VIRY.CZ

14:31:37.0878 0868 TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30
14:31:37.0987 0868 ============================================================
14:31:37.0987 0868 Current date / time: 2012/05/30 14:31:37.0987
14:31:37.0987 0868 SystemInfo:
14:31:37.0987 0868
14:31:37.0987 0868 OS Version: 5.1.2600 ServicePack: 3.0
14:31:37.0987 0868 Product type: Workstation
14:31:37.0987 0868 ComputerName: PCSHOP
14:31:37.0987 0868 UserName: PC Shop
14:31:37.0987 0868 Windows directory: C:\WINDOWS
14:31:37.0987 0868 System windows directory: C:\WINDOWS
14:31:37.0987 0868 Processor architecture: Intel x86
14:31:37.0987 0868 Number of processors: 1
14:31:37.0987 0868 Page size: 0x1000
14:31:37.0987 0868 Boot type: Normal boot
14:31:37.0987 0868 ============================================================
14:31:39.0081 0868 Drive \Device\Harddisk0\DR0 - Size: 0x12A1E0DE00 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:31:39.0096 0868 ============================================================
14:31:39.0096 0868 \Device\Harddisk0\DR0:
14:31:39.0096 0868 MBR partitions:
14:31:39.0096 0868 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
14:31:39.0096 0868 ============================================================
14:31:39.0128 0868 C: <-> \Device\Harddisk0\DR0\Partition0
14:31:39.0128 0868 ============================================================
14:31:39.0128 0868 Initialize success
14:31:39.0128 0868 ============================================================
14:31:41.0034 3940 ============================================================
14:31:41.0034 3940 Scan started
14:31:41.0034 3940 Mode: Manual;
14:31:41.0034 3940 ============================================================
14:31:41.0596 3940 3xHybrid (c01069448b2276659eb96946f63d5446) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
14:31:41.0628 3940 3xHybrid - ok
14:31:41.0643 3940 7ByteIO - ok
14:31:41.0674 3940 Abiosdsk - ok
14:31:41.0690 3940 abp480n5 - ok
14:31:41.0737 3940 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:31:41.0737 3940 ACPI - ok
14:31:41.0799 3940 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
14:31:41.0799 3940 ACPIEC - ok
14:31:41.0893 3940 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:31:41.0893 3940 AdobeFlashPlayerUpdateSvc - ok
14:31:41.0909 3940 adpu160m - ok
14:31:41.0971 3940 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
14:31:41.0971 3940 aec - ok
14:31:42.0034 3940 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
14:31:42.0034 3940 AFD - ok
14:31:42.0049 3940 Aha154x - ok
14:31:42.0065 3940 aic78u2 - ok
14:31:42.0081 3940 aic78xx - ok
14:31:42.0299 3940 ALCXWDM (f5d4d3899e16e1f75398297844386226) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
14:31:42.0393 3940 ALCXWDM - ok
14:31:42.0549 3940 Alerter (e0a6fa244b8624d78fe5ff6f56a33bae) C:\WINDOWS\system32\alrsvc.dll
14:31:42.0549 3940 Alerter - ok
14:31:42.0581 3940 ALG (88842de939a827577bf24243699ac80a) C:\WINDOWS\System32\alg.exe
14:31:42.0581 3940 ALG - ok
14:31:42.0612 3940 AliIde - ok
14:31:42.0628 3940 AmdK8 (cc9344adedf0bd57014a05f2528ce862) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
14:31:42.0628 3940 AmdK8 - ok
14:31:42.0643 3940 amsint - ok
14:31:42.0753 3940 AntiVirSchedulerService - ok
14:31:42.0768 3940 AntiVirService - ok
14:31:42.0815 3940 AppMgmt (6b8e7a90e576d4fe308f97c69060a171) C:\WINDOWS\System32\appmgmts.dll
14:31:42.0815 3940 AppMgmt - ok
14:31:42.0831 3940 asc - ok
14:31:42.0846 3940 asc3350p - ok
14:31:42.0862 3940 asc3550 - ok
14:31:43.0003 3940 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
14:31:43.0003 3940 aspnet_state - ok
14:31:43.0049 3940 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:31:43.0049 3940 AsyncMac - ok
14:31:43.0081 3940 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
14:31:43.0096 3940 atapi - ok
14:31:43.0112 3940 Atdisk - ok
14:31:43.0159 3940 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:31:43.0174 3940 Atmarpc - ok
14:31:43.0221 3940 AudioSrv (de31b88962a8645dba5a37b993e7b0f1) C:\WINDOWS\System32\audiosrv.dll
14:31:43.0221 3940 AudioSrv - ok
14:31:43.0284 3940 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
14:31:43.0284 3940 audstub - ok
14:31:43.0284 3940 avgio - ok
14:31:43.0346 3940 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
14:31:43.0346 3940 avgntflt - ok
14:31:43.0378 3940 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys
14:31:43.0378 3940 avipbb - ok
14:31:43.0456 3940 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
14:31:43.0456 3940 Beep - ok
14:31:43.0518 3940 BITS (19395d092fd85ddc2d9c7729cf5a2ac8) C:\WINDOWS\system32\qmgr.dll
14:31:43.0565 3940 BITS - ok
14:31:43.0690 3940 Bonjour Service (1c87705ccb2f60172b0fc86b5d82f00d) C:\Program Files\Bonjour\mDNSResponder.exe
14:31:43.0737 3940 Bonjour Service - ok
14:31:43.0784 3940 Browser (249276d3ef1e74b992299cb96099e4d7) C:\WINDOWS\System32\browser.dll
14:31:43.0784 3940 Browser - ok
14:31:43.0846 3940 BT848 (5d07eb7d4f72cd9cf92a8e59731e07e2) C:\WINDOWS\system32\drivers\cxvcap.sys
14:31:43.0846 3940 BT848 - ok
14:31:43.0862 3940 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
14:31:43.0862 3940 BthEnum - ok
14:31:43.0878 3940 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys
14:31:43.0878 3940 BTHMODEM - ok
14:31:43.0909 3940 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys
14:31:43.0909 3940 BthPan - ok
14:31:43.0971 3940 BTHPORT (f338662a6c1fc11dd9508f6dff2c06a2) C:\WINDOWS\system32\Drivers\BTHport.sys
14:31:44.0018 3940 BTHPORT - ok
14:31:44.0065 3940 BthServ (70ca4b3f634c9dca200832f8da76e009) C:\WINDOWS\System32\bthserv.dll
14:31:44.0081 3940 BthServ - ok
14:31:44.0128 3940 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys
14:31:44.0128 3940 BTHUSB - ok
14:31:44.0174 3940 BTXBAR (0326a33144509aafc19235798998d05b) C:\WINDOWS\system32\drivers\CXXBAR.sys
14:31:44.0174 3940 BTXBAR - ok
14:31:44.0346 3940 catchme - ok
14:31:44.0393 3940 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
14:31:44.0393 3940 cbidf2k - ok
14:31:44.0440 3940 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
14:31:44.0440 3940 CCDECODE - ok
14:31:44.0456 3940 cd20xrnt - ok
14:31:44.0518 3940 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
14:31:44.0518 3940 Cdaudio - ok
14:31:44.0534 3940 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
14:31:44.0534 3940 Cdfs - ok
14:31:44.0596 3940 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:31:44.0596 3940 Cdrom - ok
14:31:44.0612 3940 Changer - ok
14:31:44.0690 3940 CiSvc (e390dc1d7c461d7d56ec53402f329928) C:\WINDOWS\system32\cisvc.exe
14:31:44.0690 3940 CiSvc - ok
14:31:44.0893 3940 CLCapSvc (18776eee5455084c191d42800c6884a6) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
14:31:44.0924 3940 CLCapSvc - ok
14:31:44.0987 3940 ClipSrv (064507a8dfa8c5c7e2ffddd3e6f424fa) C:\WINDOWS\system32\clipsrv.exe
14:31:45.0003 3940 ClipSrv - ok
14:31:45.0128 3940 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:31:45.0128 3940 clr_optimization_v2.0.50727_32 - ok
14:31:45.0159 3940 CLSched (fb3cdfc16bea15932447a8d2f3c47b09) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
14:31:45.0174 3940 CLSched - ok
14:31:45.0190 3940 CmdIde - ok
14:31:45.0206 3940 COMSysApp - ok
14:31:45.0221 3940 Cpqarray - ok
14:31:45.0284 3940 CryptSvc (f3ab0933cbd166d271992f411c27ccaf) C:\WINDOWS\System32\cryptsvc.dll
14:31:45.0284 3940 CryptSvc - ok
14:31:45.0346 3940 CX2388X (be9c261248c9afeac951b45aaa81c9a4) C:\WINDOWS\system32\drivers\cx88cap.sys
14:31:45.0346 3940 CX2388X - ok
14:31:45.0409 3940 CX88CROSS (f1f6a5e62eb47321d0177911cb0c1df5) C:\WINDOWS\system32\drivers\CX88BAR.sys
14:31:45.0409 3940 CX88CROSS - ok
14:31:45.0424 3940 CX88TS (2913d0d67efb293ddfd28306fbff8651) C:\WINDOWS\system32\drivers\cx88ts.sys
14:31:45.0424 3940 CX88TS - ok
14:31:45.0487 3940 CXBDATUNE (bf79257ba8cb59f45abc69621ab3d30a) C:\WINDOWS\system32\drivers\cxBDAtun.sys
14:31:45.0487 3940 CXBDATUNE - ok
14:31:45.0549 3940 CXTUNER (b1fabc265c9817640e58226452308fc3) C:\WINDOWS\system32\drivers\CXTUNER.sys
14:31:45.0549 3940 CXTUNER - ok
14:31:45.0612 3940 CyberLink Media Library Service (1cfdcb99812c62e19c47896a5857d342) C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
14:31:45.0643 3940 CyberLink Media Library Service - ok
14:31:45.0659 3940 dac2w2k - ok
14:31:45.0674 3940 dac960nt - ok
14:31:45.0721 3940 DbgMsg (5d69c704a11a037f05270ee98106e12f) C:\WINDOWS\System32\Drivers\DbgMsg.sys
14:31:45.0737 3940 DbgMsg - ok
14:31:45.0799 3940 DcomLaunch (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\system32\rpcss.dll
14:31:45.0846 3940 DcomLaunch - ok
14:31:45.0909 3940 Dhcp (8c9a53e285ac5e6704844d0459ec85be) C:\WINDOWS\System32\dhcpcsvc.dll
14:31:45.0909 3940 Dhcp - ok
14:31:45.0971 3940 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
14:31:45.0971 3940 Disk - ok
14:31:45.0987 3940 dmadmin - ok
14:31:46.0065 3940 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
14:31:46.0190 3940 dmboot - ok
14:31:46.0456 3940 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\DRIVERS\dmio.sys
14:31:46.0456 3940 dmio - ok
14:31:46.0503 3940 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
14:31:46.0503 3940 dmload - ok
14:31:46.0565 3940 dmserver (2bfefe9e865655a76982f050450b9591) C:\WINDOWS\System32\dmserver.dll
14:31:46.0565 3940 dmserver - ok
14:31:46.0643 3940 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
14:31:46.0659 3940 DMusic - ok
14:31:46.0893 3940 Dnscache (dfaa406bf19f4ee806a6f8d4342137f7) C:\WINDOWS\System32\dnsrslvr.dll
14:31:46.0893 3940 Dnscache - ok
14:31:47.0253 3940 Dot3svc (4a3e2bd20157a0946751229e92eb8621) C:\WINDOWS\System32\dot3svc.dll
14:31:47.0284 3940 Dot3svc - ok
14:31:47.0331 3940 dpti2o - ok
14:31:47.0424 3940 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
14:31:47.0440 3940 drmkaud - ok
14:31:47.0456 3940 dtscsi - ok
14:31:47.0518 3940 EapHost (0887d9c2be8d940778cad1e3b85f2a41) C:\WINDOWS\System32\eapsvc.dll
14:31:47.0534 3940 EapHost - ok
14:31:47.0674 3940 ERSvc (a2a4912798f2be706abadd3d30800d16) C:\WINDOWS\System32\ersvc.dll
14:31:47.0690 3940 ERSvc - ok
14:31:48.0096 3940 Eventlog (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
14:31:48.0096 3940 Eventlog - ok
14:31:48.0206 3940 EventSystem (a371f11ef07653591c8de26afb13ce7f) C:\WINDOWS\system32\es.dll
14:31:48.0206 3940 EventSystem - ok
14:31:48.0237 3940 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
14:31:48.0253 3940 Fastfat - ok
14:31:48.0315 3940 FastUserSwitchingCompatibility (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
14:31:48.0315 3940 FastUserSwitchingCompatibility - ok
14:31:48.0378 3940 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
14:31:48.0378 3940 Fdc - ok
14:31:48.0393 3940 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
14:31:48.0409 3940 Fips - ok
14:31:48.0424 3940 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
14:31:48.0424 3940 Flpydisk - ok
14:31:48.0440 3940 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
14:31:48.0440 3940 FltMgr - ok
14:31:48.0503 3940 FlyPCI (93f7e288350460e4bae8807283dd4e6e) C:\WINDOWS\system32\drivers\FlyPCI.sys
14:31:48.0503 3940 FlyPCI - ok
14:31:48.0690 3940 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
14:31:48.0690 3940 FontCache3.0.0.0 - ok
14:31:48.0737 3940 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
14:31:48.0737 3940 FsUsbExDisk - ok
14:31:48.0753 3940 FsUsbExService (d3f9205cc4cb07553f2f9472c767ea87) C:\WINDOWS\system32\FsUsbExService.Exe
14:31:48.0784 3940 FsUsbExService - ok
14:31:48.0846 3940 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:31:48.0846 3940 Fs_Rec - ok
14:31:48.0909 3940 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:31:48.0909 3940 Ftdisk - ok
14:31:48.0971 3940 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
14:31:48.0971 3940 GEARAspiWDM - ok
14:31:49.0003 3940 gMouPS2 - ok
14:31:49.0018 3940 gMouUsb - ok
14:31:49.0081 3940 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:31:49.0081 3940 Gpc - ok
14:31:49.0128 3940 grmnusb (cd007d03a9284bfe67d49c01213132bf) C:\WINDOWS\system32\drivers\grmnusb.sys
14:31:49.0143 3940 grmnusb - ok
14:31:49.0284 3940 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
14:31:49.0284 3940 gupdate - ok
14:31:49.0299 3940 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
14:31:49.0299 3940 gupdatem - ok
14:31:49.0346 3940 GVCplDrv (f22bf7f345df95c09942951246aaa28d) C:\WINDOWS\system32\drivers\GVCplDrv.sys
14:31:49.0346 3940 GVCplDrv - ok
14:31:49.0424 3940 helpsvc (fcfe31fb75f8a6295b6b0af87a626282) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:31:49.0424 3940 helpsvc - ok
14:31:49.0471 3940 HidBth (0d349dc78c6ee16e655557e325a67d9c) C:\WINDOWS\system32\DRIVERS\hidbth.sys
14:31:49.0487 3940 HidBth - ok
14:31:49.0534 3940 HidServ (00e25ee90166b3e1be6e74aebf858306) C:\WINDOWS\System32\hidserv.dll
14:31:49.0534 3940 HidServ - ok
14:31:49.0549 3940 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:31:49.0549 3940 HidUsb - ok
14:31:49.0612 3940 hkmsvc (7a6b320928f86bc851530d63c82965d9) C:\WINDOWS\System32\kmsvc.dll
14:31:49.0612 3940 hkmsvc - ok
14:31:49.0628 3940 hpn - ok
14:31:49.0690 3940 HPZid412 (9f1d80908658eb7f1bf70809e0b51470) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
14:31:49.0690 3940 HPZid412 - ok
14:31:49.0706 3940 HPZipr12 (f7e3e9d50f9cd3de28085a8fdaa0a1c3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
14:31:49.0706 3940 HPZipr12 - ok
14:31:49.0784 3940 HPZius12 (cf1b7951b4ec8d13f3c93b74bb2b461b) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
14:31:49.0784 3940 HPZius12 - ok
14:31:49.0831 3940 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
14:31:49.0862 3940 HTTP - ok
14:31:49.0924 3940 HTTPFilter (58fe2f2da3bc5573f4a35b3760d3125f) C:\WINDOWS\System32\w3ssl.dll
14:31:49.0924 3940 HTTPFilter - ok
14:31:49.0940 3940 i2omgmt - ok
14:31:49.0956 3940 i2omp - ok
14:31:50.0003 3940 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:31:50.0003 3940 i8042prt - ok
14:31:50.0143 3940 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
14:31:50.0143 3940 IDriverT - ok
14:31:50.0315 3940 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:31:50.0378 3940 idsvc - ok
14:31:50.0424 3940 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
14:31:50.0424 3940 Imapi - ok
14:31:50.0487 3940 ImapiService (f7b93aafad33b2320954c17e26c8d361) C:\WINDOWS\system32\imapi.exe
14:31:50.0487 3940 ImapiService - ok
14:31:50.0518 3940 ini910u - ok
14:31:50.0534 3940 IntelIde - ok
14:31:50.0596 3940 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
14:31:50.0596 3940 Ip6Fw - ok
14:31:50.0659 3940 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:31:50.0659 3940 IpFilterDriver - ok
14:31:50.0706 3940 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:31:50.0721 3940 IpInIp - ok
14:31:50.0784 3940 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:31:50.0784 3940 IpNat - ok
14:31:50.0956 3940 iPod Service (3a6d4d8abacf64292d060c9e06d2050d) C:\Program Files\iPod\bin\iPodService.exe
14:31:51.0003 3940 iPod Service - ok
14:31:51.0049 3940 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:31:51.0049 3940 IPSec - ok
14:31:51.0081 3940 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
14:31:51.0081 3940 irda - ok
14:31:51.0143 3940 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
14:31:51.0143 3940 IRENUM - ok
14:31:51.0174 3940 Irmon (8024ea8c5b2d2a4d201f418b0aadb804) C:\WINDOWS\System32\irmon.dll
14:31:51.0174 3940 Irmon - ok
14:31:51.0237 3940 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:31:51.0237 3940 isapnp - ok
14:31:51.0409 3940 JavaQuickStarterService (9dba73c2f1e76ec4cb837e67c5743596) C:\Program Files\Java\jre6\bin\jqs.exe
14:31:51.0409 3940 JavaQuickStarterService - ok
14:31:51.0440 3940 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:31:51.0440 3940 Kbdclass - ok
14:31:51.0471 3940 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
14:31:51.0487 3940 kmixer - ok
14:31:51.0549 3940 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
14:31:51.0549 3940 KSecDD - ok
14:31:51.0612 3940 lanmanserver (3428e8f86f8add36b42fb23542c7b3e4) C:\WINDOWS\System32\srvsvc.dll
14:31:51.0612 3940 lanmanserver - ok
14:31:51.0674 3940 lanmanworkstation (936c1d110232d23b621cb0196e4f80f0) C:\WINDOWS\System32\wkssvc.dll
14:31:51.0690 3940 lanmanworkstation - ok
14:31:51.0706 3940 lbrtfdc - ok
14:31:51.0846 3940 LightScribeService (6e5dac168d1ff9843e84a59d51d31107) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
14:31:51.0862 3940 LightScribeService - ok
14:31:51.0909 3940 LmHosts (0ab159f536e3e8f7f07113702a07cca5) C:\WINDOWS\System32\lmhsvc.dll
14:31:51.0909 3940 LmHosts - ok
14:31:51.0956 3940 LVUSBSta (c5efbd05a5195402121711a6ebbb271f) C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys
14:31:51.0956 3940 LVUSBSta - ok
14:31:52.0018 3940 MA-620 (d57a920490362c89a0ef2a61fe249afa) C:\WINDOWS\system32\DRIVERS\MA-620.sys
14:31:52.0018 3940 MA-620 - ok
14:31:52.0096 3940 Ma730c (b46e0312776ed8afbbf5e4558fb69b0c) C:\WINDOWS\system32\DRIVERS\MA730C.sys
14:31:52.0096 3940 Ma730c - ok
14:31:52.0128 3940 Ma730Pt (e39fec91892605cc434ed9e3ad9de059) C:\WINDOWS\system32\DRIVERS\Ma730Pt.sys
14:31:52.0143 3940 Ma730Pt - ok
14:31:52.0190 3940 Ma730Vad (833c746986ade2a7ff60d0805e90a117) C:\WINDOWS\system32\DRIVERS\Ma730Vad.sys
14:31:52.0190 3940 Ma730Vad - ok
14:31:52.0253 3940 MagicTune (fa11e21f845c5e1a0af450dc53da0c3d) C:\WINDOWS\system32\drivers\MTictwl.sys
14:31:52.0253 3940 MagicTune - ok
14:31:52.0299 3940 MaRdPnp (fe62b8d9d06fd73571991c3af62d10fe) C:\WINDOWS\system32\DRIVERS\MaRdP2K.sys
14:31:52.0299 3940 MaRdPnp - ok
14:31:52.0331 3940 MaVctrl (4088674a6919ea96e7f8076e9955017a) C:\WINDOWS\system32\DRIVERS\MaVc2K.sys
14:31:52.0331 3940 MaVctrl - ok
14:31:52.0378 3940 MBAMSwissArmy (b18225739ed9caa83ba2df966e9f43e8) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
14:31:52.0378 3940 MBAMSwissArmy - ok
14:31:52.0503 3940 MDM (9330cd792e8ce79d8942c403bac24dbd) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
14:31:52.0549 3940 MDM - ok
14:31:52.0596 3940 Messenger (221cd1c815b8a6b79389c3f5d1018de8) C:\WINDOWS\System32\msgsvc.dll
14:31:52.0596 3940 Messenger - ok
14:31:52.0643 3940 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
14:31:52.0643 3940 mnmdd - ok
14:31:52.0690 3940 mnmsrvc (9a57d046f88f4b69751b11fd40088a61) C:\WINDOWS\system32\mnmsrvc.exe
14:31:52.0690 3940 mnmsrvc - ok
14:31:52.0737 3940 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
14:31:52.0737 3940 Modem - ok
14:31:52.0784 3940 MosIrUsb (5bbe28f4188e98ebf8b7bcd9f30caa5b) C:\WINDOWS\system32\DRIVERS\MosIrUsb.sys
14:31:52.0784 3940 MosIrUsb - ok
14:31:52.0846 3940 MotDev (a54abbda4ee2fdae15d4e1ee7ab788a1) C:\WINDOWS\system32\DRIVERS\motodrv.sys
14:31:52.0846 3940 MotDev - ok
14:31:52.0893 3940 motmodem (5023875a94b0766d98a62a72bc4cb055) C:\WINDOWS\system32\DRIVERS\motmodem.sys
14:31:52.0893 3940 motmodem - ok
14:31:52.0940 3940 motport (5023875a94b0766d98a62a72bc4cb055) C:\WINDOWS\system32\DRIVERS\motport.sys
14:31:52.0940 3940 motport - ok
14:31:52.0987 3940 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:31:52.0987 3940 Mouclass - ok
14:31:53.0018 3940 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:31:53.0018 3940 mouhid - ok
14:31:53.0065 3940 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
14:31:53.0065 3940 MountMgr - ok
14:31:53.0096 3940 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
14:31:53.0096 3940 MPE - ok
14:31:53.0206 3940 MpKslcbe137a9 - ok
14:31:53.0221 3940 mraid35x - ok
14:31:53.0268 3940 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:31:53.0268 3940 MRxDAV - ok
14:31:53.0346 3940 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:31:53.0378 3940 MRxSmb - ok
14:31:53.0424 3940 MSDTC (6db4d1521caba9a5ffab54ade0ae867d) C:\WINDOWS\system32\msdtc.exe
14:31:53.0424 3940 MSDTC - ok
14:31:53.0471 3940 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
14:31:53.0471 3940 Msfs - ok
14:31:53.0503 3940 MSIRCOMM (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys
14:31:53.0503 3940 MSIRCOMM - ok
14:31:53.0518 3940 MSIServer - ok
14:31:53.0565 3940 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:31:53.0581 3940 MSKSSRV - ok
14:31:53.0628 3940 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:31:53.0643 3940 MSPCLOCK - ok
14:31:53.0659 3940 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
14:31:53.0659 3940 MSPQM - ok
14:31:53.0674 3940 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:31:53.0674 3940 mssmbios - ok
14:31:53.0706 3940 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
14:31:53.0706 3940 MSTEE - ok
14:31:53.0753 3940 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
14:31:53.0753 3940 Mup - ok
14:31:53.0799 3940 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
14:31:53.0815 3940 NABTSFEC - ok
14:31:53.0862 3940 napagent (6ea362e9db03d44f6b996f4d8be237e9) C:\WINDOWS\System32\qagentrt.dll
14:31:53.0909 3940 napagent - ok
14:31:53.0971 3940 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
14:31:53.0987 3940 NDIS - ok
14:31:54.0034 3940 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
14:31:54.0034 3940 NdisIP - ok
14:31:54.0096 3940 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:31:54.0096 3940 NdisTapi - ok
14:31:54.0143 3940 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:31:54.0143 3940 Ndisuio - ok
14:31:54.0174 3940 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:31:54.0174 3940 NdisWan - ok
14:31:54.0206 3940 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
14:31:54.0206 3940 NDProxy - ok
14:31:54.0268 3940 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
14:31:54.0268 3940 NetBIOS - ok
14:31:54.0299 3940 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
14:31:54.0299 3940 NetBT - ok
14:31:54.0346 3940 NetDDE (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
14:31:54.0346 3940 NetDDE - ok
14:31:54.0362 3940 NetDDEdsdm (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
14:31:54.0362 3940 NetDDEdsdm - ok
14:31:54.0424 3940 Netlogon (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
14:31:54.0440 3940 Netlogon - ok
14:31:54.0503 3940 Netman (72e1e9e2977be08bdeedb6d8fd9d4d40) C:\WINDOWS\System32\netman.dll
14:31:54.0518 3940 Netman - ok
14:31:54.0674 3940 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:31:54.0690 3940 NetTcpPortSharing - ok
14:31:54.0753 3940 Nla (39ee7c3bfbc64ba87cc8cf67386e814c) C:\WINDOWS\System32\mswsock.dll
14:31:54.0799 3940 Nla - ok
14:31:54.0846 3940 nmwcd (b0a67de1a128389aea4d42c5a56215fd) C:\WINDOWS\system32\drivers\ccdcmb.sys
14:31:54.0846 3940 nmwcd - ok
14:31:54.0893 3940 nmwcdc (025c54f9f8c8bc1894ea38529c742c54) C:\WINDOWS\system32\drivers\ccdcmbo.sys
14:31:54.0893 3940 nmwcdc - ok
14:31:54.0924 3940 nmwcdnsu (4f0de685a96dc843ccc8a861b3fac12d) C:\WINDOWS\system32\drivers\nmwcdnsu.sys
14:31:54.0924 3940 nmwcdnsu - ok
14:31:54.0971 3940 nmwcdnsuc (578117c0c0cf10d99c8853e83c4bc63c) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
14:31:54.0971 3940 nmwcdnsuc - ok
14:31:55.0018 3940 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
14:31:55.0034 3940 Npfs - ok
14:31:55.0065 3940 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
14:31:55.0096 3940 Ntfs - ok
14:31:55.0112 3940 NtLmSsp (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
14:31:55.0112 3940 NtLmSsp - ok
14:31:55.0174 3940 NtmsSvc (023dd70573d644f3d9c8b1258a7bfd08) C:\WINDOWS\system32\ntmssvc.dll
14:31:55.0206 3940 NtmsSvc - ok
14:31:55.0253 3940 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
14:31:55.0253 3940 Null - ok
14:31:55.0424 3940 nv (c43d9d777d53d668d1fe683947c9ffe1) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
14:31:55.0549 3940 nv - ok
14:31:55.0690 3940 nvatabus (46deed4c6c5fa765f9a2c723be60348d) C:\WINDOWS\system32\DRIVERS\nvatabus.sys
14:31:55.0690 3940 nvatabus - ok
14:31:55.0753 3940 NVENETFD (f87d81c2a99a3796b5e4db6d38b8e706) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
14:31:55.0753 3940 NVENETFD - ok
14:31:55.0815 3940 nvnetbus (1602abc3fc9f8ca6a5b2c9cb466720b5) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
14:31:55.0815 3940 nvnetbus - ok
14:31:55.0846 3940 NVSvc (d1b1d9f8cfcaf03872b6f769a79ca3e8) C:\WINDOWS\system32\nvsvc32.exe
14:31:55.0846 3940 NVSvc - ok
14:31:55.0893 3940 nv_agp (3194e2f6c9000c39dcf9d0580754f714) C:\WINDOWS\system32\DRIVERS\nv_agp.sys
14:31:55.0893 3940 nv_agp - ok
14:31:55.0924 3940 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:31:55.0924 3940 NwlnkFlt - ok
14:31:55.0956 3940 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:31:55.0956 3940 NwlnkFwd - ok
14:31:56.0049 3940 ose (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:31:56.0049 3940 ose - ok
14:31:56.0112 3940 P730M (b7f88d160f8daf09140d241b19087bd8) C:\WINDOWS\system32\DRIVERS\P730M.sys
14:31:56.0112 3940 P730M - ok
14:31:56.0159 3940 P730U (a5dd79583780574713474907f125a3af) C:\WINDOWS\system32\DRIVERS\P730U.sys
14:31:56.0159 3940 P730U - ok
14:31:56.0174 3940 PAC207 - ok
14:31:56.0221 3940 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\DRIVERS\parport.sys
14:31:56.0221 3940 Parport - ok
14:31:56.0284 3940 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
14:31:56.0284 3940 PartMgr - ok
14:31:56.0299 3940 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
14:31:56.0299 3940 ParVdm - ok
14:31:56.0346 3940 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
14:31:56.0346 3940 pccsmcfd - ok
14:31:56.0378 3940 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
14:31:56.0378 3940 PCI - ok
14:31:56.0393 3940 PCIDump - ok
14:31:56.0440 3940 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
14:31:56.0440 3940 PCIIde - ok
14:31:56.0487 3940 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
14:31:56.0487 3940 Pcmcia - ok
14:31:56.0518 3940 pcouffin (02aaafb7ba137ce5ddabcdf8090954d9) C:\WINDOWS\system32\Drivers\pcouffin.sys
14:31:56.0534 3940 pcouffin - ok
14:31:56.0534 3940 PDCOMP - ok
14:31:56.0549 3940 PDFRAME - ok
14:31:56.0565 3940 PDRELI - ok
14:31:56.0581 3940 PDRFRAME - ok
14:31:56.0596 3940 perc2 - ok
14:31:56.0612 3940 perc2hib - ok
14:31:56.0690 3940 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys
14:31:56.0690 3940 pfc - ok
14:31:56.0706 3940 PlugPlay (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
14:31:56.0706 3940 PlugPlay - ok
14:31:56.0768 3940 Pml Driver HPZ12 (9d84376931440f3679beef2a414fa493) C:\WINDOWS\system32\HPZipm12.exe
14:31:56.0768 3940 Pml Driver HPZ12 - ok
14:31:56.0831 3940 PolicyAgent (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
14:31:56.0831 3940 PolicyAgent - ok
14:31:56.0846 3940 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:31:56.0862 3940 PptpMiniport - ok
14:31:56.0893 3940 Processor (7eb15dce4ec3a0220bd796a15c18186e) C:\WINDOWS\system32\DRIVERS\processr.sys
14:31:56.0893 3940 Processor - ok
14:31:56.0909 3940 ProtectedStorage (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
14:31:56.0909 3940 ProtectedStorage - ok
14:31:56.0924 3940 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
14:31:56.0924 3940 PSched - ok
14:31:57.0003 3940 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:31:57.0003 3940 Ptilink - ok
14:31:57.0049 3940 PxHelp20 (183ef96bcc2ec3d5294cb2c2c0ecbcd1) C:\WINDOWS\system32\Drivers\PxHelp20.sys
14:31:57.0049 3940 PxHelp20 - ok
14:31:57.0174 3940 QCMerced (9a155d31b8e52f41b258282092cc93a7) C:\WINDOWS\system32\DRIVERS\LVCM.sys
14:31:57.0253 3940 QCMerced - ok
14:31:57.0346 3940 ql1080 - ok
14:31:57.0362 3940 Ql10wnt - ok
14:31:57.0378 3940 ql12160 - ok
14:31:57.0393 3940 ql1240 - ok
14:31:57.0409 3940 ql1280 - ok
14:31:57.0440 3940 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:31:57.0456 3940 RasAcd - ok
14:31:57.0565 3940 RasAuto (2b5e44ea009f2f374b980e1e9a70635d) C:\WINDOWS\System32\rasauto.dll
14:31:57.0565 3940 RasAuto - ok
14:31:57.0612 3940 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
14:31:57.0612 3940 Rasirda - ok
14:31:57.0659 3940 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:31:57.0659 3940 Rasl2tp - ok
14:31:57.0721 3940 RasMan (d57554c664b64604bd1ee13ea2c07e77) C:\WINDOWS\System32\rasmans.dll
14:31:57.0737 3940 RasMan - ok
14:31:57.0768 3940 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:31:57.0768 3940 RasPppoe - ok
14:31:57.0799 3940 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
14:31:57.0799 3940 Raspti - ok
14:31:57.0831 3940 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:31:57.0831 3940 Rdbss - ok
14:31:57.0862 3940 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:31:57.0862 3940 RDPCDD - ok
14:31:57.0924 3940 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:31:57.0940 3940 rdpdr - ok
14:31:58.0003 3940 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
14:31:58.0018 3940 RDPWD - ok
14:31:58.0065 3940 RDSessMgr (c0d9d9711cb74ee9bc66353d8cbdab0e) C:\WINDOWS\system32\sessmgr.exe
14:31:58.0112 3940 RDSessMgr - ok
14:31:58.0143 3940 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
14:31:58.0143 3940 redbook - ok
14:31:58.0206 3940 RemoteAccess (127c26b5371651043450e52542099aba) C:\WINDOWS\System32\mprdim.dll
14:31:58.0221 3940 RemoteAccess - ok
14:31:58.0268 3940 RemoteRegistry (8f31505484a190d5b22274708799f4ec) C:\WINDOWS\system32\regsvc.dll
14:31:58.0268 3940 RemoteRegistry - ok
14:31:58.0315 3940 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
14:31:58.0315 3940 RFCOMM - ok
14:31:58.0378 3940 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
14:31:58.0378 3940 ROOTMODEM - ok
14:31:58.0424 3940 RpcLocator (718b3bdc0bc3c2f7d065a53d26202af9) C:\WINDOWS\system32\locator.exe
14:31:58.0424 3940 RpcLocator - ok
14:31:58.0487 3940 RpcSs (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\System32\rpcss.dll
14:31:58.0503 3940 RpcSs - ok
14:31:58.0534 3940 RSVP (09ab2e71e58b078038e3bfdba7ffc984) C:\WINDOWS\system32\rsvp.exe
14:31:58.0565 3940 RSVP - ok
14:31:58.0628 3940 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
14:31:58.0628 3940 rtl8139 - ok
14:31:58.0643 3940 SABProcEnum - ok
14:31:58.0674 3940 SamSs (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
14:31:58.0674 3940 SamSs - ok
14:31:58.0721 3940 SCardSvr (410046e401eb11e1e6749e9deea41d4a) C:\WINDOWS\System32\SCardSvr.exe
14:31:58.0721 3940 SCardSvr - ok
14:31:58.0768 3940 Schedule (3ff232a7731621b8902d81d42418c93c) C:\WINDOWS\system32\schedsvc.dll
14:31:58.0784 3940 Schedule - ok
14:31:58.0846 3940 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:31:58.0846 3940 Secdrv - ok
14:31:58.0893 3940 seclogon (477e2c3cc5e4a0d635bcb0ea8dcac3c6) C:\WINDOWS\System32\seclogon.dll
14:31:58.0909 3940 seclogon - ok
14:31:58.0956 3940 SENS (a530b75c10c23c9ab28fdb6ce719e21f) C:\WINDOWS\system32\sens.dll
14:31:58.0971 3940 SENS - ok
14:31:59.0018 3940 ser2pl (b72e991d35d9ebe17e485497ab8cf002) C:\WINDOWS\system32\DRIVERS\ser2pl.sys
14:31:59.0034 3940 ser2pl - ok
14:31:59.0065 3940 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
14:31:59.0081 3940 serenum - ok
14:31:59.0096 3940 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
14:31:59.0112 3940 Serial - ok
14:31:59.0268 3940 ServiceLayer (668043f192ab9659761a349a4703600d) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
14:31:59.0331 3940 ServiceLayer - ok
14:31:59.0409 3940 sfdrv01 (56250672235bbe54ba8a4963b1ac997c) C:\WINDOWS\system32\drivers\sfdrv01.sys
14:31:59.0409 3940 sfdrv01 - ok
14:31:59.0471 3940 sfhlp02 (3ad2b15ccc03febfbaf5ff057822aa75) C:\WINDOWS\system32\drivers\sfhlp02.sys
14:31:59.0471 3940 sfhlp02 - ok
14:31:59.0534 3940 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
14:31:59.0534 3940 Sfloppy - ok
14:31:59.0596 3940 SharedAccess (f58faca9621d2db01bd0927d9a0a208e) C:\WINDOWS\System32\ipnathlp.dll
14:31:59.0612 3940 SharedAccess - ok
14:31:59.0674 3940 ShellHWDetection (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
14:31:59.0674 3940 ShellHWDetection - ok
14:31:59.0690 3940 Simbad - ok
14:31:59.0721 3940 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
14:31:59.0737 3940 SLIP - ok
14:31:59.0753 3940 snpstd2 - ok
14:31:59.0909 3940 Sony Ericsson PCCompanion (1e72f502e3a0f841d85bdc0eea76ce65) C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
14:31:59.0924 3940 Sony Ericsson PCCompanion - ok
14:31:59.0971 3940 SONYPVU1 (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
14:31:59.0971 3940 SONYPVU1 - ok
14:32:00.0003 3940 Sparrow - ok
14:32:00.0034 3940 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
14:32:00.0034 3940 splitter - ok
14:32:00.0096 3940 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
14:32:00.0096 3940 Spooler - ok
14:32:00.0190 3940 sptd (0c1dad75274cb6e31f053ce3e08bf9c3) C:\WINDOWS\system32\Drivers\sptd.sys
14:32:00.0190 3940 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 0c1dad75274cb6e31f053ce3e08bf9c3
14:32:00.0206 3940 sptd ( LockedFile.Multi.Generic ) - warning
14:32:00.0206 3940 sptd - detected LockedFile.Multi.Generic (1)
14:32:00.0253 3940 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
14:32:00.0253 3940 sr - ok
14:32:00.0299 3940 srservice (35b91147124f64ac8081a2edb9ea4dee) C:\WINDOWS\system32\srsvc.dll
14:32:00.0315 3940 srservice - ok
14:32:00.0378 3940 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
14:32:00.0393 3940 Srv - ok
14:32:00.0424 3940 SSDPSRV (becd5271dc4e3b7c3d035f790fcbc1e5) C:\WINDOWS\System32\ssdpsrv.dll
14:32:00.0424 3940 SSDPSRV - ok
14:32:00.0471 3940 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
14:32:00.0471 3940 ssmdrv - ok
14:32:00.0534 3940 ss_bbus (eaa66218cd39f5bb1b4853a78c67c787) C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
14:32:00.0534 3940 ss_bbus - ok
14:32:00.0596 3940 ss_bmdfl (91765f99914ed8693d8bc76524f21581) C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
14:32:00.0596 3940 ss_bmdfl - ok
14:32:00.0628 3940 ss_bmdm (840e7b738b03c10ee91d9b7d3d6eff15) C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
14:32:00.0628 3940 ss_bmdm - ok
14:32:00.0674 3940 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
14:32:00.0674 3940 StarOpen - ok
14:32:00.0721 3940 STI Simulator (ed78dfad8efcdfbc89500492c4d14645) C:\WINDOWS\System32\PAStiSvc.exe
14:32:00.0737 3940 STI Simulator - ok
14:32:00.0799 3940 STIrUsb (7f43908ddaac47754c33f3995db0a3b2) C:\WINDOWS\system32\DRIVERS\irstusb.sys
14:32:00.0799 3940 STIrUsb - ok
14:32:00.0862 3940 stisvc (c1cdd9275f6a115bb0ae1d55d8d27ba6) C:\WINDOWS\system32\wiaservc.dll
14:32:00.0909 3940 stisvc - ok
14:32:00.0956 3940 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
14:32:00.0956 3940 streamip - ok
14:32:01.0003 3940 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
14:32:01.0003 3940 swenum - ok
14:32:01.0018 3940 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
14:32:01.0018 3940 swmidi - ok
14:32:01.0049 3940 SwPrv - ok
14:32:01.0065 3940 symc810 - ok
14:32:01.0081 3940 symc8xx - ok
14:32:01.0096 3940 sym_hi - ok
14:32:01.0112 3940 sym_u3 - ok
14:32:01.0159 3940 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
14:32:01.0159 3940 sysaudio - ok
14:32:01.0206 3940 SysmonLog (ce06f01b88ace199a1bf460cac29c110) C:\WINDOWS\system32\smlogsvc.exe
14:32:01.0221 3940 SysmonLog - ok
14:32:01.0253 3940 TapiSrv (c2546cd7a398476f9df5614b2ae160e8) C:\WINDOWS\System32\tapisrv.dll
14:32:01.0315 3940 TapiSrv - ok
14:32:01.0378 3940 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:32:01.0424 3940 Tcpip - ok
14:32:01.0471 3940 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
14:32:01.0471 3940 TDPIPE - ok
14:32:01.0503 3940 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
14:32:01.0518 3940 TDTCP - ok
14:32:01.0549 3940 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
14:32:01.0549 3940 TermDD - ok
14:32:01.0628 3940 TermService (a75dd6fc3dbee4fff5ebc9f2c28bb66e) C:\WINDOWS\System32\termsrv.dll
14:32:01.0659 3940 TermService - ok
14:32:01.0721 3940 Themes (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
14:32:01.0721 3940 Themes - ok
14:32:01.0815 3940 TlntSvr (cd0cc7b167d78043a41c98d4921efb54) C:\WINDOWS\system32\tlntsvr.exe
14:32:01.0846 3940 TlntSvr - ok
14:32:01.0971 3940 TomTomHOMEService (3199a477f0f06eede41bd55179f8eb05) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
14:32:01.0971 3940 TomTomHOMEService - ok
14:32:01.0987 3940 TosIde - ok
14:32:02.0049 3940 TrkWks (38853304ccb938d30e0c4cde8d2c2a8a) C:\WINDOWS\system32\trkwks.dll
14:32:02.0049 3940 TrkWks - ok
14:32:02.0112 3940 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
14:32:02.0112 3940 Udfs - ok
14:32:02.0128 3940 ultra - ok
14:32:02.0206 3940 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
14:32:02.0253 3940 Update - ok
14:32:02.0315 3940 upnphost (651bd90dcee5b7bdc74a2eb7c9266f9e) C:\WINDOWS\System32\upnphost.dll
14:32:02.0315 3940 upnphost - ok
14:32:02.0378 3940 upperdev (78b74af8727a28c128e164e9b53a5413) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
14:32:02.0378 3940 upperdev - ok
14:32:02.0409 3940 UPS (20a0f6a11959e92908717d09e87d670d) C:\WINDOWS\System32\ups.exe
14:32:02.0424 3940 UPS - ok
14:32:02.0456 3940 usb2vcom (15059184012b3dba4415d45b41363dc8) C:\WINDOWS\system32\DRIVERS\usb2vcom.sys
14:32:02.0456 3940 usb2vcom - ok
14:32:02.0471 3940 USBAAPL - ok
14:32:02.0518 3940 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
14:32:02.0534 3940 usbaudio - ok
14:32:02.0643 3940 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:32:02.0643 3940 usbccgp - ok
14:32:02.0690 3940 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:32:02.0690 3940 usbehci - ok
14:32:02.0721 3940 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:32:02.0721 3940 usbhub - ok
14:32:02.0768 3940 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
14:32:02.0768 3940 usbohci - ok
14:32:02.0831 3940 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
14:32:02.0831 3940 usbprint - ok
14:32:02.0846 3940 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:32:02.0846 3940 usbscan - ok
14:32:02.0909 3940 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\DRIVERS\usbser.sys
14:32:02.0909 3940 usbser - ok
14:32:02.0971 3940 UsbserFilt (4f8fbc51a1c0a17310846b417a447f91) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
14:32:02.0971 3940 UsbserFilt - ok
14:32:03.0003 3940 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:32:03.0003 3940 USBSTOR - ok
14:32:03.0049 3940 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
14:32:03.0049 3940 VgaSave - ok
14:32:03.0081 3940 ViaIde - ok
14:32:03.0128 3940 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
14:32:03.0128 3940 VolSnap - ok
14:32:03.0190 3940 VSS (d6ba1a63d9e00933f1cd2a885573afb2) C:\WINDOWS\System32\vssvc.exe
14:32:03.0237 3940 VSS - ok
14:32:03.0284 3940 W32Time (fa4e1cdba256787f2149f4aad07bc91f) C:\WINDOWS\system32\w32time.dll
14:32:03.0299 3940 W32Time - ok
14:32:03.0378 3940 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:32:03.0378 3940 Wanarp - ok
14:32:03.0440 3940 wceusbsh (4a954a20a4c73d6db13c0fe25f3f1b0c) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
14:32:03.0440 3940 wceusbsh - ok
14:32:03.0518 3940 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
14:32:03.0565 3940 Wdf01000 - ok
14:32:03.0581 3940 WDICA - ok
14:32:03.0628 3940 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
14:32:03.0628 3940 wdmaud - ok
14:32:03.0690 3940 WebClient (47ae51048a82dfa1cd6b51d369f7e169) C:\WINDOWS\System32\webclnt.dll
14:32:03.0690 3940 WebClient - ok
14:32:03.0799 3940 winmgmt (e488332126e3b1182d2b8a0c35408ec6) C:\WINDOWS\system32\wbem\WMIsvc.dll
14:32:03.0815 3940 winmgmt - ok
14:32:03.0878 3940 WinUSB (fd600b032e741eb6aab509fc630f7c42) C:\WINDOWS\system32\DRIVERS\WinUSB.sys
14:32:03.0878 3940 WinUSB - ok
14:32:03.0924 3940 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
14:32:03.0924 3940 WmdmPmSN - ok
14:32:04.0003 3940 Wmi (0171cff34bba8c5977f18c48d8aef8c6) C:\WINDOWS\System32\advapi32.dll
14:32:04.0034 3940 Wmi - ok
14:32:04.0096 3940 WmiApSrv (23f6f03272f7e5679f1f050aed5acee6) C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:32:04.0112 3940 WmiApSrv - ok
14:32:04.0284 3940 WMPNetworkSvc (3739866d20abd42f26a7b85f9e2560af) C:\Program Files\Windows Media Player\WMPNetwk.exe
14:32:04.0346 3940 WMPNetworkSvc - ok
14:32:04.0440 3940 WMZuneComm (017695393afffed8de58abd1b085be6d) c:\Program Files\Zune\WMZuneComm.exe
14:32:04.0456 3940 WMZuneComm - ok
14:32:04.0565 3940 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
14:32:04.0565 3940 WpdUsb - ok
14:32:04.0628 3940 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
14:32:04.0628 3940 WS2IFSL - ok
14:32:04.0690 3940 wscsvc (4c86d5faf78194995af9cc1075f65dd3) C:\WINDOWS\system32\wscsvc.dll
14:32:04.0690 3940 wscsvc - ok
14:32:04.0753 3940 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
14:32:04.0753 3940 WSTCODEC - ok
14:32:04.0799 3940 wuauserv (c1364564800ee9784192145324a23308) C:\WINDOWS\system32\wuauserv.dll
14:32:04.0815 3940 wuauserv - ok
14:32:04.0862 3940 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
14:32:04.0862 3940 WudfPf - ok
14:32:04.0940 3940 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
14:32:04.0940 3940 WudfRd - ok
14:32:04.0987 3940 WudfSvc (ddee3682fe97037c45f4d7ab467cb8b6) C:\WINDOWS\System32\WUDFSvc.dll
14:32:04.0987 3940 WudfSvc - ok
14:32:05.0049 3940 WZCSVC (a27d4ba7264c0bf52f32d10405bea1d4) C:\WINDOWS\System32\wzcsvc.dll
14:32:05.0112 3940 WZCSVC - ok
14:32:05.0174 3940 xmlprov (eaa4bb9edb3fb10cf8979fe65e63658f) C:\WINDOWS\System32\xmlprov.dll
14:32:05.0221 3940 xmlprov - ok
14:32:05.0268 3940 zumbus (ae279cd76b38fc079eec3ca6d65a5926) C:\WINDOWS\system32\DRIVERS\zumbus.sys
14:32:05.0268 3940 zumbus - ok
14:32:05.0362 3940 ZuneBusEnum (37f339b64f19e2775284ed7161b96683) c:\Program Files\Zune\ZuneBusEnum.exe
14:32:05.0362 3940 ZuneBusEnum - ok
14:32:05.0971 3940 ZuneNetworkSvc (1076df9ade4e13ea3bf39d2165aeb903) c:\Program Files\Zune\ZuneNss.exe
14:32:06.0362 3940 ZuneNetworkSvc - ok
14:32:06.0503 3940 ZuneWlanCfgSvc (de1cdb333a402b279f04d627122fa08e) c:\Program Files\Zune\ZuneWlanCfgSvc.exe
14:32:06.0549 3940 ZuneWlanCfgSvc - ok
14:32:06.0643 3940 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
14:32:07.0112 3940 \Device\Harddisk0\DR0 - ok
14:32:07.0128 3940 Boot (0x1200) (abe564c6ab22bdb0b389567963219648) \Device\Harddisk0\DR0\Partition0
14:32:07.0128 3940 \Device\Harddisk0\DR0\Partition0 - ok
14:32:07.0128 3940 ============================================================
14:32:07.0128 3940 Scan finished
14:32:07.0128 3940 ============================================================
14:32:07.0143 1808 Detected object count: 1
14:32:07.0143 1808 Actual detected object count: 1
14:32:20.0659 1808 sptd ( LockedFile.Multi.Generic ) - skipped by user
14:32:20.0659 1808 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

http://forum.viry.cz/viewtopic.php?f=24 ... 05#p981205 Scan

RogueKiller V7.5.1 [05/28/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Normální režim
Uživatel: PC Shop [Práva správce]
Mód: Kontrola -- Datum: 05/30/2012 14:58:16

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Záznamy Registrů: 3 ¤¤¤
[] HKLM\[...]\Windows : () -> ACCESS DENIED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[] HKLM\[...]\Windows : () -> ACCESS DENIED

¤¤¤ Zvláštní soubory / Složky: ¤¤¤
[FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX

¤¤¤ Ovladač: [NAHRÁNO] ¤¤¤
SSDT[25] : NtClose @ 0x805B1D78 -> HOOKED (Unknown @ 0xEE323FDC)
SSDT[41] : NtCreateKey @ 0x8061ABE2 -> HOOKED (Unknown @ 0xEE323F96)
SSDT[50] : NtCreateSection @ 0x805A0800 -> HOOKED (Unknown @ 0xEE323FE6)
SSDT[53] : NtCreateThread @ 0x805C735E -> HOOKED (Unknown @ 0xEE323F8C)
SSDT[63] : NtDeleteKey @ 0x8061B07E -> HOOKED (Unknown @ 0xEE323F9B)
SSDT[65] : NtDeleteValueKey @ 0x8061B24E -> HOOKED (Unknown @ 0xEE323FA5)
SSDT[68] : NtDuplicateObject @ 0x805B398C -> HOOKED (Unknown @ 0xEE323FD7)
SSDT[98] : NtLoadKey @ 0x8061CE06 -> HOOKED (Unknown @ 0xEE323FAA)
SSDT[122] : NtOpenProcess @ 0x805C13E2 -> HOOKED (Unknown @ 0xEE323F78)
SSDT[128] : NtOpenThread @ 0x805C166E -> HOOKED (Unknown @ 0xEE323F7D)
SSDT[193] : NtReplaceKey @ 0x8061CCB6 -> HOOKED (Unknown @ 0xEE323FB4)
SSDT[204] : NtRestoreKey @ 0x8061C5C2 -> HOOKED (Unknown @ 0xEE323FAF)
SSDT[213] : NtSetContextThread @ 0x805C8FB6 -> HOOKED (Unknown @ 0xEE323FEB)
SSDT[247] : NtSetValueKey @ 0x80619154 -> HOOKED (Unknown @ 0xEE323FA0)
SSDT[257] : NtTerminateProcess @ 0x805C866A -> HOOKED (Unknown @ 0xEE323F87)
S_SSDT[549] : Unknown -> HOOKED (Unknown @ 0xEE323FF0)
S_SSDT[552] : Unknown -> HOOKED (Unknown @ 0xEE323FF5)

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD800JB-00JJC0 +++++
--- User ---
[MBR] 4afa6c218239c33d2c20033aef4a0d88
[BSP] 519c6b516e830721f486b606ba28d5d5 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 76308 Mo
Error reading LL1 MBR!
Error reading LL2 MBR!

Dokončeno : << RKreport[1].txt >>
RKreport[1].txt

1. otestuj na www.virustotal.com subor c:\windows\system32\drivers\nwlnknb.sys
2. premenuj combofix.exe na bubu.com a spust, ak nepadne log vloz

Proskenování nic a combo zase spadl. Večer jsem ještě přeinstaloval explorer a řekl bych, že se PC chová výrazně lépe.

citat:
Odinstalujte Combofix
• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

+ prescanuj PC s AVPTool

Nevím jestli je to správně, ale AVPTool mi omezil spuštění některých programů, je to tak dobře? Musel jsem ho ukončit. Po restartu programy zase fungují.
Zkusím ho pustit na noc

na noc to bude idealne - zalezi od velkosti disku, mnozstva suborov apod. >> scan moze trvat hodinu, ale aj niekolko hodin ,,,

Dobré ráno,

tak ráno byl na LCD spořič a ani po 20 min jsem se nedostal na plochu. PC bylo zamrzlé, tak výsledek nemám.

citat:
TFC http://oldtimer.geekstogo.com/TFC.exe
• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

+
po vycisteni spust AVPTool - pocas scanu nespustaj ine aplikacie

Je to až tak důležité? PC se teď chová normálně. Obávám se dalšího tvrdého restartu, že se stane, že PC nenaběhne.

TFC vykonaj urcite - vycisti nepotrebne subory
AVPTool nie je nevyhnutny,,, iba pre klud svedomia

TFC jsem udělal.
AVPTool zatím ne.

Pc je zatím v pořádku?