:46:16.0726 0x146c [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
15:46:16.0748 0x146c MsBridge - ok
15:46:16.0774 0x146c [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC C:\Windows\System32\msdtc.exe
15:46:16.0800 0x146c MSDTC - ok
15:46:16.0816 0x146c [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:46:16.0832 0x146c Msfs - ok
15:46:16.0878 0x146c [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
15:46:16.0889 0x146c msgpiowin32 - ok
15:46:16.0897 0x146c [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:46:16.0928 0x146c mshidkmdf - ok
15:46:16.0964 0x146c [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
15:46:16.0994 0x146c mshidumdf - ok
15:46:17.0003 0x146c [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:46:17.0019 0x146c msisadrv - ok
15:46:17.0034 0x146c [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:46:17.0065 0x146c MSiSCSI - ok
15:46:17.0082 0x146c msiserver - ok
15:46:17.0103 0x146c [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:46:17.0120 0x146c MSKSSRV - ok
15:46:17.0151 0x146c [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
15:46:17.0167 0x146c MsLldp - ok
15:46:17.0182 0x146c [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:46:17.0198 0x146c MSPCLOCK - ok
15:46:17.0199 0x146c [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:46:17.0214 0x146c MSPQM - ok
15:46:17.0249 0x146c [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:46:17.0270 0x146c MsRPC - ok
15:46:17.0284 0x146c [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
15:46:17.0284 0x146c mssmbios - ok
15:46:17.0300 0x146c [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:46:17.0316 0x146c MSTEE - ok
15:46:17.0331 0x146c [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
15:46:17.0331 0x146c MTConfig - ok
15:46:17.0347 0x146c [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup C:\Windows\system32\Drivers\mup.sys
15:46:17.0347 0x146c Mup - ok
15:46:17.0378 0x146c [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis C:\Windows\system32\drivers\mvumis.sys
15:46:17.0378 0x146c mvumis - ok
15:46:17.0425 0x146c [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent C:\Windows\system32\qagentRT.dll
15:46:17.0456 0x146c napagent - ok
15:46:17.0487 0x146c [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:46:17.0530 0x146c NativeWifiP - ok
15:46:17.0552 0x146c [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc C:\Windows\System32\ncasvc.dll
15:46:17.0563 0x146c NcaSvc - ok
15:46:17.0579 0x146c [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
15:46:17.0624 0x146c NcdAutoSetup - ok
15:46:17.0687 0x146c [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS C:\Windows\system32\drivers\ndis.sys
15:46:17.0740 0x146c NDIS - ok
15:46:17.0756 0x146c [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:46:17.0793 0x146c NdisCap - ok
15:46:17.0793 0x146c [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
15:46:17.0824 0x146c NdisImPlatform - ok
15:46:17.0853 0x146c [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:46:17.0895 0x146c NdisTapi - ok
15:46:17.0911 0x146c [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:46:17.0942 0x146c Ndisuio - ok
15:46:17.0973 0x146c [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:46:17.0989 0x146c NdisWan - ok
15:46:18.0004 0x146c [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY C:\Windows\system32\DRIVERS\ndiswan.sys
15:46:18.0020 0x146c NDISWANLEGACY - ok
15:46:18.0036 0x146c [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:46:18.0083 0x146c NDProxy - ok
15:46:18.0098 0x146c [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu C:\Windows\system32\drivers\Ndu.sys
15:46:18.0129 0x146c Ndu - ok
15:46:18.0149 0x146c [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:46:18.0164 0x146c NetBIOS - ok
15:46:18.0181 0x146c [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:46:18.0198 0x146c NetBT - ok
15:46:18.0214 0x146c [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] Netlogon C:\Windows\system32\lsass.exe
15:46:18.0229 0x146c Netlogon - ok
15:46:18.0245 0x146c [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman C:\Windows\System32\netman.dll
15:46:18.0276 0x146c Netman - ok
15:46:18.0292 0x146c [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm C:\Windows\System32\netprofmsvc.dll
15:46:18.0339 0x146c netprofm - ok
15:46:18.0397 0x146c [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:46:18.0412 0x146c NetTcpPortSharing - ok
15:46:18.0454 0x146c [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
15:46:18.0466 0x146c nfrd960 - ok
15:46:18.0513 0x146c [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] NlaSvc C:\Windows\System32\nlasvc.dll
15:46:18.0651 0x146c NlaSvc - ok
15:46:18.0751 0x146c [ 1381E95D4E0F94F22DD484B5F8C1D61D, E91C10A62E3B5A610063F48354C6F4A1AAB7300A69EAD59E89ED8EEFDBD99062 ] nmwcd C:\Windows\system32\drivers\ccdcmbx64.sys
15:46:18.0894 0x146c nmwcd - ok
15:46:18.0941 0x146c [ 205510CDB7B6084BF31760B5D06F9242, F3EAC6A7127DC5A0FEE7A9AFA561A8CA9B6E83FECCD731C890E85C33514B533B ] nmwcdc C:\Windows\system32\drivers\ccdcmbox64.sys
15:46:18.0972 0x146c nmwcdc - ok
15:46:18.0988 0x146c [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs C:\Windows\system32\drivers\Npfs.sys
15:46:19.0019 0x146c Npfs - ok
15:46:19.0052 0x146c [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
15:46:19.0078 0x146c npsvctrig - ok
15:46:19.0093 0x146c [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi C:\Windows\system32\nsisvc.dll
15:46:19.0125 0x146c nsi - ok
15:46:19.0125 0x146c [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
15:46:19.0235 0x146c nsiproxy - ok
15:46:19.0313 0x146c [ 7BE3EDFFA3216F989A6BDCB14795DD08, 19A2D0120C46CA9BCFBC16DC3E65687ACDDCBA33B79128188652BA2AFAA2EE2F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
15:46:19.0380 0x146c Ntfs - ok
15:46:19.0395 0x146c [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null C:\Windows\system32\drivers\Null.sys
15:46:19.0411 0x146c Null - ok
15:46:19.0790 0x146c [ 185B4FFECD886A424B57B58AE173FBBE, 7CFD51694091035639B900EC64FAD62CC1E5F3DC520F59CC27540B170A957C60 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:46:20.0256 0x146c nvlddmkm - ok
15:46:20.0356 0x146c [ 507E699BD36530491BA0F95251B22F06, BDE6EB91FADBCB8CE16C31EF43A97DC6CC5D0F4EBAEA7903810556D0D70F54BC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
15:46:20.0418 0x146c NvNetworkService - ok
15:46:20.0465 0x146c [ F4F8000C893987C22CE7B49B47DB1B1C, 064A73D80B75B41316F3D5D6DD4ECEEC8C04D4EF4CCE4BA237EAEF56A7613F24 ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
15:46:20.0481 0x146c nvpciflt - ok
15:46:20.0496 0x146c [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid C:\Windows\system32\drivers\nvraid.sys
15:46:20.0512 0x146c nvraid - ok
15:46:20.0528 0x146c [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor C:\Windows\system32\drivers\nvstor.sys
15:46:20.0548 0x146c nvstor - ok
15:46:20.0599 0x146c [ 7E4C1879248629A2C9CC9ADF52CBB9B7, 856FF60FD111C3C80B137BC62B7EF92D3B95FBA462A29F97D65457A5A507506E ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
15:46:20.0599 0x146c NvStreamKms - ok
15:46:21.0119 0x146c [ C3EB27E4BC00283CA166A9FC42B90FC7, FED7F68D1C6EB442292E40DCFAEE7339AE21D5EF726A9DC9BCB6AB5C5873B3E0 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
15:46:21.0587 0x146c NvStreamSvc - ok
15:46:21.0665 0x146c [ E1CE82592245B9E9621F17FBF457DB4E, 98B021623B10EBF7ED370BC2516D8377C09E9E2BB49BD96F492F55006B1B8CC4 ] nvsvc C:\Windows\system32\nvvsvc.exe
15:46:21.0696 0x146c nvsvc - ok
15:46:21.0712 0x146c [ 1AF619620613869C07F9C147BC37520F, 0AD4E100354E201D5E72BA236C1464F5083A7E3B58C4AC6BA712489D258955F5 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
15:46:21.0727 0x146c nvvad_WaveExtensible - ok
15:46:21.0749 0x146c [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
15:46:21.0762 0x146c nv_agp - ok
15:46:21.0780 0x146c [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:46:21.0796 0x146c ose - ok
15:46:21.0969 0x146c [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:46:22.0115 0x146c osppsvc - ok
15:46:22.0162 0x146c [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
15:46:22.0224 0x146c p2pimsvc - ok
15:46:22.0255 0x146c [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc C:\Windows\system32\p2psvc.dll
15:46:22.0291 0x146c p2psvc - ok
15:46:22.0319 0x146c [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport C:\Windows\System32\drivers\parport.sys
15:46:22.0335 0x146c Parport - ok
15:46:22.0366 0x146c [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr C:\Windows\system32\drivers\partmgr.sys
15:46:22.0378 0x146c partmgr - ok
15:46:22.0403 0x146c [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc C:\Windows\System32\pcasvc.dll
15:46:22.0466 0x146c PcaSvc - ok
15:46:22.0504 0x146c [ 3FDE033DFB0D07F8B7D5C9A3044AA121, 2C23B4FA34BA3060884B0168A830DD395A3853855CD6DF4065FBB303DFB4A87E ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
15:46:22.0567 0x146c pccsmcfd - ok
15:46:22.0598 0x146c [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci C:\Windows\system32\drivers\pci.sys
15:46:22.0614 0x146c pci - ok
15:46:22.0629 0x146c [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide C:\Windows\system32\drivers\pciide.sys
15:46:22.0629 0x146c pciide - ok
15:46:22.0664 0x146c [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
15:46:22.0680 0x146c pcmcia - ok
15:46:22.0705 0x146c [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw C:\Windows\system32\drivers\pcw.sys
15:46:22.0715 0x146c pcw - ok
15:46:22.0725 0x146c [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc C:\Windows\system32\drivers\pdc.sys
15:46:22.0741 0x146c pdc - ok
15:46:22.0772 0x146c [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
15:46:23.0089 0x146c PEAUTH - ok
15:46:23.0183 0x146c [ DF0D9BDCB600913F40FF125BF8CE1979, 63544C3CEAF47FEEB761FD25BCAE53610C7AD65B7B2295C49D72A7C3C78A376D ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
15:46:23.0311 0x146c PeerDistSvc - ok
15:46:23.0389 0x146c [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost C:\Windows\SysWow64\perfhost.exe
15:46:23.0452 0x146c PerfHost - ok
15:46:23.0531 0x146c [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla C:\Windows\system32\pla.dll
15:46:23.0595 0x146c pla - ok
15:46:23.0627 0x146c [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
15:46:23.0642 0x146c PlugPlay - ok
15:46:23.0658 0x146c [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
15:46:23.0679 0x146c PNRPAutoReg - ok
15:46:23.0699 0x146c [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
15:46:23.0705 0x146c PNRPsvc - ok
15:46:23.0736 0x146c [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
15:46:23.0767 0x146c PolicyAgent - ok
15:46:23.0798 0x146c [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power C:\Windows\system32\umpo.dll
15:46:23.0879 0x146c Power - ok
15:46:23.0911 0x146c [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
15:46:23.0924 0x146c PptpMiniport - ok
15:46:24.0049 0x146c [ EE553F62E81D7F7F3718DB960A1EF2C0, 84A8C79B4F51D606F567A038280007F278D57BE06AB0F060E4D43AC1347AB459 ] PrintNotify C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
15:46:24.0164 0x146c PrintNotify - ok
15:46:24.0195 0x146c [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor C:\Windows\System32\drivers\processr.sys
15:46:24.0227 0x146c Processor - ok
15:46:24.0258 0x146c [ 7319B31138CF508E0C4502946657A4B4, 03C57F90F673012B983720D1477822AABA6D6D54F700AB2248CAED6451B37CA3 ] ProfSvc C:\Windows\system32\profsvc.dll
15:46:24.0320 0x146c ProfSvc - ok
15:46:24.0352 0x146c [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
15:46:24.0373 0x146c Psched - ok
15:46:24.0416 0x146c [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE C:\Windows\system32\qwave.dll
15:46:24.0447 0x146c QWAVE - ok
15:46:24.0461 0x146c [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
15:46:24.0484 0x146c QWAVEdrv - ok
15:46:24.0500 0x146c [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
15:46:24.0516 0x146c RasAcd - ok
15:46:24.0549 0x146c [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
15:46:24.0576 0x146c RasAgileVpn - ok
15:46:24.0584 0x146c [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto C:\Windows\System32\rasauto.dll
15:46:24.0600 0x146c RasAuto - ok
15:46:24.0631 0x146c [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
15:46:24.0650 0x146c Rasl2tp - ok
15:46:24.0671 0x146c [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan C:\Windows\System32\rasmans.dll
15:46:24.0713 0x146c RasMan - ok
15:46:24.0728 0x146c [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
15:46:24.0758 0x146c RasPppoe - ok
15:46:24.0763 0x146c [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
15:46:24.0779 0x146c RasSstp - ok
15:46:24.0823 0x146c [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
15:46:24.0880 0x146c rdbss - ok
15:46:24.0897 0x146c [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
15:46:24.0959 0x146c rdpbus - ok
15:46:24.0975 0x146c [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
15:46:25.0037 0x146c RDPDR - ok
15:46:25.0072 0x146c [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:46:25.0083 0x146c RdpVideoMiniport - ok
15:46:25.0117 0x146c [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
15:46:25.0148 0x146c RDPWD - ok
15:46:25.0180 0x146c [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
15:46:25.0195 0x146c rdyboost - ok
15:46:25.0227 0x146c [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess C:\Windows\System32\mprdim.dll
15:46:25.0258 0x146c RemoteAccess - ok
15:46:25.0299 0x146c [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry C:\Windows\system32\regsvc.dll
15:46:25.0316 0x146c RemoteRegistry - ok
15:46:25.0348 0x146c [ CCBFCABDFE2BC22F0645CEAADDB36004, 279EA9075079F91165027CEFD4FBC61A213CA602EE7DE106F7D2D243468706AA ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
15:46:25.0364 0x146c RFCOMM - ok
15:46:25.0397 0x146c [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
15:46:25.0440 0x146c RpcEptMapper - ok
15:46:25.0456 0x146c [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator C:\Windows\system32\locator.exe
15:46:25.0472 0x146c RpcLocator - ok
15:46:25.0525 0x146c [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs C:\Windows\system32\rpcss.dll
15:46:25.0541 0x146c RpcSs - ok
15:46:25.0572 0x146c [ 021614C6A1E2AD175AD6FF65D271B172, AA49C8EC33C28BA887049E6BB3D260F38BC5640FE42846FC53F2D22B3641DDB0 ] RSP2STOR C:\Windows\system32\DRIVERS\RtsP2Stor.sys
15:46:25.0587 0x146c RSP2STOR - ok
15:46:25.0619 0x146c [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
15:46:25.0634 0x146c rspndr - ok
15:46:25.0660 0x146c [ 15923AA360F7675D3D43C9669316A0BA, AD1852732082140C62CC44A01914162E44BF412B4A852DF27DC0E0765E64288F ] RTL8168 C:\Windows\system32\DRIVERS\Rt630x64.sys
15:46:25.0693 0x146c RTL8168 - ok
15:46:25.0724 0x146c [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap C:\Windows\System32\drivers\vms3cap.sys
15:46:25.0740 0x146c s3cap - ok
15:46:25.0779 0x146c [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] SamSs C:\Windows\system32\lsass.exe
15:46:25.0791 0x146c SamSs - ok
15:46:25.0796 0x146c SAService - ok
15:46:25.0805 0x146c [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
15:46:25.0821 0x146c sbp2port - ok
15:46:25.0845 0x146c [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr C:\Windows\System32\SCardSvr.dll
15:46:25.0892 0x146c SCardSvr - ok
15:46:25.0907 0x146c [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
15:46:25.0923 0x146c scfilter - ok
15:46:25.0979 0x146c [ 201C397A73DFEE109490F4BA1168CFC2, 74FC2A30CBF2E2197E75860A3B308CDCBEB3C28794ABED388B493505A2D84BAA ] Schedule C:\Windows\system32\schedsvc.dll
15:46:26.0066 0x146c Schedule - ok
15:46:26.0099 0x146c [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc C:\Windows\System32\certprop.dll
15:46:26.0104 0x146c SCPolicySvc - ok
15:46:26.0166 0x146c [ 958E956E119EB7B9ABA142AFED1B5FF4, DB76B53124C91C959AF6F6E3FA8BEE4B74C1D7CB4684CD88380270CFF3C4469F ] ScsiAccess C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
15:46:26.0191 0x146c ScsiAccess - ok
15:46:26.0220 0x146c [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus C:\Windows\System32\drivers\sdbus.sys
15:46:26.0235 0x146c sdbus - ok
15:46:26.0261 0x146c [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC C:\Windows\System32\SDRSVC.dll
15:46:26.0326 0x146c SDRSVC - ok
15:46:26.0341 0x146c [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor C:\Windows\System32\drivers\sdstor.sys
15:46:26.0357 0x146c sdstor - ok
15:46:26.0373 0x146c [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
15:46:26.0405 0x146c secdrv - ok
15:46:26.0420 0x146c [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon C:\Windows\system32\seclogon.dll
15:46:26.0451 0x146c seclogon - ok
15:46:26.0467 0x146c [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS C:\Windows\system32\sens.dll
15:46:26.0483 0x146c SENS - ok
15:46:26.0509 0x146c [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc C:\Windows\system32\sensrsvc.dll
15:46:26.0558 0x146c SensrSvc - ok
15:46:26.0580 0x146c [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx C:\Windows\system32\drivers\SerCx.sys
15:46:26.0596 0x146c SerCx - ok
15:46:26.0612 0x146c [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum C:\Windows\System32\drivers\serenum.sys
15:46:26.0627 0x146c Serenum - ok
15:46:26.0643 0x146c [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial C:\Windows\System32\drivers\serial.sys
15:46:26.0661 0x146c Serial - ok
15:46:26.0664 0x146c [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse C:\Windows\System32\drivers\sermouse.sys
15:46:26.0679 0x146c sermouse - ok
15:46:26.0742 0x146c [ 78F7BB9F4924BE164294C59B8C3FC096, 75051A6A8B0DBB16CD70855A408134270EEAF0C127BAAE5B592DB53BB87C085B ] ServiceLayer C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
15:46:26.0773 0x146c ServiceLayer - ok
15:46:26.0820 0x146c [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv C:\Windows\system32\sessenv.dll
15:46:26.0836 0x146c SessionEnv - ok
15:46:26.0852 0x146c [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
15:46:26.0876 0x146c sfloppy - ok
15:46:26.0916 0x146c [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess C:\Windows\System32\ipnathlp.dll
15:46:26.0931 0x146c SharedAccess - ok
15:46:26.0978 0x146c [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:46:27.0072 0x146c ShellHWDetection - ok
15:46:27.0088 0x146c [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
15:46:27.0088 0x146c SiSRaid2 - ok
15:46:27.0103 0x146c [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
15:46:27.0119 0x146c SiSRaid4 - ok
15:46:27.0134 0x146c [ 7BCE1D1F6A36F9DC2BC1ACA7D34FBDB9, C7D913A20786F27E8FE9C26FBA492F06BB3762DBF1339AB789BC3D09100C2D69 ] SmbDrvI C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys
15:46:27.0134 0x146c SmbDrvI - ok
15:46:27.0166 0x146c [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
15:46:27.0177 0x146c SNMPTRAP - ok
15:46:27.0208 0x146c [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport C:\Windows\system32\drivers\spaceport.sys
15:46:27.0241 0x146c spaceport - ok
15:46:27.0267 0x146c [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
15:46:27.0283 0x146c SpbCx - ok
15:46:27.0330 0x146c [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler C:\Windows\System32\spoolsv.exe
15:46:27.0401 0x146c Spooler - ok
15:46:27.0531 0x146c [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc C:\Windows\system32\sppsvc.exe
15:46:27.0688 0x146c sppsvc - ok
15:46:27.0735 0x146c [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] srv C:\Windows\system32\DRIVERS\srv.sys
15:46:27.0758 0x146c srv - ok
15:46:27.0808 0x146c [ B56A855B23676CCE05B626C6037FD02F, 3C0DCB16A96BD6A002A4FAF1AF939AF470D95137CB745F5DAD039B5D8C956E30 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
15:46:27.0915 0x146c srv2 - ok
15:46:27.0925 0x146c [ 78E9665C8DC59106D133CBEF0F0C3DE3, 380FD51EE00CEF3FFEF9BFB5E14538E084F1DDF8D8F8BCDF4EC23CB8C3A40D2F ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
15:46:27.0940 0x146c srvnet - ok
15:46:27.0972 0x146c [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
15:46:27.0987 0x146c SSDPSRV - ok
15:46:28.0007 0x146c [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] SstpSvc C:\Windows\system32\sstpsvc.dll
15:46:28.0023 0x146c SstpSvc - ok
15:46:28.0039 0x146c [ 4E85355B94CFCB67C135F6521A4895A7, AC4FC65C1E62A54B3834E7FE0A2B1ECC48A2AA563AE5BD508326EE68FFFBBEEE ] stexstor C:\Windows\system32\drivers\stexstor.sys
15:46:28.0039 0x146c stexstor - ok
15:46:28.0086 0x146c [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] stisvc C:\Windows\System32\wiaservc.dll
15:46:28.0149 0x146c stisvc - ok
15:46:28.0191 0x146c [ B240874B2CA0CD02E8CD11E140B14C57, 0FDBEE3DB644175A30065CAF020F375703ADC45A33221788C010F3111707FC25 ] storahci C:\Windows\system32\drivers\storahci.sys
15:46:28.0201 0x146c storahci - ok
15:46:28.0220 0x146c [ F74DBC95A57B1EE866D3732EB5F79BE2, E4FE9D5CD0A385ACB60D5D5E8D969F26C3A6BC0C08FF0838DBE9CA106229C8DE ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
15:46:28.0220 0x146c storflt - ok
15:46:28.0252 0x146c [ 5337E138B49ED1F44CCBA4073BC35C20, 2B296973215E3865A56C46DC3D27F1460D96BC321558CE7A911B05B0E7BF397F ] StorSvc C:\Windows\system32\storsvc.dll
15:46:28.0301 0x146c StorSvc - ok
15:46:28.0319 0x146c [ 543CD3CC0E05B8D8815E0D4F040B6F59, 4B57C9534E94A0A67FC82DBD4FAECACA180BEC281FB477550A37C0A04777E09E ] storvsc C:\Windows\system32\drivers\storvsc.sys
15:46:28.0319 0x146c storvsc - ok
15:46:28.0334 0x146c [ 1A36AC469140F87CDE62D7F8524E270C, B07086E0D844567FF0A880366EA8ED8042F8ED744E6AB1FD9539F360905A07F2 ] storvsp C:\Windows\System32\drivers\storvsp.sys
15:46:28.0401 0x146c storvsp - ok
15:46:28.0419 0x146c [ 8BC1C1ED6EF9C985A3FAA6A72F41679A, 82CC77030D23013572B4A64A64B6156789F253BF56268B790093CE3D345410A0 ] svsvc C:\Windows\system32\svsvc.dll
15:46:28.0435 0x146c svsvc - ok
15:46:28.0451 0x146c [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] swenum C:\Windows\System32\drivers\swenum.sys
15:46:28.0451 0x146c swenum - ok
15:46:28.0500 0x146c [ 502F9488540051F3E6C39889ECFA76BB, 22ABD681BE4CF8A1F484C6363C1334B1EF7A6C074D837B0121DE1896887B84C6 ] swprv C:\Windows\System32\swprv.dll
15:46:28.0551 0x146c swprv - ok
15:46:28.0598 0x146c [ AEAE48AF681BAF5904608FF5D84E3C9C, 39B362E9E64A43B9AF5CCE2E704CCAE5E10B5BA0B45E535098BC0E40A4F772A8 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
15:46:28.0613 0x146c SynTP - ok
15:46:28.0684 0x146c [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] SysMain C:\Windows\system32\sysmain.dll
15:46:28.0747 0x146c SysMain - ok
15:46:28.0763 0x146c [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
15:46:28.0794 0x146c SystemEventsBroker - ok
15:46:28.0825 0x146c [ A6C06C45C44AD06C70AF8899AEC15BDC, AC2CCCDBA6B94BA85A6D41B47343193D175786D4ECF71AE9C7766ADD63A1273F ] TabletInputService C:\Windows\System32\TabSvc.dll
15:46:28.0841 0x146c TabletInputService - ok
15:46:28.0872 0x146c [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] TapiSrv C:\Windows\System32\tapisrv.dll
15:46:28.0903 0x146c TapiSrv - ok
15:46:28.0992 0x146c [ 2AE9136724568DB4F08BC04F131CFC54, 11AA017AE39D0A63233D01A8AE33FD53D5302683E037D29B73366D6233764080 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
15:46:29.0112 0x146c Tcpip - ok
15:46:29.0171 0x146c [ 2AE9136724568DB4F08BC04F131CFC54, 11AA017AE39D0A63233D01A8AE33FD53D5302683E037D29B73366D6233764080 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
15:46:29.0234 0x146c TCPIP6 - ok
15:46:29.0264 0x146c [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
15:46:29.0277 0x146c tcpipreg - ok
15:46:29.0293 0x146c [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
15:46:29.0308 0x146c tdx - ok
15:46:29.0324 0x146c [ F7C8AB5D8AFFAA318D6A21093D139BF4, 0A35052EF7DC8615783A23897358D8C579BE694363615C9563FF629E7B719991 ] terminpt C:\Windows\System32\drivers\terminpt.sys
15:46:29.0340 0x146c terminpt - ok
15:46:29.0387 0x146c [ 2B3D2FDF50EDABEBE0A9E6F741C81858, F0C3A1DC968C5D28EF68BE4352577B4F8D4B4FB6274268DCCCD8A5C132DEC2F9 ] TermService C:\Windows\System32\termsrv.dll
15:46:29.0449 0x146c TermService - ok
15:46:29.0480 0x146c [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] Themes C:\Windows\system32\themeservice.dll
15:46:29.0512 0x146c Themes - ok
15:46:29.0545 0x146c [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] THREADORDER C:\Windows\system32\mmcss.dll
15:46:29.0557 0x146c THREADORDER - ok
15:46:29.0583 0x146c [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
15:46:29.0600 0x146c TimeBroker - ok
15:46:29.0662 0x146c [ 3B4250CB21F95FFA64162389106F39BA, 2461E6D335D699F837908254FDA43C789D589FE90C9592B5B43D964CFDB43F11 ] TPHKLOAD C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
15:46:29.0662 0x146c TPHKLOAD - ok
15:46:29.0694 0x146c [ E94F7A7B48C7638D1F3F8089344C97B7, 276CDE59614D563A52529BCC4BFC726E5F5BE131C9C4142558A644D79328C810 ] TPM C:\Windows\system32\drivers\tpm.sys
15:46:29.0709 0x146c TPM - ok
15:46:29.0725 0x146c [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] TrkWks C:\Windows\System32\trkwks.dll
15:46:29.0763 0x146c TrkWks - ok
15:46:29.0815 0x146c [ 8ABBB5CE0C62E0A6D28F32F44B7F865C, 4C78FE2A4A25A758D5191C4EDB2A6FE691FF82E7C16C0F146DC96DAD87D4F64E ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:46:29.0878 0x146c TrustedInstaller - ok
15:46:29.0883 0x146c [ 4E7C5FB10A50435523DE0CAA37DE2BD3, D6206DF61950F2541FB754E57C4D9EF9FA0CC1EDD6F6FA4E45F02B47958493F7 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:46:29.0930 0x146c TsUsbFlt - ok
15:46:29.0930 0x146c [ 16D684A820872EE54F6370703AC0B513, 795E20484358424CE9FA766937DD99413025A8AF967D03490392E8E02A382D0B ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
15:46:29.0961 0x146c TsUsbGD - ok
15:46:29.0993 0x146c [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:46:30.0024 0x146c tunnel - ok
15:46:30.0080 0x146c [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A, AA7DA2207C0236F47859A4791F9D7301E7ADB50A59D831DC859ECC7CA70D3E1D ] uagp35 C:\Windows\system32\drivers\uagp35.sys
15:46:30.0091 0x146c uagp35 - ok
15:46:30.0097 0x146c [ 6FD6D03B7752C78712E5CFF29A305026, F09C5188AAFCF4C77B05BA1E604F9912782A9F1371F72F959288EBC2725407ED ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
15:46:30.0097 0x146c UASPStor - ok
15:46:30.0128 0x146c [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] UCX01000 C:\Windows\System32\drivers\ucx01000.sys
15:46:30.0155 0x146c UCX01000 - ok
15:46:30.0179 0x146c [ 25C50F4EDF70D0A831E0566BD181CCF2, F2F9E86FB5617C16077D2073EC0AA747F76F1EB5148BA110347A84F3C3569F83 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:46:30.0226 0x146c udfs - ok
15:46:30.0257 0x146c [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D, 16DE6E0894C356A58AF12BEC2FE9B188F147DD4B16CB2414DE600CE4127F929D ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:46:30.0289 0x146c UI0Detect - ok
15:46:30.0304 0x146c [ 07FEBCDF24FABA0D47B635D85A0FFB7A, 452C04B14681EBCE8B1B25B75A1B7CC978722B7DDE54D624E17841B14ACCF65D ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:46:30.0320 0x146c uliagpkx - ok
15:46:30.0336 0x146c [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] umbus C:\Windows\System32\drivers\umbus.sys
15:46:30.0351 0x146c umbus - ok
15:46:30.0414 0x146c [ 991EE6B5FC41EAEF99C8AF5B92F2CA09, 30AAD7D18FF5962CEC7180359D148EED5A1BF193DDB2B34508897FC3EBA692C3 ] UmPass C:\Windows\System32\drivers\umpass.sys
15:46:30.0429 0x146c UmPass - ok
15:46:30.0480 0x146c [ 43FEFB040A0CC30F795FBF544169594D, F2A730C0F7C883321C378D4564120A40428D7F8E393F02C8D6A08934795A35C7 ] UmRdpService C:\Windows\System32\umrdp.dll
15:46:30.0515 0x146c UmRdpService - ok
15:46:30.0541 0x146c [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] upnphost C:\Windows\System32\upnphost.dll
15:46:30.0572 0x146c upnphost - ok
15:46:30.0620 0x146c [ 311C90F0767A63000AC35DD0A7078A30, DB80E10015DCC595F90C31CE61590DB07E84F8B13DA904B2D59233678C366A2D ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
15:46:30.0623 0x146c upperdev - ok
15:46:30.0670 0x146c [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
15:46:30.0723 0x146c usbccgp - ok
15:46:30.0738 0x146c [ 427B6DB8C05A5A977E8C3525370A2595, C67222CA9123AE12D953995326B3B582C146CEA89594B7209DB0B1F628A0118D ] usbcir C:\Windows\System32\drivers\usbcir.sys
15:46:30.0799 0x146c usbcir - ok
15:46:30.0815 0x146c [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] usbehci C:\Windows\System32\drivers\usbehci.sys
15:46:30.0815 0x146c usbehci - ok
15:46:30.0861 0x146c [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] usbhub C:\Windows\System32\drivers\usbhub.sys
15:46:30.0893 0x146c usbhub - ok
15:46:30.0940 0x146c [ FAAB461D5AEB21EE5FC5C0DBD6648223, 187EB7AC6CDE39621C587EB1551DBC358DE2BC7C8A4265DB817C9D6F5ADE54A3 ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
15:46:30.0971 0x146c USBHUB3 - ok
15:46:30.0986 0x146c [ 325F6179009B5A7F6118951A5BA422AB, 756CB2893530485E8C3ACFF5A40F4C6EB446E72B2296E8772058E407A5E066DE ] usbohci C:\Windows\System32\drivers\usbohci.sys
15:46:31.0033 0x146c usbohci - ok
15:46:31.0056 0x146c [ 9FDBA6982582A6F2354144980F641E7B, 054A65412CB22C5BE970FD3A266E140110D869B614B9F9894628D553CE82C991 ] usbprint C:\Windows\System32\drivers\usbprint.sys
15:46:31.0099 0x146c usbprint - ok
15:46:31.0120 0x146c [ 4E896888B2FDC694D8EF4462E1C58B78, D64F3A95C87DA3B523C4AD0A68410AE4B927767D1EA9A72EB082E1AFC1E37275 ] usbser C:\Windows\system32\DRIVERS\usbser.sys
15:46:31.0151 0x146c usbser - ok
15:46:31.0167 0x146c [ C03DA998E412D69D18DD11D835229AF0, DD43E370EF370767588A6D56A51A4ADF99B5E063C7AA0528F91FD431DE7C2932 ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
15:46:31.0213 0x146c UsbserFilt - ok
15:46:31.0229 0x146c [ BFC7FE4AAEB61317A921871B4085EF4B, CBC3FBAEAD6C82A437CC87A97007EF807C64053AB8FA5C3233C2A0CF6FC8D019 ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS
15:46:31.0245 0x146c USBSTOR - ok
15:46:31.0260 0x146c [ 1ABF657259DB57F7E5558E4DF1357C0C, 34EAF5DEA3293CFA96BA81B036305FD90ABAE05B9CB73D4F54FB236448C1978C ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
15:46:31.0292 0x146c usbuhci - ok
15:46:31.0321 0x146c [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
15:46:31.0359 0x146c usbvideo - ok
15:46:31.0384 0x146c [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
15:46:31.0416 0x146c USBXHCI - ok
15:46:31.0416 0x146c [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] VaultSvc C:\Windows\system32\lsass.exe
15:46:31.0431 0x146c VaultSvc - ok
15:46:31.0447 0x146c [ BACECBFF9C97F7627A60B0E0F1FE7EE8, DC82F767D066B93A48A090DC7146EBCCDC54B43C6CD9DF29A160E09E3A531DC8 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:46:31.0463 0x146c vdrvroot - ok
15:46:31.0509 0x146c [ 1B4488988E5E7512E6C5CD1255E9E973, B82C26E767A8895CFFD76C11D07D5C945C38E1BD32CC27D20A6C0FA7F6064FC5 ] vds C:\Windows\System32\vds.exe
15:46:31.0572 0x146c vds - ok
15:46:31.0572 0x146c [ 74FA2D4368DE6F6CE14393EDF1F342BE, C5CE4164B2C3D583A7FB8687ADEADCDB08D36A5AB1965E5FC6949AEED15881C8 ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
15:46:31.0588 0x146c VerifierExt - ok
15:46:31.0634 0x146c [ 500BE6B2E49883720D0AE8BB859ED7A3, 4606B02A3E8123510676E554635EB5ECF9DC5F2B83928710C8563787C52CC102 ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
15:46:31.0673 0x146c vhdmp - ok
15:46:31.0689 0x146c [ F5B4A14B00E89250C50982AC762DDD1D, 581CD97DD42E74A82F06BFB827DFC82618B4A8667ACA7E93C628BB0D056CE8F0 ] viaide C:\Windows\system32\drivers\viaide.sys
15:46:31.0699 0x146c viaide - ok
15:46:31.0716 0x146c [ 0E43886F01C85B47BA0A3157274BCF59, C81E1841B1138D8C224FAF76258F7EB65145CCAF7938CA86CBADD8FFF79BA596 ] Vid C:\Windows\System32\drivers\Vid.sys
15:46:31.0723 0x146c Vid - ok
15:46:31.0739 0x146c [ 78DB50F7329F6D1311658DABFFFC8BE0, 8CB0C831608033C4BC1D2DA7FAA7D429333A3654E76A989F7AF85BFC5F086BE9 ] vmbus C:\Windows\system32\drivers\vmbus.sys
15:46:31.0755 0x146c vmbus - ok
15:46:31.0770 0x146c [ ECFEE2F2BA3932C7880D1A8F67D68F91, 57DCD55A518A9FBDEF72B511C643B1062C3F7BD339F4B0FC19E9D84C615B968D ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
15:46:31.0786 0x146c VMBusHID - ok
15:46:31.0802 0x146c [ B4F432A51826FFC66F4DF72A83E8E4B1, 2C6F4D477F91605A3685FCF9EC6EA798E74C6853CC91547A749E9C050E7C19E8 ] vmbusr C:\Windows\System32\drivers\vmbusr.sys
15:46:31.0817 0x146c vmbusr - ok
15:46:31.0854 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicheartbeat C:\Windows\System32\ICSvc.dll
15:46:31.0863 0x146c vmicheartbeat - ok
15:46:31.0879 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmickvpexchange C:\Windows\System32\ICSvc.dll
15:46:31.0895 0x146c vmickvpexchange - ok
15:46:31.0910 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicrdv C:\Windows\System32\ICSvc.dll
15:46:31.0926 0x146c vmicrdv - ok

autoprd · #18 Příspěvek od **autoprd** » 13 pro 2014 15:49

15:46:31.0943 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicshutdown C:\Windows\System32\ICSvc.dll
15:46:31.0961 0x146c vmicshutdown - ok
15:46:31.0972 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmictimesync C:\Windows\System32\ICSvc.dll
15:46:31.0984 0x146c vmictimesync - ok
15:46:31.0984 0x146c [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicvss C:\Windows\System32\ICSvc.dll
15:46:32.0015 0x146c vmicvss - ok
15:46:32.0030 0x146c [ CB60FAAED8B49B812EBBF77EB87D9B18, ADA7C68D4C4981555ED48981E8B7ACBEEF5C39F902EB98782FC3DFF495FE0C33 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:46:32.0030 0x146c volmgr - ok
15:46:32.0046 0x146c [ A74101DA9809251BCD0E5A26BAE0F824, 15A3A7CC31A13C5882812C344D0937A8A4503D12DB07B9F7F2A8191B739CDBF7 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:46:32.0077 0x146c volmgrx - ok
15:46:32.0104 0x146c [ AA37946941ED3805AB3A924965907147, 11BD8FA585F193EED050458E93679D730FC2C09D19237DA40B0190132D328CB2 ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:46:32.0120 0x146c volsnap - ok
15:46:32.0136 0x146c [ A8DA1C1B52ECEA3726DEBED4FF1B700D, 75C024EC3858DF24FB82FE105BDD1E37900D53EFE9D72F42CDDFFD0742525586 ] vpci C:\Windows\System32\drivers\vpci.sys
15:46:32.0151 0x146c vpci - ok
15:46:32.0151 0x146c [ 0190AFFF28F600461C0164353CC7EE27, D112DF69C9E629EC77FB95E7ACDDAAE24B5028C84454134BD26FEF9CC953AC0E ] vpcivsp C:\Windows\System32\drivers\vpcivsp.sys
15:46:32.0167 0x146c vpcivsp - ok
15:46:32.0190 0x146c [ 38A60CD9C009C55C6D3B5586F8E6A353, 7F7E2AE39F1A0A5245650911E310E0948BC22A18262A16FA76B44A042D66312D ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
15:46:32.0205 0x146c vsmraid - ok
15:46:32.0278 0x146c [ FE37051171F3B90B18037FDBAC5B9D76, F220D71512E059F298F3CD958D69BE7225A8E8D492387347E75A0E615159782A ] VSS C:\Windows\system32\vssvc.exe
15:46:32.0361 0x146c VSS - ok
15:46:32.0474 0x146c [ A0F6FE0FC2F647C22BBFD6BD4249DBCC, AC2F3C70EDCA0AFBB2606267DFE6D3E8E7B0772140153BAD6B0A9EDE6A1D2F29 ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
15:46:32.0495 0x146c VSTXRAID - ok
15:46:32.0513 0x146c [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
15:46:32.0513 0x146c vwifibus - ok
15:46:32.0529 0x146c [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
15:46:32.0556 0x146c vwififlt - ok
15:46:32.0563 0x146c [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
15:46:32.0579 0x146c vwifimp - ok
15:46:32.0624 0x146c [ F690B6EEAA94576727B24376D7ED3601, A61EE96024C8FC4058481DFB1E7F0AD746565368672FA3B6BA8F9E23D0F47E4C ] W32Time C:\Windows\system32\w32time.dll
15:46:32.0656 0x146c W32Time - ok
15:46:32.0671 0x146c [ 6B806E893714019969E2B50D7EF6A4D9, 38FE2B01082DC4C2A0C11A292016A727F48C3DF1293DC3A0216B2254A452263F ] WacomPen C:\Windows\System32\drivers\wacompen.sys
15:46:32.0671 0x146c WacomPen - ok
15:46:32.0703 0x146c [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
15:46:32.0734 0x146c Wanarp - ok
15:46:32.0734 0x146c [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:46:32.0750 0x146c Wanarpv6 - ok
15:46:32.0812 0x146c [ 42DF22F8C448E7CD219F6D63743505E2, 063F4280C7BD20CE1360436B76A17DFE17FF611F75337A47373D098CC6C263BF ] wbengine C:\Windows\system32\wbengine.exe
15:46:32.0927 0x146c wbengine - ok
15:46:32.0958 0x146c [ 31D37B2F6069C631EF0557D322924812, 6E18A1060F3C8F4BF220E286C44327866A8F9109E74928AA2D8C2DA9C452038B ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:46:32.0974 0x146c WbioSrvc - ok
15:46:33.0021 0x146c [ F43314B83101DEBF7D7CCD42493CFC60, F4B70372559F2FD9A74FB87422EC6EF024F925AE4D838473E04E6B48AB7255AF ] Wcmsvc C:\Windows\System32\wcmsvc.dll
15:46:33.0068 0x146c Wcmsvc - ok
15:46:33.0122 0x146c [ 5B5FEAB51172F5513C2CF7B39CFA6A01, 4FDAC5168E00D44781C6F5D98ECD4977A12663C5CE6FFDFF9DBC89A28D6212D8 ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:46:33.0164 0x146c wcncsvc - ok
15:46:33.0179 0x146c [ E19556D414332E2BEBA1F368229006B4, AB3454EC85D7B6E62D44C4510C1547AE7F736558588E54B0E265F7B3A5810E15 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:46:33.0255 0x146c WcsPlugInService - ok
15:46:33.0286 0x146c [ B3A4D918DAB90505B6BC7B70632913CB, ECC19DCD7902C29D0682C70B9546CF8B82477A32147EE30EB6750D8499605B46 ] Wd C:\Windows\system32\drivers\wd.sys
15:46:33.0286 0x146c Wd - ok
15:46:33.0320 0x146c [ B7FD627AAE8E95848BFEC437C923A87E, 26188FC7E86AD9B92FB732DD3EC5E8EAB18EB52B21E854B27798EC08C49167D8 ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
15:46:33.0323 0x146c WdBoot - ok
15:46:33.0354 0x146c [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:46:33.0397 0x146c Wdf01000 - ok
15:46:33.0428 0x146c [ FAC362ED29713A535C6E2EEFFA5B4733, C4AF6C5A74389F9F51668433D4478806016C4913CB241F77513601803D532EC0 ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
15:46:33.0450 0x146c WdFilter - ok
15:46:33.0463 0x146c [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:46:33.0479 0x146c WdiServiceHost - ok
15:46:33.0495 0x146c [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:46:33.0510 0x146c WdiSystemHost - ok
15:46:33.0541 0x146c [ 9B1384CE8E681D2D77BB3524B8E86311, BDEF9D0A79A7C26A88088A306F91632F300E587736CDD2C64717EC54DD6E89FF ] WebClient C:\Windows\System32\webclnt.dll
15:46:33.0604 0x146c WebClient - ok
15:46:33.0619 0x146c [ 35FD720943D4FCD75C3275BF062FF140, 9D8345E6DE1AE23F93AD0B52D27D1CCFD69EF7EE50654F92CA999BEC4570A773 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:46:33.0635 0x146c Wecsvc - ok
15:46:33.0651 0x146c [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:46:33.0735 0x146c wercplsupport - ok
15:46:33.0764 0x146c [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] WerSvc C:\Windows\System32\WerSvc.dll
15:46:33.0820 0x146c WerSvc - ok
15:46:33.0844 0x146c [ 44BB9C31E6242C4BD1CE7C2B440C2533, E603BB001028918B687818E930340008C752679B133037367A8A8E41DA559FFE ] WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs.sys
15:46:33.0860 0x146c WFPLWFS - ok
15:46:33.0878 0x146c [ 60E0C220593DA4F7C289CB909D2DBAE0, 057CA7727F748600CC155043081AB9E3244763CF4913F317D13226A515F6FDB6 ] WiaRpc C:\Windows\System32\wiarpc.dll
15:46:33.0904 0x146c WiaRpc - ok
15:46:33.0935 0x146c [ A3C7624A42A3447EF5EDD1ED37FE4E60, BD8BDF0A571873FA8277878AF7AED11196CFF1B4DF1EA6BA13BD4887D7B63B94 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:46:33.0935 0x146c WIMMount - ok
15:46:33.0967 0x146c WinDefend - ok
15:46:34.0014 0x146c [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
15:46:34.0112 0x146c WinHttpAutoProxySvc - ok
15:46:34.0143 0x146c [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:46:34.0174 0x146c Winmgmt - ok
15:46:34.0268 0x146c [ 89DA335401D956F2696E35A38817BE19, D5A8D5C0BE285564AB0DF1B4594FE612359C72BE3B64063C3460BB73AA34F413 ] WinRM C:\Windows\system32\WsmSvc.dll
15:46:34.0431 0x146c WinRM - ok
15:46:34.0479 0x146c [ BB20956C424531003F7FA6CD36F11D5D, 2C55F1C7553A527A7C4C34E730BE943269AE23928731C64D3DC945E07AE1771E ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
15:46:34.0511 0x146c WinUsb - ok
15:46:34.0573 0x146c [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] WlanSvc C:\Windows\System32\wlansvc.dll
15:46:34.0636 0x146c WlanSvc - ok
15:46:34.0716 0x146c [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] wlidsvc C:\Windows\system32\wlidsvc.dll
15:46:34.0825 0x146c wlidsvc - ok
15:46:34.0841 0x146c [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
15:46:34.0857 0x146c WmiAcpi - ok
15:46:34.0887 0x146c [ D113499052C5E541906B727779F0F959, 05FB51086C0A0CE3812A7E6098C5A454ECCFE8553669CFA715153564F2226DB0 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:46:34.0903 0x146c wmiApSrv - ok
15:46:34.0922 0x146c WMPNetworkSvc - ok
15:46:34.0938 0x146c [ C6FF953D5D6F2EAE3B8883474D5076B3, 001CBB7FBC30209C892869258E5ABD3F0932886E156ECB10DCA599F6D32648BE ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
15:46:35.0000 0x146c wpcfltr - ok
15:46:35.0016 0x146c [ A6ED163169876BFD2437E872FE2F1509, C13E8676800EEEF690F51C4DEA660B36C8734AE2CCAAC48054E10D74B98949B8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:46:35.0055 0x146c WPCSvc - ok
15:46:35.0079 0x146c [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:46:35.0130 0x146c WPDBusEnum - ok
15:46:35.0146 0x146c [ 0346CAFC181C91C6E2330332EB332ED6, D46F44C339399CAAE13CD71C53A169E95065208E07E5420DE00A4509D6CB056F ] WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr.sys
15:46:35.0213 0x146c WpdUpFltr - ok
15:46:35.0249 0x146c [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:46:35.0264 0x146c ws2ifsl - ok
15:46:35.0295 0x146c [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] wscsvc C:\Windows\system32\wscsvc.dll
15:46:35.0311 0x146c wscsvc - ok
15:46:35.0342 0x146c [ 74EFDA0526862C3D8D01A776182798EA, 7C9AD6118CB344C63B60A8BA5FA8C85ADED30933821ABD1427857E826EFC2952 ] WSDPrintDevice C:\Windows\System32\drivers\WSDPrint.sys
15:46:35.0389 0x146c WSDPrintDevice - ok
15:46:35.0389 0x146c WSearch - ok
15:46:35.0483 0x146c [ D4D04839F3DFAF09D94BAB1016F7A297, 944A41D251F522EE87189C1D01CF7EEE2C70BF4353BA4005C44F03DB485F843F ] WSService C:\Windows\System32\WSService.dll
15:46:35.0580 0x146c WSService - ok
15:46:35.0692 0x146c [ 10EA2DBD2820A504D98D19F5EDAAFC04, 5B84D7C169CBAEBCE4A03BB89426E74DBF5AFCA1F8FDE2A5BC1006A8464D7E24 ] wuauserv C:\Windows\system32\wuaueng.dll
15:46:35.0859 0x146c wuauserv - ok
15:46:35.0892 0x146c [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:46:35.0918 0x146c WudfPf - ok
15:46:35.0939 0x146c [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\System32\drivers\WUDFRd.sys
15:46:36.0013 0x146c WUDFRd - ok
15:46:36.0044 0x146c [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFSensorLP C:\Windows\system32\DRIVERS\WUDFRd.sys
15:46:36.0044 0x146c WUDFSensorLP - ok
15:46:36.0083 0x146c [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:46:36.0104 0x146c wudfsvc - ok
15:46:36.0119 0x146c [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdFs C:\Windows\system32\DRIVERS\WUDFRd.sys
15:46:36.0119 0x146c WUDFWpdFs - ok
15:46:36.0135 0x146c [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdMtp C:\Windows\system32\DRIVERS\WUDFRd.sys
15:46:36.0156 0x146c WUDFWpdMtp - ok
15:46:36.0183 0x146c [ 6D9E07436B6646EC8F7EFFD39B6BA288, 82C1CEA93ECEF17D221AD0F87C5BD96F3FD8143841C16BD9608BD4D58D90B8E0 ] WwanSvc C:\Windows\System32\wwansvc.dll
15:46:36.0245 0x146c WwanSvc - ok
15:46:36.0285 0x146c [ D107AA09E4E233E1AAE126255D8A4057, 767E78508DF2FABF1E8DBEA7214B4214FA7B2FAA9AC6DD7D97F3F517A8C83BFB ] xusb22 C:\Windows\System32\drivers\xusb22.sys
15:46:36.0319 0x146c xusb22 - ok
15:46:36.0335 0x146c ================ Scan global ===============================
15:46:36.0366 0x146c [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\Windows\system32\basesrv.dll
15:46:36.0397 0x146c [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\Windows\system32\winsrv.dll
15:46:36.0429 0x146c [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\Windows\system32\sxssrv.dll
15:46:36.0480 0x146c [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\Windows\system32\services.exe
15:46:36.0480 0x146c [ Global ] - ok
15:46:36.0480 0x146c ================ Scan MBR ==================================
15:46:36.0495 0x146c [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:46:36.0795 0x146c \Device\Harddisk0\DR0 - ok
15:46:36.0795 0x146c ================ Scan VBR ==================================
15:46:36.0795 0x146c [ E1FD92ACA7087FA9DF2A35712D9F0077 ] \Device\Harddisk0\DR0\Partition1
15:46:36.0826 0x146c \Device\Harddisk0\DR0\Partition1 - ok
15:46:36.0842 0x146c [ 2D9B7ECC24DC66AE9127B8ABDB1D882D ] \Device\Harddisk0\DR0\Partition2
15:46:36.0917 0x146c \Device\Harddisk0\DR0\Partition2 - ok
15:46:36.0917 0x146c ================ Scan generic autorun ======================
15:46:36.0986 0x146c [ 8970A59A838FF1CDC3D62D85823AA61E, 5842DAFD20C1A024CF8984652A08D12DBA1DE15788794D01FF6070D4E24D2479 ] C:\Program Files\CONEXANT\SAII\SACpl.exe
15:46:37.0053 0x146c SmartAudio - detected UnsignedFile.Multi.Generic ( 1 )
15:46:39.0427 0x146c Detect skipped due to KSN trusted
15:46:39.0427 0x146c SmartAudio - ok
15:46:39.0480 0x146c [ DD8C5A331E1F83510C5A788CB9AA8727, BDEDB9B9D3B0C16B217A67B9B02C9E339E133E4FE05E144DCB344D80C6786078 ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
15:46:39.0507 0x146c cAudioFilterAgent - ok
15:46:39.0523 0x146c [ 42361B4BD80768E82B80285851037665, A555A6BF8016645B838FEA993AD273D1F472586F3600619DC243B1C33438FA07 ] C:\Program Files\Conexant\ForteConfig\fmapp.exe
15:46:39.0523 0x146c ForteConfig - ok
15:46:39.0554 0x146c [ F07CCCED7A7F483305011C24ED41E313, 2141C594AB45F8172DCB6A6EEC5134D2DAC136A5AF5A34BF8EEC820FF0266A63 ] C:\Program Files\Lenovo\HOTKEY\extapsup.exe
15:46:39.0579 0x146c LenovoOptMouseUpdate - ok
15:46:39.0612 0x146c [ E4B1E5F776BD2B10C129A6DB39477831, D1AC66FB25AF611735C7457015BDF6BA3492FDC2EFD29D2E9E959DA5044BBC69 ] C:\Windows\system32\hkcmd.exe
15:46:39.0628 0x146c HotKeysCmds - ok
15:46:39.0665 0x146c [ 89E36A1D59A55D52F16C8B3800EC55BE, CB8F3C2E11BFD1368343D5E7D3AC9B0DF204D7A1822AD39BB426F30A04A42378 ] C:\Windows\system32\igfxpers.exe
15:46:39.0683 0x146c Persistence - ok
15:46:39.0769 0x146c [ 4F011F572DAC7057DF9D6E9064AA77E8, CC05441572740A9996525C3B9382191022E4F918C45C09EC0DE4C11215F81008 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
15:46:39.0844 0x146c NvBackend - ok
15:46:39.0876 0x146c [ 3A6209AC494296C24C2065CB4392B5F4, 944556A8521D4E59EE35B364C9FB1A3846924D512E73C2CB32DD440022E6B1B5 ] C:\Windows\system32\rundll32.exe
15:46:39.0901 0x146c ShadowPlay - ok
15:46:40.0103 0x146c [ 5A2772DA712495F2A60348DE9F32D0A6, 8AAFB215D5EB5262B5606ACF6127A3F508361B15FD56AFE0D936DB25BFAE0886 ] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
15:46:40.0224 0x146c egui - ok
15:46:40.0311 0x146c icq - ok
15:46:40.0311 0x146c Waiting for KSN requests completion. In queue: 140
15:46:41.0331 0x146c Waiting for KSN requests completion. In queue: 140
15:46:42.0342 0x146c Waiting for KSN requests completion. In queue: 8
15:46:43.0362 0x146c AV detected via SS2: ESET NOD32 Antivirus 7.0, C:\Program Files\ESET\ESET NOD32 Antivirus\ecmd.exe ( 7.0.302.0 ), 0x41000 ( enabled : updated )
15:46:43.0415 0x146c AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.6.305.0 ), 0x60100 ( disabled : updated )
15:46:43.0462 0x146c Win FW state via NFP2: enabled
15:46:45.0841 0x146c ============================================================
15:46:45.0841 0x146c Scan finished
15:46:45.0841 0x146c ============================================================
15:46:45.0841 0x13ec Detected object count: 0
15:46:45.0841 0x13ec Actual detected object count: 0

autoprd · #19 Příspěvek od **autoprd** » 13 pro 2014 16:10

Malwarebytes Anti-Rootkit BETA 1.08.2.1001
www.malwarebytes.org

Database version: v2014.12.13.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.17183
Hrosík :: HROŠÍK [administrator]

13. 12. 2014 15:51:38
mbar-log-2014-12-13 (15-51-38).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 360167
Time elapsed: 18 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

#20 Příspěvek od **altrok** » 13 pro 2014 16:16

Stáhněte a uložte na plochu http://jpshortstuff.247fixes.com/SystemLook_x64.exe nebo http://images.malwareremoval.com/jpshor ... ok_x64.exe

Dvojklikem na ikonu program spusťte.
Do bílého okénka zkopírujte text z následujícího bílého pole.

Kód: Vybrat vše

:filefind
volsnap.sys

Klikněte na Look, po dokončení skenu na Vás vyskočí log, zkopírujte ho sem.
Log se také bude nacházet na ploše v souboru SystemLook.txt

autoprd · #21 Příspěvek od **autoprd** » 13 pro 2014 16:38

SystemLook 30.07.11 by jpshortstuff
Log created at 16:30 on 13/12/2014 by Hrosík
Administrator - Elevation successful

========== filefind ==========

Searching for "volsnap.sys"
C:\Windows\System32\Drivers\volsnap.sys --a---- 328000 bytes [16:51 14/08/2014] [10:52 04/07/2014] AA37946941ED3805AB3A924965907147
C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_84c99cb521dc4714\volsnap.sys --a--c- 327936 bytes [16:45 14/08/2014] [11:26 01/06/2013] 78A5BBA3819FFFC62FFEC3E2220D102D
C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_9d78abd6ac3df11c\volsnap.sys --a--c- 332016 bytes [02:30 26/07/2012] [04:57 26/07/2012] 2FB3CDFD5EAF4CD9D4AFAF96877D13AE
C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_f843dbc7f3b07609\volsnap.sys --a--c- 328000 bytes [16:51 14/08/2014] [10:52 04/07/2014] AA37946941ED3805AB3A924965907147
C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16384_none_6e805ee585d930c4\volsnap.sys --a--c- 332016 bytes [02:30 26/07/2012] [04:57 26/07/2012] 2FB3CDFD5EAF4CD9D4AFAF96877D13AE
C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16628_none_6ec5454785a4e5ef\volsnap.sys --a--c- 327936 bytes [16:45 14/08/2014] [11:26 01/06/2013] 78A5BBA3819FFFC62FFEC3E2220D102D
C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.17047_none_6eae82f985b62f31\volsnap.sys --a--c- 328000 bytes [16:51 14/08/2014] [10:52 04/07/2014] AA37946941ED3805AB3A924965907147
C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.20733_none_6f3f10b49ecf22f7\volsnap.sys --a--c- 332032 bytes [16:45 14/08/2014] [12:06 01/06/2013] 0548F5D3282A91B69F9D39EE771307F7
C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.21165_none_6f207f589ee5d42f\volsnap.sys --a--c- 330560 bytes [16:51 14/08/2014] [08:39 04/07/2014] B15E5F1193FD70B61EF2C8CE0F06C06A

-= EOF =-

#22 Příspěvek od **altrok** » 13 pro 2014 16:44

Samotny volsnap.sys je v poradku, ale jeste se k nemu vratime

Pokracujte ted zoekem (+ skript... viz navod na prvni strane)

autoprd · #23 Příspěvek od **autoprd** » 13 pro 2014 17:51

Zoek.exe v5.0.0.0 Updated 12-December-2014
Tool run by Hrosík on so 13. 12. 2014 at 17:30:08,36.
Microsoft Windows 8 Pro 6.2.9200 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Hrosík\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-11-14-044208.log 5682 bytes
C:\zoek-results2014-12-13-144240.log 7849 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\HROSK~1\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\HROSK~1\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) not found

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

==== Chromium Look ======================

Google Chrome Version: 39.0.2171.71 (Possible outdated, latest Stable version: 39.0.2171.95)

Seznam LiĹˇtiÄŤka - Email - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
MEGA - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod
Seznam LiĹˇtiÄŤka - SlovnĂk - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
Email Game - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbobaphhmjpchjknfpcnlhcbkjbclge
AdBlock - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
VLC 4 YouTube (beta) - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\jldiailifbdkepgpcojllmkbakleicab
Seznam LiĹˇtiÄŤka - RychlĂˇ volba - Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Hrosík\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Hrosík\AppData\Local\Mozilla\Firefox\Profiles\kcki7tqi.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=9 folders=3 5613008 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Hrosík\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\HROSK~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on so 13. 12. 2014 at 17:48:52,96 ======================

#24 Příspěvek od **altrok** » 13 pro 2014 17:54

Nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=137928

Upozorneni: tento sken zabere od 30 minut po nekolik hodin

autoprd · #25 Příspěvek od **autoprd** » 13 pro 2014 20:10

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 13. 12. 2014
Čas skenování: 18:04:55
Protokol:
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2014.12.13.04
Databáze rootkitů: v2014.12.08.03
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: HrosÃk

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 640895
Uplynulý čas: 2 hod, 4 min, 35 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Žádné zákerné zjištěny položek)

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 0
(Žádné zákerné zjištěny položek)

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 0
(Žádné zákerné zjištěny položek)

Soubory: 0
(Žádné zákerné zjištěny položek)

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)

(end)

#26 Příspěvek od **altrok** » 13 pro 2014 20:11

Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

autoprd · #27 Příspěvek od **autoprd** » 13 pro 2014 22:06

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2014
Ran by Hrosík (administrator) on HROŠÍK on 13-12-2014 22:03:01
Running from C:\Users\Hrosík\Desktop
Loaded Profile: Hrosík (Available profiles: Hrosík)
Platform: Windows 8 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
() C:\Program Files (x86)\Photodex\ProShow Gold\scsiaccess.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(forum.viry.cz) C:\Users\Hrosík\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5618456 2013-09-12] (ESET)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\Run: [icq] => C:\Users\Hrosík\AppData\Roaming\ICQM\icq.exe [34947592 2014-08-14] (ICQ)
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-11-13] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1880616068-2142377461-1790115224-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.10.254

FireFox:
========
FF ProfilePath: C:\Users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @photodex.com/PhotodexPresenter -> C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1880616068-2142377461-1790115224-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Hrosík\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\searchplugins\google-avast.xml
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-12-10]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=48", "hxxp://www.google.com", "hxxp://home.torchbrowser.com/?systemid=448&appid=107&ua=Torch", "hxxp://www.google.com/", "hxxp://mysearch.avg.com/?cid={A96C40A3-AFDE-4043-8CAD-9CD1D40CB21D}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=en&ds=co011&pr=sa&d=2013-07-04 02:04:19&v=15.3.0.11&pid=safeguard&sg=0&sap=hp", "hxxp://mysearch.avg.com?cid={33E0546F-78B6-454B-9632-E73E0DE08EB1}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-30 00:42:43&v=17.2.0.38&pid=safeguard&sg=&sap=hp", "hxxp://mysearch.avg.com?cid={93EB0701-969D-4467-8BC1-B6A101F3F319}&mid=69ce4d14d24d47d2bd7e755e7724275b-731b09b5922878685c92eca5ea206affd7d77f43&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-05-17 12:09:25&v=18.1.0.443&pid=safeguard&sg=&sap=hp"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-07]
CHR Extension: (Dokumenty Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-13]
CHR Extension: (Disk Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-13]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2014-12-02]
CHR Extension: (MEGA) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2014-12-04]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-12-02]
CHR Extension: (YouTube) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-13]
CHR Extension: (Vyhledávání Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-13]
CHR Extension: (Email Game) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbobaphhmjpchjknfpcnlhcbkjbclge [2014-08-13]
CHR Extension: (Tabulky Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-07]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2014-08-13]
CHR Extension: (AdBlock) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-13]
CHR Extension: (VLC 4 YouTube (beta)) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\jldiailifbdkepgpcojllmkbakleicab [2014-08-13]
CHR Extension: (Peněženka Google) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-13]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-12-02]
CHR Extension: (Gmail) - C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2227992 2012-10-02] (Broadcom Corporation.)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [959192 2013-02-26] (Broadcom Corporation.)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1337752 2013-09-12] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-10-05] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129848 2013-05-31] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-05-31] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)
R2 ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe [186760 2014-12-06] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)
S3 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-11-09] (The OpenVPN Project)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2014-11-01] ()
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [169240 2012-10-02] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 BTWPANFL; C:\Windows\system32\drivers\btwpanfl.sys [44912 2013-01-20] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-08-13] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [157432 2013-09-17] (ESET)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45112 2014-12-01] (LogMeIn Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-11-01] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288480 2012-12-13] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-26] (Synaptics Incorporated)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [89088 2012-07-26] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-13 22:03 - 2014-12-13 22:03 - 00019943 _____ () C:\Users\Hrosík\Desktop\FRST.txt
2014-12-13 22:02 - 2014-12-13 22:03 - 00000000 ____D () C:\FRST
2014-12-13 22:02 - 2014-12-13 22:01 - 02119168 _____ (Farbar) C:\Users\Hrosík\Desktop\FRST64.exe
2014-12-13 22:02 - 2014-12-13 22:01 - 00112640 _____ (forum.viry.cz) C:\Users\Hrosík\Desktop\FRSTLauncher.exe
2014-12-13 22:01 - 2014-12-13 22:01 - 02119168 _____ (Farbar) C:\Users\Hrosík\Downloads\FRST64.exe
2014-12-13 21:59 - 2014-12-13 22:01 - 00112640 _____ (forum.viry.cz) C:\Users\Hrosík\Downloads\FRSTLauncher.exe
2014-12-13 21:30 - 2014-12-13 21:30 - 00053261 _____ () C:\Users\Hrosík\Downloads\Dawn-of-the-Planet-of-the-Apes(0000244532).srt
2014-12-13 21:28 - 2014-12-13 21:51 - 1899786240 _____ () C:\Users\Hrosík\Downloads\Úsvit planety opic (2014) 5.1 CZ dabing.avi
2014-12-13 21:27 - 2014-12-13 21:27 - 00018688 _____ () C:\Users\Hrosík\Downloads\[CzT]Usvit_planety_opic_Dawn_of_the_Planet_of_the_Apes_2014_CZ_.torrent
2014-12-13 17:42 - 2014-12-13 17:30 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-13 17:30 - 2014-12-13 15:42 - 00007849 _____ () C:\zoek-results2014-12-13-144240.log
2014-12-13 16:30 - 2014-12-13 16:34 - 00003716 _____ () C:\Users\Hrosík\Desktop\SystemLook.txt
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Downloads\SystemLook_x64.exe
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Desktop\SystemLook_x64.exe
2014-12-13 15:50 - 2014-12-13 16:10 - 00000000 ____D () C:\Users\Hrosík\Desktop\mbar
2014-12-13 15:50 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Desktop\mbar-1.08.2.1001.exe
2014-12-13 15:49 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Downloads\mbar-1.08.2.1001.exe
2014-12-13 15:44 - 2014-12-13 15:45 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\Hrosík\Downloads\tdsskiller.exe
2014-12-13 15:42 - 2014-12-13 15:42 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-12-13 15:28 - 2014-11-14 05:42 - 00005682 _____ () C:\zoek-results2014-11-14-044208.log
2014-12-13 15:26 - 2014-12-13 15:26 - 01295360 _____ () C:\Users\Hrosík\Downloads\zoek.exe
2014-12-13 15:26 - 2014-12-13 15:26 - 01295360 _____ () C:\Users\Hrosík\Desktop\zoek.exe
2014-12-13 15:25 - 2014-12-13 15:25 - 00000000 ___SD () C:\Uninstall
2014-12-13 15:24 - 2014-12-13 15:24 - 00000000 ____D () C:\Users\HrosÝk
2014-12-13 15:13 - 2014-12-13 15:13 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105 (1).exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105.exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Desktop\adwcleaner_4.105.exe
2014-12-13 15:07 - 2014-12-13 15:07 - 02997112 _____ (Crystal Dew World ) C:\Users\Hrosík\Downloads\CrystalDiskInfo6_2_2-en.exe
2014-12-13 15:07 - 2014-12-13 15:07 - 00001190 _____ () C:\Users\Hrosík\Desktop\CrystalDiskInfo.lnk
2014-12-13 15:07 - 2014-12-13 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2014-12-13 15:07 - 2014-12-13 15:07 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2014-12-13 15:04 - 2014-12-13 15:04 - 02153472 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.104.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 01032220 _____ (Thisisu) C:\Users\Hrosík\Downloads\JRT.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 00034614 _____ () C:\Users\Hrosík\Downloads\RogueKillerX64.exe
2014-12-13 14:51 - 2014-12-13 14:51 - 11154087 _____ () C:\Users\Hrosík\Downloads\LAN_Utility_Win8-1_VER2026.zip
2014-12-13 14:50 - 2014-12-13 14:52 - 26891461 _____ () C:\Users\Hrosík\Downloads\LAN_XPVistaWin7-8-8-1_VER5822_6254_777_824.zip
2014-12-13 14:50 - 2014-12-13 14:51 - 22932791 _____ () C:\Users\Hrosík\Downloads\LAN_Utility_XPVistaWin7-8-8-1_VER2026_VER2027.zip
2014-12-13 14:50 - 2014-12-13 14:51 - 16124654 _____ () C:\Users\Hrosík\Downloads\Intel_Chipset_XPVistaWin7-8-8-1_VER9401026.zip
2014-12-13 13:45 - 2014-12-13 13:46 - 06561597 _____ () C:\Users\Hrosík\Downloads\Realtek_LAN_Win8-1_VER819.zip
2014-12-13 03:47 - 2014-12-13 13:32 - 00026833 _____ () C:\ComboFix.txt
2014-12-12 23:50 - 2014-12-12 23:50 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\ESET
2014-12-12 23:47 - 2014-12-12 23:48 - 00001254 _____ () C:\Users\Hrosík\Desktop\CFScript.txt
2014-12-12 23:47 - 2014-12-12 23:47 - 00000000 _____ () C:\Users\Hrosík\Desktop\Nový textový dokument.txt
2014-12-10 23:24 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-10 23:24 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-10 23:24 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-10 23:24 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-10 23:17 - 2014-12-10 23:17 - 00009355 _____ () C:\Users\Hrosík\Desktop\LaunchPad – zástupce.lnk
2014-12-10 23:04 - 2014-12-10 23:04 - 00201728 _____ (OldTimer Tools) C:\Users\Hrosík\Downloads\OTC.exe
2014-12-10 22:51 - 2014-12-10 22:51 - 00423077 _____ () C:\Users\Hrosík\Downloads\TCleaner v1.0.4.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Downloads\RSITx64.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Desktop\RSITx64.exe
2014-12-10 22:17 - 2014-10-09 05:00 - 01519104 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-12-10 22:17 - 2014-10-09 05:00 - 01484288 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-12-10 22:17 - 2014-10-09 05:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2014-12-10 22:17 - 2014-10-09 04:59 - 01195520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2014-12-10 22:17 - 2014-10-09 04:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2014-12-10 19:39 - 2014-12-10 19:45 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\IDoser
2014-12-10 19:38 - 2014-12-10 19:42 - 00000000 ____D () C:\Users\Hrosík\Documents\Dose Files
2014-12-10 19:38 - 2014-12-10 19:39 - 00000000 ____D () C:\Program Files (x86)\I-Doser Premium
2014-12-10 19:38 - 2014-12-10 19:38 - 00001048 _____ () C:\Users\Public\Desktop\I-Doser Premium.lnk
2014-12-10 19:38 - 2014-12-10 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I-Doser Premium
2014-12-10 19:37 - 2014-12-10 19:37 - 00017040 _____ () C:\Users\Hrosík\Downloads\[kickass.so]i.doser.v5.premium.all.doses.torrent
2014-12-10 19:37 - 2014-12-10 19:37 - 00000000 ____D () C:\Users\Hrosík\Downloads\I-Doser Premium V5 + all Doses
2014-12-10 19:36 - 2014-12-10 19:36 - 02206665 _____ () C:\Users\Hrosík\Downloads\IDoserFreeSetup.exe
2014-12-10 05:06 - 2014-11-21 09:38 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 05:06 - 2014-11-21 09:37 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 05:06 - 2014-11-21 09:36 - 19283456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 05:06 - 2014-11-21 09:36 - 15400960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 05:06 - 2014-11-21 09:36 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 05:06 - 2014-11-21 09:36 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 05:06 - 2014-11-21 09:35 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 05:06 - 2014-11-21 08:17 - 14364672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 05:06 - 2014-11-21 08:17 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 05:06 - 2014-11-21 08:17 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 05:06 - 2014-11-21 08:16 - 13758976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 05:06 - 2014-11-21 08:16 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 05:05 - 2014-11-21 09:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 05:05 - 2014-11-21 09:37 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-12-10 05:05 - 2014-11-21 09:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 05:05 - 2014-11-21 09:36 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 05:05 - 2014-11-21 08:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 05:05 - 2014-11-21 08:17 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 05:05 - 2014-11-21 08:17 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 05:05 - 2014-11-21 08:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-12-10 05:05 - 2014-11-21 08:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 05:04 - 2014-11-21 09:36 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 05:04 - 2014-11-21 09:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 05:04 - 2014-11-21 09:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 05:04 - 2014-11-21 08:16 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 05:04 - 2014-11-21 08:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 05:04 - 2014-11-21 08:16 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 05:04 - 2014-11-21 08:00 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 05:04 - 2014-11-21 07:54 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 05:04 - 2014-11-21 05:30 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-12-10 04:48 - 2014-11-06 07:50 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 04:48 - 2014-11-06 06:03 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 04:15 - 2014-10-30 08:20 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-10 04:15 - 2014-10-30 06:22 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-10 02:50 - 2014-12-10 02:50 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\HD Tune Pro
2014-12-10 02:49 - 2014-12-10 02:49 - 00001037 _____ () C:\Users\Hrosík\Desktop\HD Tune Pro.lnk
2014-12-10 02:49 - 2014-12-10 02:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro
2014-12-10 02:49 - 2014-12-10 02:49 - 00000000 ____D () C:\Program Files (x86)\HD Tune Pro
2014-12-10 02:48 - 2014-12-10 02:48 - 00005323 _____ () C:\Users\Hrosík\Downloads\[kickass.so]hd.tune.pro.v5.50.retail.with.key.mahiy.torrent
2014-12-10 02:48 - 2014-12-10 02:48 - 00000000 ____D () C:\Users\Hrosík\Downloads\HD TUNE PRO [ v5.50 Retail ][WITH KEY] - [MAHIY]
2014-12-10 02:37 - 2014-12-10 02:37 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-12-10 02:37 - 2014-12-10 02:37 - 00000000 ____D () C:\Windows\system32\NV
2014-12-10 02:34 - 2014-11-13 01:20 - 31893136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 24557712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 20986592 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 18514616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 14032984 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 13944952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 13213512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-12-10 02:34 - 2014-11-13 01:20 - 11397744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 11336432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 04292416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 04011208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 02874456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434475.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 01540424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434475.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00964928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00935240 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00923792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00900928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-12-10 02:34 - 2014-11-13 01:20 - 00031560 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-12-10 02:31 - 2014-12-10 22:23 - 00002982 _____ () C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2014-12-10 02:29 - 2014-12-10 22:23 - 00000899 _____ () C:\Windows\setupact.log
2014-12-10 02:29 - 2014-12-10 02:32 - 00010200 _____ () C:\Windows\DPINST.LOG
2014-12-10 02:29 - 2014-12-10 02:32 - 00001334 _____ () C:\Windows\Synaptics.log
2014-12-10 02:29 - 2014-12-10 02:29 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-10 02:27 - 2014-12-10 02:28 - 34349184 _____ (Lenovo Group Limited ) C:\Users\Hrosík\Downloads\h0gs11ww.exe
2014-12-10 02:25 - 2014-12-10 02:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-12-10 02:25 - 2014-12-10 02:25 - 00000000 ____D () C:\ProgramData\ESET
2014-12-10 02:25 - 2014-12-10 02:25 - 00000000 ____D () C:\Program Files\ESET
2014-12-09 23:46 - 2014-12-09 23:46 - 00000000 ____D () C:\Users\Hrosￃﾭk
2014-12-09 23:45 - 2014-12-10 02:31 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\CrashDumps
2014-12-09 23:45 - 2014-12-09 23:45 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\SCE
2014-12-09 20:43 - 2014-06-25 09:08 - 00000000 ____D () C:\Users\Hrosík\Downloads\language
2014-12-09 20:40 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\ESET NOD32 ANTIVIRUS 7 CRACK (32 64 BIT) THADOGG
2014-12-09 20:40 - 2014-12-09 20:40 - 00335089 _____ () C:\Users\Hrosík\Downloads\GRiD2CZ.exe
2014-12-09 20:40 - 2014-12-09 20:40 - 00011935 _____ () C:\Users\Hrosík\Downloads\[kickass.so]eset.nod32.antivirus.7.crack.32.64.bit.thadogg.xtrteam.torrent
2014-12-09 20:36 - 2014-12-09 20:36 - 00000000 ____D () C:\ProgramData\Codemasters
2014-12-09 20:30 - 2014-12-09 20:30 - 00000776 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRID 2.lnk
2014-12-09 20:30 - 2014-12-09 20:30 - 00000764 _____ () C:\Users\Public\Desktop\GRID 2.lnk
2014-12-09 20:16 - 2014-12-09 20:36 - 00000000 ____D () C:\Program Files (x86)\GRID 2
2014-12-09 18:40 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\GRID.2_RELOADED
2014-12-09 17:39 - 2014-12-13 22:01 - 00970826 _____ () C:\Windows\WindowsUpdate.log
2014-12-09 17:38 - 2014-12-13 20:11 - 00005280 _____ () C:\Windows\PFRO.log
2014-12-09 17:18 - 2014-12-09 17:18 - 00050688 _____ (Atribune.org) C:\Users\Hrosík\Desktop\ATF-Cleaner.exe
2014-12-09 03:17 - 2014-12-13 15:25 - 00000000 ____D () C:\Qoobox
2014-12-09 03:15 - 2014-12-10 22:40 - 00000000 ____D () C:\Program Files\trend micro
2014-12-09 02:29 - 2014-12-09 02:29 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\TeamViewer
2014-12-09 02:09 - 2014-12-09 02:09 - 09508923 _____ () C:\Users\Hrosík\Desktop\emička.pxc
2014-12-09 02:09 - 2014-12-09 02:09 - 00089055 _____ () C:\Users\Hrosík\Desktop\emička.psh
2014-12-08 23:58 - 2014-12-08 23:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2014-12-08 23:57 - 2014-12-09 02:27 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\NokiaAccount
2014-12-08 23:55 - 2014-12-09 00:00 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\PC Suite
2014-12-08 23:55 - 2014-12-08 23:58 - 00000000 ____D () C:\ProgramData\PC Suite
2014-12-08 23:55 - 2014-12-08 23:56 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\Nokia
2014-12-08 23:54 - 2014-12-08 23:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2014-12-08 23:52 - 2014-12-08 23:52 - 00000000 ____D () C:\Program Files\DIFX
2014-12-08 23:52 - 2014-12-08 23:52 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2014-12-08 23:52 - 2013-01-23 10:31 - 00057856 _____ (Nokia) C:\Windows\system32\nmwcdclsX64.dll
2014-12-08 23:52 - 2012-10-17 14:53 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys
2014-12-08 23:51 - 2014-12-09 02:27 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-12-08 23:51 - 2014-12-08 23:51 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2014-12-08 23:37 - 2014-12-09 00:30 - 00000000 ____D () C:\Users\Hrosík\Desktop\pupek
2014-12-08 22:56 - 2014-12-08 22:56 - 00001315 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-12-08 22:56 - 2014-12-08 22:56 - 00000000 ____D () C:\Windows\cs
2014-12-08 22:55 - 2014-12-08 22:55 - 00001388 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-12-08 22:54 - 2014-12-08 22:55 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-12-08 22:53 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-12-08 22:53 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-12-08 22:53 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-12-08 22:53 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-12-08 22:53 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-12-08 22:53 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-12-08 22:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-12-08 22:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-12-08 22:53 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-12-08 22:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-12-08 22:51 - 2014-12-08 23:03 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\Windows Live
2014-12-08 22:49 - 2014-12-08 22:56 - 74487048 _____ () C:\Users\Hrosík\Desktop\čum.avi
2014-12-08 15:37 - 2014-12-08 15:37 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2014-12-08 14:56 - 2014-12-08 14:56 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Unity
2014-12-07 07:46 - 2014-12-07 07:46 - 02251992 _____ (Broadcom Corporation.) C:\Windows\system32\BtwRSupportService(143).exe
2014-12-07 07:06 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\Advanced SystemCare Pro 8.0.3.588
2014-12-07 01:05 - 2014-12-07 01:05 - 00142670 _____ () C:\Users\Hrosík\Desktop\čum.psh
2014-12-07 00:26 - 2014-12-08 23:07 - 10192856 _____ () C:\Users\Hrosík\Desktop\čum.pxc
2014-12-07 00:26 - 2014-12-07 00:26 - 00089283 _____ () C:\Users\Hrosík\Desktop\čum.bak
2014-12-06 23:23 - 2014-12-06 23:23 - 00002105 _____ () C:\Users\Public\Desktop\ProShow Gold.lnk
2014-12-06 23:23 - 2014-12-06 23:23 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Netscape
2014-12-06 23:23 - 2014-12-06 23:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProShow Gold
2014-12-06 23:23 - 2014-12-06 23:23 - 00000000 ____D () C:\Program Files (x86)\Photodex Presenter
2014-12-06 23:23 - 2014-12-06 23:23 - 00000000 ____D () C:\Program Files (x86)\Photodex
2014-12-06 23:22 - 2014-12-06 23:23 - 00000000 ____D () C:\ProgramData\Photodex
2014-12-06 23:22 - 2014-12-06 23:22 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Photodex
2014-12-06 22:31 - 2014-12-07 00:04 - 00000000 ____D () C:\Users\Hrosík\Downloads\Hvězdy nám nepřály Fault in Our Stars, The (2014)
2014-12-05 06:56 - 2014-12-05 06:56 - 79732736 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-12-05 06:56 - 2014-12-05 06:56 - 00376832 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-12-05 06:56 - 2014-12-05 06:56 - 00069632 _____ () C:\Windows\system32\config\SAM.iobit
2014-12-05 06:56 - 2014-12-05 06:56 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-12-05 06:38 - 2014-12-05 06:38 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Apple Computer
2014-12-05 06:37 - 2014-12-05 06:37 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-12-05 06:36 - 2014-12-07 13:46 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\IObit
2014-12-04 03:25 - 2014-12-05 06:22 - 00000000 ____D () C:\Users\Hrosík\Downloads\Nymfomanka II
2014-12-03 23:19 - 2014-12-03 23:19 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\Mozilla
2014-12-03 23:17 - 2014-12-06 07:23 - 00001139 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-03 23:17 - 2014-12-06 07:23 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-03 23:17 - 2014-12-03 23:17 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-03 23:17 - 2014-12-03 23:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-03 23:17 - 2014-12-03 23:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-02 22:29 - 2014-12-02 22:29 - 00035352 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2014-12-02 22:23 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\Connectify Hotspot PRO 7.1.29279 + Crack [ThumperDC]
2014-12-01 15:51 - 2014-12-01 15:51 - 00045112 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys
2014-11-29 00:15 - 2014-11-29 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-11-29 00:05 - 2014-04-30 19:43 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2014-11-29 00:05 - 2014-04-30 19:43 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2014-11-29 00:04 - 2014-12-09 02:29 - 00000000 ____D () C:\ProgramData\Samsung
2014-11-29 00:04 - 2014-12-09 02:29 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-11-29 00:01 - 2014-11-29 00:01 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\Downloaded Installations
2014-11-28 23:54 - 2009-03-04 10:55 - 00000000 ____D () C:\Users\Hrosík\Desktop\dedomil
2014-11-28 18:48 - 2014-11-28 19:13 - 1861421248 _____ () C:\Users\Hrosík\Downloads\Fack.ju.Göhte.2013.BRRip.XviD.AC3.CZ.avi
2014-11-26 12:19 - 2014-11-19 08:29 - 00582552 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-11-26 12:19 - 2014-11-19 08:29 - 00462760 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-11-23 16:10 - 2014-11-23 16:10 - 00000000 ____D () C:\Program Files (x86)\Marvell
2014-11-19 22:03 - 2014-11-08 12:22 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 22:03 - 2014-11-08 12:21 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 22:03 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-19 22:03 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 21:46 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\Novicorp WinToFlash 0.5.0020 beta
2014-11-19 21:39 - 2014-12-09 02:28 - 00000000 ____D () C:\Program Files (x86)\WinToUSB
2014-11-17 00:19 - 2014-11-18 00:59 - 00000000 ____D () C:\Users\Hrosík\Downloads\Futurama všechny série (1-6) (CZ)
2014-11-16 18:56 - 2014-12-13 16:00 - 00000000 ____D () C:\Users\Hrosík\Desktop\Nová složka
2014-11-16 01:48 - 2014-11-16 01:48 - 00000086 _____ () C:\Users\Hrosík\Documents\ss.txt
2014-11-14 06:03 - 2014-10-11 08:44 - 19764736 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-11-14 06:03 - 2014-10-11 06:57 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-11-14 06:03 - 2014-10-09 04:59 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-11-14 06:03 - 2014-10-09 04:59 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-11-14 06:03 - 2014-10-09 04:58 - 00458240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-11-14 06:03 - 2014-09-22 06:38 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-11-14 06:03 - 2014-09-22 04:56 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-11-14 06:03 - 2014-09-18 00:24 - 00987136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
2014-11-14 06:03 - 2014-09-18 00:24 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmscan.dll
2014-11-14 06:03 - 2014-09-18 00:24 - 00278528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm.dll
2014-11-14 06:03 - 2014-09-18 00:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adrclient.dll
2014-11-14 06:03 - 2014-09-17 23:57 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
2014-11-14 06:03 - 2014-09-17 23:57 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
2014-11-14 06:03 - 2014-09-17 23:57 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\srm.dll
2014-11-14 06:03 - 2014-09-17 23:57 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\adrclient.dll
2014-11-14 05:21 - 2014-12-13 17:48 - 00007226 _____ () C:\zoek-results.log
2014-11-14 05:19 - 2014-12-13 15:37 - 00000000 ____D () C:\zoek_backup
2014-11-13 07:53 - 2014-12-13 15:12 - 00000000 ____D () C:\AdwCleaner
2014-11-13 07:26 - 2014-12-09 15:44 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-13 07:08 - 2014-11-14 05:57 - 00011073 _____ () C:\Users\Hrosík\Documents\hijackthis.log
2014-11-13 06:56 - 2014-11-13 06:56 - 00001115 _____ () C:\Users\Hrosík\Desktop\Call of Duty - Black Ops 2.lnk
2014-11-13 06:56 - 2014-11-13 06:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty - Black Ops 2
2014-11-13 06:41 - 2014-11-13 06:56 - 00000000 ____D () C:\Program Files (x86)\Call of Duty - Black Ops 2

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-13 22:01 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-12-13 22:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-12-13 21:58 - 2014-08-21 23:13 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\vlc
2014-12-13 21:52 - 2014-08-13 21:41 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\uTorrent
2014-12-13 21:51 - 2014-11-08 19:48 - 00364544 ___SH () C:\Users\Hrosík\Downloads\Thumbs.db
2014-12-13 21:30 - 2012-07-26 11:01 - 00727488 _____ () C:\Windows\system32\perfh005.dat
2014-12-13 21:30 - 2012-07-26 11:01 - 00148006 _____ () C:\Windows\system32\perfc005.dat
2014-12-13 21:30 - 2012-07-26 08:28 - 01714430 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-13 20:45 - 2014-08-13 21:43 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1880616068-2142377461-1790115224-1001
2014-12-13 20:12 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-13 20:11 - 2014-10-22 15:44 - 00000000 ____D () C:\Windows\onhax-temp
2014-12-13 20:11 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-12-13 18:04 - 2014-09-28 18:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-13 16:54 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-12-13 15:50 - 2014-09-28 18:29 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-13 15:41 - 2014-08-13 22:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-12-13 15:41 - 2014-08-13 22:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-12-13 15:37 - 2012-07-26 09:12 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-12-13 15:37 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-12-13 15:21 - 2014-08-13 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-12-13 13:44 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-13 03:21 - 2012-07-26 06:26 - 00000215 _____ () C:\Windows\system.ini
2014-12-10 22:55 - 2014-08-13 21:36 - 00000000 ____D () C:\Users\Hrosík
2014-12-10 22:23 - 2012-07-26 08:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-10 22:22 - 2014-09-08 12:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-10 22:22 - 2014-08-13 23:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:18 - 2014-08-13 23:27 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 02:37 - 2014-08-13 23:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-09 23:50 - 2014-08-15 12:23 - 00000000 ____D () C:\Users\Hrosík\Documents\My Games
2014-12-09 20:41 - 2014-10-11 19:27 - 00000000 ____D () C:\Users\Hrosík\Downloads\American Horror story S01 (DVDrip)
2014-12-09 20:15 - 2014-08-13 22:14 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\DAEMON Tools Lite
2014-12-09 18:25 - 2014-11-07 22:28 - 00079872 ___SH () C:\Users\Hrosík\Desktop\Thumbs.db
2014-12-09 17:27 - 2014-10-06 13:30 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-12-09 15:44 - 2014-09-28 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-09 15:44 - 2014-09-28 18:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-09 15:09 - 2014-11-03 02:40 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-12-09 03:16 - 2014-10-07 05:58 - 00000000 ____D () C:\Windows\erdnt
2014-12-09 02:54 - 2014-08-15 13:49 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-09 02:54 - 2014-08-14 18:15 - 02354344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-09 02:29 - 2014-08-13 22:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-09 02:26 - 2014-10-27 22:35 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\.minecraft
2014-12-09 02:24 - 2014-10-27 22:51 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\LogMeIn Hamachi
2014-12-09 02:11 - 2014-08-13 21:44 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-08 22:55 - 2014-09-08 13:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-12-08 22:54 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-07 14:04 - 2014-08-14 00:13 - 00003818 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2014-12-07 14:04 - 2014-08-14 00:13 - 00003576 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2014-12-07 14:04 - 2014-08-13 21:38 - 00003932 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-07 14:04 - 2014-08-13 21:38 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-07 13:59 - 2014-08-13 21:44 - 00003808 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-07 13:47 - 2014-11-03 02:40 - 00000000 ____D () C:\ProgramData\IObit
2014-12-07 13:47 - 2014-10-19 21:28 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\Unity
2014-12-07 13:46 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\registration
2014-12-06 23:24 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI(145)
2014-12-06 23:23 - 2014-08-26 18:22 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Mozilla
2014-12-05 08:50 - 2014-10-28 22:37 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Notepad++
2014-12-05 07:06 - 2014-10-07 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roller Coaster Tycoon 3 Platinum - CarlesNeo !
2014-12-05 07:06 - 2014-08-13 22:30 - 00000000 ____D () C:\Windows\Panther
2014-12-03 23:17 - 2014-08-13 22:07 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-03 23:17 - 2014-08-13 22:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-28 23:45 - 2014-09-20 16:43 - 00000000 ____D () C:\Users\Hrosík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth
2014-11-27 14:58 - 2014-08-13 21:39 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-26 22:11 - 2014-11-12 00:04 - 00714184 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:11 - 2014-11-12 00:04 - 00106440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-24 06:29 - 2014-11-05 23:11 - 00000460 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-21 06:14 - 2014-09-28 18:29 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-09-28 18:29 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-19 23:58 - 2014-10-16 21:24 - 00000000 ____D () C:\Users\Hrosík\Documents\DTP
2014-11-14 06:07 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData
2014-11-14 05:53 - 2014-11-05 23:13 - 00000000 ____D () C:\Program Files (x86)\Virtual Router
2014-11-13 07:06 - 2014-08-13 21:37 - 00000000 ____D () C:\Users\Hrosík\AppData\Local\VirtualStore
2014-11-13 01:20 - 2014-08-13 23:00 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-13 01:20 - 2014-08-13 23:00 - 03262784 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-13 01:20 - 2014-08-13 23:00 - 00871648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-11-13 01:20 - 2014-08-13 23:00 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-13 01:20 - 2013-12-26 18:42 - 00989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-11-13 01:20 - 2013-12-26 18:42 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-13 01:20 - 2013-12-26 18:42 - 00027094 _____ () C:\Windows\system32\nvinfo.pb

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-12-08 13:28

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:930.51 GB) (Free:725.94 GB) NTFS
Drive f: (Woytman) (Removable) (Total:3.75 GB) (Free:3.46 GB) NTFS

Available physical RAM: 2455.7 MB
Total physical RAM: 3673.13 MB
Percentage of memory in use: 33%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A98693C5)
Partition 1: (Active) - (Size=1 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=930.5 GB) - (Type=07 NTFS)
Disk: 1 (Size: 3.7 GB) (Disk ID: 0017806B)
Partition 1: (Active) - (Size=3.7 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Hros�k\Desktop" je 1514 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

==================== End Of Log ==============================

autoprd · #28 Příspěvek od **autoprd** » 13 pro 2014 22:07

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2014
Ran by Hrosík at 2014-12-13 22:04:07
Running from C:\Users\Hrosík\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.9 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_2ac78060bc5856b0c1cf873bb919b58) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Aktualizace NVIDIA 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden
Aliens vs. Predator (HKLM-x32\...\{2A086701-1EEE-43F5-A9DB-DE2D73DC543D}_is1) (Version: - )
Apple Application Support (HKLM-x32\...\{0C34B801-6AEC-4667-B053-03A67E2D0415}) (Version: 1.0 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Call of Duty®: Black Ops 2 (HKLM-x32\...\Call of Duty®: Black Ops 2_is1) (Version: 1.0.5 - R.G. Revenants)
Car Mechanic Simulator 2014.v 1.0.6.0 (HKLM-x32\...\Car Mechanic Simulator 2014.v 1.0.6.0_is1) (Version: Car Mechanic Simulator 2014.v 1.0.6.0 - Repack by Fenixx (07.02.2014))
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.48.0 - Conexant)
CrystalDiskInfo 6.2.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.2 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DC Universe Online Live (HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\SOE-DC Universe Online Live) (Version: - Sony Online Entertainment)
ESET NOD32 Antivirus (HKLM\...\{89B0ECE0-A41F-4A45-98D9-D54C74338117}) (Version: 7.0.302.26 - ESET, spol s r. o.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GRID 2 (c) Codemasters version 1 (HKLM-x32\...\R1JJRDI=_is1) (Version: 1 - )
HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
Hřebčín (HKLM-x32\...\Hřebčín_is1) (Version: 1.0 - TopQer s.r.o.)
ICQ 8.2 (verze 7121) (HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\ICQ) (Version: 8.2.7121.0 - ICQ)
I-Doser Premium (HKLM-x32\...\I-Doser) (Version: 5.0 - I-Doser.com)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3190 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.6000 - Broadcom Corporation)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.05 - )
Malwarebytes Anti-Malware verze 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 cs) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 cs)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.33.00 - )
Ovládací panel NVIDIA 344.75 (Version: 344.75 - NVIDIA Corporation) Hidden
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photodex Presenter (HKLM-x32\...\Photodex Presenter) (Version: - Photodex Corporation)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Portal 2 (HKLM-x32\...\Postal 2_is1) (Version: - )
ProShow Gold (HKLM-x32\...\ProShow Gold) (Version: - Photodex Corporation)
QuickTime (HKLM-x32\...\{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}) (Version: 7.64.17.73 - Apple Inc.)
Realtek PCIE Card Reader (HKLM-x32\...\{0D61A55C-3ADC-409F-BF5B-A1766D1F5944}) (Version: 6.2.9200.29048 - Realtek Semiconductor Corp.)
Sacred 3 (HKLM-x32\...\U2FjcmVkMw==_is1) (Version: 1 - )
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.19.7 - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TRANSFORMERS: Rise of the Dark Spark (HKLM-x32\...\TRANSFORMERS: Rise of the Dark Spark_is1) (Version: - Activision)
Unity Web Player (HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Virtua Tennis 4™ (HKLM-x32\...\GFWL_{53450FA2-E900-456E-9715-501000008200}) (Version: 1.0.0000.130 - SEGA)
Virtua Tennis 4™ (x32 Version: 1.0.0000.130 - SEGA) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.11 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.1 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

28-11-2014 23:03:24 Installed Samsung Kies
07-12-2014 02:15:44 Naplánovaný kontrolní bod
07-12-2014 06:45:58 Driver Booster : Adobe AIR
07-12-2014 12:42:20 Operace obnovení
08-12-2014 21:51:23 Windows Live Essentials
10-12-2014 01:18:23 Installed ESET NOD32 Antivirus
12-12-2014 22:49:32 ComboFix created restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 06:26 - 2014-12-13 17:30 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2478E577-AC8C-4C84-A4FA-134AF7F84D00} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {4ADBC6A3-B010-4923-B4A2-F27A29DE4657} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {4BA5E106-72C4-45B1-A928-1F636527EE02} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {5AF141D9-3081-455E-B226-48AFE5B745E9} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {82565131-B4E9-4F1C-8355-CE657010D151} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-10] (Microsoft Corporation)
Task: {8A7B9820-6231-49FD-8B14-2D27E6108528} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13] (Google Inc.)
Task: {9B520418-B59F-4D25-83DC-F584AD120648} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {A79E6A54-EAE2-4C0E-9525-F64F0012AE29} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25] (Adobe Systems Incorporated)
Task: {B0773F82-56B4-41DC-90B0-FAE3583131B5} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-04-24] (Synaptics Incorporated)
Task: {B97D3D90-87AB-4E71-A120-12A9F11F977B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13] (Google Inc.)
Task: {CC74011D-DA19-406E-BAD7-7A75499D637A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-12-26 18:42 - 2014-11-13 01:20 - 00013120 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-08-13 23:02 - 2014-11-12 22:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-09 19:17 - 2010-01-09 19:17 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:40 - 2010-01-21 00:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2014-05-12 10:49 - 2014-05-12 10:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2013-02-26 17:46 - 2013-02-26 17:46 - 00049368 _____ () C:\Program Files\Lenovo\Bluetooth Software\btwleapi.dll
2014-12-06 23:23 - 2014-12-06 23:23 - 00186760 _____ () C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
2014-08-14 17:57 - 2014-08-14 17:59 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2014-05-20 23:33 - 2014-05-20 23:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-08-13 22:48 - 2013-05-14 05:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\Run: => "LenovoOptMouseUpdate"
HKLM\...\StartupApproved\Run: => "ForteConfig"
HKLM\...\StartupApproved\Run: => "Connectify Dispatch"
HKLM\...\StartupApproved\Run: => "Connectify Hotspot"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "BCSSync"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "Connectify Hotspot"
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\StartupApproved\Run: => "icq"
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\StartupApproved\Run: => "Advanced SystemCare 8"
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

========================= Accounts: ==========================

Administrator (S-1-5-21-1880616068-2142377461-1790115224-500 - Administrator - Disabled)
Guest (S-1-5-21-1880616068-2142377461-1790115224-501 - Limited - Disabled)
Hrosík (S-1-5-21-1880616068-2142377461-1790115224-1001 - Administrator - Enabled) => C:\Users\Hrosík

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (12/13/2014 10:01:30 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 09:22:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 09:12:51 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 08:13:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 08:13:20 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (12/13/2014 08:04:19 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 05:49:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 05:49:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (12/13/2014 03:43:07 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 03:43:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x8007007B
Argument příkazového řádku:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

System errors:
=============
Error: (12/13/2014 09:13:43 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (12/13/2014 09:05:17 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (12/13/2014 08:12:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba atksgt neuspěla při spuštění v důsledku následující chyby:
%%1275

Error: (12/13/2014 08:12:10 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: atksgt.sys

Error: (12/13/2014 08:02:56 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (12/13/2014 05:48:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba atksgt neuspěla při spuštění v důsledku následující chyby:
%%1275

Error: (12/13/2014 05:48:10 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: atksgt.sys

Error: (12/13/2014 05:39:45 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (12/13/2014 05:39:45 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (12/13/2014 05:39:44 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Microsoft Office Sessions:
=========================
Error: (12/13/2014 10:01:30 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 09:22:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 09:12:51 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 08:13:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 08:13:20 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (12/13/2014 08:04:19 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 05:49:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 05:49:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (12/13/2014 03:43:07 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/13/2014 03:43:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x8007007BRuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

CodeIntegrity Errors:
===================================
Date: 2014-12-13 03:10:51.207
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-13 03:10:51.082
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-13 03:02:29.394
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-09 03:25:02.717
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-09 03:11:33.983
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

Date: 2014-12-09 03:09:52.936
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

Date: 2014-12-09 01:56:53.426
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

Date: 2014-12-09 00:42:02.149
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

Date: 2014-12-09 00:30:39.363
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

Date: 2014-12-09 00:27:01.650
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\IObit\Advanced SystemCare 8\AutoReactivator.exe with signing level Unsigned while the system requires signing level 6 or better to load.

==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 33%
Total physical RAM: 3673.13 MB
Available physical RAM: 2455.7 MB
Total Pagefile: 5721.13 MB
Available Pagefile: 4462.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.51 GB) (Free:725.94 GB) NTFS
Drive f: (Woytman) (Removable) (Total:3.75 GB) (Free:3.46 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A98693C5)
Partition 1: (Active) - (Size=1 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=930.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 0017806B)
Partition 1: (Active) - (Size=3.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

#29 Příspěvek od **altrok** » 13 pro 2014 22:38

Velikost plochy by nemela presahovat 200 MB. Snizuje se pak start i samotny chod celeho PC.

Odinstalujte crackly NOD32 ( http://servis.eset.cz/Knowledgebase/Art ... ogram-eset ) a nahradte ho nejakym free resenim... avast/avira

Pouzijte fixlist nize a dejte vedet, jak se pocitac chova.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File

CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=48", "hxxp://www.google.com", "hxxp://home.torchbrowser.com/?systemid=448&appid=107&ua=Torch", "hxxp://www.google.com/", "hxxp://mysearch.avg.com/?cid={A96C40A3-AFDE-4043-8CAD-9CD1D40CB21D}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=en&ds=co011&pr=sa&d=2013-07-04 02:04:19&v=15.3.0.11&pid=safeguard&sg=0&sap=hp", "hxxp://mysearch.avg.com?cid={33E0546F-78B6-454B-9632-E73E0DE08EB1}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-30 00:42:43&v=17.2.0.38&pid=safeguard&sg=&sap=hp", "hxxp://mysearch.avg.com?cid={93EB0701-969D-4467-8BC1-B6A101F3F319}&mid=69ce4d14d24d47d2bd7e755e7724275b-731b09b5922878685c92eca5ea206affd7d77f43&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-05-17 12:09:25&v=18.1.0.443&pid=safeguard&sg=&sap=hp"

S3 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
2014-12-13 22:01 - 2014-12-13 22:01 - 02119168 _____ (Farbar) C:\Users\Hrosík\Downloads\FRST64.exe
2014-12-13 21:59 - 2014-12-13 22:01 - 00112640 _____ (forum.viry.cz) C:\Users\Hrosík\Downloads\FRSTLauncher.exe
2014-12-13 17:42 - 2014-12-13 17:30 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-13 17:30 - 2014-12-13 15:42 - 00007849 _____ () C:\zoek-results2014-12-13-144240.log
2014-12-13 16:30 - 2014-12-13 16:34 - 00003716 _____ () C:\Users\Hrosík\Desktop\SystemLook.txt
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Downloads\SystemLook_x64.exe
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Desktop\SystemLook_x64.exe
2014-12-13 15:50 - 2014-12-13 16:10 - 00000000 ____D () C:\Users\Hrosík\Desktop\mbar
2014-12-13 15:50 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Desktop\mbar-1.08.2.1001.exe
2014-12-13 15:49 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Downloads\mbar-1.08.2.1001.exe
2014-12-13 15:44 - 2014-12-13 15:45 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\Hrosík\Downloads\tdsskiller.exe
2014-12-13 15:13 - 2014-12-13 15:13 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105 (1).exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105.exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Desktop\adwcleaner_4.105.exe
2014-12-13 15:07 - 2014-12-13 15:07 - 02997112 _____ (Crystal Dew World ) C:\Users\Hrosík\Downloads\CrystalDiskInfo6_2_2-en.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 02153472 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.104.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 01032220 _____ (Thisisu) C:\Users\Hrosík\Downloads\JRT.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Downloads\RSITx64.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Desktop\RSITx64.exe
2014-12-09 20:40 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\ESET NOD32 ANTIVIRUS 7 CRACK (32 64 BIT) THADOGG
2014-12-09 20:40 - 2014-12-09 20:40 - 00011935 _____ () C:\Users\Hrosík\Downloads\[kickass.so]eset.nod32.antivirus.7.crack.32.64.bit.thadogg.xtrteam.torrent
2014-12-09 03:15 - 2014-12-10 22:40 - 00000000 ____D () C:\Program Files\trend micro
2014-11-14 05:21 - 2014-12-13 17:48 - 00007226 _____ () C:\zoek-results.log
2014-11-14 05:19 - 2014-12-13 15:37 - 00000000 ____D () C:\zoek_backup
2014-11-13 07:53 - 2014-12-13 15:12 - 00000000 ____D () C:\AdwCleaner
2014-11-13 07:08 - 2014-11-14 05:57 - 00011073 _____ () C:\Users\Hrosík\Documents\hijackthis.log
Hosts:
EmptyTemp:
End

autoprd · #30 Příspěvek od **autoprd** » 13 pro 2014 23:01

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-12-2014
Ran by Hrosík at 2014-12-13 22:56:00 Run:1
Running from C:\Users\Hrosík\Desktop
Loaded Profile: Hrosík (Available profiles: Hrosík)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File

CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=48", "hxxp://www.google.com", "hxxp://home.torchbrowser.com/?systemid=448&appid=107&ua=Torch", "hxxp://www.google.com/", "hxxp://mysearch.avg.com/?cid={A96C40A3-AFDE-4043-8CAD-9CD1D40CB21D}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=en&ds=co011&pr=sa&d=2013-07-04 02:04:19&v=15.3.0.11&pid=safeguard&sg=0&sap=hp", "hxxp://mysearch.avg.com?cid={33E0546F-78B6-454B-9632-E73E0DE08EB1}&mid=de719743e80547d397fcd92928959d45-f587c555d563aeec284f2b11348695e4eff97ad5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-30 00:42:43&v=17.2.0.38&pid=safeguard&sg=&sap=hp", "hxxp://mysearch.avg.com?cid={93EB0701-969D-4467-8BC1-B6A101F3F319}&mid=69ce4d14d24d47d2bd7e755e7724275b-731b09b5922878685c92eca5ea206affd7d77f43&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-05-17 12:09:25&v=18.1.0.443&pid=safeguard&sg=&sap=hp"

S3 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
2014-12-13 22:01 - 2014-12-13 22:01 - 02119168 _____ (Farbar) C:\Users\Hrosík\Downloads\FRST64.exe
2014-12-13 21:59 - 2014-12-13 22:01 - 00112640 _____ (forum.viry.cz) C:\Users\Hrosík\Downloads\FRSTLauncher.exe
2014-12-13 17:42 - 2014-12-13 17:30 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-13 17:30 - 2014-12-13 15:42 - 00007849 _____ () C:\zoek-results2014-12-13-144240.log
2014-12-13 16:30 - 2014-12-13 16:34 - 00003716 _____ () C:\Users\Hrosík\Desktop\SystemLook.txt
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Downloads\SystemLook_x64.exe
2014-12-13 16:30 - 2014-12-13 16:30 - 00165376 _____ () C:\Users\Hrosík\Desktop\SystemLook_x64.exe
2014-12-13 15:50 - 2014-12-13 16:10 - 00000000 ____D () C:\Users\Hrosík\Desktop\mbar
2014-12-13 15:50 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Desktop\mbar-1.08.2.1001.exe
2014-12-13 15:49 - 2014-12-13 15:50 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Hrosík\Downloads\mbar-1.08.2.1001.exe
2014-12-13 15:44 - 2014-12-13 15:45 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\Hrosík\Downloads\tdsskiller.exe
2014-12-13 15:13 - 2014-12-13 15:13 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105 (1).exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.105.exe
2014-12-13 15:11 - 2014-12-13 15:11 - 02166272 _____ () C:\Users\Hrosík\Desktop\adwcleaner_4.105.exe
2014-12-13 15:07 - 2014-12-13 15:07 - 02997112 _____ (Crystal Dew World ) C:\Users\Hrosík\Downloads\CrystalDiskInfo6_2_2-en.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 02153472 _____ () C:\Users\Hrosík\Downloads\adwcleaner_4.104.exe
2014-12-13 15:04 - 2014-12-13 15:04 - 01032220 _____ (Thisisu) C:\Users\Hrosík\Downloads\JRT.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Downloads\RSITx64.exe
2014-12-10 22:38 - 2014-12-10 22:38 - 01222144 _____ () C:\Users\Hrosík\Desktop\RSITx64.exe
2014-12-09 20:40 - 2014-12-09 20:41 - 00000000 ____D () C:\Users\Hrosík\Downloads\ESET NOD32 ANTIVIRUS 7 CRACK (32 64 BIT) THADOGG
2014-12-09 20:40 - 2014-12-09 20:40 - 00011935 _____ () C:\Users\Hrosík\Downloads\[kickass.so]eset.nod32.antivirus.7.crack.32.64.bit.thadogg.xtrteam.torrent
2014-12-09 03:15 - 2014-12-10 22:40 - 00000000 ____D () C:\Program Files\trend micro
2014-11-14 05:21 - 2014-12-13 17:48 - 00007226 _____ () C:\zoek-results.log
2014-11-14 05:19 - 2014-12-13 15:37 - 00000000 ____D () C:\zoek_backup
2014-11-13 07:53 - 2014-12-13 15:12 - 00000000 ____D () C:\AdwCleaner
2014-11-13 07:08 - 2014-11-14 05:57 - 00011073 _____ () C:\Users\Hrosík\Documents\hijackthis.log
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => value deleted successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully.
"HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1880616068-2142377461-1790115224-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully.
"HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key not found.
Chrome StartupUrls deleted successfully.
LMIGuardianSvc => Service deleted successfully.
catchme => Service deleted successfully.
C:\Users\Hrosík\Downloads\FRST64.exe => Moved successfully.
C:\Users\Hrosík\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-12-13-144240.log => Moved successfully.
"C:\Users\Hrosík\Desktop\SystemLook.txt" => File/Directory not found.
C:\Users\Hrosík\Downloads\SystemLook_x64.exe => Moved successfully.
"C:\Users\Hrosík\Desktop\SystemLook_x64.exe" => File/Directory not found.
"C:\Users\Hrosík\Desktop\mbar" => File/Directory not found.
"C:\Users\Hrosík\Desktop\mbar-1.08.2.1001.exe" => File/Directory not found.
C:\Users\Hrosík\Downloads\mbar-1.08.2.1001.exe => Moved successfully.
C:\Users\Hrosík\Downloads\tdsskiller.exe => Moved successfully.
C:\Users\Hrosík\Downloads\adwcleaner_4.105 (1).exe => Moved successfully.
C:\Users\Hrosík\Downloads\adwcleaner_4.105.exe => Moved successfully.
"C:\Users\Hrosík\Desktop\adwcleaner_4.105.exe" => File/Directory not found.
C:\Users\Hrosík\Downloads\CrystalDiskInfo6_2_2-en.exe => Moved successfully.
C:\Users\Hrosík\Downloads\adwcleaner_4.104.exe => Moved successfully.
C:\Users\Hrosík\Downloads\JRT.exe => Moved successfully.
C:\Users\Hrosík\Downloads\RSITx64.exe => Moved successfully.
"C:\Users\Hrosík\Desktop\RSITx64.exe" => File/Directory not found.
"C:\Users\Hrosík\Downloads\ESET NOD32 ANTIVIRUS 7 CRACK (32 64 BIT) THADOGG" => File/Directory not found.
C:\Users\Hrosík\Downloads\[kickass.so]eset.nod32.antivirus.7.crack.32.64.bit.thadogg.xtrteam.torrent => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Hrosík\Documents\hijackthis.log => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 118.2 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

PC jede pořád na 30-40% v nečinosti, při stisknutí ctrl alt delete čekám 2minuty.. Opravdu už nevím čím to je.. dříve tento ntb byl velice rychlý

VIRY.CZ

Pomalý ntb, občasné zamrzání touchpadu, velké zatížení CPU

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C

Re: Pomalý ntb, občasné zamrzání touchpadu, velké zatížení C