VIRY.CZ

Jeste poprosim o TDSSKiller

17:41:59.0828 0900 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
17:42:00.0093 0900 ============================================================
17:42:00.0093 0900 Current date / time: 2012/10/20 17:42:00.0093
17:42:00.0093 0900 SystemInfo:
17:42:00.0093 0900
17:42:00.0093 0900 OS Version: 5.1.2600 ServicePack: 3.0
17:42:00.0093 0900 Product type: Workstation
17:42:00.0140 0900 ComputerName: DOMA-363AC646CA
17:42:00.0156 0900 UserName: Owner
17:42:00.0156 0900 Windows directory: C:\WINDOWS
17:42:00.0156 0900 System windows directory: C:\WINDOWS
17:42:00.0156 0900 Processor architecture: Intel x86
17:42:00.0156 0900 Number of processors: 1
17:42:00.0156 0900 Page size: 0x1000
17:42:00.0203 0900 Boot type: Normal boot
17:42:00.0203 0900 ============================================================
17:42:01.0609 0900 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000020
17:42:01.0609 0900 Drive \Device\Harddisk1\DR1 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000020
17:42:01.0609 0900 ============================================================
17:42:01.0609 0900 \Device\Harddisk0\DR0:
17:42:01.0609 0900 MBR partitions:
17:42:01.0609 0900 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
17:42:01.0609 0900 \Device\Harddisk1\DR1:
17:42:01.0609 0900 MBR partitions:
17:42:01.0609 0900 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
17:42:01.0609 0900 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x61A7966, BlocksNum 0x201CC3
17:42:01.0625 0900 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x63DC635, BlocksNum 0xD63EAB
17:42:01.0640 0900 \Device\Harddisk1\DR1\Partition4: MBR, Type 0x7, StartLBA 0x7141BDC, BlocksNum 0xB8D6EE5
17:42:01.0640 0900 ============================================================
17:42:01.0671 0900 F: <-> \Device\Harddisk1\DR1\Partition4
17:42:01.0703 0900 G: <-> \Device\Harddisk1\DR1\Partition2
17:42:01.0734 0900 H: <-> \Device\Harddisk1\DR1\Partition1
17:42:01.0750 0900 C: <-> \Device\Harddisk0\DR0\Partition1
17:42:01.0796 0900 I: <-> \Device\Harddisk1\DR1\Partition3
17:42:01.0796 0900 ============================================================
17:42:17.0093 0900 Initialize success
17:42:17.0093 0900 ============================================================
17:43:37.0843 3964 ============================================================
17:43:37.0843 3964 Scan started
17:43:37.0843 3964 Mode: Manual; SigCheck; TDLFS;
17:43:37.0843 3964 ============================================================
17:43:38.0593 3964 ================ Scan system memory ========================
17:43:40.0406 3964 System memory ( MEM:Backdoor.Win32.Sinowal.d ) - infected
17:43:40.0406 3964 System memory - detected MEM:Backdoor.Win32.Sinowal.d (0)
17:43:40.0421 3964 ================ Scan services =============================
17:43:40.0843 3964 Abiosdsk - ok
17:43:40.0875 3964 abp480n5 - ok
17:43:40.0968 3964 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:43:41.0406 3964 ACPI - ok
17:43:41.0468 3964 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
17:43:41.0640 3964 ACPIEC - ok
17:43:41.0703 3964 [ 276A114FD1DE8232211F299E90DA8E3A ] ACS C:\WINDOWS\system32\acs.exe
17:43:41.0734 3964 ACS ( UnsignedFile.Multi.Generic ) - warning
17:43:41.0734 3964 ACS - detected UnsignedFile.Multi.Generic (1)
17:43:41.0828 3964 [ C1EB9968EC89FBA5F3A264E2E57923AB ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
17:43:41.0890 3964 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
17:43:41.0890 3964 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
17:43:42.0062 3964 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:43:42.0078 3964 AdobeFlashPlayerUpdateSvc - ok
17:43:42.0125 3964 adpu160m - ok
17:43:42.0203 3964 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
17:43:42.0390 3964 aec - ok
17:43:42.0437 3964 [ 91F3DF93F40A74D222CD166FE95DB633 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
17:43:42.0468 3964 AegisP ( UnsignedFile.Multi.Generic ) - warning
17:43:42.0468 3964 AegisP - detected UnsignedFile.Multi.Generic (1)
17:43:42.0531 3964 [ A7B8A3A79D35215D798A300DF49ED23F ] Afc C:\WINDOWS\system32\drivers\Afc.sys
17:43:42.0546 3964 Afc ( UnsignedFile.Multi.Generic ) - warning
17:43:42.0546 3964 Afc - detected UnsignedFile.Multi.Generic (1)
17:43:42.0609 3964 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
17:43:42.0671 3964 AFD - ok
17:43:42.0703 3964 Aha154x - ok
17:43:42.0734 3964 aic78u2 - ok
17:43:42.0781 3964 aic78xx - ok
17:43:42.0843 3964 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
17:43:43.0015 3964 Alerter - ok
17:43:43.0062 3964 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
17:43:43.0171 3964 ALG - ok
17:43:43.0187 3964 AliIde - ok
17:43:43.0406 3964 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
17:43:43.0531 3964 Ambfilt - ok
17:43:43.0562 3964 amsint - ok
17:43:43.0593 3964 AppMgmt - ok
17:43:43.0671 3964 [ 3CB8E72B7C9887B42B90000E8CB1E7BE ] AR5211 C:\WINDOWS\system32\DRIVERS\ar5211.sys
17:43:43.0734 3964 AR5211 ( UnsignedFile.Multi.Generic ) - warning
17:43:43.0734 3964 AR5211 - detected UnsignedFile.Multi.Generic (1)
17:43:43.0781 3964 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
17:43:43.0968 3964 Arp1394 - ok
17:43:43.0984 3964 asc - ok
17:43:44.0031 3964 asc3350p - ok
17:43:44.0062 3964 asc3550 - ok
17:43:44.0203 3964 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
17:43:44.0234 3964 aspnet_state - ok
17:43:44.0281 3964 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:43:44.0468 3964 AsyncMac - ok
17:43:44.0546 3964 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
17:43:44.0750 3964 atapi - ok
17:43:44.0781 3964 Atdisk - ok
17:43:44.0828 3964 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:43:45.0015 3964 Atmarpc - ok
17:43:45.0062 3964 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
17:43:45.0234 3964 AudioSrv - ok
17:43:45.0296 3964 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
17:43:45.0468 3964 audstub - ok
17:43:45.0562 3964 [ 32A5DEFDDC3562BF89D73586F5915B34 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
17:43:45.0593 3964 Autodesk Licensing Service - ok
17:43:45.0687 3964 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
17:43:45.0875 3964 Beep - ok
17:43:45.0937 3964 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
17:43:46.0156 3964 BITS - ok
17:43:46.0218 3964 [ F934D1B230F84E1D19DD00AC5A7A83ED ] Bridge C:\WINDOWS\system32\DRIVERS\bridge.sys
17:43:46.0296 3964 Bridge - ok
17:43:46.0328 3964 [ F934D1B230F84E1D19DD00AC5A7A83ED ] BridgeMP C:\WINDOWS\system32\DRIVERS\bridge.sys
17:43:46.0421 3964 BridgeMP - ok
17:43:46.0468 3964 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
17:43:46.0515 3964 Browser - ok
17:43:46.0531 3964 catchme - ok
17:43:46.0593 3964 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
17:43:46.0765 3964 cbidf2k - ok
17:43:46.0796 3964 cd20xrnt - ok
17:43:46.0859 3964 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
17:43:47.0062 3964 Cdaudio - ok
17:43:47.0125 3964 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
17:43:47.0296 3964 Cdfs - ok
17:43:47.0343 3964 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:43:47.0546 3964 Cdrom - ok
17:43:47.0578 3964 Changer - ok
17:43:47.0640 3964 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
17:43:47.0828 3964 CiSvc - ok
17:43:47.0859 3964 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
17:43:48.0062 3964 ClipSrv - ok
17:43:48.0156 3964 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:43:48.0203 3964 clr_optimization_v2.0.50727_32 - ok
17:43:48.0218 3964 CmdIde - ok
17:43:48.0265 3964 COMSysApp - ok
17:43:48.0328 3964 Cpqarray - ok
17:43:48.0406 3964 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
17:43:48.0609 3964 CryptSvc - ok
17:43:48.0640 3964 dac2w2k - ok
17:43:48.0671 3964 dac960nt - ok
17:43:48.0750 3964 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
17:43:48.0781 3964 DcomLaunch - ok
17:43:48.0828 3964 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
17:43:49.0015 3964 Dhcp - ok
17:43:49.0093 3964 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
17:43:49.0281 3964 Disk - ok
17:43:49.0328 3964 dmadmin - ok
17:43:49.0453 3964 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
17:43:49.0671 3964 dmboot - ok
17:43:49.0718 3964 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
17:43:49.0906 3964 dmio - ok
17:43:49.0953 3964 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
17:43:50.0140 3964 dmload - ok
17:43:50.0203 3964 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
17:43:50.0390 3964 dmserver - ok
17:43:50.0421 3964 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
17:43:50.0671 3964 DMusic - ok
17:43:50.0734 3964 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
17:43:50.0765 3964 Dnscache - ok
17:43:50.0828 3964 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
17:43:51.0000 3964 Dot3svc - ok
17:43:51.0031 3964 dpti2o - ok
17:43:51.0078 3964 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
17:43:51.0265 3964 drmkaud - ok
17:43:51.0312 3964 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
17:43:51.0500 3964 EapHost - ok
17:43:51.0593 3964 [ 88B5B982D702CD81874731CECF6BA4DB ] EIO_XP C:\WINDOWS\system32\drivers\EIO_XP.sys
17:43:51.0609 3964 EIO_XP ( UnsignedFile.Multi.Generic ) - warning
17:43:51.0609 3964 EIO_XP - detected UnsignedFile.Multi.Generic (1)
17:43:51.0656 3964 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
17:43:51.0890 3964 ERSvc - ok
17:43:51.0984 3964 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
17:43:52.0015 3964 Eventlog - ok
17:43:52.0062 3964 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
17:43:52.0093 3964 EventSystem - ok
17:43:52.0140 3964 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
17:43:52.0343 3964 Fastfat - ok
17:43:52.0390 3964 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
17:43:52.0421 3964 FastUserSwitchingCompatibility - ok
17:43:52.0453 3964 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
17:43:52.0640 3964 Fdc - ok
17:43:52.0703 3964 [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS C:\WINDOWS\system32\DRIVERS\fetnd5.sys
17:43:52.0906 3964 FETNDIS - ok
17:43:52.0968 3964 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
17:43:53.0187 3964 Fips - ok
17:43:53.0234 3964 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
17:43:53.0421 3964 Flpydisk - ok
17:43:53.0484 3964 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
17:43:53.0671 3964 FltMgr - ok
17:43:53.0750 3964 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
17:43:53.0765 3964 FontCache3.0.0.0 - ok
17:43:53.0812 3964 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:43:53.0984 3964 Fs_Rec - ok
17:43:54.0031 3964 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:43:54.0203 3964 Ftdisk - ok
17:43:54.0281 3964 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:43:54.0500 3964 Gpc - ok
17:43:54.0593 3964 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
17:43:54.0609 3964 gupdate - ok
17:43:54.0625 3964 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
17:43:54.0656 3964 gupdatem - ok
17:43:54.0718 3964 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
17:43:54.0734 3964 gusvc - ok
17:43:54.0796 3964 [ E3F36874C9AFF58913F5C2F119052FE6 ] HcPvrUSB C:\WINDOWS\system32\Drivers\HcPvrUSB.sys
17:43:54.0812 3964 HcPvrUSB ( UnsignedFile.Multi.Generic ) - warning
17:43:54.0812 3964 HcPvrUSB - detected UnsignedFile.Multi.Generic (1)
17:43:54.0890 3964 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
17:43:55.0062 3964 HDAudBus - ok
17:43:55.0140 3964 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
17:43:55.0328 3964 helpsvc - ok
17:43:55.0343 3964 HidServ - ok
17:43:55.0500 3964 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
17:43:55.0703 3964 hkmsvc - ok
17:43:55.0718 3964 hpn - ok
17:43:55.0812 3964 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
17:43:55.0859 3964 HTTP - ok
17:43:55.0906 3964 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
17:43:56.0093 3964 HTTPFilter - ok
17:43:56.0109 3964 i2omgmt - ok
17:43:56.0156 3964 i2omp - ok
17:43:56.0203 3964 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
17:43:56.0375 3964 i8042prt - ok
17:43:56.0484 3964 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
17:43:56.0500 3964 IDriverT ( UnsignedFile.Multi.Generic ) - warning
17:43:56.0500 3964 IDriverT - detected UnsignedFile.Multi.Generic (1)
17:43:56.0625 3964 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:43:56.0671 3964 idsvc - ok
17:43:56.0718 3964 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
17:43:56.0984 3964 Imapi - ok
17:43:57.0062 3964 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
17:43:57.0250 3964 ImapiService - ok
17:43:57.0281 3964 ini910u - ok
17:43:57.0546 3964 [ 55920481A44FA7BDDE5FC1B9E02C7C2A ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
17:43:57.0796 3964 IntcAzAudAddService - ok
17:43:57.0828 3964 IntelIde - ok
17:43:57.0906 3964 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:43:58.0093 3964 intelppm - ok
17:43:58.0125 3964 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
17:43:58.0343 3964 Ip6Fw - ok
17:43:58.0406 3964 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:43:58.0578 3964 IpFilterDriver - ok
17:43:58.0625 3964 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:43:58.0812 3964 IpInIp - ok
17:43:58.0859 3964 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:43:59.0046 3964 IpNat - ok
17:43:59.0093 3964 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:43:59.0281 3964 IPSec - ok
17:43:59.0375 3964 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
17:43:59.0484 3964 IRENUM - ok
17:43:59.0531 3964 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:43:59.0718 3964 isapnp - ok
17:43:59.0859 3964 [ 691B9B7C0CC1653732717D292D6B305D ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
17:43:59.0875 3964 JavaQuickStarterService - ok
17:43:59.0921 3964 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:44:00.0093 3964 Kbdclass - ok
17:44:00.0140 3964 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
17:44:00.0343 3964 kmixer - ok
17:44:00.0421 3964 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
17:44:00.0468 3964 KSecDD - ok
17:44:00.0609 3964 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
17:44:00.0671 3964 lanmanserver - ok
17:44:00.0750 3964 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
17:44:00.0781 3964 lanmanworkstation - ok
17:44:00.0812 3964 lbrtfdc - ok
17:44:00.0921 3964 [ C12476DE1AFFB1BBA1A48A459CEB3D39 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
17:44:00.0953 3964 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
17:44:00.0953 3964 LightScribeService - detected UnsignedFile.Multi.Generic (1)
17:44:01.0000 3964 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
17:44:01.0171 3964 LmHosts - ok
17:44:01.0218 3964 [ A3E700D78EEC390F1208098CDCA5C6B6 ] MarvinBus C:\WINDOWS\system32\DRIVERS\MarvinBus.sys
17:44:01.0234 3964 MarvinBus ( UnsignedFile.Multi.Generic ) - warning
17:44:01.0234 3964 MarvinBus - detected UnsignedFile.Multi.Generic (1)
17:44:01.0312 3964 [ F453D1E6D881E8F8717E20CCD4199E85 ] McComponentHostService C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
17:44:01.0343 3964 McComponentHostService - ok
17:44:01.0421 3964 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
17:44:01.0453 3964 MDM - ok
17:44:01.0515 3964 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
17:44:01.0687 3964 Messenger - ok
17:44:01.0875 3964 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
17:44:01.0890 3964 Microsoft Office Groove Audit Service - ok
17:44:01.0968 3964 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
17:44:02.0125 3964 mnmdd - ok
17:44:02.0187 3964 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
17:44:02.0390 3964 mnmsrvc - ok
17:44:02.0437 3964 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
17:44:02.0625 3964 Modem - ok
17:44:02.0703 3964 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
17:44:02.0781 3964 Monfilt - ok
17:44:02.0828 3964 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:44:03.0046 3964 Mouclass - ok
17:44:03.0093 3964 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
17:44:03.0265 3964 MountMgr - ok
17:44:03.0343 3964 [ 4D7F2682D29B92A6251B17957AA0B985 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:44:03.0375 3964 MozillaMaintenance - ok
17:44:03.0421 3964 [ EE728AF83850DDAD9A3FCAC0AAB3AD97 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
17:44:03.0453 3964 MpFilter - ok
17:44:03.0468 3964 mraid35x - ok
17:44:03.0515 3964 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:44:03.0718 3964 MRxDAV - ok
17:44:03.0812 3964 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:44:03.0859 3964 MRxSmb - ok
17:44:03.0921 3964 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
17:44:04.0125 3964 MSDTC - ok
17:44:04.0187 3964 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
17:44:04.0406 3964 Msfs - ok
17:44:04.0453 3964 MSIServer - ok
17:44:04.0500 3964 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:44:04.0687 3964 MSKSSRV - ok
17:44:04.0765 3964 [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
17:44:04.0796 3964 MsMpSvc - ok
17:44:04.0828 3964 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:44:05.0031 3964 MSPCLOCK - ok
17:44:05.0093 3964 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
17:44:05.0265 3964 MSPQM - ok
17:44:05.0312 3964 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:44:05.0515 3964 mssmbios - ok
17:44:05.0578 3964 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
17:44:05.0640 3964 Mup - ok
17:44:05.0734 3964 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
17:44:05.0921 3964 napagent - ok
17:44:05.0953 3964 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
17:44:06.0140 3964 NDIS - ok
17:44:06.0187 3964 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:44:06.0218 3964 NdisTapi - ok
17:44:06.0265 3964 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:44:06.0453 3964 Ndisuio - ok
17:44:06.0500 3964 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:44:06.0703 3964 NdisWan - ok
17:44:06.0765 3964 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
17:44:06.0812 3964 NDProxy - ok
17:44:06.0859 3964 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
17:44:07.0031 3964 NetBIOS - ok
17:44:07.0109 3964 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
17:44:07.0296 3964 NetBT - ok
17:44:07.0343 3964 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
17:44:07.0546 3964 NetDDE - ok
17:44:07.0562 3964 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
17:44:07.0750 3964 NetDDEdsdm - ok
17:44:07.0843 3964 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
17:44:08.0046 3964 Netlogon - ok
17:44:08.0109 3964 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
17:44:08.0296 3964 Netman - ok
17:44:08.0359 3964 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:44:08.0375 3964 NetTcpPortSharing - ok
17:44:08.0406 3964 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
17:44:08.0593 3964 NIC1394 - ok
17:44:08.0656 3964 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
17:44:08.0687 3964 Nla - ok
17:44:08.0734 3964 [ F6C40E0A565EE3CE5AEEB325E10054F2 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
17:44:08.0843 3964 nmwcd - ok
17:44:08.0890 3964 [ 2A394E9E1FA3565E4B2FEA470FFE4D6B ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
17:44:08.0984 3964 nmwcdc - ok
17:44:09.0031 3964 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
17:44:09.0234 3964 Npfs - ok
17:44:09.0312 3964 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
17:44:09.0500 3964 Ntfs - ok
17:44:09.0531 3964 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
17:44:09.0718 3964 NtLmSsp - ok
17:44:09.0812 3964 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
17:44:10.0015 3964 NtmsSvc - ok
17:44:10.0078 3964 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
17:44:10.0265 3964 Null - ok
17:44:10.0609 3964 [ CF8097AEA6438CDDCF4266DF1C0934E3 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
17:44:10.0968 3964 nv - ok
17:44:11.0140 3964 [ 2CC4E45B0EB4C48392CEC9C83B5B8E3B ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
17:44:11.0250 3964 nvUpdatusService - ok
17:44:11.0312 3964 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:44:11.0515 3964 NwlnkFlt - ok
17:44:11.0546 3964 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:44:11.0765 3964 NwlnkFwd - ok
17:44:11.0875 3964 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:44:11.0906 3964 odserv - ok
17:44:11.0953 3964 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
17:44:12.0156 3964 ohci1394 - ok
17:44:12.0203 3964 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:44:12.0234 3964 ose - ok
17:44:12.0281 3964 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
17:44:12.0453 3964 Parport - ok
17:44:12.0500 3964 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
17:44:12.0687 3964 PartMgr - ok
17:44:12.0750 3964 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
17:44:12.0937 3964 ParVdm - ok
17:44:12.0968 3964 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
17:44:13.0015 3964 pccsmcfd - ok
17:44:13.0062 3964 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
17:44:13.0250 3964 PCI - ok
17:44:13.0265 3964 PCIDump - ok
17:44:13.0328 3964 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
17:44:13.0515 3964 PCIIde - ok
17:44:13.0562 3964 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
17:44:13.0734 3964 Pcmcia - ok
17:44:13.0828 3964 [ 02AAAFB7BA137CE5DDABCDF8090954D9 ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
17:44:13.0875 3964 pcouffin ( UnsignedFile.Multi.Generic ) - warning
17:44:13.0875 3964 pcouffin - detected UnsignedFile.Multi.Generic (1)
17:44:13.0921 3964 PDCOMP - ok
17:44:13.0953 3964 PDFRAME - ok
17:44:14.0000 3964 PDRELI - ok
17:44:14.0031 3964 PDRFRAME - ok
17:44:14.0062 3964 perc2 - ok
17:44:14.0093 3964 perc2hib - ok
17:44:14.0203 3964 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
17:44:14.0234 3964 PlugPlay - ok
17:44:14.0328 3964 [ 63694C307273062A2167AE4CE80730EF ] PMBDeviceInfoProvider C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
17:44:14.0343 3964 PMBDeviceInfoProvider - ok
17:44:14.0375 3964 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
17:44:14.0546 3964 PolicyAgent - ok
17:44:14.0625 3964 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:44:14.0812 3964 PptpMiniport - ok
17:44:14.0828 3964 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
17:44:15.0046 3964 ProtectedStorage - ok
17:44:15.0109 3964 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
17:44:15.0312 3964 PSched - ok
17:44:15.0390 3964 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:44:15.0562 3964 Ptilink - ok
17:44:15.0625 3964 [ 1962166E0CEB740704F30FA55AD3D509 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
17:44:15.0640 3964 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
17:44:15.0640 3964 PxHelp20 - detected UnsignedFile.Multi.Generic (1)
17:44:15.0687 3964 ql1080 - ok
17:44:15.0718 3964 Ql10wnt - ok
17:44:15.0734 3964 ql12160 - ok
17:44:15.0781 3964 ql1240 - ok
17:44:15.0812 3964 ql1280 - ok
17:44:15.0859 3964 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:44:16.0062 3964 RasAcd - ok
17:44:16.0109 3964 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
17:44:16.0281 3964 RasAuto - ok
17:44:16.0343 3964 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:44:16.0531 3964 Rasl2tp - ok
17:44:16.0578 3964 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
17:44:16.0750 3964 RasMan - ok
17:44:16.0781 3964 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:44:16.0968 3964 RasPppoe - ok
17:44:17.0015 3964 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
17:44:17.0187 3964 Raspti - ok
17:44:17.0234 3964 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:44:17.0421 3964 Rdbss - ok
17:44:17.0453 3964 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:44:17.0640 3964 RDPCDD - ok
17:44:17.0734 3964 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
17:44:17.0812 3964 RDPWD - ok
17:44:17.0890 3964 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
17:44:18.0046 3964 RDSessMgr - ok
17:44:18.0109 3964 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
17:44:18.0296 3964 redbook - ok
17:44:18.0343 3964 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
17:44:18.0531 3964 RemoteAccess - ok
17:44:18.0593 3964 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
17:44:18.0765 3964 RpcLocator - ok
17:44:18.0937 3964 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
17:44:19.0031 3964 RpcSs - ok
17:44:19.0093 3964 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
17:44:19.0281 3964 RSVP - ok
17:44:19.0328 3964 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
17:44:19.0500 3964 rtl8139 - ok
17:44:19.0531 3964 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
17:44:19.0687 3964 SamSs - ok
17:44:19.0718 3964 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
17:44:19.0906 3964 SCardSvr - ok
17:44:19.0968 3964 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
17:44:20.0171 3964 Schedule - ok
17:44:20.0250 3964 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:44:20.0343 3964 Secdrv - ok
17:44:20.0390 3964 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
17:44:20.0562 3964 seclogon - ok
17:44:20.0609 3964 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
17:44:20.0765 3964 SENS - ok
17:44:20.0828 3964 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
17:44:21.0015 3964 serenum - ok
17:44:21.0078 3964 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
17:44:21.0250 3964 Serial - ok
17:44:21.0390 3964 [ F31E9531AF225CA25350D5E87E999B31 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
17:44:21.0437 3964 ServiceLayer - ok
17:44:21.0562 3964 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
17:44:21.0750 3964 Sfloppy - ok
17:44:21.0812 3964 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
17:44:22.0015 3964 SharedAccess - ok
17:44:22.0062 3964 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:44:22.0078 3964 ShellHWDetection - ok
17:44:22.0109 3964 Simbad - ok
17:44:22.0453 3964 [ 753D254205E0A62100A050BD8B458D06 ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
17:44:22.0671 3964 Skype C2C Service - ok
17:44:22.0750 3964 [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
17:44:22.0765 3964 SkypeUpdate - ok
17:44:22.0843 3964 [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1 C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
17:44:23.0046 3964 SONYPVU1 - ok
17:44:23.0125 3964 [ D3865A0491AA66E595B6A276E4BDBE05 ] SPAMfighter Update Service C:\Program Files\Fighters\SPAMfighter\sfus.exe
17:44:23.0140 3964 SPAMfighter Update Service - ok
17:44:23.0156 3964 Sparrow - ok
17:44:23.0218 3964 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
17:44:23.0406 3964 splitter - ok
17:44:23.0453 3964 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
17:44:23.0484 3964 Spooler - ok
17:44:23.0515 3964 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
17:44:23.0625 3964 sr - ok
17:44:23.0750 3964 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
17:44:23.0875 3964 srservice - ok
17:44:23.0937 3964 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
17:44:23.0968 3964 Srv - ok
17:44:24.0031 3964 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
17:44:24.0140 3964 SSDPSRV - ok
17:44:24.0187 3964 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
17:44:24.0375 3964 stisvc - ok
17:44:24.0468 3964 [ A7E21E907C39FAB021CED41296FC8019 ] Suite Service C:\Program Files\Fighters\FighterSuiteService.exe
17:44:24.0531 3964 Suite Service - ok
17:44:24.0578 3964 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
17:44:24.0750 3964 swenum - ok
17:44:24.0828 3964 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
17:44:25.0015 3964 swmidi - ok
17:44:25.0062 3964 SwPrv - ok
17:44:25.0109 3964 symc810 - ok
17:44:25.0156 3964 symc8xx - ok
17:44:25.0187 3964 sym_hi - ok
17:44:25.0234 3964 sym_u3 - ok
17:44:25.0281 3964 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
17:44:25.0468 3964 sysaudio - ok
17:44:25.0546 3964 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
17:44:25.0718 3964 SysmonLog - ok
17:44:25.0781 3964 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
17:44:25.0953 3964 TapiSrv - ok
17:44:26.0109 3964 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:44:26.0218 3964 Tcpip - ok
17:44:26.0281 3964 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
17:44:26.0468 3964 TDPIPE - ok
17:44:26.0515 3964 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
17:44:26.0687 3964 TDTCP - ok
17:44:26.0750 3964 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
17:44:26.0906 3964 TermDD - ok
17:44:26.0953 3964 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
17:44:27.0109 3964 TermService - ok
17:44:27.0171 3964 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
17:44:27.0218 3964 Themes - ok
17:44:27.0250 3964 TosIde - ok
17:44:27.0328 3964 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
17:44:27.0500 3964 TrkWks - ok
17:44:27.0578 3964 [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35 C:\WINDOWS\system32\DRIVERS\uagp35.sys
17:44:27.0765 3964 uagp35 - ok
17:44:27.0796 3964 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
17:44:27.0968 3964 Udfs - ok
17:44:28.0000 3964 ultra - ok
17:44:28.0078 3964 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
17:44:28.0281 3964 Update - ok
17:44:28.0343 3964 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
17:44:28.0453 3964 upnphost - ok
17:44:28.0546 3964 [ 47F5F9D837D80FFD5882A14DB9DA0A67 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
17:44:28.0640 3964 upperdev - ok
17:44:28.0718 3964 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
17:44:28.0859 3964 UPS - ok
17:44:28.0890 3964 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
17:44:29.0093 3964 usbehci - ok
17:44:29.0156 3964 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:44:29.0343 3964 usbhub - ok
17:44:29.0390 3964 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
17:44:29.0578 3964 usbscan - ok
17:44:29.0625 3964 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
17:44:29.0828 3964 usbser - ok
17:44:29.0859 3964 [ E44F0D17BE0908B58DCC99CCB99C6C32 ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
17:44:30.0000 3964 UsbserFilt - ok
17:44:30.0046 3964 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:44:30.0218 3964 USBSTOR - ok
17:44:30.0265 3964 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:44:30.0437 3964 usbuhci - ok
17:44:30.0500 3964 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
17:44:30.0671 3964 VgaSave - ok
17:44:30.0734 3964 [ 6933017F45C8D4A6CF7CB159A333DF68 ] viagfx C:\WINDOWS\system32\DRIVERS\vtmini.sys
17:44:30.0781 3964 viagfx - ok
17:44:30.0843 3964 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
17:44:31.0015 3964 ViaIde - ok
17:44:31.0062 3964 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
17:44:31.0234 3964 VolSnap - ok
17:44:31.0312 3964 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
17:44:31.0406 3964 VSS - ok
17:44:31.0453 3964 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
17:44:31.0625 3964 W32Time - ok
17:44:31.0671 3964 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:44:31.0828 3964 Wanarp - ok
17:44:31.0906 3964 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
17:44:31.0937 3964 Wdf01000 - ok
17:44:31.0968 3964 WDICA - ok
17:44:32.0015 3964 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
17:44:32.0187 3964 wdmaud - ok
17:44:32.0265 3964 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
17:44:32.0453 3964 WebClient - ok
17:44:32.0578 3964 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
17:44:32.0734 3964 winmgmt - ok
17:44:32.0843 3964 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
17:44:32.0859 3964 WmdmPmSN - ok
17:44:32.0937 3964 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
17:44:33.0109 3964 WmiApSrv - ok
17:44:33.0203 3964 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
17:44:33.0265 3964 WMPNetworkSvc - ok
17:44:33.0343 3964 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
17:44:33.0375 3964 WpdUsb - ok
17:44:33.0500 3964 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:44:33.0703 3964 WS2IFSL - ok
17:44:33.0781 3964 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
17:44:33.0921 3964 wscsvc - ok
17:44:33.0984 3964 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
17:44:34.0156 3964 wuauserv - ok
17:44:34.0218 3964 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
17:44:34.0250 3964 WudfPf - ok
17:44:34.0312 3964 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
17:44:34.0359 3964 WudfRd - ok
17:44:34.0406 3964 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
17:44:34.0437 3964 WudfSvc - ok
17:44:34.0500 3964 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
17:44:34.0953 3964 WZCSVC - ok
17:44:35.0015 3964 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
17:44:35.0187 3964 xmlprov - ok
17:44:35.0250 3964 ================ Scan global ===============================
17:44:35.0296 3964 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
17:44:35.0359 3964 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
17:44:35.0406 3964 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
17:44:35.0437 3964 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
17:44:35.0453 3964 [Global] - ok
17:44:35.0468 3964 ================ Scan MBR ==================================
17:44:35.0500 3964 [ 2EE71BF0EED0EA80EA06D295A1A50104 ] \Device\Harddisk0\DR0
17:44:35.0500 3964 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - infected
17:44:35.0500 3964 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Sinowal.b (0)
17:44:35.0609 3964 [ 2EE71BF0EED0EA80EA06D295A1A50104 ] \Device\Harddisk1\DR1
17:44:35.0640 3964 \Device\Harddisk1\DR1 ( Rootkit.Boot.Sinowal.b ) - infected
17:44:35.0640 3964 \Device\Harddisk1\DR1 - detected Rootkit.Boot.Sinowal.b (0)
17:44:35.0750 3964 ================ Scan VBR ==================================
17:44:35.0765 3964 [ 9A4B58A5AF553A85CA54CD8B36684561 ] \Device\Harddisk0\DR0\Partition1
17:44:35.0765 3964 \Device\Harddisk0\DR0\Partition1 - ok
17:44:35.0812 3964 [ 03500505BF243BADEC4760D453A5DF83 ] \Device\Harddisk1\DR1\Partition1
17:44:35.0812 3964 \Device\Harddisk1\DR1\Partition1 - ok
17:44:35.0843 3964 [ 187EA13529CE16A8039A59AB58BA93E3 ] \Device\Harddisk1\DR1\Partition2
17:44:35.0843 3964 \Device\Harddisk1\DR1\Partition2 - ok
17:44:35.0890 3964 [ EE4FB6EAAE821C44CD8FB11DD0D94C13 ] \Device\Harddisk1\DR1\Partition3
17:44:35.0921 3964 \Device\Harddisk1\DR1\Partition3 - ok
17:44:35.0968 3964 [ C12EBF7C19E03B17302EF4385737D43C ] \Device\Harddisk1\DR1\Partition4
17:44:36.0015 3964 \Device\Harddisk1\DR1\Partition4 - ok
17:44:36.0046 3964 ============================================================
17:44:36.0046 3964 Scan finished
17:44:36.0046 3964 ============================================================
17:44:36.0218 2016 Detected object count: 15
17:44:36.0218 2016 Actual detected object count: 15
17:45:37.0484 2016 System memory ( MEM:Backdoor.Win32.Sinowal.d ) - skipped by user
17:45:37.0484 2016 System memory ( MEM:Backdoor.Win32.Sinowal.d ) - User select action: Skip
17:45:37.0484 2016 ACS ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0484 2016 ACS ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0500 2016 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0500 2016 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0500 2016 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0500 2016 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0515 2016 Afc ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0515 2016 Afc ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0515 2016 AR5211 ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0515 2016 AR5211 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 EIO_XP ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 EIO_XP ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 HcPvrUSB ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 HcPvrUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 MarvinBus ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 MarvinBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 pcouffin ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 pcouffin ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user
17:45:37.0546 2016 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:45:37.0546 2016 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - skipped by user
17:45:37.0546 2016 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - User select action: Skip
17:45:37.0562 2016 \Device\Harddisk1\DR1 ( Rootkit.Boot.Sinowal.b ) - skipped by user
17:45:37.0562 2016 \Device\Harddisk1\DR1 ( Rootkit.Boot.Sinowal.b ) - User select action: Skip

No jo, je tam fesak sinowal

Spustte znovu TDSSKiller a u nalezu \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) a \Device\Harddisk1\DR1 ( Rootkit.Boot.Sinowal.b ) dejte moznost cure

TDSS jej opravi, restartuje PC a mel by dat log

17:57:34.0078 2416 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
17:57:36.0078 2416 ============================================================
17:57:36.0078 2416 Current date / time: 2012/10/20 17:57:36.0078
17:57:36.0078 2416 SystemInfo:
17:57:36.0078 2416
17:57:36.0078 2416 OS Version: 5.1.2600 ServicePack: 3.0
17:57:36.0078 2416 Product type: Workstation
17:57:36.0078 2416 ComputerName: DOMA-363AC646CA
17:57:36.0078 2416 UserName: Owner
17:57:36.0078 2416 Windows directory: C:\WINDOWS
17:57:36.0078 2416 System windows directory: C:\WINDOWS
17:57:36.0078 2416 Processor architecture: Intel x86
17:57:36.0078 2416 Number of processors: 1
17:57:36.0078 2416 Page size: 0x1000
17:57:36.0078 2416 Boot type: Normal boot
17:57:36.0093 2416 ============================================================
17:57:38.0156 2416 BG loaded
17:57:38.0734 2416 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:57:38.0812 2416 Drive \Device\Harddisk1\DR1 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:57:38.0843 2416 ============================================================
17:57:38.0843 2416 \Device\Harddisk0\DR0:
17:57:38.0859 2416 MBR partitions:
17:57:38.0859 2416 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
17:57:38.0859 2416 \Device\Harddisk1\DR1:
17:57:38.0890 2416 MBR partitions:
17:57:38.0890 2416 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
17:57:38.0890 2416 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x61A7966, BlocksNum 0x201CC3
17:57:38.0906 2416 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x63DC635, BlocksNum 0xD63EAB
17:57:38.0921 2416 \Device\Harddisk1\DR1\Partition4: MBR, Type 0x7, StartLBA 0x7141BDC, BlocksNum 0xB8D6EE5
17:57:38.0921 2416 ============================================================
17:57:39.0125 2416 F: <-> \Device\Harddisk1\DR1\Partition4
17:57:39.0140 2416 G: <-> \Device\Harddisk1\DR1\Partition2
17:57:39.0250 2416 H: <-> \Device\Harddisk1\DR1\Partition1
17:57:39.0343 2416 C: <-> \Device\Harddisk0\DR0\Partition1
17:57:39.0390 2416 I: <-> \Device\Harddisk1\DR1\Partition3
17:57:39.0468 2416 ============================================================
17:57:39.0468 2416 Initialize success
17:57:39.0468 2416 ============================================================
18:00:54.0296 3500 ============================================================
18:00:54.0296 3500 Scan started
18:00:54.0296 3500 Mode: Manual; SigCheck; TDLFS;
18:00:54.0296 3500 ============================================================
18:00:54.0609 3500 ================ Scan system memory ========================
18:00:54.0609 3500 System memory - ok
18:00:54.0625 3500 ================ Scan services =============================
18:00:54.0859 3500 Abiosdsk - ok
18:00:54.0890 3500 abp480n5 - ok
18:00:54.0984 3500 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
18:00:55.0750 3500 ACPI - ok
18:00:55.0812 3500 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
18:00:56.0000 3500 ACPIEC - ok
18:00:56.0046 3500 [ 276A114FD1DE8232211F299E90DA8E3A ] ACS C:\WINDOWS\system32\acs.exe
18:00:56.0093 3500 ACS ( UnsignedFile.Multi.Generic ) - warning
18:00:56.0093 3500 ACS - detected UnsignedFile.Multi.Generic (1)
18:00:56.0187 3500 [ C1EB9968EC89FBA5F3A264E2E57923AB ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
18:00:56.0203 3500 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
18:00:56.0203 3500 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
18:00:56.0281 3500 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:00:56.0328 3500 AdobeFlashPlayerUpdateSvc - ok
18:00:56.0375 3500 adpu160m - ok
18:00:56.0437 3500 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
18:00:56.0640 3500 aec - ok
18:00:56.0703 3500 [ 91F3DF93F40A74D222CD166FE95DB633 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
18:00:56.0718 3500 AegisP ( UnsignedFile.Multi.Generic ) - warning
18:00:56.0718 3500 AegisP - detected UnsignedFile.Multi.Generic (1)
18:00:56.0765 3500 [ A7B8A3A79D35215D798A300DF49ED23F ] Afc C:\WINDOWS\system32\drivers\Afc.sys
18:00:56.0796 3500 Afc ( UnsignedFile.Multi.Generic ) - warning
18:00:56.0796 3500 Afc - detected UnsignedFile.Multi.Generic (1)
18:00:56.0875 3500 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
18:00:56.0937 3500 AFD - ok
18:00:56.0968 3500 Aha154x - ok
18:00:57.0000 3500 aic78u2 - ok
18:00:57.0046 3500 aic78xx - ok
18:00:57.0109 3500 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
18:00:57.0281 3500 Alerter - ok
18:00:57.0312 3500 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
18:00:57.0406 3500 ALG - ok
18:00:57.0421 3500 AliIde - ok
18:00:57.0531 3500 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
18:00:57.0687 3500 Ambfilt - ok
18:00:57.0703 3500 amsint - ok
18:00:57.0734 3500 AppMgmt - ok
18:00:57.0812 3500 [ 3CB8E72B7C9887B42B90000E8CB1E7BE ] AR5211 C:\WINDOWS\system32\DRIVERS\ar5211.sys
18:00:57.0859 3500 AR5211 ( UnsignedFile.Multi.Generic ) - warning
18:00:57.0859 3500 AR5211 - detected UnsignedFile.Multi.Generic (1)
18:00:57.0906 3500 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
18:00:58.0093 3500 Arp1394 - ok
18:00:58.0140 3500 asc - ok
18:00:58.0171 3500 asc3350p - ok
18:00:58.0218 3500 asc3550 - ok
18:00:58.0343 3500 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
18:00:58.0421 3500 aspnet_state - ok
18:00:58.0484 3500 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:00:58.0656 3500 AsyncMac - ok
18:00:58.0703 3500 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
18:00:58.0875 3500 atapi - ok
18:00:58.0906 3500 Atdisk - ok
18:00:58.0953 3500 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:00:59.0156 3500 Atmarpc - ok
18:00:59.0203 3500 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
18:00:59.0390 3500 AudioSrv - ok
18:00:59.0453 3500 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
18:00:59.0625 3500 audstub - ok
18:00:59.0718 3500 [ 32A5DEFDDC3562BF89D73586F5915B34 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
18:00:59.0750 3500 Autodesk Licensing Service - ok
18:00:59.0828 3500 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
18:01:00.0000 3500 Beep - ok
18:01:00.0093 3500 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
18:01:00.0281 3500 BITS - ok
18:01:00.0312 3500 [ F934D1B230F84E1D19DD00AC5A7A83ED ] Bridge C:\WINDOWS\system32\DRIVERS\bridge.sys
18:01:00.0421 3500 Bridge - ok
18:01:00.0453 3500 [ F934D1B230F84E1D19DD00AC5A7A83ED ] BridgeMP C:\WINDOWS\system32\DRIVERS\bridge.sys
18:01:00.0531 3500 BridgeMP - ok
18:01:00.0593 3500 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
18:01:00.0671 3500 Browser - ok
18:01:00.0687 3500 catchme - ok
18:01:00.0750 3500 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
18:01:00.0937 3500 cbidf2k - ok
18:01:00.0968 3500 cd20xrnt - ok
18:01:01.0015 3500 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
18:01:01.0187 3500 Cdaudio - ok
18:01:01.0250 3500 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
18:01:01.0437 3500 Cdfs - ok
18:01:01.0484 3500 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
18:01:01.0656 3500 Cdrom - ok
18:01:01.0703 3500 Changer - ok
18:01:01.0765 3500 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
18:01:01.0953 3500 CiSvc - ok
18:01:02.0000 3500 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
18:01:02.0187 3500 ClipSrv - ok
18:01:02.0265 3500 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:01:02.0343 3500 clr_optimization_v2.0.50727_32 - ok
18:01:02.0359 3500 CmdIde - ok
18:01:02.0390 3500 COMSysApp - ok
18:01:02.0453 3500 Cpqarray - ok
18:01:02.0531 3500 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
18:01:02.0718 3500 CryptSvc - ok
18:01:02.0765 3500 dac2w2k - ok
18:01:02.0796 3500 dac960nt - ok
18:01:02.0890 3500 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
18:01:02.0953 3500 DcomLaunch - ok
18:01:03.0000 3500 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
18:01:03.0171 3500 Dhcp - ok
18:01:03.0234 3500 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
18:01:03.0421 3500 Disk - ok
18:01:03.0453 3500 dmadmin - ok
18:01:03.0515 3500 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
18:01:03.0734 3500 dmboot - ok
18:01:03.0812 3500 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
18:01:03.0984 3500 dmio - ok
18:01:04.0062 3500 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
18:01:04.0250 3500 dmload - ok
18:01:04.0296 3500 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
18:01:04.0468 3500 dmserver - ok
18:01:04.0500 3500 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
18:01:04.0703 3500 DMusic - ok
18:01:04.0750 3500 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
18:01:04.0843 3500 Dnscache - ok
18:01:04.0890 3500 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
18:01:05.0093 3500 Dot3svc - ok
18:01:05.0109 3500 dpti2o - ok
18:01:05.0156 3500 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
18:01:05.0359 3500 drmkaud - ok
18:01:05.0421 3500 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
18:01:05.0609 3500 EapHost - ok
18:01:05.0687 3500 [ 88B5B982D702CD81874731CECF6BA4DB ] EIO_XP C:\WINDOWS\system32\drivers\EIO_XP.sys
18:01:05.0703 3500 EIO_XP ( UnsignedFile.Multi.Generic ) - warning
18:01:05.0703 3500 EIO_XP - detected UnsignedFile.Multi.Generic (1)
18:01:05.0750 3500 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
18:01:05.0937 3500 ERSvc - ok
18:01:05.0984 3500 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
18:01:06.0031 3500 Eventlog - ok
18:01:06.0078 3500 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
18:01:06.0140 3500 EventSystem - ok
18:01:06.0203 3500 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
18:01:06.0390 3500 Fastfat - ok
18:01:06.0453 3500 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
18:01:06.0500 3500 FastUserSwitchingCompatibility - ok
18:01:06.0531 3500 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
18:01:06.0734 3500 Fdc - ok
18:01:06.0796 3500 [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS C:\WINDOWS\system32\DRIVERS\fetnd5.sys
18:01:07.0000 3500 FETNDIS - ok
18:01:07.0031 3500 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
18:01:07.0203 3500 Fips - ok
18:01:07.0250 3500 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:01:07.0421 3500 Flpydisk - ok
18:01:07.0468 3500 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
18:01:07.0640 3500 FltMgr - ok
18:01:07.0750 3500 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:01:07.0781 3500 FontCache3.0.0.0 - ok
18:01:07.0828 3500 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:01:08.0000 3500 Fs_Rec - ok
18:01:08.0062 3500 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:01:08.0234 3500 Ftdisk - ok
18:01:08.0296 3500 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
18:01:08.0468 3500 Gpc - ok
18:01:08.0546 3500 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
18:01:08.0578 3500 gupdate - ok
18:01:08.0625 3500 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
18:01:08.0640 3500 gupdatem - ok
18:01:08.0703 3500 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
18:01:08.0734 3500 gusvc - ok
18:01:08.0781 3500 [ E3F36874C9AFF58913F5C2F119052FE6 ] HcPvrUSB C:\WINDOWS\system32\Drivers\HcPvrUSB.sys
18:01:08.0796 3500 HcPvrUSB ( UnsignedFile.Multi.Generic ) - warning
18:01:08.0796 3500 HcPvrUSB - detected UnsignedFile.Multi.Generic (1)
18:01:08.0875 3500 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
18:01:09.0046 3500 HDAudBus - ok
18:01:09.0140 3500 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:01:09.0328 3500 helpsvc - ok
18:01:09.0359 3500 HidServ - ok
18:01:09.0421 3500 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
18:01:09.0609 3500 hkmsvc - ok
18:01:09.0640 3500 hpn - ok
18:01:09.0718 3500 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
18:01:09.0781 3500 HTTP - ok
18:01:09.0828 3500 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
18:01:10.0031 3500 HTTPFilter - ok
18:01:10.0062 3500 i2omgmt - ok
18:01:10.0125 3500 i2omp - ok
18:01:10.0171 3500 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:01:10.0343 3500 i8042prt - ok
18:01:10.0421 3500 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:01:10.0453 3500 IDriverT ( UnsignedFile.Multi.Generic ) - warning
18:01:10.0453 3500 IDriverT - detected UnsignedFile.Multi.Generic (1)
18:01:10.0546 3500 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:01:10.0640 3500 idsvc - ok
18:01:10.0687 3500 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
18:01:10.0859 3500 Imapi - ok
18:01:10.0906 3500 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
18:01:11.0078 3500 ImapiService - ok
18:01:11.0125 3500 ini910u - ok
18:01:11.0359 3500 [ 55920481A44FA7BDDE5FC1B9E02C7C2A ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
18:01:11.0625 3500 IntcAzAudAddService - ok
18:01:11.0656 3500 IntelIde - ok
18:01:11.0734 3500 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
18:01:11.0921 3500 intelppm - ok
18:01:11.0984 3500 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
18:01:12.0171 3500 Ip6Fw - ok
18:01:12.0218 3500 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:01:12.0390 3500 IpFilterDriver - ok
18:01:12.0421 3500 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
18:01:12.0609 3500 IpInIp - ok
18:01:12.0640 3500 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
18:01:12.0843 3500 IpNat - ok
18:01:12.0890 3500 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
18:01:13.0078 3500 IPSec - ok
18:01:13.0140 3500 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
18:01:13.0250 3500 IRENUM - ok
18:01:13.0296 3500 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
18:01:13.0500 3500 isapnp - ok
18:01:13.0609 3500 [ 691B9B7C0CC1653732717D292D6B305D ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
18:01:13.0625 3500 JavaQuickStarterService - ok
18:01:13.0671 3500 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:01:13.0843 3500 Kbdclass - ok
18:01:13.0890 3500 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
18:01:14.0093 3500 kmixer - ok
18:01:14.0156 3500 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
18:01:14.0187 3500 KSecDD - ok
18:01:14.0234 3500 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
18:01:14.0296 3500 lanmanserver - ok
18:01:14.0359 3500 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
18:01:14.0421 3500 lanmanworkstation - ok
18:01:14.0468 3500 lbrtfdc - ok
18:01:14.0562 3500 [ C12476DE1AFFB1BBA1A48A459CEB3D39 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
18:01:14.0578 3500 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
18:01:14.0578 3500 LightScribeService - detected UnsignedFile.Multi.Generic (1)
18:01:14.0625 3500 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
18:01:14.0796 3500 LmHosts - ok
18:01:14.0859 3500 [ A3E700D78EEC390F1208098CDCA5C6B6 ] MarvinBus C:\WINDOWS\system32\DRIVERS\MarvinBus.sys
18:01:14.0875 3500 MarvinBus ( UnsignedFile.Multi.Generic ) - warning
18:01:14.0875 3500 MarvinBus - detected UnsignedFile.Multi.Generic (1)
18:01:14.0953 3500 [ F453D1E6D881E8F8717E20CCD4199E85 ] McComponentHostService C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
18:01:14.0984 3500 McComponentHostService - ok
18:01:15.0062 3500 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
18:01:15.0078 3500 MDM - ok
18:01:15.0156 3500 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
18:01:15.0359 3500 Messenger - ok
18:01:15.0421 3500 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
18:01:15.0437 3500 Microsoft Office Groove Audit Service - ok
18:01:15.0484 3500 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
18:01:15.0656 3500 mnmdd - ok
18:01:15.0703 3500 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
18:01:15.0890 3500 mnmsrvc - ok
18:01:15.0953 3500 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
18:01:16.0125 3500 Modem - ok
18:01:16.0234 3500 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
18:01:16.0328 3500 Monfilt - ok
18:01:16.0406 3500 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
18:01:16.0578 3500 Mouclass - ok
18:01:16.0625 3500 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
18:01:16.0796 3500 MountMgr - ok
18:01:16.0875 3500 [ 4D7F2682D29B92A6251B17957AA0B985 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:01:16.0890 3500 MozillaMaintenance - ok
18:01:16.0953 3500 [ EE728AF83850DDAD9A3FCAC0AAB3AD97 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
18:01:16.0984 3500 MpFilter - ok
18:01:17.0031 3500 mraid35x - ok
18:01:17.0093 3500 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:01:17.0265 3500 MRxDAV - ok
18:01:17.0343 3500 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:01:17.0421 3500 MRxSmb - ok
18:01:17.0484 3500 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
18:01:17.0671 3500 MSDTC - ok
18:01:17.0734 3500 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
18:01:17.0921 3500 Msfs - ok
18:01:17.0937 3500 MSIServer - ok
18:01:17.0984 3500 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:01:18.0187 3500 MSKSSRV - ok
18:01:18.0281 3500 [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
18:01:18.0328 3500 MsMpSvc - ok
18:01:18.0375 3500 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:01:18.0531 3500 MSPCLOCK - ok
18:01:18.0609 3500 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
18:01:18.0765 3500 MSPQM - ok
18:01:18.0859 3500 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:01:19.0015 3500 mssmbios - ok
18:01:19.0062 3500 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
18:01:19.0109 3500 Mup - ok
18:01:19.0203 3500 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
18:01:19.0406 3500 napagent - ok
18:01:19.0468 3500 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
18:01:19.0656 3500 NDIS - ok
18:01:19.0718 3500 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:01:19.0765 3500 NdisTapi - ok
18:01:19.0812 3500 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:01:20.0000 3500 Ndisuio - ok
18:01:20.0031 3500 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:01:20.0218 3500 NdisWan - ok
18:01:20.0281 3500 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
18:01:20.0343 3500 NDProxy - ok
18:01:20.0375 3500 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
18:01:20.0562 3500 NetBIOS - ok
18:01:20.0609 3500 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
18:01:20.0796 3500 NetBT - ok
18:01:20.0859 3500 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
18:01:21.0046 3500 NetDDE - ok
18:01:21.0062 3500 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
18:01:21.0250 3500 NetDDEdsdm - ok
18:01:21.0296 3500 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
18:01:21.0437 3500 Netlogon - ok
18:01:21.0500 3500 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
18:01:21.0656 3500 Netman - ok
18:01:21.0687 3500 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:01:21.0734 3500 NetTcpPortSharing - ok
18:01:21.0765 3500 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
18:01:21.0921 3500 NIC1394 - ok
18:01:21.0968 3500 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
18:01:22.0031 3500 Nla - ok
18:01:22.0093 3500 [ F6C40E0A565EE3CE5AEEB325E10054F2 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
18:01:22.0359 3500 nmwcd - ok
18:01:22.0406 3500 [ 2A394E9E1FA3565E4B2FEA470FFE4D6B ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
18:01:22.0531 3500 nmwcdc - ok
18:01:22.0578 3500 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
18:01:22.0750 3500 Npfs - ok
18:01:22.0828 3500 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
18:01:23.0015 3500 Ntfs - ok
18:01:23.0078 3500 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
18:01:23.0234 3500 NtLmSsp - ok
18:01:23.0296 3500 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
18:01:23.0484 3500 NtmsSvc - ok
18:01:23.0531 3500 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
18:01:23.0718 3500 Null - ok
18:01:24.0031 3500 [ CF8097AEA6438CDDCF4266DF1C0934E3 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
18:01:24.0578 3500 nv - ok
18:01:24.0734 3500 [ 2CC4E45B0EB4C48392CEC9C83B5B8E3B ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
18:01:24.0843 3500 nvUpdatusService - ok
18:01:24.0890 3500 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:01:25.0062 3500 NwlnkFlt - ok
18:01:25.0109 3500 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:01:25.0312 3500 NwlnkFwd - ok
18:01:25.0406 3500 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:01:25.0453 3500 odserv - ok
18:01:25.0531 3500 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
18:01:25.0703 3500 ohci1394 - ok
18:01:25.0765 3500 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:01:25.0781 3500 ose - ok
18:01:25.0828 3500 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
18:01:26.0046 3500 Parport - ok
18:01:26.0093 3500 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
18:01:26.0281 3500 PartMgr - ok
18:01:26.0343 3500 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
18:01:26.0531 3500 ParVdm - ok
18:01:26.0593 3500 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
18:01:26.0656 3500 pccsmcfd - ok
18:01:26.0687 3500 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
18:01:26.0859 3500 PCI - ok
18:01:26.0906 3500 PCIDump - ok
18:01:26.0968 3500 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
18:01:27.0156 3500 PCIIde - ok
18:01:27.0187 3500 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
18:01:27.0343 3500 Pcmcia - ok
18:01:27.0406 3500 [ 02AAAFB7BA137CE5DDABCDF8090954D9 ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
18:01:27.0453 3500 pcouffin ( UnsignedFile.Multi.Generic ) - warning
18:01:27.0453 3500 pcouffin - detected UnsignedFile.Multi.Generic (1)
18:01:27.0484 3500 PDCOMP - ok
18:01:27.0531 3500 PDFRAME - ok
18:01:27.0562 3500 PDRELI - ok
18:01:27.0609 3500 PDRFRAME - ok
18:01:27.0640 3500 perc2 - ok
18:01:27.0671 3500 perc2hib - ok
18:01:27.0781 3500 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
18:01:27.0796 3500 PlugPlay - ok
18:01:27.0890 3500 [ 63694C307273062A2167AE4CE80730EF ] PMBDeviceInfoProvider C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
18:01:27.0984 3500 PMBDeviceInfoProvider - ok
18:01:28.0015 3500 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
18:01:28.0171 3500 PolicyAgent - ok
18:01:28.0218 3500 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
18:01:28.0406 3500 PptpMiniport - ok
18:01:28.0437 3500 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
18:01:28.0625 3500 ProtectedStorage - ok
18:01:28.0640 3500 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
18:01:28.0843 3500 PSched - ok
18:01:28.0890 3500 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
18:01:29.0078 3500 Ptilink - ok
18:01:29.0125 3500 [ 1962166E0CEB740704F30FA55AD3D509 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
18:01:29.0140 3500 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
18:01:29.0140 3500 PxHelp20 - detected UnsignedFile.Multi.Generic (1)
18:01:29.0156 3500 ql1080 - ok
18:01:29.0187 3500 Ql10wnt - ok
18:01:29.0234 3500 ql12160 - ok
18:01:29.0250 3500 ql1240 - ok
18:01:29.0296 3500 ql1280 - ok
18:01:29.0343 3500 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:01:29.0531 3500 RasAcd - ok
18:01:29.0578 3500 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
18:01:29.0765 3500 RasAuto - ok
18:01:29.0796 3500 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:01:29.0953 3500 Rasl2tp - ok
18:01:30.0015 3500 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
18:01:30.0187 3500 RasMan - ok
18:01:30.0218 3500 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:01:30.0406 3500 RasPppoe - ok
18:01:30.0421 3500 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
18:01:30.0609 3500 Raspti - ok
18:01:30.0656 3500 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:01:30.0828 3500 Rdbss - ok
18:01:30.0875 3500 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:01:31.0031 3500 RDPCDD - ok
18:01:31.0109 3500 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
18:01:31.0171 3500 RDPWD - ok
18:01:31.0234 3500 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
18:01:31.0437 3500 RDSessMgr - ok
18:01:31.0500 3500 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
18:01:31.0687 3500 redbook - ok
18:01:31.0765 3500 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
18:01:31.0953 3500 RemoteAccess - ok
18:01:32.0031 3500 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
18:01:32.0218 3500 RpcLocator - ok
18:01:32.0265 3500 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
18:01:32.0312 3500 RpcSs - ok
18:01:32.0359 3500 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
18:01:32.0531 3500 RSVP - ok
18:01:32.0609 3500 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
18:01:32.0781 3500 rtl8139 - ok
18:01:32.0828 3500 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
18:01:33.0000 3500 SamSs - ok
18:01:33.0062 3500 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
18:01:33.0250 3500 SCardSvr - ok
18:01:33.0328 3500 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
18:01:33.0500 3500 Schedule - ok
18:01:33.0562 3500 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
18:01:33.0656 3500 Secdrv - ok
18:01:33.0718 3500 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
18:01:33.0890 3500 seclogon - ok
18:01:33.0937 3500 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
18:01:34.0125 3500 SENS - ok
18:01:34.0156 3500 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
18:01:34.0343 3500 serenum - ok
18:01:34.0390 3500 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
18:01:34.0578 3500 Serial - ok
18:01:34.0656 3500 [ F31E9531AF225CA25350D5E87E999B31 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
18:01:34.0734 3500 ServiceLayer - ok
18:01:34.0859 3500 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
18:01:35.0015 3500 Sfloppy - ok
18:01:35.0078 3500 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
18:01:35.0281 3500 SharedAccess - ok
18:01:35.0328 3500 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
18:01:35.0375 3500 ShellHWDetection - ok
18:01:35.0390 3500 Simbad - ok
18:01:35.0640 3500 [ 753D254205E0A62100A050BD8B458D06 ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
18:01:35.0781 3500 Skype C2C Service - ok
18:01:35.0843 3500 [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
18:01:35.0859 3500 SkypeUpdate - ok
18:01:35.0921 3500 [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1 C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
18:01:36.0093 3500 SONYPVU1 - ok
18:01:36.0203 3500 [ D3865A0491AA66E595B6A276E4BDBE05 ] SPAMfighter Update Service C:\Program Files\Fighters\SPAMfighter\sfus.exe
18:01:36.0218 3500 SPAMfighter Update Service - ok
18:01:36.0250 3500 Sparrow - ok
18:01:36.0312 3500 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
18:01:36.0484 3500 splitter - ok
18:01:36.0531 3500 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
18:01:36.0593 3500 Spooler - ok
18:01:36.0625 3500 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
18:01:36.0734 3500 sr - ok
18:01:36.0796 3500 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
18:01:36.0875 3500 srservice - ok
18:01:36.0937 3500 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
18:01:37.0015 3500 Srv - ok
18:01:37.0062 3500 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
18:01:37.0156 3500 SSDPSRV - ok
18:01:37.0234 3500 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
18:01:37.0406 3500 stisvc - ok
18:01:37.0484 3500 [ A7E21E907C39FAB021CED41296FC8019 ] Suite Service C:\Program Files\Fighters\FighterSuiteService.exe
18:01:37.0578 3500 Suite Service - ok
18:01:37.0640 3500 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
18:01:37.0812 3500 swenum - ok
18:01:37.0890 3500 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
18:01:38.0062 3500 swmidi - ok
18:01:38.0109 3500 SwPrv - ok
18:01:38.0171 3500 symc810 - ok
18:01:38.0203 3500 symc8xx - ok
18:01:38.0250 3500 sym_hi - ok
18:01:38.0281 3500 sym_u3 - ok
18:01:38.0343 3500 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
18:01:38.0500 3500 sysaudio - ok
18:01:38.0562 3500 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
18:01:38.0734 3500 SysmonLog - ok
18:01:38.0812 3500 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
18:01:38.0984 3500 TapiSrv - ok
18:01:39.0046 3500 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:01:39.0078 3500 Tcpip - ok
18:01:39.0109 3500 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
18:01:39.0281 3500 TDPIPE - ok
18:01:39.0312 3500 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
18:01:39.0500 3500 TDTCP - ok
18:01:39.0531 3500 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
18:01:39.0687 3500 TermDD - ok
18:01:39.0765 3500 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
18:01:39.0921 3500 TermService - ok
18:01:39.0953 3500 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
18:01:40.0000 3500 Themes - ok
18:01:40.0062 3500 TosIde - ok
18:01:40.0125 3500 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
18:01:40.0281 3500 TrkWks - ok
18:01:40.0359 3500 [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35 C:\WINDOWS\system32\DRIVERS\uagp35.sys
18:01:40.0531 3500 uagp35 - ok
18:01:40.0578 3500 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
18:01:40.0765 3500 Udfs - ok
18:01:40.0796 3500 ultra - ok
18:01:40.0875 3500 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
18:01:41.0046 3500 Update - ok
18:01:41.0093 3500 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
18:01:41.0203 3500 upnphost - ok
18:01:41.0250 3500 [ 47F5F9D837D80FFD5882A14DB9DA0A67 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
18:01:41.0359 3500 upperdev - ok
18:01:41.0390 3500 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
18:01:41.0562 3500 UPS - ok
18:01:41.0609 3500 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
18:01:41.0781 3500 usbehci - ok
18:01:41.0859 3500 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
18:01:42.0031 3500 usbhub - ok
18:01:42.0093 3500 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
18:01:42.0265 3500 usbscan - ok
18:01:42.0328 3500 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
18:01:42.0515 3500 usbser - ok
18:01:42.0562 3500 [ E44F0D17BE0908B58DCC99CCB99C6C32 ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
18:01:42.0671 3500 UsbserFilt - ok
18:01:42.0734 3500 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:01:42.0906 3500 USBSTOR - ok
18:01:42.0968 3500 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
18:01:43.0125 3500 usbuhci - ok
18:01:43.0187 3500 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
18:01:43.0343 3500 VgaSave - ok
18:01:43.0406 3500 [ 6933017F45C8D4A6CF7CB159A333DF68 ] viagfx C:\WINDOWS\system32\DRIVERS\vtmini.sys
18:01:43.0484 3500 viagfx - ok
18:01:43.0515 3500 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
18:01:43.0687 3500 ViaIde - ok
18:01:43.0734 3500 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
18:01:43.0906 3500 VolSnap - ok
18:01:43.0984 3500 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
18:01:44.0078 3500 VSS - ok
18:01:44.0140 3500 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
18:01:44.0312 3500 W32Time - ok
18:01:44.0375 3500 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
18:01:44.0562 3500 Wanarp - ok
18:01:44.0625 3500 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
18:01:44.0671 3500 Wdf01000 - ok
18:01:44.0687 3500 WDICA - ok
18:01:44.0734 3500 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
18:01:44.0890 3500 wdmaud - ok
18:01:44.0953 3500 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
18:01:45.0109 3500 WebClient - ok
18:01:45.0218 3500 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
18:01:45.0359 3500 winmgmt - ok
18:01:45.0500 3500 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
18:01:45.0546 3500 WmdmPmSN - ok
18:01:45.0609 3500 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
18:01:45.0812 3500 WmiApSrv - ok
18:01:45.0921 3500 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
18:01:46.0015 3500 WMPNetworkSvc - ok
18:01:46.0062 3500 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
18:01:46.0109 3500 WpdUsb - ok
18:01:46.0187 3500 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
18:01:46.0359 3500 WS2IFSL - ok
18:01:46.0421 3500 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
18:01:46.0578 3500 wscsvc - ok
18:01:46.0656 3500 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
18:01:46.0828 3500 wuauserv - ok
18:01:46.0890 3500 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
18:01:46.0953 3500 WudfPf - ok
18:01:47.0000 3500 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
18:01:47.0031 3500 WudfRd - ok
18:01:47.0078 3500 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
18:01:47.0125 3500 WudfSvc - ok
18:01:47.0187 3500 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
18:01:47.0375 3500 WZCSVC - ok
18:01:47.0437 3500 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
18:01:47.0625 3500 xmlprov - ok
18:01:47.0703 3500 ================ Scan global ===============================
18:01:47.0750 3500 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
18:01:47.0812 3500 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:01:47.0859 3500 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:01:47.0875 3500 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
18:01:47.0890 3500 [Global] - ok
18:01:47.0890 3500 ================ Scan MBR ==================================
18:01:47.0921 3500 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
18:01:48.0250 3500 \Device\Harddisk0\DR0 - ok
18:01:48.0296 3500 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk1\DR1
18:01:48.0562 3500 \Device\Harddisk1\DR1 - ok
18:01:48.0578 3500 ================ Scan VBR ==================================
18:01:48.0593 3500 [ 9A4B58A5AF553A85CA54CD8B36684561 ] \Device\Harddisk0\DR0\Partition1
18:01:48.0593 3500 \Device\Harddisk0\DR0\Partition1 - ok
18:01:48.0656 3500 [ 03500505BF243BADEC4760D453A5DF83 ] \Device\Harddisk1\DR1\Partition1
18:01:48.0656 3500 \Device\Harddisk1\DR1\Partition1 - ok
18:01:48.0703 3500 [ 187EA13529CE16A8039A59AB58BA93E3 ] \Device\Harddisk1\DR1\Partition2
18:01:48.0703 3500 \Device\Harddisk1\DR1\Partition2 - ok
18:01:48.0750 3500 [ EE4FB6EAAE821C44CD8FB11DD0D94C13 ] \Device\Harddisk1\DR1\Partition3
18:01:48.0750 3500 \Device\Harddisk1\DR1\Partition3 - ok
18:01:48.0796 3500 [ C12EBF7C19E03B17302EF4385737D43C ] \Device\Harddisk1\DR1\Partition4
18:01:48.0796 3500 \Device\Harddisk1\DR1\Partition4 - ok
18:01:48.0812 3500 ================ Scan active images ========================
18:01:48.0828 3500 [ 27B290D632AF2CF3CF40BFDDB7370985 ] C:\WINDOWS\system32\drivers\intelppm.sys
18:01:48.0828 3500 C:\WINDOWS\system32\drivers\intelppm.sys - ok
18:01:48.0859 3500 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
18:01:48.0859 3500 C:\WINDOWS\system32\drivers\videoprt.sys - ok
18:01:48.0921 3500 [ 6933017F45C8D4A6CF7CB159A333DF68 ] C:\WINDOWS\system32\drivers\vtmini.sys
18:01:48.0921 3500 C:\WINDOWS\system32\drivers\vtmini.sys - ok
18:01:48.0953 3500 [ D507C1400284176573224903819FFDA3 ] C:\WINDOWS\system32\drivers\RTL8139.sys
18:01:48.0953 3500 C:\WINDOWS\system32\drivers\RTL8139.sys - ok
18:01:48.0984 3500 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
18:01:48.0984 3500 C:\WINDOWS\system32\drivers\imapi.sys - ok
18:01:49.0031 3500 [ A7B8A3A79D35215D798A300DF49ED23F ] C:\WINDOWS\system32\drivers\afc.sys
18:01:49.0031 3500 C:\WINDOWS\system32\drivers\afc.sys - ok
18:01:49.0062 3500 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
18:01:49.0062 3500 C:\WINDOWS\system32\drivers\cdrom.sys - ok
18:01:49.0093 3500 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
18:01:49.0093 3500 C:\WINDOWS\system32\drivers\ks.sys - ok
18:01:49.0156 3500 [ 611BFD220305BE3A85AE876EA47D4AA5 ] C:\WINDOWS\system32\drivers\redbook.sys
18:01:49.0156 3500 C:\WINDOWS\system32\drivers\redbook.sys - ok
18:01:49.0187 3500 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
18:01:49.0187 3500 C:\WINDOWS\system32\drivers\usbport.sys - ok
18:01:49.0218 3500 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] C:\WINDOWS\system32\drivers\fdc.sys
18:01:49.0218 3500 C:\WINDOWS\system32\drivers\fdc.sys - ok
18:01:49.0265 3500 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] C:\WINDOWS\system32\drivers\parport.sys
18:01:49.0265 3500 C:\WINDOWS\system32\drivers\parport.sys - ok
18:01:49.0296 3500 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
18:01:49.0296 3500 C:\WINDOWS\system32\drivers\usbehci.sys - ok
18:01:49.0328 3500 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
18:01:49.0328 3500 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
18:01:49.0359 3500 [ C528E27945367191E7BAE364930B6932 ] C:\WINDOWS\system32\drivers\i8042prt.sys
18:01:49.0359 3500 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
18:01:49.0406 3500 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] C:\WINDOWS\system32\drivers\kbdclass.sys
18:01:49.0406 3500 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
18:01:49.0437 3500 [ 4CB582831DBDE63CE43B45D771218374 ] C:\WINDOWS\system32\drivers\mouclass.sys
18:01:49.0437 3500 C:\WINDOWS\system32\drivers\mouclass.sys - ok
18:01:49.0468 3500 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
18:01:49.0468 3500 C:\WINDOWS\system32\drivers\audstub.sys - ok
18:01:49.0500 3500 [ 573C7D0A32852B48F3058CFD8026F511 ] C:\WINDOWS\system32\drivers\hdaudbus.sys
18:01:49.0500 3500 C:\WINDOWS\system32\drivers\hdaudbus.sys - ok
18:01:49.0546 3500 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
18:01:49.0546 3500 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
18:01:49.0578 3500 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] C:\WINDOWS\system32\drivers\serenum.sys
18:01:49.0578 3500 C:\WINDOWS\system32\drivers\serenum.sys - ok
18:01:49.0609 3500 [ B842729337C9B921615C40D3C1A1AF96 ] C:\WINDOWS\system32\drivers\serial.sys
18:01:49.0609 3500 C:\WINDOWS\system32\drivers\serial.sys - ok
18:01:49.0640 3500 [ 0109C4F3850DFBAB279542515386AE22 ] C:\WINDOWS\system32\drivers\ndistapi.sys
18:01:49.0640 3500 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
18:01:49.0671 3500 [ EDC1531A49C80614B2CFDA43CA8659AB ] C:\WINDOWS\system32\drivers\ndiswan.sys
18:01:49.0671 3500 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
18:01:49.0703 3500 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
18:01:49.0703 3500 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
18:01:49.0734 3500 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
18:01:49.0734 3500 C:\WINDOWS\system32\drivers\tdi.sys - ok
18:01:49.0765 3500 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
18:01:49.0765 3500 C:\WINDOWS\system32\drivers\msgpc.sys - ok
18:01:49.0812 3500 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
18:01:49.0812 3500 C:\WINDOWS\system32\drivers\psched.sys - ok
18:01:49.0843 3500 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
18:01:49.0843 3500 C:\WINDOWS\system32\drivers\raspptp.sys - ok
18:01:49.0875 3500 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
18:01:49.0875 3500 C:\WINDOWS\system32\drivers\ptilink.sys - ok
18:01:49.0890 3500 [ 02AAAFB7BA137CE5DDABCDF8090954D9 ] C:\WINDOWS\system32\drivers\pcouffin.sys
18:01:49.0890 3500 C:\WINDOWS\system32\drivers\pcouffin.sys - ok
18:01:49.0921 3500 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
18:01:49.0921 3500 C:\WINDOWS\system32\drivers\raspti.sys - ok
18:01:49.0968 3500 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
18:01:49.0968 3500 C:\WINDOWS\system32\drivers\swenum.sys - ok
18:01:50.0000 3500 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
18:01:50.0000 3500 C:\WINDOWS\system32\drivers\termdd.sys - ok
18:01:50.0031 3500 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] C:\WINDOWS\system32\drivers\update.sys
18:01:50.0031 3500 C:\WINDOWS\system32\drivers\update.sys - ok
18:01:50.0062 3500 [ A3E700D78EEC390F1208098CDCA5C6B6 ] C:\WINDOWS\system32\drivers\MarvinBus.sys
18:01:50.0062 3500 C:\WINDOWS\system32\drivers\MarvinBus.sys - ok
18:01:50.0093 3500 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
18:01:50.0109 3500 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
18:01:50.0140 3500 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
18:01:50.0140 3500 C:\WINDOWS\system32\drivers\drmk.sys - ok
18:01:50.0156 3500 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
18:01:50.0156 3500 C:\WINDOWS\system32\drivers\portcls.sys - ok
18:01:50.0187 3500 [ 55920481A44FA7BDDE5FC1B9E02C7C2A ] C:\WINDOWS\system32\drivers\RtkHDAud.sys
18:01:50.0187 3500 C:\WINDOWS\system32\drivers\RtkHDAud.sys - ok
18:01:50.0218 3500 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
18:01:50.0218 3500 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
18:01:50.0265 3500 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
18:01:50.0265 3500 C:\WINDOWS\system32\drivers\usbd.sys - ok
18:01:50.0296 3500 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
18:01:50.0296 3500 C:\WINDOWS\system32\drivers\usbhub.sys - ok
18:01:50.0328 3500 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] C:\WINDOWS\system32\drivers\flpydisk.sys
18:01:50.0328 3500 C:\WINDOWS\system32\drivers\flpydisk.sys - ok
18:01:50.0359 3500 [ 8E6B8C671615D126FDC553D1E2DE5562 ] C:\WINDOWS\system32\drivers\sfloppy.sys
18:01:50.0359 3500 C:\WINDOWS\system32\drivers\sfloppy.sys - ok
18:01:50.0390 3500 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
18:01:50.0390 3500 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
18:01:50.0421 3500 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
18:01:50.0421 3500 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
18:01:50.0453 3500 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
18:01:50.0453 3500 C:\WINDOWS\system32\drivers\beep.sys - ok
18:01:50.0484 3500 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
18:01:50.0484 3500 C:\WINDOWS\system32\drivers\null.sys - ok
18:01:50.0515 3500 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
18:01:50.0515 3500 C:\WINDOWS\system32\drivers\vga.sys - ok
18:01:50.0562 3500 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
18:01:50.0562 3500 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
18:01:50.0593 3500 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
18:01:50.0593 3500 C:\WINDOWS\system32\drivers\msfs.sys - ok
18:01:50.0625 3500 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
18:01:50.0625 3500 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
18:01:50.0640 3500 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
18:01:50.0640 3500 C:\WINDOWS\system32\drivers\npfs.sys - ok
18:01:50.0671 3500 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
18:01:50.0671 3500 C:\WINDOWS\system32\drivers\rasacd.sys - ok
18:01:50.0718 3500 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
18:01:50.0718 3500 C:\WINDOWS\system32\drivers\ipsec.sys - ok
18:01:50.0750 3500 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
18:01:50.0750 3500 C:\WINDOWS\system32\drivers\tcpip.sys - ok
18:01:50.0781 3500 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
18:01:50.0781 3500 C:\WINDOWS\system32\drivers\netbt.sys - ok
18:01:50.0812 3500 [ CC748EA12C6EFFDE940EE98098BF96BB ] C:\WINDOWS\system32\drivers\ipnat.sys
18:01:50.0812 3500 C:\WINDOWS\system32\drivers\ipnat.sys - ok
18:01:50.0859 3500 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
18:01:50.0859 3500 C:\WINDOWS\system32\drivers\wanarp.sys - ok
18:01:50.0890 3500 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] C:\WINDOWS\system32\drivers\afd.sys
18:01:50.0890 3500 C:\WINDOWS\system32\drivers\afd.sys - ok
18:01:50.0906 3500 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
18:01:50.0906 3500 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
18:01:50.0937 3500 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
18:01:50.0937 3500 C:\WINDOWS\system32\drivers\netbios.sys - ok
18:01:50.0968 3500 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
18:01:50.0968 3500 C:\WINDOWS\system32\drivers\rdbss.sys - ok
18:01:51.0015 3500 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] C:\WINDOWS\system32\drivers\mrxsmb.sys
18:01:51.0015 3500 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
18:01:51.0046 3500 [ AC366695A0796560AA37215AD5762AAF ] C:\WINDOWS\system32\drivers\fips.sys
18:01:51.0046 3500 C:\WINDOWS\system32\drivers\fips.sys - ok
18:01:51.0078 3500 [ 9B08A8C6331C2DA9C30377BCB4262721 ] C:\WINDOWS\system32\smss.exe
18:01:51.0078 3500 C:\WINDOWS\system32\smss.exe - ok
18:01:51.0109 3500 [ 0A12141F94F9C7A478AF490454320E97 ] C:\WINDOWS\system32\ntdll.dll
18:01:51.0109 3500 C:\WINDOWS\system32\ntdll.dll - ok
18:01:51.0140 3500 [ C7A9FF12C63E2E448722B02C71A8C431 ] C:\WINDOWS\system32\autochk.exe
18:01:51.0140 3500 C:\WINDOWS\system32\autochk.exe - ok
18:01:51.0171 3500 [ 56A6034E7764E23D9114223EB3523925 ] C:\WINDOWS\system32\sfcfiles.dll
18:01:51.0171 3500 C:\WINDOWS\system32\sfcfiles.dll - ok
18:01:51.0203 3500 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
18:01:51.0203 3500 C:\WINDOWS\system32\drivers\cdfs.sys - ok
18:01:51.0234 3500 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
18:01:51.0234 3500 C:\WINDOWS\system32\drivers\wmilib.sys - ok
18:01:51.0265 3500 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
18:01:51.0265 3500 C:\WINDOWS\system32\drivers\atapi.sys - ok
18:01:51.0312 3500 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
18:01:51.0312 3500 C:\WINDOWS\system32\drivers\dxapi.sys - ok
18:01:51.0343 3500 [ 628CE66E3FD35BFC7969DBAC245DC069 ] C:\WINDOWS\system32\csrss.exe
18:01:51.0343 3500 C:\WINDOWS\system32\csrss.exe - ok
18:01:51.0375 3500 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
18:01:51.0375 3500 C:\WINDOWS\system32\watchdog.sys - ok
18:01:51.0390 3500 [ 89B9C5051E815C943C3A9EBB2619DF6A ] C:\WINDOWS\system32\win32k.sys
18:01:51.0390 3500 C:\WINDOWS\system32\win32k.sys - ok
18:01:51.0437 3500 [ CE440A5DEB0861CC621A6A704EBB1E71 ] C:\WINDOWS\system32\csrsrv.dll
18:01:51.0437 3500 C:\WINDOWS\system32\csrsrv.dll - ok
18:01:51.0468 3500 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
18:01:51.0468 3500 C:\WINDOWS\system32\basesrv.dll - ok
18:01:51.0500 3500 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:01:51.0500 3500 C:\WINDOWS\system32\winsrv.dll - ok
18:01:51.0531 3500 [ 90C925765E695AB984BE2E8A21B62AE9 ] C:\WINDOWS\system32\gdi32.dll
18:01:51.0531 3500 C:\WINDOWS\system32\gdi32.dll - ok
18:01:51.0562 3500 [ 545C653E8FE241CA6200798AA94FE5C7 ] C:\WINDOWS\system32\kernel32.dll
18:01:51.0562 3500 C:\WINDOWS\system32\kernel32.dll - ok
18:01:51.0609 3500 [ E16E0990967374E76F3E40CACAFD3D53 ] C:\WINDOWS\system32\user32.dll
18:01:51.0609 3500 C:\WINDOWS\system32\user32.dll - ok
18:01:51.0640 3500 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
18:01:51.0640 3500 C:\WINDOWS\system32\drivers\dxg.sys - ok
18:01:51.0656 3500 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
18:01:51.0656 3500 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
18:01:51.0687 3500 [ DF11C52E6765783D84BBC10DD98D455C ] C:\WINDOWS\system32\vtdisp.dll
18:01:51.0687 3500 C:\WINDOWS\system32\vtdisp.dll - ok
18:01:51.0734 3500 [ 1BD2076C717CB48967D5078EC9650891 ] C:\WINDOWS\system32\vga.dll
18:01:51.0734 3500 C:\WINDOWS\system32\vga.dll - ok
18:01:51.0765 3500 [ CDDB1F8E1AEA356F3AD106F2CF9B7FEA ] C:\WINDOWS\system32\winlogon.exe
18:01:51.0765 3500 C:\WINDOWS\system32\winlogon.exe - ok
18:01:51.0796 3500 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] C:\WINDOWS\system32\advapi32.dll
18:01:51.0796 3500 C:\WINDOWS\system32\advapi32.dll - ok
18:01:51.0828 3500 [ DD2A19C756A3992416C00CEEE55A3337 ] C:\WINDOWS\system32\rpcrt4.dll
18:01:51.0828 3500 C:\WINDOWS\system32\rpcrt4.dll - ok
18:01:51.0859 3500 [ DEA06DA25BB393E0A69C6E71BE5681DC ] C:\WINDOWS\system32\authz.dll
18:01:51.0859 3500 C:\WINDOWS\system32\authz.dll - ok
18:01:51.0890 3500 [ 69DF78F490C85052C7AF6C8ABE4AF1C5 ] C:\WINDOWS\system32\secur32.dll
18:01:51.0890 3500 C:\WINDOWS\system32\secur32.dll - ok
18:01:51.0921 3500 [ D165DFCB4EA452510E53416F573018BB ] C:\WINDOWS\system32\msvcrt.dll
18:01:51.0921 3500 C:\WINDOWS\system32\msvcrt.dll - ok
18:01:51.0953 3500 [ D9E559D292CCF9531FB1A1A20F04432A ] C:\WINDOWS\system32\crypt32.dll
18:01:51.0953 3500 C:\WINDOWS\system32\crypt32.dll - ok
18:01:51.0984 3500 [ 052B3C1DADDE0D267987E8DA3BBE1AFB ] C:\WINDOWS\system32\msasn1.dll
18:01:51.0984 3500 C:\WINDOWS\system32\msasn1.dll - ok
18:01:52.0015 3500 [ 4D0C43A5446E4CA079D783CD70E9D543 ] C:\WINDOWS\system32\nddeapi.dll
18:01:52.0031 3500 C:\WINDOWS\system32\nddeapi.dll - ok
18:01:52.0062 3500 [ 8F43DFAF8B01F5775B931145E0FBB4B1 ] C:\WINDOWS\system32\netapi32.dll
18:01:52.0062 3500 C:\WINDOWS\system32\netapi32.dll - ok
18:01:52.0093 3500 [ ABBAF72B2E4D7C8D238D1AA8424244B4 ] C:\WINDOWS\system32\profmap.dll
18:01:52.0093 3500 C:\WINDOWS\system32\profmap.dll - ok
18:01:52.0125 3500 [ 7625B324EE90A716E447115A4B7F7364 ] C:\WINDOWS\system32\userenv.dll
18:01:52.0125 3500 C:\WINDOWS\system32\userenv.dll - ok
18:01:52.0140 3500 [ F9631D6681944F2CC0824FCEE52E8526 ] C:\WINDOWS\system32\psapi.dll
18:01:52.0140 3500 C:\WINDOWS\system32\psapi.dll - ok
18:01:52.0187 3500 [ FAE69704BB5FF6F8E7C60B21048CD1C3 ] C:\WINDOWS\system32\regapi.dll
18:01:52.0187 3500 C:\WINDOWS\system32\regapi.dll - ok
18:01:52.0218 3500 [ 0E93A7F2BE83AF906D9EAFB370300CAA ] C:\WINDOWS\system32\setupapi.dll
18:01:52.0218 3500 C:\WINDOWS\system32\setupapi.dll - ok
18:01:52.0250 3500 [ 614F8186BDAB926E3B1D8927A4161B54 ] C:\WINDOWS\system32\version.dll
18:01:52.0250 3500 C:\WINDOWS\system32\version.dll - ok
18:01:52.0281 3500 [ EF42EA58F8BF96753BE84B3227AD119E ] C:\WINDOWS\system32\winsta.dll
18:01:52.0281 3500 C:\WINDOWS\system32\winsta.dll - ok
18:01:52.0312 3500 [ 7C42188244388F222ACEA92900173533 ] C:\WINDOWS\system32\wintrust.dll
18:01:52.0312 3500 C:\WINDOWS\system32\wintrust.dll - ok
18:01:52.0359 3500 [ D21DBAA97839B1786E278FDD2F3444AC ] C:\WINDOWS\system32\imagehlp.dll
18:01:52.0359 3500 C:\WINDOWS\system32\imagehlp.dll - ok
18:01:52.0390 3500 [ 951D473917C51F21496D914CF6E5DDD1 ] C:\WINDOWS\system32\ws2_32.dll
18:01:52.0390 3500 C:\WINDOWS\system32\ws2_32.dll - ok
18:01:52.0406 3500 [ 859F7735F199C90403340183A3DDFB78 ] C:\WINDOWS\system32\ws2help.dll
18:01:52.0406 3500 C:\WINDOWS\system32\ws2help.dll - ok
18:01:52.0437 3500 [ 6C60CA8AC7470AC01CFD3D24C7283CD1 ] C:\WINDOWS\system32\imm32.dll
18:01:52.0437 3500 C:\WINDOWS\system32\imm32.dll - ok
18:01:52.0484 3500 [ 36E68E02AF2206FC4A8C73CAEABE1FB0 ] C:\WINDOWS\system32\kbdcz.dll
18:01:52.0484 3500 C:\WINDOWS\system32\kbdcz.dll - ok
18:01:52.0515 3500 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
18:01:52.0515 3500 C:\WINDOWS\system32\kbdus.dll - ok
18:01:52.0546 3500 [ C1367E52DDAB839B8A21E412519E5FB5 ] C:\WINDOWS\system32\msgina.dll
18:01:52.0546 3500 C:\WINDOWS\system32\msgina.dll - ok
18:01:52.0578 3500 [ E145ADD7DAEF759C4F5FB80A180A9C30 ] C:\WINDOWS\system32\comctl32.dll
18:01:52.0578 3500 C:\WINDOWS\system32\comctl32.dll - ok
18:01:52.0625 3500 [ D6F092E2D661AD284D34189B78FE08E6 ] C:\WINDOWS\system32\comdlg32.dll
18:01:52.0625 3500 C:\WINDOWS\system32\comdlg32.dll - ok
18:01:52.0640 3500 [ ED180CFF554C5797E983501823E78613 ] C:\WINDOWS\system32\odbc32.dll
18:01:52.0640 3500 C:\WINDOWS\system32\odbc32.dll - ok
18:01:52.0671 3500 [ 639A1D31DCB23068087B1F781EDCD4A9 ] C:\WINDOWS\system32\shell32.dll
18:01:52.0671 3500 C:\WINDOWS\system32\shell32.dll - ok
18:01:52.0703 3500 [ 5553738BD481C5456BB4E22B6F4D99EB ] C:\WINDOWS\system32\shlwapi.dll
18:01:52.0703 3500 C:\WINDOWS\system32\shlwapi.dll - ok
18:01:52.0734 3500 [ E139BB65A83049154EE40B46A42B9BAC ] C:\WINDOWS\system32\sxs.dll
18:01:52.0734 3500 C:\WINDOWS\system32\sxs.dll - ok
18:01:52.0781 3500 [ 8A72A30FDC803DC06755D3B36D966F31 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
18:01:52.0781 3500 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
18:01:52.0812 3500 [ 62D35D5F2D6ACE259DF6226D7079A661 ] C:\WINDOWS\system32\odbcint.dll
18:01:52.0812 3500 C:\WINDOWS\system32\odbcint.dll - ok
18:01:52.0843 3500 [ EE9A2B9EA968A792A053C9D1A86BF870 ] C:\WINDOWS\system32\shsvcs.dll
18:01:52.0843 3500 C:\WINDOWS\system32\shsvcs.dll - ok
18:01:52.0875 3500 [ 5EE949255BABC0B17C09DDB2E59E3878 ] C:\WINDOWS\system32\sfc.dll
18:01:52.0875 3500 C:\WINDOWS\system32\sfc.dll - ok
18:01:52.0890 3500 [ 83451053EAD9F92B697C1BCBA91987FC ] C:\WINDOWS\system32\sfc_os.dll
18:01:52.0890 3500 C:\WINDOWS\system32\sfc_os.dll - ok
18:01:52.0937 3500 [ ED9B683C7A8BBAAAB9B377197D20832C ] C:\WINDOWS\system32\ole32.dll
18:01:52.0937 3500 C:\WINDOWS\system32\ole32.dll - ok
18:01:52.0968 3500 [ 11882C729C6B2E2E045F8B93BDB69295 ] C:\WINDOWS\system32\apphelp.dll
18:01:52.0968 3500 C:\WINDOWS\system32\apphelp.dll - ok

Druhá část



18:01:53.0000 3500 [ ED0A176354487CEED65B80A7148AB739 ] C:\WINDOWS\system32\lsass.exe
18:01:53.0000 3500 C:\WINDOWS\system32\lsass.exe - ok
18:01:53.0031 3500 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
18:01:53.0031 3500 C:\WINDOWS\system32\services.exe - ok
18:01:53.0078 3500 [ C8F04C22EB595DBC0624CB4484DCF6D4 ] C:\WINDOWS\system32\lsasrv.dll
18:01:53.0078 3500 C:\WINDOWS\system32\lsasrv.dll - ok
18:01:53.0109 3500 [ 1B7A9C069457EC6E37E1F1D79B58AE87 ] C:\WINDOWS\system32\ncobjapi.dll
18:01:53.0109 3500 C:\WINDOWS\system32\ncobjapi.dll - ok
18:01:53.0140 3500 [ A46994F7DF0F6FFFA9FBD52C57DFF15C ] C:\WINDOWS\system32\msvcp60.dll
18:01:53.0140 3500 C:\WINDOWS\system32\msvcp60.dll - ok
18:01:53.0156 3500 [ 3FE1BBF9A6865275464D38B0A2B4A93D ] C:\WINDOWS\system32\mpr.dll
18:01:53.0156 3500 C:\WINDOWS\system32\mpr.dll - ok
18:01:53.0187 3500 [ EE43B67C08B2DF9F529A75EAB8877D19 ] C:\WINDOWS\system32\scesrv.dll
18:01:53.0187 3500 C:\WINDOWS\system32\scesrv.dll - ok
18:01:53.0234 3500 [ 2FFDE877A4584FF839458B7500B53C54 ] C:\WINDOWS\system32\ntdsapi.dll
18:01:53.0234 3500 C:\WINDOWS\system32\ntdsapi.dll - ok
18:01:53.0265 3500 [ 443FA2B9D23DAA57077A670E7B14052A ] C:\WINDOWS\system32\dnsapi.dll
18:01:53.0265 3500 C:\WINDOWS\system32\dnsapi.dll - ok
18:01:53.0296 3500 [ CBE9EE6C6A5FD587CE6A4607C3B8B7C6 ] C:\WINDOWS\system32\umpnpmgr.dll
18:01:53.0296 3500 C:\WINDOWS\system32\umpnpmgr.dll - ok
18:01:53.0328 3500 [ AD68FEF8C99D87611F5617E46766E055 ] C:\WINDOWS\system32\wldap32.dll
18:01:53.0328 3500 C:\WINDOWS\system32\wldap32.dll - ok
18:01:53.0375 3500 [ 2F1DE43508B086C7A6117A35FE17BA0D ] C:\WINDOWS\system32\samlib.dll
18:01:53.0375 3500 C:\WINDOWS\system32\samlib.dll - ok
18:01:53.0390 3500 [ 2E14E691EFA7847A603612A80889D6A0 ] C:\WINDOWS\system32\shimeng.dll
18:01:53.0390 3500 C:\WINDOWS\system32\shimeng.dll - ok
18:01:53.0421 3500 [ 5E5489C1D9AC8ED236EA8C6E54A997B9 ] C:\WINDOWS\AppPatch\acadproc.dll
18:01:53.0421 3500 C:\WINDOWS\AppPatch\acadproc.dll - ok
18:01:53.0453 3500 [ 923122A0B25850462C2BD576EABD60AF ] C:\WINDOWS\system32\samsrv.dll
18:01:53.0453 3500 C:\WINDOWS\system32\samsrv.dll - ok
18:01:53.0484 3500 [ 6A9BDF7029BD29FBF3BE6EE6CD768013 ] C:\WINDOWS\system32\cryptdll.dll
18:01:53.0484 3500 C:\WINDOWS\system32\cryptdll.dll - ok
18:01:53.0531 3500 [ 2C677B499B36B7991643B04BB8AA7AEA ] C:\WINDOWS\AppPatch\acgenral.dll
18:01:53.0531 3500 C:\WINDOWS\AppPatch\acgenral.dll - ok
18:01:53.0562 3500 [ D61C4E13A776DC9D29EF22B44EB0AB7F ] C:\WINDOWS\system32\winmm.dll
18:01:53.0562 3500 C:\WINDOWS\system32\winmm.dll - ok
18:01:53.0593 3500 [ 865E2815C3597A952F13ECF463B52D7E ] C:\WINDOWS\system32\oleaut32.dll
18:01:53.0593 3500 C:\WINDOWS\system32\oleaut32.dll - ok
18:01:53.0625 3500 [ 4B2068CB18F72E78ACD07BD94F743F94 ] C:\WINDOWS\system32\msacm32.dll
18:01:53.0625 3500 C:\WINDOWS\system32\msacm32.dll - ok
18:01:53.0640 3500 [ E04A8DC5C740C679EF62A614D9339ECF ] C:\WINDOWS\system32\uxtheme.dll
18:01:53.0640 3500 C:\WINDOWS\system32\uxtheme.dll - ok
18:01:53.0687 3500 [ 79D7A4B85ED05818604678E84746C176 ] C:\WINDOWS\system32\msapsspc.dll
18:01:53.0687 3500 C:\WINDOWS\system32\msapsspc.dll - ok
18:01:53.0718 3500 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
18:01:53.0718 3500 C:\WINDOWS\system32\msvcrt40.dll - ok
18:01:53.0750 3500 [ A639E2A83CD57882B6D0F6F203BA73AF ] C:\WINDOWS\system32\schannel.dll
18:01:53.0750 3500 C:\WINDOWS\system32\schannel.dll - ok
18:01:53.0781 3500 [ 50EAEE3F7F79A3206311AD09CB6EE2F1 ] C:\WINDOWS\system32\digest.dll
18:01:53.0781 3500 C:\WINDOWS\system32\digest.dll - ok
18:01:53.0828 3500 [ F987BA178D3D2AC5A448906AA74244A6 ] C:\WINDOWS\system32\msnsspc.dll
18:01:53.0828 3500 C:\WINDOWS\system32\msnsspc.dll - ok
18:01:53.0859 3500 [ 26AE5F5ADF4A30C8BCEA736343170201 ] C:\WINDOWS\system32\msctfime.ime
18:01:53.0859 3500 C:\WINDOWS\system32\msctfime.ime - ok
18:01:53.0890 3500 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
18:01:53.0890 3500 C:\WINDOWS\system32\msprivs.dll - ok
18:01:53.0906 3500 [ 1E644E3533DCE2B580A663AE1ACBD539 ] C:\WINDOWS\system32\atmfd.dll
18:01:53.0906 3500 C:\WINDOWS\system32\atmfd.dll - ok
18:01:53.0937 3500 [ 7A943FB5D0260595A7DA43246F070D2D ] C:\WINDOWS\system32\iphlpapi.dll
18:01:53.0937 3500 C:\WINDOWS\system32\iphlpapi.dll - ok
18:01:53.0984 3500 [ DAE17E35517159E5852B1712878D9702 ] C:\WINDOWS\system32\kerberos.dll
18:01:53.0984 3500 C:\WINDOWS\system32\kerberos.dll - ok
18:01:54.0015 3500 [ E1E17EB9523D54F3A43C3DBB709D61A9 ] C:\WINDOWS\system32\msv1_0.dll
18:01:54.0015 3500 C:\WINDOWS\system32\msv1_0.dll - ok
18:01:54.0046 3500 [ C2ED0E3408F50BBC149D4F0936E67832 ] C:\WINDOWS\system32\netlogon.dll
18:01:54.0046 3500 C:\WINDOWS\system32\netlogon.dll - ok
18:01:54.0078 3500 [ FA4E1CDBA256787F2149F4AAD07BC91F ] C:\WINDOWS\system32\w32time.dll
18:01:54.0078 3500 C:\WINDOWS\system32\w32time.dll - ok
18:01:54.0125 3500 [ A06D566DF5918E78DCF80596B17D2C9A ] C:\WINDOWS\system32\wdigest.dll
18:01:54.0125 3500 C:\WINDOWS\system32\wdigest.dll - ok
18:01:54.0140 3500 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
18:01:54.0140 3500 C:\WINDOWS\system32\rsaenh.dll - ok
18:01:54.0171 3500 [ 7D7B90E9DA5263804D9C6ADEADAC9D6E ] C:\WINDOWS\system32\winscard.dll
18:01:54.0171 3500 C:\WINDOWS\system32\winscard.dll - ok
18:01:54.0203 3500 [ 190E67B026EDB080440BD2F735654E0C ] C:\WINDOWS\system32\wtsapi32.dll
18:01:54.0203 3500 C:\WINDOWS\system32\wtsapi32.dll - ok
18:01:54.0234 3500 [ 830CE8951C71F361D7D2F38416CC8BC1 ] C:\WINDOWS\system32\scecli.dll
18:01:54.0234 3500 C:\WINDOWS\system32\scecli.dll - ok
18:01:54.0281 3500 [ EAA6324F51214D2F6718977EC9CE0DEF ] C:\WINDOWS\system32\drivers\WudfPf.sys
18:01:54.0281 3500 C:\WINDOWS\system32\drivers\WudfPf.sys - ok
18:01:54.0312 3500 [ BE4A520E29B6391F49E79CCC52044D93 ] C:\WINDOWS\system32\svchost.exe
18:01:54.0312 3500 C:\WINDOWS\system32\svchost.exe - ok
18:01:54.0343 3500 [ EB25940843AB2EBD333107CF064B8787 ] C:\WINDOWS\system32\ntmarta.dll
18:01:54.0343 3500 C:\WINDOWS\system32\ntmarta.dll - ok
18:01:54.0375 3500 [ BE27674D1CBC3214AEC84B4336A38BBF ] C:\WINDOWS\system32\rpcss.dll
18:01:54.0375 3500 C:\WINDOWS\system32\rpcss.dll - ok
18:01:54.0406 3500 [ 61AAE581F5DC8B393C93EE0DF32F38B2 ] C:\WINDOWS\system32\xpsp2res.dll
18:01:54.0406 3500 C:\WINDOWS\system32\xpsp2res.dll - ok
18:01:54.0437 3500 [ 2EE99F67C930931EB404DADCE57E976E ] C:\WINDOWS\system32\eventlog.dll
18:01:54.0437 3500 C:\WINDOWS\system32\eventlog.dll - ok
18:01:54.0468 3500 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] C:\WINDOWS\system32\mswsock.dll
18:01:54.0468 3500 C:\WINDOWS\system32\mswsock.dll - ok
18:01:54.0500 3500 [ ED18ADEE4AA21EB26977260152D7241A ] C:\WINDOWS\system32\hnetcfg.dll
18:01:54.0500 3500 C:\WINDOWS\system32\hnetcfg.dll - ok
18:01:54.0546 3500 [ 8DBCEA7B495024A29FEF59B5FE709DAC ] C:\WINDOWS\system32\wshtcpip.dll
18:01:54.0546 3500 C:\WINDOWS\system32\wshtcpip.dll - ok
18:01:54.0578 3500 [ DF2F39569BF7F223AF3CCBC23D07BF6E ] C:\WINDOWS\system32\winrnr.dll
18:01:54.0578 3500 C:\WINDOWS\system32\winrnr.dll - ok
18:01:54.0609 3500 [ B26098F3DC08D841DE3D79C38ACCB807 ] C:\WINDOWS\system32\rasadhlp.dll
18:01:54.0609 3500 C:\WINDOWS\system32\rasadhlp.dll - ok
18:01:54.0640 3500 [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] C:\Program Files\Microsoft Security Client\MsMpEng.exe
18:01:54.0640 3500 C:\Program Files\Microsoft Security Client\MsMpEng.exe - ok
18:01:54.0656 3500 [ 9AC7F31404F784753C4C04296E48CFAB ] C:\Program Files\Microsoft Security Client\MpSvc.dll
18:01:54.0656 3500 C:\Program Files\Microsoft Security Client\MpSvc.dll - ok
18:01:54.0703 3500 [ 84204FDA617A3611D510A1DCBAE64004 ] C:\Program Files\Microsoft Security Client\MpClient.dll
18:01:54.0703 3500 C:\Program Files\Microsoft Security Client\MpClient.dll - ok
18:01:54.0734 3500 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] C:\WINDOWS\system32\WudfSvc.dll
18:01:54.0734 3500 C:\WINDOWS\system32\WudfSvc.dll - ok
18:01:54.0765 3500 [ 708E6997420592E033CF01B60E6E4223 ] C:\WINDOWS\system32\WudfPlatform.dll
18:01:54.0765 3500 C:\WINDOWS\system32\WudfPlatform.dll - ok
18:01:54.0796 3500 [ 7C29BC74635524E13FAA556A5FD48968 ] C:\Program Files\Microsoft Security Client\MpRTP.dll
18:01:54.0796 3500 C:\Program Files\Microsoft Security Client\MpRTP.dll - ok
18:01:54.0843 3500 [ C74B93113F4515D8B963E46A589BE85E ] C:\WINDOWS\system32\fltlib.dll
18:01:54.0843 3500 C:\WINDOWS\system32\fltlib.dll - ok
18:01:54.0875 3500 [ 8CC571653F6741481F6B9BBEAF8F362F ] C:\WINDOWS\system32\logonui.exe
18:01:54.0875 3500 C:\WINDOWS\system32\logonui.exe - ok
18:01:54.0906 3500 [ 616A0CC9DA2BAA008306EEA895F8BC0F ] C:\WINDOWS\system32\cscdll.dll
18:01:54.0906 3500 C:\WINDOWS\system32\cscdll.dll - ok
18:01:54.0921 3500 [ 883E504885373DCC08DFEF30A10E4F12 ] C:\WINDOWS\system32\dimsntfy.dll
18:01:54.0921 3500 C:\WINDOWS\system32\dimsntfy.dll - ok
18:01:54.0953 3500 [ 4807A2D624C4D3643B29AE2BA3FAA13D ] C:\WINDOWS\system32\wlnotify.dll
18:01:54.0953 3500 C:\WINDOWS\system32\wlnotify.dll - ok
18:01:55.0000 3500 [ AEFD5E1D91B86AB41D9705600303F34E ] C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2B37BE43-29DF-47BA-B35C-47E591C484A8}\mpengine.dll
18:01:55.0000 3500 C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2B37BE43-29DF-47BA-B35C-47E591C484A8}\mpengine.dll - ok
18:01:55.0031 3500 [ 0F1F2827B4FDF4401E0B9D60C63CE0D8 ] C:\WINDOWS\system32\winspool.drv
18:01:55.0031 3500 C:\WINDOWS\system32\winspool.drv - ok
18:01:55.0062 3500 [ 01DEFAA24704069BDB1A559A9C6EBC88 ] C:\WINDOWS\system32\duser.dll
18:01:55.0062 3500 C:\WINDOWS\system32\duser.dll - ok
18:01:55.0093 3500 [ 627551A1011199BCE013D0F4B6CACECF ] C:\WINDOWS\system32\msimg32.dll
18:01:55.0093 3500 C:\WINDOWS\system32\msimg32.dll - ok
18:01:55.0140 3500 [ 20200EE3CFE10E9F0C028D8653BE11C6 ] C:\WINDOWS\system32\oleacc.dll
18:01:55.0140 3500 C:\WINDOWS\system32\oleacc.dll - ok
18:01:55.0156 3500 [ 91F3DF93F40A74D222CD166FE95DB633 ] C:\WINDOWS\system32\drivers\AegisP.sys
18:01:55.0156 3500 C:\WINDOWS\system32\drivers\AegisP.sys - ok
18:01:55.0187 3500 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
18:01:55.0187 3500 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
18:01:55.0218 3500 [ 8C9A53E285AC5E6704844D0459EC85BE ] C:\WINDOWS\system32\dhcpcsvc.dll
18:01:55.0218 3500 C:\WINDOWS\system32\dhcpcsvc.dll - ok
18:01:55.0250 3500 [ 66DF63A7BAE72033C2E7E9B60A20E05C ] C:\WINDOWS\system32\clbcatq.dll
18:01:55.0250 3500 C:\WINDOWS\system32\clbcatq.dll - ok
18:01:55.0296 3500 [ DFAA406BF19F4EE806A6F8D4342137F7 ] C:\WINDOWS\system32\dnsrslvr.dll
18:01:55.0296 3500 C:\WINDOWS\system32\dnsrslvr.dll - ok
18:01:55.0328 3500 [ E7B375DFFB68A16659CA66474A280C47 ] C:\WINDOWS\system32\comres.dll
18:01:55.0328 3500 C:\WINDOWS\system32\comres.dll - ok
18:01:55.0359 3500 [ 0AB159F536E3E8F7F07113702A07CCA5 ] C:\WINDOWS\system32\lmhsvc.dll
18:01:55.0359 3500 C:\WINDOWS\system32\lmhsvc.dll - ok
18:01:55.0390 3500 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] C:\WINDOWS\system32\wzcsvc.dll
18:01:55.0390 3500 C:\WINDOWS\system32\wzcsvc.dll - ok
18:01:55.0406 3500 [ 98CA2F18D988D7EA7D0183CE1FE83461 ] C:\WINDOWS\system32\shgina.dll
18:01:55.0406 3500 C:\WINDOWS\system32\shgina.dll - ok
18:01:55.0453 3500 [ 043FD4E92FE9BA70BFB8AC49848887CB ] C:\WINDOWS\system32\rtutils.dll
18:01:55.0453 3500 C:\WINDOWS\system32\rtutils.dll - ok
18:01:55.0484 3500 [ 6E4DFC1D92AD235FC76E8C7EE5544A00 ] C:\WINDOWS\system32\eapolqec.dll
18:01:55.0484 3500 C:\WINDOWS\system32\eapolqec.dll - ok
18:01:55.0515 3500 [ DFB0A12FE3009F03612592EDEECF1F6C ] C:\WINDOWS\system32\mpnotify.exe
18:01:55.0515 3500 C:\WINDOWS\system32\mpnotify.exe - ok
18:01:55.0546 3500 [ ACDB4C56ADCAD6913371C2B38BC016E2 ] C:\WINDOWS\system32\wmi.dll
18:01:55.0546 3500 C:\WINDOWS\system32\wmi.dll - ok
18:01:55.0593 3500 [ AC531D7E51B7B5FB52D7585935222DE6 ] C:\WINDOWS\system32\atl.dll
18:01:55.0593 3500 C:\WINDOWS\system32\atl.dll - ok
18:01:55.0625 3500 [ 9D221D3CBB4DFA1FD225B2769009F99B ] C:\WINDOWS\system32\qutil.dll
18:01:55.0625 3500 C:\WINDOWS\system32\qutil.dll - ok
18:01:55.0656 3500 [ 6011D2787CD0CE16CE6E40C30F13F6F8 ] C:\WINDOWS\system32\dot3api.dll
18:01:55.0656 3500 C:\WINDOWS\system32\dot3api.dll - ok
18:01:55.0671 3500 [ 39026490EF6992293A38AA13204BA6F3 ] C:\WINDOWS\system32\esent.dll
18:01:55.0671 3500 C:\WINDOWS\system32\esent.dll - ok
18:01:55.0703 3500 [ C6F23BC1411E91C179B0635893BB40A1 ] C:\WINDOWS\system32\kbdru.dll
18:01:55.0703 3500 C:\WINDOWS\system32\kbdru.dll - ok
18:01:55.0750 3500 [ 65DDCE6C4F63C6AAC3D99EFBA4C1E9C4 ] C:\WINDOWS\system32\cscui.dll
18:01:55.0750 3500 C:\WINDOWS\system32\cscui.dll - ok
18:01:55.0781 3500 [ 9FA69781CAA7A1DA981A24F240A61A60 ] C:\WINDOWS\system32\powrprof.dll
18:01:55.0781 3500 C:\WINDOWS\system32\powrprof.dll - ok
18:01:55.0812 3500 [ 7B26D3823BD08628808F8930F15F57D0 ] C:\WINDOWS\system32\dpcdll.dll
18:01:55.0812 3500 C:\WINDOWS\system32\dpcdll.dll - ok
18:01:55.0843 3500 [ 0B1AA4B12FC08CCB7EAB6AAA1E25AC16 ] C:\WINDOWS\system32\rastls.dll
18:01:55.0843 3500 C:\WINDOWS\system32\rastls.dll - ok
18:01:55.0890 3500 [ F37A3D11450C4BA9BD862DFF7451728C ] C:\WINDOWS\system32\cryptui.dll
18:01:55.0890 3500 C:\WINDOWS\system32\cryptui.dll - ok
18:01:55.0906 3500 [ 0EA93F7FB756BA979EE854867CC38EC7 ] C:\WINDOWS\system32\wininet.dll
18:01:55.0906 3500 C:\WINDOWS\system32\wininet.dll - ok
18:01:55.0937 3500 [ AC992C58B28038A43E63DE07361B9732 ] C:\WINDOWS\system32\mprapi.dll
18:01:55.0937 3500 C:\WINDOWS\system32\mprapi.dll - ok
18:01:55.0968 3500 [ 28217BEA16EC1790ADF5495BDCD03B35 ] C:\WINDOWS\system32\activeds.dll
18:01:55.0968 3500 C:\WINDOWS\system32\activeds.dll - ok
18:01:56.0000 3500 [ B88893C7FB9671C84DBF6400CD2170CD ] C:\WINDOWS\system32\adsldpc.dll
18:01:56.0000 3500 C:\WINDOWS\system32\adsldpc.dll - ok
18:01:56.0046 3500 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
18:01:56.0046 3500 C:\WINDOWS\system32\normaliz.dll - ok
18:01:56.0078 3500 [ 7DC1830F22E7D275B438127B68030239 ] C:\WINDOWS\system32\userinit.exe
18:01:56.0078 3500 C:\WINDOWS\system32\userinit.exe - ok
18:01:56.0109 3500 [ CF179248DD41BF99BE41ED08BCA32514 ] C:\WINDOWS\system32\urlmon.dll
18:01:56.0109 3500 C:\WINDOWS\system32\urlmon.dll - ok
18:01:56.0140 3500 [ 898F2A635D7033410C96762C711CB81C ] C:\WINDOWS\system32\iertutil.dll
18:01:56.0140 3500 C:\WINDOWS\system32\iertutil.dll - ok
18:01:56.0156 3500 [ 0B3077EC67D9509B6B8A1FA3006E717B ] C:\WINDOWS\system32\rasapi32.dll
18:01:56.0156 3500 C:\WINDOWS\system32\rasapi32.dll - ok
18:01:56.0203 3500 [ A4F20BF76D85B92FE6E0C6B3884E8718 ] C:\WINDOWS\system32\rasman.dll
18:01:56.0203 3500 C:\WINDOWS\system32\rasman.dll - ok
18:01:56.0234 3500 [ A8B1342EE63C191258460EFE5D30D6A1 ] C:\WINDOWS\system32\tapi32.dll
18:01:56.0234 3500 C:\WINDOWS\system32\tapi32.dll - ok
18:01:56.0265 3500 [ D1995A48DCC77C8C3DE97BF89C1F8232 ] C:\WINDOWS\system32\riched20.dll
18:01:56.0265 3500 C:\WINDOWS\system32\riched20.dll - ok
18:01:56.0296 3500 [ BF5A61ED318A04CE683374069EA42CA6 ] C:\WINDOWS\system32\raschap.dll
18:01:56.0296 3500 C:\WINDOWS\system32\raschap.dll - ok
18:01:56.0343 3500 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] C:\WINDOWS\system32\netman.dll
18:01:56.0343 3500 C:\WINDOWS\system32\netman.dll - ok
18:01:56.0375 3500 [ E0DD5DB829C887C4DCC2D9B31470F7EC ] C:\WINDOWS\system32\netshell.dll
18:01:56.0375 3500 C:\WINDOWS\system32\netshell.dll - ok
18:01:56.0406 3500 [ 1D37681166E7B0AE1FABF5676439F924 ] C:\WINDOWS\system32\credui.dll
18:01:56.0406 3500 C:\WINDOWS\system32\credui.dll - ok
18:01:56.0421 3500 [ C9AFEA3C13B62701FAE571D8466EB5F6 ] C:\WINDOWS\system32\dot3dlg.dll
18:01:56.0421 3500 C:\WINDOWS\system32\dot3dlg.dll - ok
18:01:56.0453 3500 [ A7162CFFDA477AE2239D4FB6F8094534 ] C:\WINDOWS\system32\onex.dll
18:01:56.0453 3500 C:\WINDOWS\system32\onex.dll - ok
18:01:56.0500 3500 [ DFBCA5222331A476C42DF1AA3921629E ] C:\WINDOWS\system32\eappcfg.dll
18:01:56.0500 3500 C:\WINDOWS\system32\eappcfg.dll - ok
18:01:56.0531 3500 [ F6D35EBC8F11300AAFD1D4CA6DC65B9D ] C:\WINDOWS\system32\eappprxy.dll
18:01:56.0531 3500 C:\WINDOWS\system32\eappprxy.dll - ok
18:01:56.0562 3500 [ 2DF6B86A8CE10CC93CE4C6DC72C5E791 ] C:\WINDOWS\system32\wzcsapi.dll
18:01:56.0562 3500 C:\WINDOWS\system32\wzcsapi.dll - ok
18:01:56.0593 3500 [ 27AFD587C462E280EE046B8CCA3C2CD1 ] C:\WINDOWS\explorer.exe
18:01:56.0593 3500 C:\WINDOWS\explorer.exe - ok
18:01:56.0640 3500 [ E45ECB5A023F77F813CD0DFF92699B76 ] C:\WINDOWS\system32\browseui.dll
18:01:56.0640 3500 C:\WINDOWS\system32\browseui.dll - ok
18:01:56.0656 3500 [ 3FF232A7731621B8902D81D42418C93C ] C:\WINDOWS\system32\schedsvc.dll
18:01:56.0656 3500 C:\WINDOWS\system32\schedsvc.dll - ok
18:01:56.0687 3500 [ 6D4084D7ACF7A369C802116A9128F2F5 ] C:\WINDOWS\system32\shdocvw.dll
18:01:56.0687 3500 C:\WINDOWS\system32\shdocvw.dll - ok
18:01:56.0718 3500 [ 30DB64D316F502558DB2380F7343C9FD ] C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
18:01:56.0718 3500 C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll - ok
18:01:56.0750 3500 [ 207204AF80505AF51271FE164B56F662 ] C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll
18:01:56.0750 3500 C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll - ok
18:01:56.0796 3500 [ C9564CF4976E7E96B4052737AA2492B4 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
18:01:56.0796 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll - ok
18:01:56.0828 3500 [ 30EFEBDC960A482E3E188B9960B286E2 ] C:\Program Files\Microsoft Office\Office12\GrooveNew.dll
18:01:56.0828 3500 C:\Program Files\Microsoft Office\Office12\GrooveNew.dll - ok
18:01:56.0859 3500 [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll
18:01:56.0859 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll - ok
18:01:56.0890 3500 [ F29937A86031341FC60CE316D7F88881 ] C:\WINDOWS\system32\AcSignIcon.dll
18:01:56.0890 3500 C:\WINDOWS\system32\AcSignIcon.dll - ok
18:01:56.0921 3500 [ DC9EFCC8827EB2C0D17A7E4B2DE77E63 ] C:\WINDOWS\system32\desk.cpl
18:01:56.0921 3500 C:\WINDOWS\system32\desk.cpl - ok
18:01:56.0953 3500 [ 42FC2993518A71372BE7B8176CAAC8CF ] C:\WINDOWS\system32\themeui.dll
18:01:56.0953 3500 C:\WINDOWS\system32\themeui.dll - ok
18:01:56.0984 3500 [ F6226D2AF6E3ACF5889F33E9E53602AC ] C:\WINDOWS\system32\msidle.dll
18:01:56.0984 3500 C:\WINDOWS\system32\msidle.dll - ok
18:01:57.0015 3500 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
18:01:57.0015 3500 C:\WINDOWS\system32\spoolsv.exe - ok
18:01:57.0046 3500 [ 508B8A0B72953469B3282A495CA6D482 ] C:\WINDOWS\system32\actxprxy.dll
18:01:57.0046 3500 C:\WINDOWS\system32\actxprxy.dll - ok
18:01:57.0093 3500 [ DE31B88962A8645DBA5A37B993E7B0F1 ] C:\WINDOWS\system32\audiosrv.dll
18:01:57.0093 3500 C:\WINDOWS\system32\audiosrv.dll - ok
18:01:57.0125 3500 [ 276A114FD1DE8232211F299E90DA8E3A ] C:\WINDOWS\system32\acs.exe
18:01:57.0125 3500 C:\WINDOWS\system32\acs.exe - ok
18:01:57.0156 3500 [ 60B44FAEDCF50B97F278C07BF790A55B ] C:\WINDOWS\system32\athcfg11.dll
18:01:57.0156 3500 C:\WINDOWS\system32\athcfg11.dll - ok
18:01:57.0171 3500 [ 653B038066D1FD5962BB88796ED7CFC0 ] C:\WINDOWS\system32\wdmaud.drv
18:01:57.0171 3500 C:\WINDOWS\system32\wdmaud.drv - ok
18:01:57.0218 3500 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
18:01:57.0218 3500 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
18:01:57.0250 3500 [ D8C2B95BC2353E1F18850D6B8F5DBA13 ] C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
18:01:57.0250 3500 C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll - ok
18:01:57.0281 3500 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
18:01:57.0281 3500 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
18:01:57.0312 3500 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
18:01:57.0312 3500 C:\WINDOWS\system32\drivers\splitter.sys - ok
18:01:57.0343 3500 [ 21C141732D231677D8FEC89A73EB44A2 ] C:\WINDOWS\system32\msxml3.dll
18:01:57.0343 3500 C:\WINDOWS\system32\msxml3.dll - ok
18:01:57.0390 3500 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
18:01:57.0390 3500 C:\WINDOWS\system32\drivers\aec.sys - ok
18:01:57.0421 3500 [ 07DE7B6D05D5C91D4F04B8E001A03C0C ] C:\WINDOWS\system32\athcfg11res.dll
18:01:57.0421 3500 C:\WINDOWS\system32\athcfg11res.dll - ok
18:01:57.0437 3500 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
18:01:57.0437 3500 C:\WINDOWS\system32\drivers\swmidi.sys - ok
18:01:57.0468 3500 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
18:01:57.0468 3500 C:\WINDOWS\system32\drivers\dmusic.sys - ok
18:01:57.0515 3500 [ BC18DA4B391ED0B6202123048EEC4A0D ] C:\WINDOWS\system32\mfc42.dll
18:01:57.0515 3500 C:\WINDOWS\system32\mfc42.dll - ok
18:01:57.0546 3500 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
18:01:57.0546 3500 C:\WINDOWS\system32\drivers\kmixer.sys - ok
18:01:57.0578 3500 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
18:01:57.0578 3500 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
18:01:57.0609 3500 [ F02A533F517EB38333CB12A9E8963773 ] C:\Program Files\Google\Update\GoogleUpdate.exe
18:01:57.0609 3500 C:\Program Files\Google\Update\GoogleUpdate.exe - ok
18:01:57.0656 3500 [ 58A4129B7AB2CF2E7F00256F7EDAEAC2 ] C:\WINDOWS\system32\cmd.exe
18:01:57.0656 3500 C:\WINDOWS\system32\cmd.exe - ok
18:01:57.0671 3500 [ 58A0D4A0DB5FB76438A38F30E666B212 ] C:\WINDOWS\system32\msacm32.drv
18:01:57.0671 3500 C:\WINDOWS\system32\msacm32.drv - ok
18:01:57.0703 3500 [ 160A1500DDBE42F8793E3AD341E4BEC4 ] C:\WINDOWS\system32\midimap.dll
18:01:57.0703 3500 C:\WINDOWS\system32\midimap.dll - ok
18:01:57.0734 3500 [ F23EB535F0834B3B1E0CDD16DB4ED7A1 ] C:\WINDOWS\system32\cfgmgr32.dll
18:01:57.0734 3500 C:\WINDOWS\system32\cfgmgr32.dll - ok
18:01:57.0765 3500 [ 9FF47CD8A3787C8FD3CDFE40441C722E ] C:\Program Files\Google\Update\1.3.21.123\goopdate.dll
18:01:57.0765 3500 C:\Program Files\Google\Update\1.3.21.123\goopdate.dll - ok
18:01:57.0812 3500 [ 1C274A87E8C644884CCF66522FB07C42 ] C:\WINDOWS\system32\msvcirt.dll
18:01:57.0812 3500 C:\WINDOWS\system32\msvcirt.dll - ok
18:01:57.0843 3500 [ C0B677971967E6807F280A0D184DD533 ] C:\WINDOWS\system32\mfc42loc.dll
18:01:57.0843 3500 C:\WINDOWS\system32\mfc42loc.dll - ok
18:01:57.0875 3500 [ 936C1D110232D23B621CB0196E4F80F0 ] C:\WINDOWS\system32\wkssvc.dll
18:01:57.0875 3500 C:\WINDOWS\system32\wkssvc.dll - ok
18:01:57.0906 3500 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] C:\WINDOWS\system32\drivers\mrxdav.sys
18:01:57.0906 3500 C:\WINDOWS\system32\drivers\mrxdav.sys - ok
18:01:57.0921 3500 [ 8C22083ED515DC94D575438662F0BE6A ] C:\WINDOWS\system32\msi.dll
18:01:57.0921 3500 C:\WINDOWS\system32\msi.dll - ok
18:01:57.0968 3500 [ 47AE51048A82DFA1CD6B51D369F7E169 ] C:\WINDOWS\system32\webclnt.dll
18:01:57.0968 3500 C:\WINDOWS\system32\webclnt.dll - ok
18:01:58.0000 3500 [ D2F1CF3A5B46305EA00103D5D16720C0 ] C:\WINDOWS\system32\ieframe.dll
18:01:58.0000 3500 C:\WINDOWS\system32\ieframe.dll - ok
18:01:58.0031 3500 [ 63C065DAF6710E33DA7976BBDF77CAFC ] C:\WINDOWS\system32\dbghelp.dll
18:01:58.0031 3500 C:\WINDOWS\system32\dbghelp.dll - ok
18:01:58.0062 3500 [ AE5A69F44C1F97EDC83237FC0B29B6FB ] C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe
18:01:58.0062 3500 C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe - ok
18:01:58.0109 3500 [ 4140DF1A80A347E250B91E3E1335FD9D ] C:\WINDOWS\system32\mstask.dll
18:01:58.0109 3500 C:\WINDOWS\system32\mstask.dll - ok
18:01:58.0140 3500 [ 47E827EB2C26A383AD16BF80C0FCA8FA ] C:\WINDOWS\system32\cryptnet.dll
18:01:58.0140 3500 C:\WINDOWS\system32\cryptnet.dll - ok
18:01:58.0171 3500 [ C77D916102E469F130A504CB9DACB930 ] C:\WINDOWS\system32\sensapi.dll
18:01:58.0171 3500 C:\WINDOWS\system32\sensapi.dll - ok
18:01:58.0187 3500 [ 84963584AEEF0562B632FC85B108B654 ] C:\WINDOWS\system32\winhttp.dll
18:01:58.0187 3500 C:\WINDOWS\system32\winhttp.dll - ok
18:01:58.0218 3500 [ FC5372FD2DEB28E847C8394C58BC76FA ] C:\Program Files\Microsoft Security Client\MpCmdRun.exe
18:01:58.0218 3500 C:\Program Files\Microsoft Security Client\MpCmdRun.exe - ok
18:01:58.0265 3500 [ 8702CD069DE8F6B527E92CF55F78D5D2 ] C:\WINDOWS\system32\cabinet.dll
18:01:58.0265 3500 C:\WINDOWS\system32\cabinet.dll - ok
18:01:58.0296 3500 [ 3B47E60E1012B23873ED2E4A9B4F2310 ] C:\Program Files\Microsoft Security Client\MsseWat.dll
18:01:58.0296 3500 C:\Program Files\Microsoft Security Client\MsseWat.dll - ok
18:01:58.0328 3500 [ A26E0A6A7EBB45815A3583E170C27031 ] C:\Program Files\Microsoft Security Client\LegitLib.dll
18:01:58.0328 3500 C:\Program Files\Microsoft Security Client\LegitLib.dll - ok
18:01:58.0359 3500 [ 03853A3540EC3F64EBDEFFB2ECE757D4 ] C:\WINDOWS\system32\wbem\wbemprox.dll
18:01:58.0359 3500 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
18:01:58.0406 3500 [ 5D1D9D1AC352D82C815EDF67E6EE5C97 ] C:\WINDOWS\system32\wbem\wbemcomn.dll
18:01:58.0406 3500 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
18:01:58.0421 3500 [ 1FAE19D0457176318BBA4A8795656EBC ] C:\WINDOWS\system32\drivers\parvdm.sys
18:01:58.0421 3500 C:\WINDOWS\system32\drivers\parvdm.sys - ok
18:01:58.0453 3500 [ F3AB0933CBD166D271992F411C27CCAF ] C:\WINDOWS\system32\cryptsvc.dll
18:01:58.0453 3500 C:\WINDOWS\system32\cryptsvc.dll - ok
18:01:58.0484 3500 [ 88B5B982D702CD81874731CECF6BA4DB ] C:\WINDOWS\system32\drivers\EIO_XP.sys
18:01:58.0484 3500 C:\WINDOWS\system32\drivers\EIO_XP.sys - ok
18:01:58.0515 3500 [ 7BF2BC7728F77838E195743E76727F7B ] C:\WINDOWS\system32\certcli.dll
18:01:58.0515 3500 C:\WINDOWS\system32\certcli.dll - ok
18:01:58.0562 3500 [ A371F11EF07653591C8DE26AFB13CE7F ] C:\WINDOWS\system32\es.dll
18:01:58.0562 3500 C:\WINDOWS\system32\es.dll - ok
18:01:58.0593 3500 [ A2A4912798F2BE706ABADD3D30800D16 ] C:\WINDOWS\system32\ersvc.dll
18:01:58.0593 3500 C:\WINDOWS\system32\ersvc.dll - ok
18:01:58.0625 3500 [ FCFE31FB75F8A6295B6B0AF87A626282 ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
18:01:58.0625 3500 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
18:01:58.0656 3500 [ 691B9B7C0CC1653732717D292D6B305D ] C:\Program Files\Java\jre6\bin\jqs.exe
18:01:58.0656 3500 C:\Program Files\Java\jre6\bin\jqs.exe - ok
18:01:58.0687 3500 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Java\jre6\bin\msvcr71.dll
18:01:58.0687 3500 C:\Program Files\Java\jre6\bin\msvcr71.dll - ok
18:01:58.0718 3500 [ 9BC4FF2D536A52D82DA901EF52E3169D ] C:\WINDOWS\system32\pdh.dll
18:01:58.0718 3500 C:\WINDOWS\system32\pdh.dll - ok
18:01:58.0750 3500 [ A93E852C8B3BC6AD7B2B96A55F753C79 ] C:\WINDOWS\system32\odbcbcp.dll
18:01:58.0750 3500 C:\WINDOWS\system32\odbcbcp.dll - ok
18:01:58.0781 3500 [ C12476DE1AFFB1BBA1A48A459CEB3D39 ] C:\Program Files\Common Files\LightScribe\LSSrvc.exe
18:01:58.0781 3500 C:\Program Files\Common Files\LightScribe\LSSrvc.exe - ok
18:01:58.0812 3500 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] C:\WINDOWS\system32\srvsvc.dll
18:01:58.0812 3500 C:\WINDOWS\system32\srvsvc.dll - ok
18:01:58.0859 3500 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Common Files\LightScribe\msvcr71.dll
18:01:58.0859 3500 C:\Program Files\Common Files\LightScribe\msvcr71.dll - ok
18:01:58.0890 3500 [ D905050080DB4CCC3EB09AD24DE6BD67 ] C:\WINDOWS\system32\netmsg.dll
18:01:58.0890 3500 C:\WINDOWS\system32\netmsg.dll - ok
18:01:58.0921 3500 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
18:01:58.0921 3500 C:\WINDOWS\system32\drivers\srv.sys - ok
18:01:58.0937 3500 [ 561FA2ABB31DFA8FAB762145F81667C2 ] C:\Program Files\Common Files\LightScribe\msvcp71.dll
18:01:58.0937 3500 C:\Program Files\Common Files\LightScribe\msvcp71.dll - ok
18:01:58.0984 3500 [ 11F714F85530A2BD134074DC30E99FCA ] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
18:01:58.0984 3500 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE - ok
18:01:59.0015 3500 [ CD78F171ACF966E4F83302C4192E881F ] C:\WINDOWS\system32\spoolss.dll
18:01:59.0015 3500 C:\WINDOWS\system32\spoolss.dll - ok
18:01:59.0046 3500 [ 32BAAEAEC3ED1536ED6EA387C4AA85A5 ] C:\WINDOWS\system32\localspl.dll
18:01:59.0046 3500 C:\WINDOWS\system32\localspl.dll - ok
18:01:59.0078 3500 [ EDB3D87983DA77A0A4CFA046C8BCE5CA ] C:\WINDOWS\system32\cnbjmon.dll
18:01:59.0078 3500 C:\WINDOWS\system32\cnbjmon.dll - ok
18:01:59.0109 3500 [ C52CE534397E1D3A442FB4C88A3CBE42 ] C:\WINDOWS\system32\msonpmon.dll
18:01:59.0109 3500 C:\WINDOWS\system32\msonpmon.dll - ok
18:01:59.0156 3500 [ 6513801A74D269801D21553D4AB13E50 ] C:\WINDOWS\system32\pdfcmon.dll
18:01:59.0156 3500 C:\WINDOWS\system32\pdfcmon.dll - ok
18:01:59.0187 3500 [ E2EB496B7A1CACF6550EF028B329893A ] C:\WINDOWS\system32\pjlmon.dll
18:01:59.0187 3500 C:\WINDOWS\system32\pjlmon.dll - ok
18:01:59.0203 3500 [ 2CC4E45B0EB4C48392CEC9C83B5B8E3B ] C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
18:01:59.0203 3500 C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe - ok
18:01:59.0234 3500 [ 519C77BC60B14AB6187C4D328105CD61 ] C:\WINDOWS\system32\tcpmon.dll
18:01:59.0234 3500 C:\WINDOWS\system32\tcpmon.dll - ok
18:01:59.0281 3500 [ 9DD7DCC47F1EAA3FBCC985C20AD71B64 ] C:\WINDOWS\system32\usbmon.dll
18:01:59.0281 3500 C:\WINDOWS\system32\usbmon.dll - ok
18:01:59.0312 3500 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
18:01:59.0312 3500 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
18:01:59.0343 3500 [ F348280907B38FDBDB3CEF55D456E149 ] C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
18:01:59.0343 3500 C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll - ok
18:01:59.0375 3500 [ 63694C307273062A2167AE4CE80730EF ] C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
18:01:59.0375 3500 C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe - ok
18:01:59.0406 3500 [ 1EC6A255B9B5AE8F53F0F3A41E66E5FD ] C:\WINDOWS\system32\win32spl.dll
18:01:59.0406 3500 C:\WINDOWS\system32\win32spl.dll - ok
18:01:59.0437 3500 [ 6E3248D3F8766502A51DF12F1F54BCE3 ] C:\WINDOWS\system32\netrap.dll
18:01:59.0437 3500 C:\WINDOWS\system32\netrap.dll - ok
18:01:59.0468 3500 [ F420C325956CA593679A8796065BFBB6 ] C:\WINDOWS\system32\inetpp.dll
18:01:59.0468 3500 C:\WINDOWS\system32\inetpp.dll - ok
18:01:59.0500 3500 [ 203D5ECB5CCDA683053CDA42DFF03573 ] C:\WINDOWS\system32\netfxperf.dll
18:01:59.0500 3500 C:\WINDOWS\system32\netfxperf.dll - ok
18:01:59.0531 3500 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
18:01:59.0531 3500 C:\WINDOWS\system32\mscoree.dll - ok
18:01:59.0578 3500 [ 58A14C45A5CD2528F10A889E7B0C3FC2 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll
18:01:59.0578 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll - ok
18:01:59.0609 3500 [ C5A9554406507AB2AB341B221D97519D ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
18:01:59.0609 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll - ok
18:01:59.0640 3500 [ 1C88CF5977C016A37BFAC1178DAA7822 ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
18:01:59.0640 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - ok
18:01:59.0671 3500 [ 4C39358EBDD2FFCD9132A30E1EC31E16 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
18:01:59.0671 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll - ok
18:01:59.0687 3500 [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
18:01:59.0687 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll - ok
18:01:59.0734 3500 [ 2E61C409474416CC78D66300F1BCB722 ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
18:01:59.0734 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll - ok
18:01:59.0765 3500 [ F1430F5D20F4BB71A003209C3DB3ADDF ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
18:01:59.0765 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll - ok
18:01:59.0796 3500 [ F3079C675F42E31F0706A358EA15A44A ] C:\WINDOWS\system32\query.dll
18:01:59.0796 3500 C:\WINDOWS\system32\query.dll - ok
18:01:59.0828 3500 [ 9C60310E59057F9A53B6323E48FBF75F ] C:\WINDOWS\system32\msdtcuiu.dll
18:01:59.0828 3500 C:\WINDOWS\system32\msdtcuiu.dll - ok
18:01:59.0875 3500 [ 6A69692019C17E2E761D4C972C466FC0 ] C:\WINDOWS\system32\mfc42u.dll
18:01:59.0875 3500 C:\WINDOWS\system32\mfc42u.dll - ok
18:01:59.0906 3500 [ 89EAAD7A96F8A89872DEAA6CFE3A3511 ] C:\WINDOWS\system32\msdtcprx.dll
18:01:59.0906 3500 C:\WINDOWS\system32\msdtcprx.dll - ok
18:01:59.0937 3500 [ E9113D2BAAE752340038024DAFC23535 ] C:\WINDOWS\system32\mtxclu.dll
18:01:59.0937 3500 C:\WINDOWS\system32\mtxclu.dll - ok
18:01:59.0953 3500 [ F0A0997640611EB605A122023FE47204 ] C:\WINDOWS\system32\clusapi.dll
18:01:59.0953 3500 C:\WINDOWS\system32\clusapi.dll - ok
18:01:59.0984 3500 [ B07780B0B2CF4F6456289679FE9DF368 ] C:\WINDOWS\system32\wsock32.dll
18:01:59.0984 3500 C:\WINDOWS\system32\wsock32.dll - ok
18:02:00.0031 3500 [ FBA94CD67E28DF2BDB4D6824A95FF9DB ] C:\WINDOWS\system32\resutils.dll
18:02:00.0031 3500 C:\WINDOWS\system32\resutils.dll - ok
18:02:00.0062 3500 [ D76D39056EF8B8C09BC544754448E48F ] C:\WINDOWS\system32\ipsecsvc.dll
18:02:00.0062 3500 C:\WINDOWS\system32\ipsecsvc.dll - ok
18:02:00.0093 3500 [ 44E2D9C2C7192467D4D0A8E03A621567 ] C:\WINDOWS\system32\oakley.dll
18:02:00.0093 3500 C:\WINDOWS\system32\oakley.dll - ok
18:02:00.0125 3500 [ 8D65C4D78E0D22E2655AFEB682656F15 ] C:\WINDOWS\system32\winipsec.dll
18:02:00.0125 3500 C:\WINDOWS\system32\winipsec.dll - ok
18:02:00.0171 3500 [ 753D254205E0A62100A050BD8B458D06 ] C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
18:02:00.0171 3500 C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe - ok
18:02:00.0187 3500 [ D92DBED30DBF45E7D2700596BB491B03 ] C:\WINDOWS\system32\pstorsvc.dll
18:02:00.0187 3500 C:\WINDOWS\system32\pstorsvc.dll - ok
18:02:00.0218 3500 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] C:\WINDOWS\system32\seclogon.dll
18:02:00.0218 3500 C:\WINDOWS\system32\seclogon.dll - ok
18:02:00.0250 3500 [ CAB80174DB12D06E4CEFCDAD6A8A2015 ] C:\PROGRA~1\MICROS~2\Office12\OLMAPI32.DLL
18:02:00.0250 3500 C:\PROGRA~1\MICROS~2\Office12\OLMAPI32.DLL - ok
18:02:00.0281 3500 [ 3D8593AA6CB1C610CCC4EE4A2079841C ] C:\WINDOWS\system32\psbase.dll
18:02:00.0281 3500 C:\WINDOWS\system32\psbase.dll - ok
18:02:00.0328 3500 [ A530B75C10C23C9AB28FDB6CE719E21F ] C:\WINDOWS\system32\sens.dll
18:02:00.0328 3500 C:\WINDOWS\system32\sens.dll - ok
18:02:00.0359 3500 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
18:02:00.0359 3500 C:\WINDOWS\system32\dssenh.dll - ok
18:02:00.0390 3500 [ 7043D485AEAE435312659FF1461F1491 ] C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSO.DLL
18:02:00.0390 3500 C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSO.DLL - ok
18:02:00.0421 3500 [ EA396139541706B4B433641D62EA53CE ] C:\Program Files\Skype\Updater\Updater.exe
18:02:00.0421 3500 C:\Program Files\Skype\Updater\Updater.exe - ok
18:02:00.0453 3500 [ D3865A0491AA66E595B6A276E4BDBE05 ] C:\Program Files\Fighters\SPAMfighter\sfus.exe
18:02:00.0453 3500 C:\Program Files\Fighters\SPAMfighter\sfus.exe - ok
18:02:00.0484 3500 [ 35B91147124F64AC8081A2EDB9EA4DEE ] C:\WINDOWS\system32\srsvc.dll
18:02:00.0484 3500 C:\WINDOWS\system32\srsvc.dll - ok
18:02:00.0515 3500 [ A7E21E907C39FAB021CED41296FC8019 ] C:\Program Files\Fighters\FighterSuiteService.exe
18:02:00.0515 3500 C:\Program Files\Fighters\FighterSuiteService.exe - ok
18:02:00.0546 3500 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] C:\WINDOWS\system32\wiaservc.dll
18:02:00.0546 3500 C:\WINDOWS\system32\wiaservc.dll - ok
18:02:00.0593 3500 [ 4F45453DF86912A09E757859FE18A26C ] C:\WINDOWS\system32\mscms.dll
18:02:00.0593 3500 C:\WINDOWS\system32\mscms.dll - ok
18:02:00.0625 3500 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] C:\WINDOWS\system32\termsrv.dll
18:02:00.0625 3500 C:\WINDOWS\system32\termsrv.dll - ok
18:02:00.0656 3500 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] C:\WINDOWS\system32\trkwks.dll
18:02:00.0656 3500 C:\WINDOWS\system32\trkwks.dll - ok
18:02:00.0687 3500 [ E488332126E3B1182D2B8A0C35408EC6 ] C:\WINDOWS\system32\wbem\wmisvc.dll
18:02:00.0687 3500 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
18:02:00.0703 3500 [ 72C1FF5AE0330CCF9C35BCBBAD267F3B ] C:\WINDOWS\system32\icaapi.dll
18:02:00.0703 3500 C:\WINDOWS\system32\icaapi.dll - ok
18:02:00.0750 3500 [ 1635D157B5DAEADAF323B5E9FB6FD5E2 ] C:\WINDOWS\system32\vssapi.dll
18:02:00.0750 3500 C:\WINDOWS\system32\vssapi.dll - ok
18:02:00.0781 3500 [ 89E739BBA5F636297EA5B5F811189E06 ] C:\WINDOWS\system32\browser.dll
18:02:00.0781 3500 C:\WINDOWS\system32\browser.dll - ok
18:02:00.0812 3500 [ 6E0F6ABF57F2E3A73456450A1501D9B3 ] C:\WINDOWS\system32\mstlsapi.dll
18:02:00.0812 3500 C:\WINDOWS\system32\mstlsapi.dll - ok
18:02:00.0843 3500 [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\WINDOWS\system32\wuaueng.dll
18:02:00.0843 3500 C:\WINDOWS\system32\wuaueng.dll - ok
18:02:00.0890 3500 [ C1364564800EE9784192145324A23308 ] C:\WINDOWS\system32\wuauserv.dll
18:02:00.0890 3500 C:\WINDOWS\system32\wuauserv.dll - ok
18:02:00.0921 3500 [ F66D2E3B8CA33F29D63F27A5676FE0C9 ] C:\WINDOWS\system32\rdpwsx.dll
18:02:00.0921 3500 C:\WINDOWS\system32\rdpwsx.dll - ok
18:02:00.0953 3500 [ 3A3C1A6E89530C0E85681C723BB69DEE ] C:\WINDOWS\system32\mspatcha.dll
18:02:00.0953 3500 C:\WINDOWS\system32\mspatcha.dll - ok
18:02:00.0968 3500 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] C:\WINDOWS\system32\wscsvc.dll
18:02:00.0968 3500 C:\WINDOWS\system32\wscsvc.dll - ok
18:02:01.0000 3500 [ 48D065081DC8666764A903952AD6FB80 ] C:\WINDOWS\system32\comsvcs.dll
18:02:01.0000 3500 C:\WINDOWS\system32\comsvcs.dll - ok
18:02:01.0046 3500 [ 0892B57DC527FCED9FB02F2E6343C5FF ] C:\WINDOWS\system32\colbact.dll
18:02:01.0046 3500 C:\WINDOWS\system32\colbact.dll - ok
18:02:01.0078 3500 [ F58FACA9621D2DB01BD0927D9A0A208E ] C:\WINDOWS\system32\ipnathlp.dll
18:02:01.0078 3500 C:\WINDOWS\system32\ipnathlp.dll - ok
18:02:01.0109 3500 [ 3458EDA96E30FBD0477A2800D3FB1909 ] C:\WINDOWS\system32\wups.dll
18:02:01.0109 3500 C:\WINDOWS\system32\wups.dll - ok
18:02:01.0140 3500 [ C2D026284A77D77360578C6B9F09B46B ] C:\WINDOWS\system32\perfdisk.dll
18:02:01.0140 3500 C:\WINDOWS\system32\perfdisk.dll - ok
18:02:01.0187 3500 [ BDC0C99E472176C8C2C853A68ADC5073 ] C:\WINDOWS\system32\wups2.dll
18:02:01.0187 3500 C:\WINDOWS\system32\wups2.dll - ok
18:02:01.0203 3500 [ 15BC40DEDF4E5A0DDB5D3623B9483DDA ] C:\WINDOWS\system32\wbem\wbemcore.dll
18:02:01.0203 3500 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
18:02:01.0234 3500 [ 44DF2D952818933E7864093DBA2FEF6D ] C:\WINDOWS\system32\perfnet.dll
18:02:01.0234 3500 C:\WINDOWS\system32\perfnet.dll - ok
18:02:01.0265 3500 [ BE47A0CA98B7192B59DC27A843C9CEA1 ] C:\WINDOWS\system32\wbem\esscli.dll
18:02:01.0265 3500 C:\WINDOWS\system32\wbem\esscli.dll - ok
18:02:01.0296 3500 [ 2AF3814E9E15B6BB687B3361A9B4B5EC ] C:\WINDOWS\system32\perfos.dll
18:02:01.0296 3500 C:\WINDOWS\system32\perfos.dll - ok
18:02:01.0343 3500 [ 27FBC2D5736C4C6F09E94C8D587D5276 ] C:\WINDOWS\system32\pschdprf.dll
18:02:01.0343 3500 C:\WINDOWS\system32\pschdprf.dll - ok
18:02:01.0375 3500 [ FA898CA2FB6FBE4A46F9D27971B3E1B5 ] C:\WINDOWS\system32\wbem\fastprox.dll
18:02:01.0375 3500 C:\WINDOWS\system32\wbem\fastprox.dll - ok
18:02:01.0406 3500 [ A095ACBA4257CFF80D7EF00E82BBE7A4 ] C:\WINDOWS\system32\traffic.dll
18:02:01.0406 3500 C:\WINDOWS\system32\traffic.dll - ok
18:02:01.0437 3500 [ 1DFB34F7D2D31B33837C06F2F5241DCE ] C:\WINDOWS\system32\rasctrs.dll
18:02:01.0437 3500 C:\WINDOWS\system32\rasctrs.dll - ok
18:02:01.0453 3500 [ FCB47A0198599EF5B19CE6B685216699 ] C:\WINDOWS\system32\rsvpperf.dll
18:02:01.0453 3500 C:\WINDOWS\system32\rsvpperf.dll - ok
18:02:01.0500 3500 [ A4E77CC9730B7C3E67FA57915E077AFF ] C:\WINDOWS\system32\tapiperf.dll
18:02:01.0500 3500 C:\WINDOWS\system32\tapiperf.dll - ok
18:02:01.0531 3500 [ 8E70589EC4DDE3B22C5EE4A527BA0865 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
18:02:01.0531 3500 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
18:02:01.0562 3500 [ 1682285F7C0934C764A0EBBC568153CA ] C:\WINDOWS\system32\perfctrs.dll
18:02:01.0562 3500 C:\WINDOWS\system32\perfctrs.dll - ok
18:02:01.0593 3500 [ 8A36A2FF9C36BCDDCBD8F7C0C4DC0083 ] C:\WINDOWS\system32\wbem\wmiutils.dll
18:02:01.0593 3500 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
18:02:01.0640 3500 [ 83848520D0A1E55D821E0BBF87D3137A ] C:\WINDOWS\system32\perfts.dll
18:02:01.0640 3500 C:\WINDOWS\system32\perfts.dll - ok
18:02:01.0671 3500 [ DFA75A66069B12B329D434D06F2199D5 ] C:\WINDOWS\system32\utildll.dll
18:02:01.0671 3500 C:\WINDOWS\system32\utildll.dll - ok
18:02:01.0703 3500 [ E8A0384A25ECA1188E6F19F548947B53 ] C:\WINDOWS\system32\wbem\repdrvfs.dll
18:02:01.0703 3500 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
18:02:01.0718 3500 [ FC89DF37457299100B77452833DB121F ] C:\WINDOWS\system32\wbem\wmiaprpl.dll
18:02:01.0718 3500 C:\WINDOWS\system32\wbem\wmiaprpl.dll - ok
18:02:01.0750 3500 [ 4C501DD03666A9427DFEE53C3BD13900 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
18:02:01.0750 3500 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
18:02:01.0796 3500 [ 2E0B0A051FFAA86E358465BB0880D453 ] C:\WINDOWS\system32\wuauclt.exe
18:02:01.0796 3500 C:\WINDOWS\system32\wuauclt.exe - ok
18:02:01.0828 3500 [ 2FDB32EF0E2CFF15ECC751BD61235398 ] C:\WINDOWS\system32\wbem\wbemess.dll
18:02:01.0828 3500 C:\WINDOWS\system32\wbem\wbemess.dll - ok
18:02:01.0859 3500 [ 4B396BC2C219025D147186499D602969 ] C:\WINDOWS\system32\loadperf.dll
18:02:01.0859 3500 C:\WINDOWS\system32\loadperf.dll - ok
18:02:01.0890 3500 [ 1A617835452EEE5060976C9B9F5FE635 ] C:\WINDOWS\system32\wuapi.dll
18:02:01.0890 3500 C:\WINDOWS\system32\wuapi.dll - ok
18:02:01.0937 3500 [ C97254C95FF161F9EAEBE5CB0DFDEC3C ] C:\WINDOWS\system32\wbem\ncprov.dll
18:02:01.0937 3500 C:\WINDOWS\system32\wbem\ncprov.dll - ok
18:02:01.0953 3500 [ 278A14BEDEF58687EAF8BEC056A78D8B ] C:\WINDOWS\system32\wscntfy.exe
18:02:01.0953 3500 C:\WINDOWS\system32\wscntfy.exe - ok
18:02:01.0984 3500 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] C:\WINDOWS\system32\qmgr.dll
18:02:01.0984 3500 C:\WINDOWS\system32\qmgr.dll - ok
18:02:02.0015 3500 [ C2546CD7A398476F9DF5614B2AE160E8 ] C:\WINDOWS\system32\tapisrv.dll
18:02:02.0015 3500 C:\WINDOWS\system32\tapisrv.dll - ok
18:02:02.0062 3500 [ 332D5439C89E9FA475EDFB69B02E1975 ] C:\WINDOWS\system32\shfolder.dll
18:02:02.0062 3500 C:\WINDOWS\system32\shfolder.dll - ok
18:02:02.0093 3500 [ DC02DF6BBCC74BC8022807B968BD24BC ] C:\WINDOWS\system32\wbem\wbemcons.dll
18:02:02.0093 3500 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
18:02:02.0125 3500 [ 798A9E6828997EEF4517ADA8A2259831 ] C:\WINDOWS\system32\wbem\wmiprvse.exe
18:02:02.0125 3500 C:\WINDOWS\system32\wbem\wmiprvse.exe - ok
18:02:02.0156 3500 [ D57554C664B64604BD1EE13EA2C07E77 ] C:\WINDOWS\system32\rasmans.dll
18:02:02.0156 3500 C:\WINDOWS\system32\rasmans.dll - ok
18:02:02.0187 3500 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] C:\WINDOWS\system32\wbem\wmiapsrv.exe
18:02:02.0187 3500 C:\WINDOWS\system32\wbem\wmiapsrv.exe - ok
18:02:02.0218 3500 [ 8DBB957A4E5DCA82F90C5F8A14BC789D ] C:\WINDOWS\system32\netcfgx.dll
18:02:02.0218 3500 C:\WINDOWS\system32\netcfgx.dll - ok
18:02:02.0250 3500 [ F6C1AD173AC2F8D4CDADB4CA417751EE ] C:\WINDOWS\system32\wbem\wmiapres.dll
18:02:02.0250 3500 C:\WINDOWS\system32\wbem\wmiapres.dll - ok
18:02:02.0281 3500 [ 08871CA1F57BE4DAD214324534729DA9 ] C:\WINDOWS\system32\qmgrprxy.dll
18:02:02.0281 3500 C:\WINDOWS\system32\qmgrprxy.dll - ok
18:02:02.0312 3500 [ EFEC5E7E5FE57957F9592A1500762E02 ] C:\WINDOWS\system32\rastapi.dll
18:02:02.0312 3500 C:\WINDOWS\system32\rastapi.dll - ok
18:02:02.0343 3500 [ CE21D96724212D72D8D8406FD232072F ] C:\WINDOWS\system32\unimdm.tsp
18:02:02.0343 3500 C:\WINDOWS\system32\unimdm.tsp - ok
18:02:02.0390 3500 [ 06C93A33555CF66FA5618125658B7594 ] C:\WINDOWS\system32\uniplat.dll
18:02:02.0390 3500 C:\WINDOWS\system32\uniplat.dll - ok
18:02:02.0421 3500 [ 88842DE939A827577BF24243699AC80A ] C:\WINDOWS\system32\alg.exe
18:02:02.0421 3500 C:\WINDOWS\system32\alg.exe - ok
18:02:02.0453 3500 [ ECCAE65799D06FB8FC44B5B4A6B66E5D ] C:\WINDOWS\system32\licwmi.dll
18:02:02.0453 3500 C:\WINDOWS\system32\licwmi.dll - ok
18:02:02.0468 3500 [ C3C4E2BDE357D77A128CE77C7E67E76A ] C:\WINDOWS\system32\wbem\framedyn.dll
18:02:02.0468 3500 C:\WINDOWS\system32\wbem\framedyn.dll - ok
18:02:02.0515 3500 [ C3E578B5FA76BAC26C078EE961EF5721 ] C:\WINDOWS\system32\licdll.dll
18:02:02.0515 3500 C:\WINDOWS\system32\licdll.dll - ok
18:02:02.0546 3500 [ 4EB458471415ADA85DE62D03E770D0CD ] C:\WINDOWS\system32\kmddsp.tsp
18:02:02.0546 3500 C:\WINDOWS\system32\kmddsp.tsp - ok
18:02:02.0578 3500 [ 6FD0456A046649399FEF9110FFFB0E79 ] C:\WINDOWS\system32\ndptsp.tsp
18:02:02.0578 3500 C:\WINDOWS\system32\ndptsp.tsp - ok
18:02:02.0625 3500 [ 67FF1B2F19BED51A335BBC844A32EF46 ] C:\WINDOWS\system32\h323.tsp
18:02:02.0625 3500 C:\WINDOWS\system32\h323.tsp - ok
18:02:02.0656 3500 [ 3382CA270103BBDA349CE07BDBA60DA7 ] C:\WINDOWS\system32\ipconf.tsp
18:02:02.0656 3500 C:\WINDOWS\system32\ipconf.tsp - ok
18:02:02.0687 3500 [ 508D2C123D48C6A63DAE370FFC6770A8 ] C:\WINDOWS\system32\hidphone.tsp
18:02:02.0687 3500 C:\WINDOWS\system32\hidphone.tsp - ok
18:02:02.0718 3500 [ FFB0A2D2B73A64979CD29C15B3B0A9D5 ] C:\WINDOWS\system32\hid.dll
18:02:02.0718 3500 C:\WINDOWS\system32\hid.dll - ok
18:02:02.0734 3500 [ 4D252655B9FBC4002447EEBC1751B5D9 ] C:\WINDOWS\system32\rasppp.dll
18:02:02.0734 3500 C:\WINDOWS\system32\rasppp.dll - ok
18:02:02.0781 3500 [ E150AAE0FD5FDBE8DCA75AE23DE24941 ] C:\WINDOWS\system32\wbem\wmiprov.dll
18:02:02.0781 3500 C:\WINDOWS\system32\wbem\wmiprov.dll - ok
18:02:02.0812 3500 [ D63EAABBB757EB417EDDC8CDB5598704 ] C:\WINDOWS\system32\ntlsapi.dll
18:02:02.0812 3500 C:\WINDOWS\system32\ntlsapi.dll - ok
18:02:02.0843 3500 [ DEDF090BB17D77B12A7465486AA7F91C ] C:\WINDOWS\system32\rasqec.dll
18:02:02.0843 3500 C:\WINDOWS\system32\rasqec.dll - ok
18:02:02.0875 3500 [ 8296BF7D9078D292DA1F738AC2588189 ] C:\Program Files\Fighters\SPAMfighter\sfse_update.exe
18:02:02.0875 3500 C:\Program Files\Fighters\SPAMfighter\sfse_update.exe - ok
18:02:02.0921 3500 [ CEDF5E5CCECBAA9D8385C8BD57860935 ] C:\Program Files\Fighters\SPAMfighter\sfsg.dll
18:02:02.0921 3500 C:\Program Files\Fighters\SPAMfighter\sfsg.dll - ok
18:02:02.0953 3500 [ 1B98C954C97BE3C4273D92073FF8FD0C ] C:\Program Files\Fighters\SPAMfighter\sfse.dll
18:02:02.0953 3500 C:\Program Files\Fighters\SPAMfighter\sfse.dll - ok
18:02:02.0968 3500 [ C56B6D0402371CF3700EB322EF3AAF61 ] C:\WINDOWS\system32\drivers\tdtcp.sys
18:02:02.0968 3500 C:\WINDOWS\system32\drivers\tdtcp.sys - ok
18:02:03.0000 3500 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] C:\WINDOWS\system32\drivers\rdpwd.sys
18:02:03.0000 3500 C:\WINDOWS\system32\drivers\rdpwd.sys - ok
18:02:03.0031 3500 [ 15805123F863DC8E550155279E40FB77 ] C:\Program Files\Java\jre6\bin\awt.dll
18:02:03.0031 3500 C:\Program Files\Java\jre6\bin\awt.dll - ok
18:02:03.0078 3500 [ D1D05E408030CE682392662933BCA671 ] C:\Program Files\Java\jre6\bin\client\jvm.dll
18:02:03.0078 3500 C:\Program Files\Java\jre6\bin\client\jvm.dll - ok
18:02:03.0109 3500 [ AAC3E45B573A9199C6D2E4CA6D5980CE ] C:\Program Files\Java\jre6\bin\dcpr.dll
18:02:03.0109 3500 C:\Program Files\Java\jre6\bin\dcpr.dll - ok
18:02:03.0140 3500 [ 20BBDEC22713040AF3A8D6DFE61CFA54 ] C:\Program Files\Java\jre6\bin\deploy.dll
18:02:03.0140 3500 C:\Program Files\Java\jre6\bin\deploy.dll - ok
18:02:03.0171 3500 [ 52B53CD458AE8424CDD4B587623680E1 ] C:\Program Files\Java\jre6\bin\fontmanager.dll
18:02:03.0171 3500 C:\Program Files\Java\jre6\bin\fontmanager.dll - ok
18:02:03.0218 3500 [ 350D38B367D413F65EE0BABD3966D9BC ] C:\Program Files\Java\jre6\bin\hpi.dll
18:02:03.0218 3500 C:\Program Files\Java\jre6\bin\hpi.dll - ok
18:02:03.0234 3500 [ 6651729ABEC42DAB2280392019AB2A77 ] C:\Program Files\Java\jre6\bin\java.dll
18:02:03.0234 3500 C:\Program Files\Java\jre6\bin\java.dll - ok
18:02:03.0265 3500 [ A109C40C04D7EE2D78DFC2268D4ED57F ] C:\Program Files\Java\jre6\bin\javaw.exe
18:02:03.0265 3500 C:\Program Files\Java\jre6\bin\javaw.exe - ok
18:02:03.0296 3500 [ B9EAE52AD69546EFDBA1EA3E00C7288B ] C:\Program Files\Java\jre6\bin\jp2native.dll
18:02:03.0296 3500 C:\Program Files\Java\jre6\bin\jp2native.dll - ok
18:02:03.0328 3500 [ EE7C6F2BDE716518C67FCD8651C144AA ] C:\Program Files\Java\jre6\bin\jpeg.dll
18:02:03.0328 3500 C:\Program Files\Java\jre6\bin\jpeg.dll - ok
18:02:03.0375 3500 [ 3202371F4C4E74DFFA17D34FC48AE0CF ] C:\Program Files\Java\jre6\bin\net.dll
18:02:03.0375 3500 C:\Program Files\Java\jre6\bin\net.dll - ok
18:02:03.0406 3500 [ 6B65A0FC01857D928054906AC6699269 ] C:\Program Files\Java\jre6\bin\nio.dll
18:02:03.0406 3500 C:\Program Files\Java\jre6\bin\nio.dll - ok
18:02:03.0437 3500 [ 7940B8E971752702169B3C7916A2405B ] C:\Program Files\Java\jre6\bin\regutils.dll
18:02:03.0437 3500 C:\Program Files\Java\jre6\bin\regutils.dll - ok
18:02:03.0468 3500 [ 1EFA97F590F0DC0726146B4AB81C9339 ] C:\Program Files\Java\jre6\bin\verify.dll
18:02:03.0468 3500 C:\Program Files\Java\jre6\bin\verify.dll - ok
18:02:03.0484 3500 [ C9A8F1F08D8CA4E538CFA937B13423F7 ] C:\Program Files\Java\jre6\bin\zip.dll
18:02:03.0484 3500 C:\Program Files\Java\jre6\bin\zip.dll - ok
18:02:03.0531 3500 [ D2033210D4DA9E9CE7670DFF45D7101B ] C:\DOCUME~1\Owner\LOCALS~1\temp\893E38BE-C6B3-4D2D-9EC1-CD547E3B4253.exe
18:02:03.0531 3500 C:\DOCUME~1\Owner\LOCALS~1\temp\893E38BE-C6B3-4D2D-9EC1-CD547E3B4253.exe - ok
18:02:03.0562 3500 [ 269A0930085C63E0464C85F3FA1D2DBA ] C:\WINDOWS\system32\msctf.dll
18:02:03.0562 3500 C:\WINDOWS\system32\msctf.dll - ok
18:02:03.0593 3500 [ D65C288E5F9B0C557F685CECC0B1B1E6 ] C:\WINDOWS\system32\msutb.dll
18:02:03.0593 3500 C:\WINDOWS\system32\msutb.dll - ok
18:02:03.0625 3500 [ 7FDE9FC15765E02B23E1756930165AD1 ] C:\WINDOWS\system32\linkinfo.dll
18:02:03.0625 3500 C:\WINDOWS\system32\linkinfo.dll - ok
18:02:03.0671 3500 [ 5D23A83D4B6324EC147F17334E057493 ] C:\WINDOWS\system32\ntshrui.dll
18:02:03.0671 3500 C:\WINDOWS\system32\ntshrui.dll - ok
18:02:03.0703 3500 [ F49821B3D4392CF4E9620FF417C6C149 ] C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll
18:02:03.0703 3500 C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll - ok
18:02:03.0718 3500 [ 129E4E748829A3D027787E6740EE351D ] C:\WINDOWS\system32\mlang.dll
18:02:03.0718 3500 C:\WINDOWS\system32\mlang.dll - ok
18:02:03.0750 3500 [ 6B4377A3DA487722270E5DD2A20DDDF2 ] C:\WINDOWS\system32\verclsid.exe
18:02:03.0750 3500 C:\WINDOWS\system32\verclsid.exe - ok
18:02:03.0781 3500 [ E936A55A8999F168FADFD1F0BFA6AADA ] C:\Program Files\TP-LINK\TWCU\TWCU.exe
18:02:03.0781 3500 C:\Program Files\TP-LINK\TWCU\TWCU.exe - ok
18:02:03.0828 3500 [ 0E34B7BB1FCF22BCC1E394D16F9E992B ] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
18:02:03.0828 3500 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe - ok
18:02:03.0859 3500 [ 76A956F1206460F14A674E7DF62867E5 ] C:\WINDOWS\system32\wcapi.dll
18:02:03.0859 3500 C:\WINDOWS\system32\wcapi.dll - ok
18:02:03.0890 3500 [ 2E64B0EAA18EF6375C713FC0038DCF8B ] C:\WINDOWS\system32\wgapi.dll
18:02:03.0890 3500 C:\WINDOWS\system32\wgapi.dll - ok
18:02:03.0921 3500 [ AB973644B5CD45173915715782BBA273 ] C:\WINDOWS\system32\VTTimer.exe
18:02:03.0921 3500 C:\WINDOWS\system32\VTTimer.exe - ok
18:02:03.0968 3500 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\94078181.sys
18:02:03.0968 3500 C:\WINDOWS\system32\drivers\94078181.sys - ok
18:02:03.0984 3500 [ AEC67D05840ED618DAF8A19BF8E80BAA ] C:\WINDOWS\system32\upnp.dll
18:02:03.0984 3500 C:\WINDOWS\system32\upnp.dll - ok
18:02:04.0015 3500 [ 55C3D3D15782ED6A92BDDEC0AE48E9E9 ] C:\WINDOWS\system32\ssdpapi.dll
18:02:04.0015 3500 C:\WINDOWS\system32\ssdpapi.dll - ok
18:02:04.0046 3500 [ F80A415EF82CD06FFAF0D971528EAD38 ] C:\WINDOWS\system32\drivers\http.sys
18:02:04.0046 3500 C:\WINDOWS\system32\drivers\http.sys - ok
18:02:04.0078 3500 [ D254BB1B0A44577BBD35B31011F95FD8 ] C:\WINDOWS\system32\VTTrayp.exe
18:02:04.0078 3500 C:\WINDOWS\system32\VTTrayp.exe - ok
18:02:04.0125 3500 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] C:\WINDOWS\system32\ssdpsrv.dll
18:02:04.0125 3500 C:\WINDOWS\system32\ssdpsrv.dll - ok
18:02:04.0156 3500 [ D53FC050CC3DA83A7A7A1732E1C0C756 ] C:\WINDOWS\system32\wbem\mofd.dll
18:02:04.0156 3500 C:\WINDOWS\system32\wbem\mofd.dll - ok
18:02:04.0187 3500 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
18:02:04.0187 3500 C:\WINDOWS\system32\webcheck.dll - ok
18:02:04.0218 3500 [ B68B20BC561C8ECF672DF627A4D8DC8F ] C:\WINDOWS\system32\stobject.dll
18:02:04.0218 3500 C:\WINDOWS\system32\stobject.dll - ok
18:02:04.0234 3500 [ E868299439DCBFD5117A2FEB90217C84 ] C:\WINDOWS\system32\batmeter.dll
18:02:04.0234 3500 C:\WINDOWS\system32\batmeter.dll - ok
18:02:04.0281 3500 [ 045E228F71C31901084B64BE59093499 ] C:\WINDOWS\system32\WPDShServiceObj.dll
18:02:04.0281 3500 C:\WINDOWS\system32\WPDShServiceObj.dll - ok
18:02:04.0312 3500 [ 66AA43F07DEE7FE8F22D955E06A1FB0B ] C:\Program Files\FileZilla FTP Client\fzshellext.dll
18:02:04.0312 3500 C:\Program Files\FileZilla FTP Client\fzshellext.dll - ok
18:02:04.0343 3500 [ DB6E6AE321C4B67EBC1B7647068A425B ] C:\Program Files\Fighters\SPAMfighter\sfagent.exe
18:02:04.0343 3500 C:\Program Files\Fighters\SPAMfighter\sfagent.exe - ok
18:02:04.0375 3500 [ 5BA1486116ECE4D10C1B6EA4C6086B5F ] C:\WINDOWS\system32\mydocs.dll
18:02:04.0375 3500 C:\WINDOWS\system32\mydocs.dll - ok
18:02:04.0421 3500 [ 42EFBB8A2CD1B09694CE0D7FA414259C ] C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
18:02:04.0421 3500 C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll - ok
18:02:04.0453 3500 [ 575D55BCF01179D6A74BB0565E10928F ] C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll
18:02:04.0453 3500 C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll - ok
18:02:04.0468 3500 [ 16C195EBC0A3EC35C48D0C2D9A346BAB ] C:\WINDOWS\system32\olepro32.dll
18:02:04.0468 3500 C:\WINDOWS\system32\olepro32.dll - ok
18:02:04.0500 3500 [ 0E8CB0A757E27B87F4DB45AC031BF02E ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
18:02:04.0500 3500 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll - ok
18:02:04.0546 3500 [ 6FC33C831261A009842421CFE36058A5 ] C:\WINDOWS\system32\VTDisply.dll
18:02:04.0546 3500 C:\WINDOWS\system32\VTDisply.dll - ok
18:02:04.0578 3500 [ A614F4D7B13C64D4217E9CB62960FAC5 ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll
18:02:04.0578 3500 C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll - ok
18:02:04.0609 3500 [ BDF6CD737AEC9B0C6DD2497247CA5981 ] C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.NLR
18:02:04.0609 3500 C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.NLR - ok
18:02:04.0640 3500 [ 79FB7EAFBEEACBF0CC0D3F6776C1D034 ] C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR
18:02:04.0640 3500 C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR - ok
18:02:04.0671 3500 [ F7B93AAFAD33B2320954C17E26C8D361 ] C:\WINDOWS\system32\imapi.exe
18:02:04.0671 3500 C:\WINDOWS\system32\imapi.exe - ok
18:02:04.0718 3500 [ F7D68D8E70EA376713A39395664793CA ] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
18:02:04.0718 3500 C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe - ok
18:02:04.0734 3500 [ 22358578CB321F3325496A3723029409 ] C:\WINDOWS\system32\PortableDeviceTypes.dll
18:02:04.0734 3500 C:\WINDOWS\system32\PortableDeviceTypes.dll - ok
18:02:04.0765 3500 [ F35A584E947A5B401FEB0FE01DB4A0D7 ] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\MFC71.dll
18:02:04.0765 3500 C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\MFC71.dll - ok
18:02:04.0796 3500 [ 9D45B2201D0ECF9F42136C7B99DEB8B2 ] C:\WINDOWS\system32\PortableDeviceApi.dll
18:02:04.0796 3500 C:\WINDOWS\system32\PortableDeviceApi.dll - ok
18:02:04.0843 3500 [ B1D8BFCC119D3AEF85CBAF07A6000A2E ] C:\Program Files\TP-LINK\TWCU\oemres.dll
18:02:04.0843 3500 C:\Program Files\TP-LINK\TWCU\oemres.dll - ok
18:02:04.0875 3500 [ EDF5A23800CC767A5436C98200CE2D34 ] C:\Program Files\Fighters\SPAMfighter\core.dll
18:02:04.0875 3500 C:\Program Files\Fighters\SPAMfighter\core.dll - ok
18:02:04.0906 3500 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\msvcr71.dll
18:02:04.0906 3500 C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\msvcr71.dll - ok
18:02:04.0937 3500 [ 093C51A9C2F5A52FDF25254D9E2782E2 ] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
18:02:04.0937 3500 C:\Program Files\NVIDIA Corporation\nView\nwiz.exe - ok
18:02:04.0968 3500 [ E733B4D818946452664122F97C136906 ] C:\Program Files\Fighters\SPAMfighter\lazymail.dll
18:02:04.0968 3500 C:\Program Files\Fighters\SPAMfighter\lazymail.dll - ok
18:02:05.0000 3500 [ E1D77E6C3E2F5887DF17CDC907D8897D ] C:\Program Files\NVIDIA Corporation\nView\nView.dll
18:02:05.0000 3500 C:\Program Files\NVIDIA Corporation\nView\nView.dll - ok
18:02:05.0031 3500 [ CD5BC51F0CA7CBB05EDEF92DF035278A ] C:\WINDOWS\system32\VTGamma2.dll
18:02:05.0031 3500 C:\WINDOWS\system32\VTGamma2.dll - ok
18:02:05.0062 3500 [ 33FC9AB5D74633F257B879B401F70BBE ] C:\WINDOWS\system32\rundll32.exe
18:02:05.0062 3500 C:\WINDOWS\system32\rundll32.exe - ok
18:02:05.0093 3500 [ EB75522B353F5C141B1B1F1C5940E9DB ] C:\WINDOWS\system32\devenum.dll
18:02:05.0093 3500 C:\WINDOWS\system32\devenum.dll - ok
18:02:05.0140 3500 [ F8D176DB5B14AED7C9B25E0640226BD1 ] C:\WINDOWS\system32\unicows.dll
18:02:05.0140 3500 C:\WINDOWS\system32\unicows.dll - ok
18:02:05.0171 3500 [ 6005EEBC5A1D693EEF382B2ECEDB3700 ] C:\WINDOWS\system32\nvmctray.dll
18:02:05.0171 3500 C:\WINDOWS\system32\nvmctray.dll - ok
18:02:05.0203 3500 [ B63E5C7807334A3A8F731062F15462CC ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
18:02:05.0203 3500 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok
18:02:05.0218 3500 [ 7D770F6FD01B8478F61287BEEEBDBF8E ] C:\WINDOWS\system32\oledlg.dll
18:02:05.0218 3500 C:\WINDOWS\system32\oledlg.dll - ok
18:02:05.0250 3500 [ 68B8A401F0CF05223529D8C92323D35C ] C:\WINDOWS\system32\nvcpl.dll
18:02:05.0250 3500 C:\WINDOWS\system32\nvcpl.dll - ok
18:02:05.0296 3500 [ 3AEDA2898ED4A0EDF6A2626AB6EFD26F ] C:\WINDOWS\system32\avicap32.dll
18:02:05.0296 3500 C:\WINDOWS\system32\avicap32.dll - ok
18:02:05.0328 3500 [ 9B613297C3E040ABC73314C44F8A14E2 ] C:\WINDOWS\system32\msvfw32.dll
18:02:05.0328 3500 C:\WINDOWS\system32\msvfw32.dll - ok
18:02:05.0359 3500 [ D3064968439A555CE8069552BDF1FF0C ] C:\WINDOWS\system32\msdmo.dll
18:02:05.0359 3500 C:\WINDOWS\system32\msdmo.dll - ok
18:02:05.0390 3500 [ D5D5EA09EE061AFE1857B8EE2BD451DC ] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
18:02:05.0390 3500 C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe - ok
18:02:05.0437 3500 [ 71C90638FBA4181AC95303B359DF7376 ] C:\WINDOWS\system32\VTInfo2.dll
18:02:05.0437 3500 C:\WINDOWS\system32\VTInfo2.dll - ok
18:02:05.0468 3500 [ 35AC4B63CBB9FB6B4472913E9948B517 ] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
18:02:05.0468 3500 C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe - ok
18:02:05.0484 3500 [ 2120851EF566B92B6A5A5DC422964468 ] C:\Program Files\NVIDIA Corporation\nView\NVWRSCS.dll
18:02:05.0484 3500 C:\Program Files\NVIDIA Corporation\nView\NVWRSCS.dll - ok
18:02:05.0515 3500 [ F2C8E35CBE3DA4330F2613318436A68C ] C:\WINDOWS\system32\VTovrlay.dll
18:02:05.0515 3500 C:\WINDOWS\system32\VTovrlay.dll - ok
18:02:05.0546 3500 [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
18:02:05.0546 3500 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll - ok
18:02:05.0593 3500 [ 7E1B0C85B7347D9391FE60F6DADFDDF0 ] C:\Program Files\Microsoft Security Client\msseces.exe
18:02:05.0593 3500 C:\Program Files\Microsoft Security Client\msseces.exe - ok
18:02:05.0625 3500 [ DE0B89579462C30C9E9861870E97052C ] C:\Program Files\Fighters\Tray\FightersTray.exe
18:02:05.0625 3500 C:\Program Files\Fighters\Tray\FightersTray.exe - ok
18:02:05.0656 3500 [ 5D999BF519415D1C8EE0B97FF6A254DB ] C:\Program Files\Microsoft Office\Office12\MSOHEVI.DLL
18:02:05.0656 3500 C:\Program Files\Microsoft Office\Office12\MSOHEVI.DLL - ok
18:02:05.0687 3500 [ B276A487709B53F4E646F0AA796B9398 ] C:\WINDOWS\system32\nvwddi.dll
18:02:05.0687 3500 C:\WINDOWS\system32\nvwddi.dll - ok
18:02:05.0734 3500 [ 48B9248CED8A5DE4EB0917CB676CB8D5 ] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
18:02:05.0734 3500 C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe - ok
18:02:05.0750 3500 [ 3C6FA2F4D58611579B21798E0568F548 ] C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
18:02:05.0750 3500 C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe - ok
18:02:05.0781 3500 [ 916A2C4EB028604783FD5EA169236C1D ] C:\Program Files\QuickTime\QTTask.exe
18:02:05.0781 3500 C:\Program Files\QuickTime\QTTask.exe - ok
18:02:05.0812 3500 [ 92DA9EDE07390B4352B29DD82079E398 ] C:\Program Files\Common Files\Apple\Apple Application Support\AppleVersions.dll
18:02:05.0812 3500 C:\Program Files\Common Files\Apple\Apple Application Support\AppleVersions.dll - ok
18:02:05.0843 3500 [ 0FC6A06A953F7F4A8336DB27767310C4 ] C:\WINDOWS\system32\rasdlg.dll
18:02:05.0843 3500 C:\WINDOWS\system32\rasdlg.dll - ok
18:02:05.0890 3500 [ 2DEDC3AFE3C49B5DAE717D0A9BEBF298 ] C:\Program Files\Common Files\Apple\Apple Application Support\YSCrashDump.dll
18:02:05.0890 3500 C:\Program Files\Common Files\Apple\Apple Application Support\YSCrashDump.dll - ok
18:02:05.0921 3500 [ B77081F8221968C7DAB794B0BA55C43E ] C:\Program Files\Common Files\Java\Java Update\jusched.exe
18:02:05.0921 3500 C:\Program Files\Common Files\Java\Java Update\jusched.exe - ok
18:02:05.0953 3500 [ 67B539D844F804EBAC7A1E3828FDE709 ] C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll
18:02:05.0953 3500 C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll - ok
18:02:05.0984 3500 [ A756B8F0F7BAFBA6DFE39F7D169F2519 ] C:\WINDOWS\system32\ctfmon.exe
18:02:05.0984 3500 C:\WINDOWS\system32\ctfmon.exe - ok
18:02:06.0000 3500 [ A994C1B8E4F289F43FAFF5F98375C079 ] C:\Program Files\Common Files\Nokia\MPlatform\MItemPlugins.dll
18:02:06.0000 3500 C:\Program Files\Common Files\Nokia\MPlatform\MItemPlugins.dll - ok
18:02:06.0046 3500 [ 533AECD1B5356870AE2D905B4D3B42B7 ] C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll
18:02:06.0046 3500 C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll - ok
18:02:06.0078 3500 [ FE4083ADBD690EF8B02EC30CF756EFBD ] C:\WINDOWS\ime\sptip.dll
18:02:06.0078 3500 C:\WINDOWS\ime\sptip.dll - ok
18:02:06.0109 3500 [ 544DBFEE6C4C2F2FA626F0C4D5E3C8C3 ] C:\Program Files\Sony\PMB\XpStorageDevice_WinXp2k.dll
18:02:06.0109 3500 C:\Program Files\Sony\PMB\XpStorageDevice_WinXp2k.dll - ok
18:02:06.0140 3500 [ A5DC9940FDF092A85FAF9969270BCE7D ] C:\WINDOWS\system32\msxml4.dll
18:02:06.0140 3500 C:\WINDOWS\system32\msxml4.dll - ok
18:02:06.0187 3500 [ 9A3E4B5CDFB635D9B10610511C441BCE ] C:\Program Files\Fighters\Tray\sfhtml.dll
18:02:06.0187 3500 C:\Program Files\Fighters\Tray\sfhtml.dll - ok
18:02:06.0218 3500 [ 0DBEE38060475A4C3E04D3B908AEC0B9 ] C:\Program Files\Microsoft Security Client\EppManifest.dll
18:02:06.0218 3500 C:\Program Files\Microsoft Security Client\EppManifest.dll - ok
18:02:06.0234 3500 [ 638C7596B493F5F77DB9EF6BAD8FE46C ] C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll
18:02:06.0234 3500 C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll - ok
18:02:06.0265 3500 [ C52C34260B3B6C4759842F4CF992644D ] C:\WINDOWS\system32\msftedit.dll
18:02:06.0265 3500 C:\WINDOWS\system32\msftedit.dll - ok
18:02:06.0296 3500 [ 32D78DCABFB942275E01363D5232C77D ] C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll
18:02:06.0296 3500 C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll - ok
18:02:06.0343 3500 [ 3BDE52411DF2FE4252C9289F51CB0F7E ] C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll
18:02:06.0343 3500 C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll - ok
18:02:06.0375 3500 [ 5A963C340DE1A01BA6E24945CE05D16A ] C:\Program Files\Common Files\Apple\Apple Application Support\libicuin.dll
18:02:06.0375 3500 C:\Program Files\Common Files\Apple\Apple Application Support\libicuin.dll - ok
18:02:06.0406 3500 [ C2088EAE4751A79648161264622EA600 ] C:\WINDOWS\system32\nvrscs.dll
18:02:06.0406 3500 C:\WINDOWS\system32\nvrscs.dll - ok
18:02:06.0437 3500 [ 317C54DCAB9EE29CD4B9F55D197A90D1 ] C:\WINDOWS\system32\msisip.dll
18:02:06.0437 3500 C:\WINDOWS\system32\msisip.dll - ok
18:02:06.0484 3500 [ 33832BCD865EC3484B0566B2BA96B869 ] C:\WINDOWS\system32\nvapi.dll
18:02:06.0484 3500 C:\WINDOWS\system32\nvapi.dll - ok
18:02:06.0500 3500 [ DA97675EC9029801E874E52208DEDF83 ] C:\WINDOWS\system32\wshext.dll
18:02:06.0500 3500 C:\WINDOWS\system32\wshext.dll - ok
18:02:06.0531 3500 [ D475BBD6FEF8DB2DDE0DA7CCFD2C9042 ] C:\Program Files\Microsoft Security Client\sqmapi.dll
18:02:06.0531 3500 C:\Program Files\Microsoft Security Client\sqmapi.dll - ok
18:02:06.0562 3500 [ 40FA2F035ED88108850757CA51DAD942 ] C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL
18:02:06.0562 3500 C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL - ok
18:02:06.0593 3500 [ 559D9CBFC29DEE2773B28D38851683BA ] C:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll
18:02:06.0593 3500 C:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll - ok
18:02:06.0640 3500 [ AD61C37E1D1E56FAFC5FF7E3CB2D3EFA ] C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
18:02:06.0640 3500 C:\Program Files\Common Files\Autodesk Shared\acstart17.exe - ok
18:02:06.0671 3500 [ F4BC62990E7E5C29799A895B80FC3177 ] C:\Program Files\Common Files\Apple\Apple Application Support\libicuuc.dll
18:02:06.0671 3500 C:\Program Files\Common Files\Apple\Apple Application Support\libicuuc.dll - ok
18:02:06.0703 3500 [ DFFEC6479C5E00A103A44AC33A1058AA ] C:\WINDOWS\system32\WMVCore.dll
18:02:06.0703 3500 C:\WINDOWS\system32\WMVCore.dll - ok
18:02:06.0734 3500 [ DEC7885B2EF0966EA285C9A40E7AFBA4 ] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
18:02:06.0734 3500 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll - ok
18:02:06.0765 3500 [ 149D74E1128A86DC9CFB2851FBEA11EB ] C:\Program Files\Common Files\Apple\Apple Application Support\icudt46.dll
18:02:06.0765 3500 C:\Program Files\Common Files\Apple\Apple Application Support\icudt46.dll - ok
18:02:06.0796 3500 [ 2424231BBD703A677D115C29983B4293 ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
18:02:06.0796 3500 C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok
18:02:06.0828 3500 [ A0C90E01D288A618AE6B99E92B7E0115 ] C:\WINDOWS\system32\usp10.dll
18:02:06.0828 3500 C:\WINDOWS\system32\usp10.dll - ok
18:02:06.0859 3500 [ A6DC9E1950657DD5AA1395CB2E5B01CD ] C:\WINDOWS\system32\wbem\cimwin32.dll
18:02:06.0859 3500 C:\WINDOWS\system32\wbem\cimwin32.dll - ok
18:02:06.0906 3500 [ 7365B5CA9747C84178D42CCA72486277 ] C:\WINDOWS\system32\wmasf.dll
18:02:06.0906 3500 C:\WINDOWS\system32\wmasf.dll - ok
18:02:06.0937 3500 [ 7044F8CFA0CF979E29D91EBBB3485FF8 ] C:\Program Files\Sony\PMB\PMBVolumeWatcherLOC.dll
18:02:06.0937 3500 C:\Program Files\Sony\PMB\PMBVolumeWatcherLOC.dll - ok
18:02:06.0968 3500 [ BA02F01BE7ED88E8974C798ACB3075F5 ] C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll
18:02:06.0968 3500 C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll - ok
18:02:07.0000 3500 [ F282D4EDD85D53E20D902CC92190C5F5 ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
18:02:07.0000 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - ok
18:02:07.0015 3500 [ 8A6B867FC26B9850D446D2D86E5DB071 ] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon_main.dll
18:02:07.0015 3500 C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon_main.dll - ok
18:02:07.0062 3500 [ B175BE51008E7DCE33E51A8C730EBDB2 ] C:\Program Files\Common Files\Nokia\MPlatform\MDataStore.dll
18:02:07.0062 3500 C:\Program Files\Common Files\Nokia\MPlatform\MDataStore.dll - ok
18:02:07.0093 3500 [ 85A17E71EEF6BE3A3BA910D8E38ABD24 ] C:\Program Files\Fighters\Tray\MsgSys.exe
18:02:07.0093 3500 C:\Program Files\Fighters\Tray\MsgSys.exe - ok
18:02:07.0125 3500 [ E162B072785CAD20F3F5262965F2E809 ] C:\WINDOWS\system32\security.dll
18:02:07.0125 3500 C:\WINDOWS\system32\security.dll - ok
18:02:07.0156 3500 [ FC33CBBB9CADCEC307DA010FE763D04C ] C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.dll
18:02:07.0156 3500 C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.dll - ok
18:02:07.0203 3500 [ FE3E0386343E090812161D31FAA7C04A ] C:\WINDOWS\system32\wbem\wmipcima.dll
18:02:07.0203 3500 C:\WINDOWS\system32\wbem\wmipcima.dll - ok
18:02:07.0234 3500 [ 72CADF7EE0722DAE4A6B98EEFEAC06BC ] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
18:02:07.0234 3500 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll - ok
18:02:07.0250 3500 [ 7F7BC88C8FB6B52989E0E93084B5E678 ] C:\WINDOWS\system32\msiexec.exe
18:02:07.0250 3500 C:\WINDOWS\system32\msiexec.exe - ok
18:02:07.0281 3500 [ 8BA9851E671E8B5E49E303748FFD530C ] C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll
18:02:07.0281 3500 C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll - ok
18:02:07.0312 3500 [ D26D13B8798375992A518898DDAF9D89 ] C:\Program Files\Fighters\SPAMfighter\sfoe0001.dll
18:02:07.0312 3500 C:\Program Files\Fighters\SPAMfighter\sfoe0001.dll - ok
18:02:07.0359 3500 [ 2E14406E05789F91C9282AE7CFCA3A07 ] C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
18:02:07.0359 3500 C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll - ok
18:02:07.0390 3500 [ 73862FF693168369A90F046E7F227B83 ] C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
18:02:07.0390 3500 C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll - ok
18:02:07.0421 3500 [ C05A4D494C3096782F80CFDF7F4AEFA8 ] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
18:02:07.0421 3500 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll - ok
18:02:07.0453 3500 [ 7FAA67B07CB801E5C3D406C34DB2EE47 ] C:\Program Files\Common Files\Nokia\MPlatform\MEvent.dll
18:02:07.0453 3500 C:\Program Files\Common Files\Nokia\MPlatform\MEvent.dll - ok
18:02:07.0500 3500 [ A7E9D45B18A13DC18E3C0311D1CF620F ] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
18:02:07.0500 3500 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll - ok
18:02:07.0515 3500 [ 4694C2AF856C8601FD57DA3B54075C55 ] C:\Program Files\Common Files\Nokia\MPlatform\MItems.dll
18:02:07.0515 3500 C:\Program Files\Common Files\Nokia\MPlatform\MItems.dll - ok
18:02:07.0546 3500 [ B560A085EED4D5D72B039929F9AE4991 ] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
18:02:07.0546 3500 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - ok
18:02:07.0578 3500 [ 8563F5A4F6342BA64E7C398F7EFCC350 ] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
18:02:07.0578 3500 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll - ok
18:02:07.0625 3500 [ 15FC044F7A144FE7F14E20C55E23C423 ] C:\Program Files\Common Files\Nokia\MPlatform\MDatastorePH.dll
18:02:07.0625 3500 C:\Program Files\Common Files\Nokia\MPlatform\MDatastorePH.dll - ok
18:02:07.0656 3500 [ 2695ED5F8A4FAC0B16BA36D28481182D ] C:\WINDOWS\system32\drprov.dll
18:02:07.0656 3500 C:\WINDOWS\system32\drprov.dll - ok
18:02:07.0687 3500 [ 3B93BD2EA2B66FA32C344ACCE7378A43 ] C:\WINDOWS\system32\ntlanman.dll
18:02:07.0687 3500 C:\WINDOWS\system32\ntlanman.dll - ok
18:02:07.0718 3500 [ 14B9BE12D4539225D2785093802DEEF0 ] C:\WINDOWS\system32\netui0.dll
18:02:07.0718 3500 C:\WINDOWS\system32\netui0.dll - ok
18:02:07.0750 3500 [ BBBCD7E2493566BF8FF676DB69D9A754 ] C:\WINDOWS\system32\netui1.dll
18:02:07.0750 3500 C:\WINDOWS\system32\netui1.dll - ok
18:02:07.0781 3500 [ 2B50EA34CBCFAB1B71E66EAFC1F9AB8C ] C:\WINDOWS\system32\davclnt.dll
18:02:07.0781 3500 C:\WINDOWS\system32\davclnt.dll - ok
18:02:07.0796 3500 ============================================================
18:02:07.0796 3500 Scan finished
18:02:07.0796 3500 ============================================================
18:02:07.0953 3492 Detected object count: 12
18:02:07.0953 3492 Actual detected object count: 12
18:02:25.0828 3492 ACS ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0828 3492 ACS ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0843 3492 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0843 3492 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0859 3492 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0859 3492 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0859 3492 Afc ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0859 3492 Afc ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0875 3492 AR5211 ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0875 3492 AR5211 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0875 3492 EIO_XP ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0875 3492 EIO_XP ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0890 3492 HcPvrUSB ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0890 3492 HcPvrUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0890 3492 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0890 3492 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0906 3492 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0906 3492 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0906 3492 MarvinBus ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0906 3492 MarvinBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0921 3492 pcouffin ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0937 3492 pcouffin ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:25.0937 3492 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user
18:02:25.0937 3492 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:02:29.0390 2376 Deinitialize success

Super, poprosim jeste o novy log z MBRScan

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Registry::
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "NokiaMServer"=-
  "QuickTime Task"=-
  "SunJavaUpdateSched"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"=-
  "MSMSGS"=-
  ""=-
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
  "3389:TCP"=-
  "65533:TCP"=-
  "52344:TCP"=-
  
  File::
  C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Akcelerátor spuštění AutoCADu.lnk
  C:\Documents and Settings\Owner\Nabídka Start\Programy\Po spuštění\_uninst_03715569.lnk
  C:\Documents and Settings\Owner\Nabídka Start\Programy\Po spuštění\_uninst_44849069.lnk
  C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  C:\WINDOWS\tasks\AppleSoftwareUpdate.job
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
  C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
  
  Driver::
  xcpip
  xpsec
  gupdate
  gupdatem
  
  Folder::
  c:\program files\Zrychleni Pocitace
  
  FCopy::
  c:\windows\ServicePackFiles\i386\atapi.sys | c:\windows\system32\drivers\atapi.sys
  
  RegLock::
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  
  ClearJavaCache::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 12-10-19.01 - Owner 23.10.2012 21:08:29.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1983.1474 [GMT 2:00]
Spuštěný z: c:\documents and settings\Owner\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Owner\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
FILE ::
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Akcelerátor spuštění AutoCADu.lnk"
"c:\documents and settings\Owner\Nabídka Start\Programy\Po spuštění\_uninst_03715569.lnk"
"c:\documents and settings\Owner\Nabídka Start\Programy\Po spuštění\_uninst_44849069.lnk"
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\AppleSoftwareUpdate.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\Microsoft Antimalware Scheduled Scan.job"
"c:\windows\tasks\Scheduled Update for Ask Toolbar.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Zrychleni Pocitace
.
.
--------------- FCopy ---------------
.
c:\windows\ServicePackFiles\i386\atapi.sys --> c:\windows\system32\drivers\atapi.sys
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE
-------\Legacy_GUPDATEM
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-23 do 2012-10-23 )))))))))))))))))))))))))))))))
.
.
2012-10-23 19:05 . 2012-10-23 19:05 29904 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{E55BC808-7C9E-4D7F-B356-F4D5D8ECBF52}\MpKslabcacce7.sys
2012-10-22 18:42 . 2012-10-12 05:56 6918632 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{E55BC808-7C9E-4D7F-B356-F4D5D8ECBF52}\mpengine.dll
2012-10-21 17:31 . 2012-10-12 05:56 6918632 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-10-21 14:38 . 2012-10-21 14:38 -------- d-----w- c:\documents and settings\Owner\Local Settings\Data aplikací\Direkt Foto System
2012-10-20 15:55 . 2012-10-20 15:55 -------- d-----w- C:\TDSSKiller_Quarantine
2012-10-20 14:38 . 2012-10-20 14:54 -------- d-----w- C:\UsbFix
2012-10-20 09:45 . 2012-10-20 09:45 -------- d-----w- c:\program files\trend micro
2012-10-20 09:45 . 2012-10-20 09:45 -------- d-----w- C:\rsit
2012-10-19 22:10 . 2012-10-19 22:10 -------- d-----w- c:\program files\CCleaner
2012-10-19 18:28 . 2012-10-19 18:28 -------- d-----w- c:\program files\Common Files\Java
2012-10-14 20:21 . 2012-10-14 20:21 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avery
2012-10-14 20:21 . 2012-10-14 20:21 -------- d-----w- c:\program files\Avery Dennison
2012-10-13 21:53 . 2012-10-14 10:37 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-13 21:53 . 2012-10-14 10:37 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2012-09-28 10:12 . 2012-09-28 10:12 159744 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2012-09-28 10:10 . 2012-09-28 10:10 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2012-09-26 19:10 . 2012-09-27 21:08 -------- d-----w- c:\program files\Microsoft Silverlight
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-20 14:54 . 2012-10-20 14:47 48914 ----a-w- C:\UsbFix_Upload_Me_DOMA-363AC646CA.zip
2012-09-24 13:32 . 2012-05-13 07:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-24 13:32 . 2011-04-04 18:39 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-24 11:51 . 2012-05-13 07:32 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-08-30 20:03 . 2010-10-24 20:25 193552 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2012-08-28 15:18 . 2006-03-02 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:18 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:18 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:53 . 2006-03-02 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2006-03-02 12:00 2195072 ------w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27 . 2004-08-17 15:45 2071808 ------w- c:\windows\system32\ntkrnlpa.exe
2012-10-15 18:55 . 2012-10-15 18:50 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TWCU"="c:\program files\TP-LINK\TWCU\TWCU.exe" [2006-03-29 364544]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"VTTimer"="VTTimer.exe" [2006-09-21 53248]
"VTTrayp"="VTtrayp.exe" [2007-02-06 176128]
"sfagent"="c:\program files\Fighters\SPAMfighter\sfagent.exe" [2012-04-24 1197704]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-18 1753192]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-08-19 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-08-19 13925480]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]
"CommonToolkitTray"="c:\program files\Fighters\Tray\FightersTray.exe" [2012-02-02 1453704]
"PMBVolumeWatcher"="c:\program files\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080]
.
c:\documents and settings\Owner\Nabídka Start\Programy\Po spuštění\
_uninst_44849069.lnk - c:\documents and settings\Owner\Local Settings\Temp\_uninst_44849069.bat [N/A]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Akcelerátor spuštění AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\umi.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Ahead\\Nero ShowTime\\ShowTime.exe"=
"c:\\Program Files\\ASUS\\ASUSUpdate\\Update.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
.
R1 MpKslabcacce7;MpKslabcacce7;c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{E55BC808-7C9E-4D7F-B356-F4D5D8ECBF52}\MpKslabcacce7.sys [23.10.2012 21:05 29904]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files\Sony\PMB\PMBDeviceInfoProvider.exe [27.11.2010 0:55 398176]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [13.8.2012 13:33 3064000]
R2 SPAMfighter Update Service;SPAMfighter Update Service;c:\program files\Fighters\SPAMfighter\sfus.exe [24.4.2012 12:53 215688]
R2 Suite Service;Suite Service;c:\program files\Fighters\FighterSuiteService.exe [23.1.2012 13:40 1324680]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [8.10.2011 17:09 47360]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [27.4.2011 21:40 2214504]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [3.7.2012 13:19 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [13.10.2012 23:53 250808]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [20.3.2011 22:32 1691480]
S3 HcPvrUSB;HcPvrUSB.sys Mascom PVR USB driver 2.0.3;c:\windows\system32\drivers\HcPvrUSB.sys [6.1.2012 18:33 17664]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15.1.2010 14:49 227232]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [11.5.2012 23:01 115168]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-13 10:37]
.
2012-10-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2012-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-20 20:52]
.
2012-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-20 20:52]
.
2012-10-23 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 15:25]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: Interfaces\{15FC1207-C485-4D89-A397-898DE2752F51}: NameServer = 10.89.1.2,193.85.214.17
TCP: Interfaces\{DA741DF1-E45D-4D3A-9F95-799632394C91}: NameServer = 10.89.1.2,193.85.214.17
FF - ProfilePath - c:\documents and settings\Owner\Data aplikací\Mozilla\Firefox\Profiles\98ufrpyo.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2012-09-02 09:20; {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}; c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF - ExtSQL: 2012-10-19 20:28; {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}; c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF - ExtSQL: !HIDDEN! 2011-03-20 21:53; {3112ca9c-de6d-4884-a869-9855de68056c}; c:\documents and settings\All Users\Data aplikací\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF - ExtSQL: !HIDDEN! 2011-03-29 17:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
user_pref('extensions.autoDisableScopes', 0);user_pref('security.csp.enable', false);user_pref('security.OCSP.enabled', 0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-60573145.sys
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-23 21:19
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2240)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\acs.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\wscntfy.exe
c:\windows\system32\VTTimer.exe
c:\windows\system32\VTtrayp.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2012-10-23 21:25:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-23 19:25
ComboFix2.txt 2012-10-20 13:41
.
Před spuštěním: Volných bajtů: 44 810 166 272
Po spuštění: Volných bajtů: 45 694 328 832
.
- - End Of File - - A420E26FC0F90376E743DE29B1AEB44B

Jak se chova PC

PC se chová normálně, už nic nevyskakuje, řekl bych, že se i zrychlilo, včetně internetu (načítání stránek, apod.).

Tak jeste uklidime

Odinstalujte Combofix

• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse