VIRY.CZ

Cure vyhodi warning - Can't cure MBR. Write standard boot code? If you have installed custom bootloader... a Yes, No - a standardny boot code asi nebude to prave orechove, tak davam No.
Log ->

13:02:25.0092 4948 TDSS rootkit removing tool 2.7.10.0 Feb 7 2012 15:14:46
13:02:25.0492 4948 ============================================================
13:02:25.0493 4948 Current date / time: 2012/02/08 13:02:25.0492
13:02:25.0493 4948 SystemInfo:
13:02:25.0493 4948
13:02:25.0493 4948 OS Version: 6.1.7600 ServicePack: 0.0
13:02:25.0493 4948 Product type: Workstation
13:02:25.0493 4948 ComputerName: SKN11005
13:02:25.0493 4948 UserName: kadoraa
13:02:25.0493 4948 Windows directory: C:\Windows
13:02:25.0493 4948 System windows directory: C:\Windows
13:02:25.0493 4948 Running under WOW64
13:02:25.0493 4948 Processor architecture: Intel x64
13:02:25.0493 4948 Number of processors: 4
13:02:25.0493 4948 Page size: 0x1000
13:02:25.0493 4948 Boot type: Normal boot
13:02:25.0493 4948 ============================================================
13:02:26.0127 4948 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:02:26.0133 4948 \Device\Harddisk0\DR0:
13:02:26.0133 4948 MBR used
13:02:26.0133 4948 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x96000
13:02:26.0133 4948 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x96800, BlocksNum 0x1AF2D800
13:02:26.0133 4948 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1AFC4000, BlocksNum 0x1E00000
13:02:26.0133 4948 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x1CDC4000, BlocksNum 0x3FD800
13:02:26.0286 4948 Initialize success
13:02:26.0286 4948 ============================================================
13:02:31.0484 5500 ============================================================
13:02:31.0484 5500 Scan started
13:02:31.0484 5500 Mode: Manual;
13:02:31.0484 5500 ============================================================
13:02:32.0520 5500 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
13:02:32.0526 5500 1394ohci - ok
13:02:32.0555 5500 Accelerometer (1cffe9c06e66a57dae1452e449a58240) C:\Windows\system32\DRIVERS\Accelerometer.sys
13:02:32.0557 5500 Accelerometer - ok
13:02:32.0582 5500 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
13:02:32.0589 5500 ACPI - ok
13:02:32.0610 5500 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
13:02:32.0612 5500 AcpiPmi - ok
13:02:32.0644 5500 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
13:02:32.0644 5500 adp94xx - ok
13:02:32.0691 5500 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
13:02:32.0697 5500 adpahci - ok
13:02:32.0720 5500 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
13:02:32.0724 5500 adpu320 - ok
13:02:32.0808 5500 AF15BDA (d0982acdda4ba27621ff4b1d7dd2c6cd) C:\Windows\system32\Drivers\AF15BDA.sys
13:02:32.0815 5500 AF15BDA - ok
13:02:32.0896 5500 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
13:02:32.0905 5500 AFD - ok
13:02:32.0988 5500 AgereSoftModem (c98356d813b581e9c425b42a5d146ce0) C:\Windows\system32\DRIVERS\agrsm64.sys
13:02:33.0021 5500 AgereSoftModem - ok
13:02:33.0061 5500 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
13:02:33.0063 5500 agp440 - ok
13:02:33.0096 5500 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
13:02:33.0098 5500 aliide - ok
13:02:33.0120 5500 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
13:02:33.0122 5500 amdide - ok
13:02:33.0147 5500 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
13:02:33.0149 5500 AmdK8 - ok
13:02:33.0195 5500 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
13:02:33.0197 5500 AmdPPM - ok
13:02:33.0265 5500 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
13:02:33.0268 5500 amdsata - ok
13:02:33.0302 5500 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
13:02:33.0307 5500 amdsbs - ok
13:02:33.0328 5500 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
13:02:33.0331 5500 amdxata - ok
13:02:33.0364 5500 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
13:02:33.0366 5500 AppID - ok
13:02:33.0408 5500 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
13:02:33.0418 5500 arc - ok
13:02:33.0456 5500 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
13:02:33.0459 5500 arcsas - ok
13:02:33.0545 5500 ArcSec (a7409b5c0e35ddee64f16f3054e5530b) C:\Windows\system32\drivers\ArcSec.sys
13:02:33.0552 5500 ArcSec - ok
13:02:33.0582 5500 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
13:02:33.0584 5500 AsyncMac - ok
13:02:33.0609 5500 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
13:02:33.0611 5500 atapi - ok
13:02:33.0673 5500 avgntflt (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
13:02:33.0689 5500 avgntflt - ok
13:02:33.0800 5500 avipbb (f1c9db5f7b2a56a0b29667d22ba540fc) C:\Windows\system32\DRIVERS\avipbb.sys
13:02:33.0804 5500 avipbb - ok
13:02:33.0877 5500 avkmgr (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
13:02:33.0879 5500 avkmgr - ok
13:02:33.0927 5500 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
13:02:33.0936 5500 b06bdrv - ok
13:02:33.0976 5500 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
13:02:33.0984 5500 b57nd60a - ok
13:02:34.0019 5500 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
13:02:34.0020 5500 Beep - ok
13:02:34.0062 5500 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
13:02:34.0064 5500 blbdrive - ok
13:02:34.0112 5500 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
13:02:34.0115 5500 bowser - ok
13:02:34.0133 5500 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
13:02:34.0137 5500 BrFiltLo - ok
13:02:34.0155 5500 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
13:02:34.0156 5500 BrFiltUp - ok
13:02:34.0173 5500 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
13:02:34.0191 5500 Brserid - ok
13:02:34.0241 5500 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
13:02:34.0243 5500 BrSerWdm - ok
13:02:34.0306 5500 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
13:02:34.0308 5500 BrUsbMdm - ok
13:02:34.0368 5500 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
13:02:34.0370 5500 BrUsbSer - ok
13:02:34.0437 5500 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
13:02:34.0439 5500 BthEnum - ok
13:02:34.0501 5500 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
13:02:34.0503 5500 BTHMODEM - ok
13:02:34.0553 5500 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
13:02:34.0556 5500 BthPan - ok
13:02:34.0580 5500 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
13:02:34.0589 5500 BTHPORT - ok
13:02:34.0647 5500 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
13:02:34.0650 5500 BTHUSB - ok
13:02:34.0718 5500 btwaudio (4bdbdb86abba924e029fb2683be7c505) C:\Windows\system32\drivers\btwaudio.sys
13:02:34.0721 5500 btwaudio - ok
13:02:34.0784 5500 btwavdt (5c849bd7c78791c5cee9f4651d7fe38d) C:\Windows\system32\DRIVERS\btwavdt.sys
13:02:34.0788 5500 btwavdt - ok
13:02:34.0814 5500 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
13:02:34.0815 5500 btwl2cap - ok
13:02:34.0831 5500 btwrchid (3e1991afa851a36dc978b0a1b0535c8b) C:\Windows\system32\DRIVERS\btwrchid.sys
13:02:34.0833 5500 btwrchid - ok
13:02:34.0859 5500 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
13:02:34.0863 5500 cdfs - ok
13:02:34.0928 5500 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
13:02:34.0931 5500 cdrom - ok
13:02:34.0959 5500 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
13:02:34.0961 5500 circlass - ok
13:02:34.0996 5500 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
13:02:35.0002 5500 CLFS - ok
13:02:35.0071 5500 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
13:02:35.0072 5500 CmBatt - ok
13:02:35.0131 5500 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
13:02:35.0133 5500 cmdide - ok
13:02:35.0198 5500 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
13:02:35.0205 5500 CNG - ok
13:02:35.0279 5500 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
13:02:35.0281 5500 Compbatt - ok
13:02:35.0357 5500 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
13:02:35.0359 5500 CompositeBus - ok
13:02:35.0388 5500 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
13:02:35.0390 5500 crcdisk - ok
13:02:35.0451 5500 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
13:02:35.0469 5500 CSC - ok
13:02:35.0537 5500 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
13:02:35.0537 5500 DfsC - ok
13:02:35.0557 5500 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
13:02:35.0567 5500 discache - ok
13:02:35.0577 5500 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
13:02:35.0577 5500 Disk - ok
13:02:35.0617 5500 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
13:02:35.0617 5500 drmkaud - ok
13:02:35.0697 5500 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
13:02:35.0727 5500 DXGKrnl - ok
13:02:35.0757 5500 e1kexpress (711405da1fbc40b820db5a2b4dd939f0) C:\Windows\system32\DRIVERS\e1k62x64.sys
13:02:35.0757 5500 e1kexpress - ok
13:02:35.0847 5500 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
13:02:35.0917 5500 ebdrv - ok
13:02:35.0947 5500 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
13:02:35.0957 5500 elxstor - ok
13:02:35.0977 5500 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
13:02:35.0977 5500 ErrDev - ok
13:02:36.0017 5500 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
13:02:36.0017 5500 exfat - ok
13:02:36.0057 5500 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
13:02:36.0057 5500 fastfat - ok
13:02:36.0097 5500 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
13:02:36.0097 5500 fdc - ok
13:02:36.0137 5500 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
13:02:36.0137 5500 FileInfo - ok
13:02:36.0157 5500 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
13:02:36.0157 5500 Filetrace - ok
13:02:36.0177 5500 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
13:02:36.0177 5500 flpydisk - ok
13:02:36.0207 5500 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
13:02:36.0207 5500 FltMgr - ok
13:02:36.0237 5500 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
13:02:36.0247 5500 FsDepends - ok
13:02:36.0257 5500 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
13:02:36.0267 5500 Fs_Rec - ok
13:02:36.0327 5500 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
13:02:36.0327 5500 fvevol - ok
13:02:36.0347 5500 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
13:02:36.0357 5500 gagp30kx - ok
13:02:36.0387 5500 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
13:02:36.0387 5500 hcw85cir - ok
13:02:36.0427 5500 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
13:02:36.0427 5500 HdAudAddService - ok
13:02:36.0457 5500 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
13:02:36.0457 5500 HDAudBus - ok
13:02:36.0487 5500 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
13:02:36.0497 5500 HECIx64 - ok
13:02:36.0557 5500 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
13:02:36.0557 5500 HidBatt - ok
13:02:36.0607 5500 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
13:02:36.0607 5500 HidBth - ok
13:02:36.0637 5500 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
13:02:36.0637 5500 HidIr - ok
13:02:36.0677 5500 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
13:02:36.0677 5500 HidUsb - ok
13:02:36.0727 5500 hpdskflt (05712fddbd45a5864eb326faabc6a4e3) C:\Windows\system32\DRIVERS\hpdskflt.sys
13:02:36.0727 5500 hpdskflt - ok
13:02:36.0757 5500 HpqKbFiltr (9af482d058be59cc28bce52e7c4b747c) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
13:02:36.0757 5500 HpqKbFiltr - ok
13:02:36.0777 5500 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
13:02:36.0777 5500 HpSAMD - ok
13:02:36.0817 5500 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
13:02:36.0827 5500 HTTP - ok
13:02:36.0857 5500 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
13:02:36.0857 5500 hwpolicy - ok
13:02:36.0877 5500 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
13:02:36.0877 5500 i8042prt - ok
13:02:36.0907 5500 iaStor (bbb3b6df1abb0fe35802ede85cc1c011) C:\Windows\system32\DRIVERS\iaStor.sys
13:02:36.0907 5500 iaStor - ok
13:02:36.0977 5500 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
13:02:36.0977 5500 iaStorV - ok
13:02:37.0197 5500 igfx (f59ac361dfe9bfd9be81e20b04eadaa2) C:\Windows\system32\DRIVERS\igdkmd64.sys
13:02:37.0417 5500 igfx - ok
13:02:37.0457 5500 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
13:02:37.0457 5500 iirsp - ok
13:02:37.0487 5500 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
13:02:37.0487 5500 Impcd - ok
13:02:37.0517 5500 IntcDAud (4429b91b0fe91f9be8e24e93cc960368) C:\Windows\system32\DRIVERS\IntcDAud.sys
13:02:37.0517 5500 IntcDAud - ok
13:02:37.0537 5500 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
13:02:37.0547 5500 intelide - ok
13:02:37.0567 5500 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
13:02:37.0567 5500 intelppm - ok
13:02:37.0587 5500 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:02:37.0587 5500 IpFilterDriver - ok
13:02:37.0607 5500 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
13:02:37.0607 5500 IPMIDRV - ok
13:02:37.0617 5500 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
13:02:37.0627 5500 IPNAT - ok
13:02:37.0647 5500 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
13:02:37.0647 5500 IRENUM - ok
13:02:37.0667 5500 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
13:02:37.0667 5500 isapnp - ok
13:02:37.0697 5500 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
13:02:37.0707 5500 iScsiPrt - ok
13:02:37.0727 5500 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
13:02:37.0727 5500 kbdclass - ok
13:02:37.0757 5500 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
13:02:37.0767 5500 kbdhid - ok
13:02:37.0817 5500 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
13:02:37.0817 5500 KSecDD - ok
13:02:37.0877 5500 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
13:02:37.0877 5500 KSecPkg - ok
13:02:37.0905 5500 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
13:02:37.0907 5500 ksthunk - ok
13:02:37.0934 5500 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
13:02:37.0936 5500 lltdio - ok
13:02:37.0965 5500 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
13:02:37.0967 5500 LSI_FC - ok
13:02:37.0986 5500 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
13:02:37.0988 5500 LSI_SAS - ok
13:02:38.0012 5500 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
13:02:38.0015 5500 LSI_SAS2 - ok
13:02:38.0028 5500 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
13:02:38.0030 5500 LSI_SCSI - ok
13:02:38.0063 5500 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
13:02:38.0066 5500 luafv - ok
13:02:38.0099 5500 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
13:02:38.0101 5500 megasas - ok
13:02:38.0126 5500 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
13:02:38.0131 5500 MegaSR - ok
13:02:38.0168 5500 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
13:02:38.0171 5500 Modem - ok
13:02:38.0193 5500 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
13:02:38.0195 5500 monitor - ok
13:02:38.0217 5500 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
13:02:38.0219 5500 mouclass - ok
13:02:38.0233 5500 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
13:02:38.0235 5500 mouhid - ok
13:02:38.0256 5500 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
13:02:38.0259 5500 mountmgr - ok
13:02:38.0284 5500 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
13:02:38.0288 5500 mpio - ok
13:02:38.0314 5500 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
13:02:38.0317 5500 mpsdrv - ok
13:02:38.0349 5500 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
13:02:38.0352 5500 MRxDAV - ok
13:02:38.0405 5500 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
13:02:38.0409 5500 mrxsmb - ok
13:02:38.0472 5500 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:02:38.0478 5500 mrxsmb10 - ok
13:02:38.0503 5500 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:02:38.0506 5500 mrxsmb20 - ok
13:02:38.0522 5500 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
13:02:38.0524 5500 msahci - ok
13:02:38.0561 5500 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
13:02:38.0564 5500 msdsm - ok
13:02:38.0600 5500 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
13:02:38.0603 5500 Msfs - ok
13:02:38.0632 5500 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
13:02:38.0634 5500 mshidkmdf - ok
13:02:38.0649 5500 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
13:02:38.0651 5500 msisadrv - ok
13:02:38.0678 5500 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
13:02:38.0680 5500 MSKSSRV - ok
13:02:38.0705 5500 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
13:02:38.0707 5500 MSPCLOCK - ok
13:02:38.0723 5500 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
13:02:38.0725 5500 MSPQM - ok
13:02:38.0754 5500 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
13:02:38.0761 5500 MsRPC - ok
13:02:38.0784 5500 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
13:02:38.0787 5500 mssmbios - ok
13:02:38.0818 5500 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
13:02:38.0820 5500 MSTEE - ok
13:02:38.0836 5500 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
13:02:38.0838 5500 MTConfig - ok
13:02:38.0861 5500 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
13:02:38.0864 5500 Mup - ok
13:02:38.0903 5500 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
13:02:38.0903 5500 NativeWifiP - ok
13:02:38.0957 5500 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
13:02:38.0983 5500 NDIS - ok
13:02:39.0013 5500 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
13:02:39.0015 5500 NdisCap - ok
13:02:39.0037 5500 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
13:02:39.0039 5500 NdisTapi - ok
13:02:39.0057 5500 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
13:02:39.0059 5500 Ndisuio - ok
13:02:39.0086 5500 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
13:02:39.0090 5500 NdisWan - ok
13:02:39.0127 5500 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
13:02:39.0130 5500 NDProxy - ok
13:02:39.0163 5500 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
13:02:39.0164 5500 NetBIOS - ok
13:02:39.0187 5500 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
13:02:39.0192 5500 NetBT - ok
13:02:39.0398 5500 NETw5s64 (39ede676d17f37af4573c2b33ec28aca) C:\Windows\system32\DRIVERS\NETw5s64.sys
13:02:39.0557 5500 NETw5s64 - ok
13:02:39.0583 5500 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
13:02:39.0585 5500 nfrd960 - ok
13:02:39.0605 5500 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
13:02:39.0606 5500 Npfs - ok
13:02:39.0625 5500 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
13:02:39.0627 5500 nsiproxy - ok
13:02:39.0732 5500 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
13:02:39.0767 5500 Ntfs - ok
13:02:39.0784 5500 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
13:02:39.0786 5500 Null - ok
13:02:39.0834 5500 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
13:02:39.0838 5500 nvraid - ok
13:02:39.0867 5500 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
13:02:39.0871 5500 nvstor - ok
13:02:39.0897 5500 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
13:02:39.0900 5500 nv_agp - ok
13:02:39.0941 5500 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
13:02:39.0941 5500 ohci1394 - ok
13:02:39.0988 5500 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
13:02:39.0990 5500 Parport - ok
13:02:40.0012 5500 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
13:02:40.0014 5500 partmgr - ok
13:02:40.0037 5500 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
13:02:40.0041 5500 pci - ok
13:02:40.0060 5500 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
13:02:40.0061 5500 pciide - ok
13:02:40.0091 5500 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
13:02:40.0094 5500 pcmcia - ok
13:02:40.0115 5500 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
13:02:40.0116 5500 pcw - ok
13:02:40.0147 5500 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
13:02:40.0165 5500 PEAUTH - ok
13:02:40.0217 5500 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
13:02:40.0219 5500 PptpMiniport - ok
13:02:40.0239 5500 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
13:02:40.0241 5500 Processor - ok
13:02:40.0270 5500 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
13:02:40.0273 5500 Psched - ok
13:02:40.0321 5500 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
13:02:40.0348 5500 ql2300 - ok
13:02:40.0361 5500 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
13:02:40.0364 5500 ql40xx - ok
13:02:40.0386 5500 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
13:02:40.0388 5500 QWAVEdrv - ok
13:02:40.0410 5500 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
13:02:40.0412 5500 RasAcd - ok
13:02:40.0450 5500 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
13:02:40.0452 5500 RasAgileVpn - ok
13:02:40.0476 5500 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
13:02:40.0479 5500 Rasl2tp - ok
13:02:40.0542 5500 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
13:02:40.0544 5500 RasPppoe - ok
13:02:40.0565 5500 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
13:02:40.0567 5500 RasSstp - ok
13:02:40.0598 5500 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
13:02:40.0603 5500 rdbss - ok
13:02:40.0620 5500 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
13:02:40.0622 5500 rdpbus - ok
13:02:40.0635 5500 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
13:02:40.0637 5500 RDPCDD - ok
13:02:40.0673 5500 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
13:02:40.0676 5500 RDPDR - ok
13:02:40.0693 5500 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
13:02:40.0695 5500 RDPENCDD - ok
13:02:40.0723 5500 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
13:02:40.0724 5500 RDPREFMP - ok
13:02:40.0743 5500 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
13:02:40.0747 5500 RDPWD - ok
13:02:40.0774 5500 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
13:02:40.0778 5500 rdyboost - ok
13:02:40.0820 5500 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
13:02:40.0823 5500 RFCOMM - ok
13:02:40.0863 5500 rimmptsk (6faf5b04bedc66d300d9d233b2d222f0) C:\Windows\system32\DRIVERS\rimmpx64.sys
13:02:40.0866 5500 rimmptsk - ok
13:02:40.0879 5500 rismcx64 (d018844dc53d8428410a2feeeee9373e) C:\Windows\system32\DRIVERS\rismcx64.sys
13:02:40.0881 5500 rismcx64 - ok
13:02:40.0928 5500 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
13:02:40.0930 5500 rspndr - ok
13:02:40.0991 5500 s0016bus (ea268bce30691c2dd24f02e617fd2eb5) C:\Windows\system32\DRIVERS\s0016bus.sys
13:02:40.0991 5500 s0016bus - ok
13:02:41.0065 5500 s0016mdfl (f5f9deb89996d333ef976624d37e24e3) C:\Windows\system32\DRIVERS\s0016mdfl.sys
13:02:41.0066 5500 s0016mdfl - ok
13:02:41.0124 5500 s0016mdm (c17ce2aee67480febcc36eccb54c0be8) C:\Windows\system32\DRIVERS\s0016mdm.sys
13:02:41.0128 5500 s0016mdm - ok
13:02:41.0183 5500 s0016mgmt (cc267f04c54c5ec5b7bd658d7628469f) C:\Windows\system32\DRIVERS\s0016mgmt.sys
13:02:41.0187 5500 s0016mgmt - ok
13:02:41.0238 5500 s0016nd5 (30a35bbce09d9fe67482fd62c61911fc) C:\Windows\system32\DRIVERS\s0016nd5.sys
13:02:41.0240 5500 s0016nd5 - ok
13:02:41.0291 5500 s0016obex (ca394dcc38579c7ad82e83ee64d798a0) C:\Windows\system32\DRIVERS\s0016obex.sys
13:02:41.0297 5500 s0016obex - ok
13:02:41.0310 5500 s0016unic (eb267ccea84e6e8598d92f73332ac67b) C:\Windows\system32\DRIVERS\s0016unic.sys
13:02:41.0313 5500 s0016unic - ok
13:02:41.0380 5500 s1018bus (301fba4594fb5c0a469299a65106b4aa) C:\Windows\system32\DRIVERS\s1018bus.sys
13:02:41.0383 5500 s1018bus - ok
13:02:41.0428 5500 s1018mdfl (d1d7c744f79710357e60fc04d125ed01) C:\Windows\system32\DRIVERS\s1018mdfl.sys
13:02:41.0430 5500 s1018mdfl - ok
13:02:41.0465 5500 s1018mdm (7dbe12cccd837d4266b2ddd80a329c09) C:\Windows\system32\DRIVERS\s1018mdm.sys
13:02:41.0468 5500 s1018mdm - ok
13:02:41.0491 5500 s1018mgmt (065ff5e62d2d18a6d93fd925546cd549) C:\Windows\system32\DRIVERS\s1018mgmt.sys
13:02:41.0494 5500 s1018mgmt - ok
13:02:41.0518 5500 s1018nd5 (5101d815bdf0d667e3d5f0ea727caaee) C:\Windows\system32\DRIVERS\s1018nd5.sys
13:02:41.0519 5500 s1018nd5 - ok
13:02:41.0545 5500 s1018obex (13f220c65b444ac9bda49dacfc3230bb) C:\Windows\system32\DRIVERS\s1018obex.sys
13:02:41.0548 5500 s1018obex - ok
13:02:41.0583 5500 s1018unic (ce7d8bce80211d8a35f6bd7a87791860) C:\Windows\system32\DRIVERS\s1018unic.sys
13:02:41.0587 5500 s1018unic - ok
13:02:41.0621 5500 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
13:02:41.0623 5500 s3cap - ok
13:02:41.0670 5500 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
13:02:41.0672 5500 sbp2port - ok
13:02:41.0740 5500 SCDEmu (b2f50286dc82b93c013e3fc57ba1a956) C:\Windows\system32\drivers\SCDEmu.sys
13:02:41.0743 5500 SCDEmu - ok
13:02:41.0762 5500 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
13:02:41.0764 5500 scfilter - ok
13:02:41.0801 5500 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
13:02:41.0804 5500 sdbus - ok
13:02:41.0818 5500 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
13:02:41.0819 5500 secdrv - ok
13:02:41.0843 5500 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
13:02:41.0845 5500 Serenum - ok
13:02:41.0878 5500 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
13:02:41.0881 5500 Serial - ok
13:02:41.0901 5500 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
13:02:41.0903 5500 sermouse - ok
13:02:41.0922 5500 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
13:02:41.0924 5500 sffdisk - ok
13:02:41.0934 5500 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
13:02:41.0935 5500 sffp_mmc - ok
13:02:41.0948 5500 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
13:02:41.0949 5500 sffp_sd - ok
13:02:41.0969 5500 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
13:02:41.0973 5500 sfloppy - ok
13:02:41.0998 5500 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
13:02:42.0000 5500 SiSRaid2 - ok
13:02:42.0020 5500 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
13:02:42.0022 5500 SiSRaid4 - ok
13:02:42.0041 5500 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
13:02:42.0041 5500 Smb - ok
13:02:42.0116 5500 SNP2UVC (a676e7f5c305cbc3d3d0e4d718f23329) C:\Windows\system32\DRIVERS\snp2uvc.sys
13:02:42.0150 5500 SNP2UVC - ok
13:02:42.0170 5500 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
13:02:42.0172 5500 spldr - ok
13:02:42.0253 5500 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
13:02:42.0259 5500 srv - ok
13:02:42.0319 5500 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
13:02:42.0327 5500 srv2 - ok
13:02:42.0351 5500 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
13:02:42.0355 5500 srvnet - ok
13:02:42.0393 5500 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
13:02:42.0396 5500 stexstor - ok
13:02:42.0435 5500 STHDA (97fdbc63c92e6dab900fd37656cca782) C:\Windows\system32\DRIVERS\stwrt64.sys
13:02:42.0444 5500 STHDA - ok
13:02:42.0478 5500 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
13:02:42.0481 5500 storflt - ok
13:02:42.0514 5500 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
13:02:42.0516 5500 storvsc - ok
13:02:42.0540 5500 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
13:02:42.0542 5500 swenum - ok
13:02:42.0589 5500 SynTP (2f827bb08cc7f1a17df2ead7b424d731) C:\Windows\system32\DRIVERS\SynTP.sys
13:02:42.0594 5500 SynTP - ok
13:02:42.0667 5500 tap0901 (18a198fcb0c3efd891bd567b69ada6da) C:\Windows\system32\DRIVERS\tap0901.sys
13:02:42.0670 5500 tap0901 - ok
13:02:42.0811 5500 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
13:02:42.0854 5500 Tcpip - ok
13:02:42.0899 5500 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
13:02:42.0912 5500 TCPIP6 - ok
13:02:42.0940 5500 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
13:02:42.0942 5500 tcpipreg - ok
13:02:42.0971 5500 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
13:02:42.0973 5500 TDPIPE - ok
13:02:42.0996 5500 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
13:02:42.0997 5500 TDTCP - ok
13:02:43.0030 5500 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
13:02:43.0033 5500 tdx - ok
13:02:43.0052 5500 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
13:02:43.0054 5500 TermDD - ok
13:02:43.0081 5500 TfFsMon - ok
13:02:43.0091 5500 TfNetMon - ok
13:02:43.0107 5500 TfSysMon - ok
13:02:43.0148 5500 TPM (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
13:02:43.0151 5500 TPM - ok
13:02:43.0173 5500 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
13:02:43.0175 5500 tssecsrv - ok
13:02:43.0197 5500 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
13:02:43.0200 5500 tunnel - ok
13:02:43.0222 5500 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
13:02:43.0224 5500 uagp35 - ok
13:02:43.0255 5500 udfs (c06e6f4679ceb8f430b90a51d76d8d3c) C:\Windows\system32\DRIVERS\udfs.sys
13:02:43.0261 5500 udfs - ok
13:02:43.0291 5500 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
13:02:43.0293 5500 uliagpkx - ok
13:02:43.0314 5500 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
13:02:43.0316 5500 umbus - ok
13:02:43.0327 5500 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
13:02:43.0328 5500 UmPass - ok
13:02:43.0400 5500 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
13:02:43.0402 5500 usbaudio - ok
13:02:43.0455 5500 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
13:02:43.0458 5500 usbccgp - ok
13:02:43.0479 5500 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
13:02:43.0481 5500 usbcir - ok
13:02:43.0499 5500 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
13:02:43.0501 5500 usbehci - ok
13:02:43.0525 5500 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
13:02:43.0531 5500 usbhub - ok
13:02:43.0582 5500 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
13:02:43.0584 5500 usbohci - ok
13:02:43.0617 5500 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
13:02:43.0619 5500 usbprint - ok
13:02:43.0645 5500 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
13:02:43.0647 5500 USBSTOR - ok
13:02:43.0669 5500 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
13:02:43.0671 5500 usbuhci - ok
13:02:43.0715 5500 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
13:02:43.0719 5500 usbvideo - ok
13:02:43.0797 5500 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys
13:02:43.0800 5500 usb_rndisx - ok
13:02:43.0829 5500 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
13:02:43.0831 5500 vdrvroot - ok
13:02:43.0852 5500 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
13:02:43.0854 5500 vga - ok
13:02:43.0877 5500 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
13:02:43.0879 5500 VgaSave - ok
13:02:43.0907 5500 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
13:02:43.0911 5500 vhdmp - ok
13:02:43.0935 5500 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
13:02:43.0937 5500 viaide - ok
13:02:43.0975 5500 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
13:02:43.0979 5500 vmbus - ok
13:02:44.0000 5500 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
13:02:44.0002 5500 VMBusHID - ok
13:02:44.0059 5500 vmm (c117cedfb9bfeadb29106fdac1358470) C:\Windows\system32\Drivers\vmm.sys
13:02:44.0061 5500 vmm - ok
13:02:44.0085 5500 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
13:02:44.0088 5500 volmgr - ok
13:02:44.0120 5500 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
13:02:44.0126 5500 volmgrx - ok
13:02:44.0143 5500 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
13:02:44.0153 5500 volsnap - ok
13:02:44.0225 5500 VPCNetS2 (bc2ea40b98b5e866d9a4f98afb66b682) C:\Windows\system32\DRIVERS\VMNetSrv.sys
13:02:44.0230 5500 VPCNetS2 - ok
13:02:44.0272 5500 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
13:02:44.0276 5500 vsmraid - ok
13:02:44.0351 5500 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
13:02:44.0353 5500 vwifibus - ok
13:02:44.0403 5500 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
13:02:44.0406 5500 vwififlt - ok
13:02:44.0450 5500 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
13:02:44.0452 5500 vwifimp - ok
13:02:44.0545 5500 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
13:02:44.0546 5500 WacomPen - ok
13:02:44.0604 5500 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
13:02:44.0606 5500 WANARP - ok
13:02:44.0610 5500 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
13:02:44.0611 5500 Wanarpv6 - ok
13:02:44.0660 5500 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
13:02:44.0662 5500 Wd - ok
13:02:44.0692 5500 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
13:02:44.0710 5500 Wdf01000 - ok
13:02:44.0743 5500 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
13:02:44.0744 5500 WfpLwf - ok
13:02:44.0769 5500 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
13:02:44.0771 5500 WIMMount - ok
13:02:44.0807 5500 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUSB.sys
13:02:44.0809 5500 WinUSB - ok
13:02:44.0829 5500 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
13:02:44.0831 5500 WmiAcpi - ok
13:02:44.0872 5500 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
13:02:44.0874 5500 ws2ifsl - ok
13:02:44.0897 5500 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
13:02:44.0900 5500 WudfPf - ok
13:02:44.0923 5500 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
13:02:44.0927 5500 WUDFRd - ok
13:02:44.0943 5500 xpvcom - ok
13:02:44.0981 5500 MBR (0x1B8) (812f91cb609970fc0addb2e76794ea47) \Device\Harddisk0\DR0
13:02:45.0008 5500 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - infected
13:02:45.0008 5500 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.a (0)
13:02:45.0040 5500 Boot (0x1200) (4fb228dfd9f38de9a0ec25a4c47cdc0c) \Device\Harddisk0\DR0\Partition0
13:02:45.0042 5500 \Device\Harddisk0\DR0\Partition0 - ok
13:02:45.0053 5500 Boot (0x1200) (49446caf705899add26073122a3b3b7a) \Device\Harddisk0\DR0\Partition1
13:02:45.0055 5500 \Device\Harddisk0\DR0\Partition1 - ok
13:02:45.0085 5500 Boot (0x1200) (ff03c564f2946870f35e72d376be29cb) \Device\Harddisk0\DR0\Partition2
13:02:45.0086 5500 \Device\Harddisk0\DR0\Partition2 - ok
13:02:45.0106 5500 Boot (0x1200) (86767097ee8dc6aa38057aba4dbbecd7) \Device\Harddisk0\DR0\Partition3
13:02:45.0107 5500 \Device\Harddisk0\DR0\Partition3 - ok
13:02:45.0107 5500 ============================================================
13:02:45.0107 5500 Scan finished
13:02:45.0107 5500 ============================================================
13:02:45.0192 5960 Detected object count: 1
13:02:45.0192 5960 Actual detected object count: 1
13:02:57.0312 5960 \Device\Harddisk0\DR0\# - copied to quarantine
13:02:57.0312 5960 \Device\Harddisk0\DR0 - copied to quarantine
13:02:57.0373 5960 \Device\Harddisk0\DR0 - processing error
13:03:11.0154 5960 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - User select action: Cure
20:44:48.0486 4064 ============================================================
20:44:48.0486 4064 Scan started
20:44:48.0486 4064 Mode: Manual;
20:44:48.0486 4064 ============================================================
20:44:49.0003 4064 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
20:44:49.0003 4064 1394ohci - ok
20:44:49.0065 4064 Accelerometer (1cffe9c06e66a57dae1452e449a58240) C:\Windows\system32\DRIVERS\Accelerometer.sys
20:44:49.0066 4064 Accelerometer - ok
20:44:49.0092 4064 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
20:44:49.0096 4064 ACPI - ok
20:44:49.0120 4064 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
20:44:49.0120 4064 AcpiPmi - ok
20:44:49.0173 4064 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
20:44:49.0177 4064 adp94xx - ok
20:44:49.0210 4064 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
20:44:49.0213 4064 adpahci - ok
20:44:49.0238 4064 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
20:44:49.0240 4064 adpu320 - ok
20:44:49.0303 4064 AF15BDA (d0982acdda4ba27621ff4b1d7dd2c6cd) C:\Windows\system32\Drivers\AF15BDA.sys
20:44:49.0307 4064 AF15BDA - ok
20:44:49.0424 4064 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
20:44:49.0429 4064 AFD - ok
20:44:49.0484 4064 AgereSoftModem (c98356d813b581e9c425b42a5d146ce0) C:\Windows\system32\DRIVERS\agrsm64.sys
20:44:49.0498 4064 AgereSoftModem - ok
20:44:49.0530 4064 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
20:44:49.0531 4064 agp440 - ok
20:44:49.0557 4064 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
20:44:49.0557 4064 aliide - ok
20:44:49.0580 4064 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
20:44:49.0581 4064 amdide - ok
20:44:49.0608 4064 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
20:44:49.0609 4064 AmdK8 - ok
20:44:49.0631 4064 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
20:44:49.0632 4064 AmdPPM - ok
20:44:49.0718 4064 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
20:44:49.0719 4064 amdsata - ok
20:44:49.0763 4064 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
20:44:49.0766 4064 amdsbs - ok
20:44:49.0789 4064 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
20:44:49.0789 4064 amdxata - ok
20:44:49.0805 4064 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
20:44:49.0806 4064 AppID - ok
20:44:49.0852 4064 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
20:44:49.0853 4064 arc - ok
20:44:49.0900 4064 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
20:44:49.0900 4064 arcsas - ok
20:44:49.0991 4064 ArcSec (a7409b5c0e35ddee64f16f3054e5530b) C:\Windows\system32\drivers\ArcSec.sys
20:44:49.0993 4064 ArcSec - ok
20:44:50.0018 4064 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
20:44:50.0019 4064 AsyncMac - ok
20:44:50.0037 4064 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
20:44:50.0038 4064 atapi - ok
20:44:50.0125 4064 avgntflt (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
20:44:50.0128 4064 avgntflt - ok
20:44:50.0220 4064 avipbb (f1c9db5f7b2a56a0b29667d22ba540fc) C:\Windows\system32\DRIVERS\avipbb.sys
20:44:50.0220 4064 avipbb - ok
20:44:50.0251 4064 avkmgr (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
20:44:50.0251 4064 avkmgr - ok
20:44:50.0298 4064 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
20:44:50.0298 4064 b06bdrv - ok
20:44:50.0329 4064 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
20:44:50.0329 4064 b57nd60a - ok
20:44:50.0360 4064 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
20:44:50.0360 4064 Beep - ok
20:44:50.0391 4064 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
20:44:50.0391 4064 blbdrive - ok
20:44:50.0422 4064 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
20:44:50.0422 4064 bowser - ok
20:44:50.0454 4064 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:44:50.0454 4064 BrFiltLo - ok
20:44:50.0469 4064 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:44:50.0469 4064 BrFiltUp - ok
20:44:50.0485 4064 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
20:44:50.0485 4064 Brserid - ok
20:44:50.0532 4064 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
20:44:50.0532 4064 BrSerWdm - ok
20:44:50.0563 4064 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
20:44:50.0578 4064 BrUsbMdm - ok
20:44:50.0598 4064 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
20:44:50.0599 4064 BrUsbSer - ok
20:44:50.0667 4064 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
20:44:50.0668 4064 BthEnum - ok
20:44:50.0706 4064 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
20:44:50.0708 4064 BTHMODEM - ok
20:44:50.0742 4064 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
20:44:50.0744 4064 BthPan - ok
20:44:50.0769 4064 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
20:44:50.0774 4064 BTHPORT - ok
20:44:50.0803 4064 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
20:44:50.0804 4064 BTHUSB - ok
20:44:50.0832 4064 btwaudio (4bdbdb86abba924e029fb2683be7c505) C:\Windows\system32\drivers\btwaudio.sys
20:44:50.0834 4064 btwaudio - ok
20:44:50.0857 4064 btwavdt (5c849bd7c78791c5cee9f4651d7fe38d) C:\Windows\system32\DRIVERS\btwavdt.sys
20:44:50.0858 4064 btwavdt - ok
20:44:50.0879 4064 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
20:44:50.0879 4064 btwl2cap - ok
20:44:50.0904 4064 btwrchid (3e1991afa851a36dc978b0a1b0535c8b) C:\Windows\system32\DRIVERS\btwrchid.sys
20:44:50.0905 4064 btwrchid - ok
20:44:50.0933 4064 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
20:44:50.0934 4064 cdfs - ok
20:44:50.0969 4064 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
20:44:50.0972 4064 cdrom - ok
20:44:50.0999 4064 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
20:44:51.0000 4064 circlass - ok
20:44:51.0045 4064 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
20:44:51.0050 4064 CLFS - ok
20:44:51.0094 4064 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
20:44:51.0095 4064 CmBatt - ok
20:44:51.0122 4064 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
20:44:51.0123 4064 cmdide - ok
20:44:51.0206 4064 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
20:44:51.0211 4064 CNG - ok
20:44:51.0237 4064 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
20:44:51.0237 4064 Compbatt - ok
20:44:51.0257 4064 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
20:44:51.0257 4064 CompositeBus - ok
20:44:51.0279 4064 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
20:44:51.0280 4064 crcdisk - ok
20:44:51.0335 4064 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
20:44:51.0339 4064 CSC - ok
20:44:51.0417 4064 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
20:44:51.0418 4064 DfsC - ok
20:44:51.0465 4064 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
20:44:51.0466 4064 discache - ok
20:44:51.0484 4064 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
20:44:51.0486 4064 Disk - ok
20:44:51.0547 4064 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
20:44:51.0548 4064 drmkaud - ok
20:44:51.0602 4064 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
20:44:51.0617 4064 DXGKrnl - ok
20:44:51.0648 4064 e1kexpress (711405da1fbc40b820db5a2b4dd939f0) C:\Windows\system32\DRIVERS\e1k62x64.sys
20:44:51.0648 4064 e1kexpress - ok
20:44:51.0726 4064 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
20:44:51.0742 4064 ebdrv - ok
20:44:51.0820 4064 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
20:44:51.0836 4064 elxstor - ok
20:44:51.0851 4064 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
20:44:51.0851 4064 ErrDev - ok
20:44:51.0898 4064 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
20:44:51.0898 4064 exfat - ok
20:44:51.0945 4064 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
20:44:51.0945 4064 fastfat - ok
20:44:51.0960 4064 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
20:44:51.0960 4064 fdc - ok
20:44:51.0992 4064 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
20:44:52.0007 4064 FileInfo - ok
20:44:52.0023 4064 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
20:44:52.0023 4064 Filetrace - ok
20:44:52.0038 4064 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
20:44:52.0038 4064 flpydisk - ok
20:44:52.0070 4064 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
20:44:52.0070 4064 FltMgr - ok
20:44:52.0085 4064 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
20:44:52.0085 4064 FsDepends - ok
20:44:52.0101 4064 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
20:44:52.0116 4064 Fs_Rec - ok
20:44:52.0197 4064 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
20:44:52.0199 4064 fvevol - ok
20:44:52.0223 4064 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
20:44:52.0224 4064 gagp30kx - ok
20:44:52.0258 4064 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
20:44:52.0258 4064 hcw85cir - ok
20:44:52.0297 4064 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
20:44:52.0300 4064 HdAudAddService - ok
20:44:52.0329 4064 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:44:52.0331 4064 HDAudBus - ok
20:44:52.0363 4064 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
20:44:52.0365 4064 HECIx64 - ok
20:44:52.0386 4064 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
20:44:52.0388 4064 HidBatt - ok
20:44:52.0410 4064 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
20:44:52.0413 4064 HidBth - ok
20:44:52.0436 4064 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
20:44:52.0439 4064 HidIr - ok
20:44:52.0473 4064 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
20:44:52.0475 4064 HidUsb - ok
20:44:52.0527 4064 hpdskflt (05712fddbd45a5864eb326faabc6a4e3) C:\Windows\system32\DRIVERS\hpdskflt.sys
20:44:52.0530 4064 hpdskflt - ok
20:44:52.0554 4064 HpqKbFiltr (9af482d058be59cc28bce52e7c4b747c) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
20:44:52.0555 4064 HpqKbFiltr - ok
20:44:52.0585 4064 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
20:44:52.0588 4064 HpSAMD - ok
20:44:52.0655 4064 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
20:44:52.0677 4064 HTTP - ok
20:44:52.0696 4064 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
20:44:52.0697 4064 hwpolicy - ok
20:44:52.0714 4064 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
20:44:52.0717 4064 i8042prt - ok
20:44:52.0756 4064 iaStor (bbb3b6df1abb0fe35802ede85cc1c011) C:\Windows\system32\DRIVERS\iaStor.sys
20:44:52.0762 4064 iaStor - ok
20:44:52.0831 4064 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
20:44:52.0838 4064 iaStorV - ok
20:44:53.0101 4064 igfx (f59ac361dfe9bfd9be81e20b04eadaa2) C:\Windows\system32\DRIVERS\igdkmd64.sys
20:44:53.0296 4064 igfx - ok
20:44:53.0327 4064 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
20:44:53.0327 4064 iirsp - ok
20:44:53.0358 4064 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
20:44:53.0358 4064 Impcd - ok
20:44:53.0374 4064 IntcDAud (4429b91b0fe91f9be8e24e93cc960368) C:\Windows\system32\DRIVERS\IntcDAud.sys
20:44:53.0389 4064 IntcDAud - ok
20:44:53.0405 4064 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
20:44:53.0405 4064 intelide - ok
20:44:53.0420 4064 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
20:44:53.0420 4064 intelppm - ok
20:44:53.0452 4064 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:44:53.0452 4064 IpFilterDriver - ok
20:44:53.0467 4064 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
20:44:53.0483 4064 IPMIDRV - ok
20:44:53.0498 4064 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
20:44:53.0498 4064 IPNAT - ok
20:44:53.0530 4064 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
20:44:53.0530 4064 IRENUM - ok
20:44:53.0545 4064 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
20:44:53.0545 4064 isapnp - ok
20:44:53.0576 4064 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
20:44:53.0592 4064 iScsiPrt - ok
20:44:53.0608 4064 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
20:44:53.0608 4064 kbdclass - ok
20:44:53.0639 4064 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
20:44:53.0639 4064 kbdhid - ok
20:44:53.0686 4064 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
20:44:53.0701 4064 KSecDD - ok
20:44:53.0766 4064 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
20:44:53.0770 4064 KSecPkg - ok
20:44:53.0788 4064 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
20:44:53.0790 4064 ksthunk - ok
20:44:53.0826 4064 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
20:44:53.0828 4064 lltdio - ok
20:44:53.0865 4064 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
20:44:53.0868 4064 LSI_FC - ok
20:44:53.0886 4064 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
20:44:53.0889 4064 LSI_SAS - ok
20:44:53.0912 4064 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:44:53.0915 4064 LSI_SAS2 - ok
20:44:53.0927 4064 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:44:53.0930 4064 LSI_SCSI - ok
20:44:53.0955 4064 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
20:44:53.0958 4064 luafv - ok
20:44:53.0990 4064 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
20:44:53.0992 4064 megasas - ok
20:44:54.0018 4064 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
20:44:54.0025 4064 MegaSR - ok
20:44:54.0060 4064 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
20:44:54.0062 4064 Modem - ok
20:44:54.0084 4064 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
20:44:54.0085 4064 monitor - ok
20:44:54.0100 4064 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
20:44:54.0102 4064 mouclass - ok
20:44:54.0117 4064 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
20:44:54.0118 4064 mouhid - ok
20:44:54.0140 4064 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
20:44:54.0143 4064 mountmgr - ok
20:44:54.0156 4064 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
20:44:54.0159 4064 mpio - ok
20:44:54.0173 4064 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
20:44:54.0176 4064 mpsdrv - ok
20:44:54.0207 4064 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
20:44:54.0211 4064 MRxDAV - ok
20:44:54.0264 4064 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:44:54.0268 4064 mrxsmb - ok
20:44:54.0332 4064 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:44:54.0338 4064 mrxsmb10 - ok
20:44:54.0362 4064 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:44:54.0365 4064 mrxsmb20 - ok
20:44:54.0381 4064 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
20:44:54.0383 4064 msahci - ok
20:44:54.0419 4064 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
20:44:54.0423 4064 msdsm - ok
20:44:54.0467 4064 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
20:44:54.0469 4064 Msfs - ok
20:44:54.0491 4064 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
20:44:54.0493 4064 mshidkmdf - ok
20:44:54.0508 4064 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
20:44:54.0510 4064 msisadrv - ok
20:44:54.0537 4064 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
20:44:54.0539 4064 MSKSSRV - ok
20:44:54.0564 4064 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
20:44:54.0566 4064 MSPCLOCK - ok
20:44:54.0606 4064 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
20:44:54.0608 4064 MSPQM - ok
20:44:54.0638 4064 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
20:44:54.0645 4064 MsRPC - ok
20:44:54.0668 4064 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
20:44:54.0670 4064 mssmbios - ok
20:44:54.0693 4064 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
20:44:54.0693 4064 MSTEE - ok
20:44:54.0709 4064 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
20:44:54.0709 4064 MTConfig - ok
20:44:54.0740 4064 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
20:44:54.0740 4064 Mup - ok
20:44:54.0787 4064 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
20:44:54.0787 4064 NativeWifiP - ok
20:44:54.0834 4064 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
20:44:54.0849 4064 NDIS - ok
20:44:54.0865 4064 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
20:44:54.0880 4064 NdisCap - ok
20:44:54.0896 4064 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
20:44:54.0896 4064 NdisTapi - ok
20:44:54.0912 4064 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
20:44:54.0912 4064 Ndisuio - ok
20:44:54.0943 4064 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
20:44:54.0943 4064 NdisWan - ok
20:44:54.0958 4064 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
20:44:54.0958 4064 NDProxy - ok
20:44:54.0990 4064 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
20:44:54.0990 4064 NetBIOS - ok
20:44:55.0021 4064 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
20:44:55.0021 4064 NetBT - ok
20:44:55.0239 4064 NETw5s64 (39ede676d17f37af4573c2b33ec28aca) C:\Windows\system32\DRIVERS\NETw5s64.sys
20:44:55.0400 4064 NETw5s64 - ok
20:44:55.0426 4064 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
20:44:55.0429 4064 nfrd960 - ok
20:44:55.0456 4064 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
20:44:55.0458 4064 Npfs - ok
20:44:55.0476 4064 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
20:44:55.0478 4064 nsiproxy - ok
20:44:55.0571 4064 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
20:44:55.0605 4064 Ntfs - ok
20:44:55.0626 4064 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
20:44:55.0628 4064 Null - ok
20:44:55.0677 4064 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
20:44:55.0681 4064 nvraid - ok
20:44:55.0710 4064 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
20:44:55.0714 4064 nvstor - ok
20:44:55.0739 4064 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
20:44:55.0743 4064 nv_agp - ok
20:44:55.0763 4064 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
20:44:55.0766 4064 ohci1394 - ok
20:44:55.0806 4064 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
20:44:55.0809 4064 Parport - ok
20:44:55.0829 4064 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
20:44:55.0832 4064 partmgr - ok
20:44:55.0856 4064 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
20:44:55.0860 4064 pci - ok
20:44:55.0886 4064 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
20:44:55.0888 4064 pciide - ok
20:44:55.0909 4064 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
20:44:55.0914 4064 pcmcia - ok
20:44:55.0933 4064 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
20:44:55.0935 4064 pcw - ok
20:44:55.0967 4064 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
20:44:55.0984 4064 PEAUTH - ok
20:44:56.0051 4064 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
20:44:56.0055 4064 PptpMiniport - ok
20:44:56.0073 4064 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
20:44:56.0076 4064 Processor - ok
20:44:56.0104 4064 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
20:44:56.0108 4064 Psched - ok
20:44:56.0160 4064 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
20:44:56.0194 4064 ql2300 - ok
20:44:56.0207 4064 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
20:44:56.0210 4064 ql40xx - ok
20:44:56.0237 4064 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
20:44:56.0240 4064 QWAVEdrv - ok
20:44:56.0247 4064 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
20:44:56.0263 4064 RasAcd - ok
20:44:56.0278 4064 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
20:44:56.0278 4064 RasAgileVpn - ok
20:44:56.0309 4064 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:44:56.0309 4064 Rasl2tp - ok
20:44:56.0341 4064 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
20:44:56.0341 4064 RasPppoe - ok
20:44:56.0356 4064 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
20:44:56.0356 4064 RasSstp - ok
20:44:56.0387 4064 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
20:44:56.0387 4064 rdbss - ok
20:44:56.0419 4064 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
20:44:56.0419 4064 rdpbus - ok
20:44:56.0434 4064 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:44:56.0434 4064 RDPCDD - ok
20:44:56.0481 4064 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
20:44:56.0481 4064 RDPDR - ok
20:44:56.0528 4064 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
20:44:56.0528 4064 RDPENCDD - ok
20:44:56.0590 4064 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
20:44:56.0590 4064 RDPREFMP - ok
20:44:56.0637 4064 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
20:44:56.0653 4064 RDPWD - ok
20:44:56.0668 4064 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
20:44:56.0684 4064 rdyboost - ok
20:44:56.0715 4064 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
20:44:56.0715 4064 RFCOMM - ok
20:44:56.0793 4064 rimmptsk (6faf5b04bedc66d300d9d233b2d222f0)

Log part2 ->
C:\Windows\system32\DRIVERS\rimmpx64.sys
20:44:56.0793 4064 rimmptsk - ok
20:44:56.0830 4064 rismcx64 (d018844dc53d8428410a2feeeee9373e) C:\Windows\system32\DRIVERS\rismcx64.sys
20:44:56.0832 4064 rismcx64 - ok
20:44:56.0861 4064 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
20:44:56.0864 4064 rspndr - ok
20:44:56.0919 4064 s0016bus (ea268bce30691c2dd24f02e617fd2eb5) C:\Windows\system32\DRIVERS\s0016bus.sys
20:44:56.0922 4064 s0016bus - ok
20:44:56.0973 4064 s0016mdfl (f5f9deb89996d333ef976624d37e24e3) C:\Windows\system32\DRIVERS\s0016mdfl.sys
20:44:56.0975 4064 s0016mdfl - ok
20:44:57.0041 4064 s0016mdm (c17ce2aee67480febcc36eccb54c0be8) C:\Windows\system32\DRIVERS\s0016mdm.sys
20:44:57.0046 4064 s0016mdm - ok
20:44:57.0100 4064 s0016mgmt (cc267f04c54c5ec5b7bd658d7628469f) C:\Windows\system32\DRIVERS\s0016mgmt.sys
20:44:57.0104 4064 s0016mgmt - ok
20:44:57.0155 4064 s0016nd5 (30a35bbce09d9fe67482fd62c61911fc) C:\Windows\system32\DRIVERS\s0016nd5.sys
20:44:57.0157 4064 s0016nd5 - ok
20:44:57.0225 4064 s0016obex (ca394dcc38579c7ad82e83ee64d798a0) C:\Windows\system32\DRIVERS\s0016obex.sys
20:44:57.0230 4064 s0016obex - ok
20:44:57.0245 4064 s0016unic (eb267ccea84e6e8598d92f73332ac67b) C:\Windows\system32\DRIVERS\s0016unic.sys
20:44:57.0248 4064 s0016unic - ok
20:44:57.0306 4064 s1018bus (301fba4594fb5c0a469299a65106b4aa) C:\Windows\system32\DRIVERS\s1018bus.sys
20:44:57.0309 4064 s1018bus - ok
20:44:57.0337 4064 s1018mdfl (d1d7c744f79710357e60fc04d125ed01) C:\Windows\system32\DRIVERS\s1018mdfl.sys
20:44:57.0339 4064 s1018mdfl - ok
20:44:57.0374 4064 s1018mdm (7dbe12cccd837d4266b2ddd80a329c09) C:\Windows\system32\DRIVERS\s1018mdm.sys
20:44:57.0378 4064 s1018mdm - ok
20:44:57.0400 4064 s1018mgmt (065ff5e62d2d18a6d93fd925546cd549) C:\Windows\system32\DRIVERS\s1018mgmt.sys
20:44:57.0403 4064 s1018mgmt - ok
20:44:57.0426 4064 s1018nd5 (5101d815bdf0d667e3d5f0ea727caaee) C:\Windows\system32\DRIVERS\s1018nd5.sys
20:44:57.0429 4064 s1018nd5 - ok
20:44:57.0454 4064 s1018obex (13f220c65b444ac9bda49dacfc3230bb) C:\Windows\system32\DRIVERS\s1018obex.sys
20:44:57.0458 4064 s1018obex - ok
20:44:57.0484 4064 s1018unic (ce7d8bce80211d8a35f6bd7a87791860) C:\Windows\system32\DRIVERS\s1018unic.sys
20:44:57.0487 4064 s1018unic - ok
20:44:57.0522 4064 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
20:44:57.0524 4064 s3cap - ok
20:44:57.0546 4064 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
20:44:57.0549 4064 sbp2port - ok
20:44:57.0608 4064 SCDEmu (b2f50286dc82b93c013e3fc57ba1a956) C:\Windows\system32\drivers\SCDEmu.sys
20:44:57.0611 4064 SCDEmu - ok
20:44:57.0630 4064 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
20:44:57.0632 4064 scfilter - ok
20:44:57.0669 4064 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
20:44:57.0673 4064 sdbus - ok
20:44:57.0688 4064 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
20:44:57.0689 4064 secdrv - ok
20:44:57.0719 4064 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
20:44:57.0721 4064 Serenum - ok
20:44:57.0755 4064 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
20:44:57.0758 4064 Serial - ok
20:44:57.0777 4064 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
20:44:57.0779 4064 sermouse - ok
20:44:57.0801 4064 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
20:44:57.0801 4064 sffdisk - ok
20:44:57.0816 4064 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
20:44:57.0816 4064 sffp_mmc - ok
20:44:57.0832 4064 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
20:44:57.0832 4064 sffp_sd - ok
20:44:57.0847 4064 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
20:44:57.0847 4064 sfloppy - ok
20:44:57.0879 4064 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:44:57.0879 4064 SiSRaid2 - ok
20:44:57.0894 4064 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
20:44:57.0894 4064 SiSRaid4 - ok
20:44:57.0925 4064 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
20:44:57.0925 4064 Smb - ok
20:44:58.0003 4064 SNP2UVC (a676e7f5c305cbc3d3d0e4d718f23329) C:\Windows\system32\DRIVERS\snp2uvc.sys
20:44:58.0035 4064 SNP2UVC - ok
20:44:58.0066 4064 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
20:44:58.0066 4064 spldr - ok
20:44:58.0159 4064 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
20:44:58.0175 4064 srv - ok
20:44:58.0206 4064 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
20:44:58.0206 4064 srv2 - ok
20:44:58.0237 4064 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
20:44:58.0237 4064 srvnet - ok
20:44:58.0284 4064 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
20:44:58.0284 4064 stexstor - ok
20:44:58.0315 4064 STHDA (97fdbc63c92e6dab900fd37656cca782) C:\Windows\system32\DRIVERS\stwrt64.sys
20:44:58.0331 4064 STHDA - ok
20:44:58.0370 4064 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
20:44:58.0373 4064 storflt - ok
20:44:58.0397 4064 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
20:44:58.0400 4064 storvsc - ok
20:44:58.0424 4064 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
20:44:58.0426 4064 swenum - ok
20:44:58.0464 4064 SynTP (2f827bb08cc7f1a17df2ead7b424d731) C:\Windows\system32\DRIVERS\SynTP.sys
20:44:58.0470 4064 SynTP - ok
20:44:58.0542 4064 tap0901 (18a198fcb0c3efd891bd567b69ada6da) C:\Windows\system32\DRIVERS\tap0901.sys
20:44:58.0544 4064 tap0901 - ok
20:44:58.0688 4064 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
20:44:58.0772 4064 Tcpip - ok
20:44:58.0827 4064 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
20:44:58.0844 4064 TCPIP6 - ok
20:44:58.0865 4064 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
20:44:58.0867 4064 tcpipreg - ok
20:44:58.0896 4064 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
20:44:58.0898 4064 TDPIPE - ok
20:44:58.0920 4064 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
20:44:58.0922 4064 TDTCP - ok
20:44:58.0939 4064 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
20:44:58.0941 4064 tdx - ok
20:44:58.0960 4064 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
20:44:58.0962 4064 TermDD - ok
20:44:58.0990 4064 TfFsMon - ok
20:44:59.0002 4064 TfNetMon - ok
20:44:59.0015 4064 TfSysMon - ok
20:44:59.0056 4064 TPM (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
20:44:59.0059 4064 TPM - ok
20:44:59.0089 4064 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:44:59.0092 4064 tssecsrv - ok
20:44:59.0113 4064 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
20:44:59.0117 4064 tunnel - ok
20:44:59.0138 4064 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
20:44:59.0141 4064 uagp35 - ok
20:44:59.0180 4064 udfs (c06e6f4679ceb8f430b90a51d76d8d3c) C:\Windows\system32\DRIVERS\udfs.sys
20:44:59.0186 4064 udfs - ok
20:44:59.0216 4064 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
20:44:59.0218 4064 uliagpkx - ok
20:44:59.0238 4064 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
20:44:59.0241 4064 umbus - ok
20:44:59.0253 4064 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
20:44:59.0254 4064 UmPass - ok
20:44:59.0325 4064 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
20:44:59.0328 4064 usbaudio - ok
20:44:59.0385 4064 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
20:44:59.0385 4064 usbccgp - ok
20:44:59.0417 4064 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
20:44:59.0417 4064 usbcir - ok
20:44:59.0448 4064 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
20:44:59.0448 4064 usbehci - ok
20:44:59.0463 4064 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
20:44:59.0479 4064 usbhub - ok
20:44:59.0495 4064 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
20:44:59.0495 4064 usbohci - ok
20:44:59.0526 4064 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
20:44:59.0526 4064 usbprint - ok
20:44:59.0541 4064 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:44:59.0541 4064 USBSTOR - ok
20:44:59.0573 4064 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
20:44:59.0573 4064 usbuhci - ok
20:44:59.0619 4064 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
20:44:59.0619 4064 usbvideo - ok
20:44:59.0666 4064 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys
20:44:59.0682 4064 usb_rndisx - ok
20:44:59.0713 4064 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
20:44:59.0713 4064 vdrvroot - ok
20:44:59.0744 4064 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
20:44:59.0744 4064 vga - ok
20:44:59.0775 4064 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
20:44:59.0775 4064 VgaSave - ok
20:44:59.0807 4064 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
20:44:59.0807 4064 vhdmp - ok
20:44:59.0822 4064 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
20:44:59.0822 4064 viaide - ok
20:44:59.0869 4064 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
20:44:59.0869 4064 vmbus - ok
20:44:59.0900 4064 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
20:44:59.0900 4064 VMBusHID - ok
20:44:59.0959 4064 vmm (c117cedfb9bfeadb29106fdac1358470) C:\Windows\system32\Drivers\vmm.sys
20:44:59.0965 4064 vmm - ok
20:44:59.0985 4064 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
20:44:59.0988 4064 volmgr - ok
20:45:00.0012 4064 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
20:45:00.0019 4064 volmgrx - ok
20:45:00.0045 4064 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
20:45:00.0051 4064 volsnap - ok
20:45:00.0109 4064 VPCNetS2 (bc2ea40b98b5e866d9a4f98afb66b682) C:\Windows\system32\DRIVERS\VMNetSrv.sys
20:45:00.0112 4064 VPCNetS2 - ok
20:45:00.0139 4064 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
20:45:00.0143 4064 vsmraid - ok
20:45:00.0169 4064 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
20:45:00.0171 4064 vwifibus - ok
20:45:00.0196 4064 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
20:45:00.0198 4064 vwififlt - ok
20:45:00.0217 4064 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
20:45:00.0219 4064 vwifimp - ok
20:45:00.0247 4064 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
20:45:00.0249 4064 WacomPen - ok
20:45:00.0273 4064 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
20:45:00.0276 4064 WANARP - ok
20:45:00.0281 4064 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
20:45:00.0282 4064 Wanarpv6 - ok
20:45:00.0321 4064 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
20:45:00.0324 4064 Wd - ok
20:45:00.0355 4064 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
20:45:00.0372 4064 Wdf01000 - ok
20:45:00.0404 4064 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
20:45:00.0406 4064 WfpLwf - ok
20:45:00.0430 4064 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
20:45:00.0432 4064 WIMMount - ok
20:45:00.0485 4064 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUSB.sys
20:45:00.0487 4064 WinUSB - ok
20:45:00.0515 4064 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
20:45:00.0516 4064 WmiAcpi - ok
20:45:00.0575 4064 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
20:45:00.0577 4064 ws2ifsl - ok
20:45:00.0616 4064 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
20:45:00.0620 4064 WudfPf - ok
20:45:00.0643 4064 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:45:00.0647 4064 WUDFRd - ok
20:45:00.0667 4064 xpvcom - ok
20:45:00.0716 4064 MBR (0x1B8) (812f91cb609970fc0addb2e76794ea47) \Device\Harddisk0\DR0
20:45:00.0744 4064 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - infected
20:45:00.0744 4064 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.a (0)
20:45:00.0775 4064 Boot (0x1200) (4fb228dfd9f38de9a0ec25a4c47cdc0c) \Device\Harddisk0\DR0\Partition0
20:45:00.0777 4064 \Device\Harddisk0\DR0\Partition0 - ok
20:45:00.0788 4064 Boot (0x1200) (49446caf705899add26073122a3b3b7a) \Device\Harddisk0\DR0\Partition1
20:45:00.0790 4064 \Device\Harddisk0\DR0\Partition1 - ok
20:45:00.0820 4064 Boot (0x1200) (ff03c564f2946870f35e72d376be29cb) \Device\Harddisk0\DR0\Partition2
20:45:00.0822 4064 \Device\Harddisk0\DR0\Partition2 - ok
20:45:00.0841 4064 Boot (0x1200) (86767097ee8dc6aa38057aba4dbbecd7) \Device\Harddisk0\DR0\Partition3
20:45:00.0842 4064 \Device\Harddisk0\DR0\Partition3 - ok
20:45:00.0843 4064 ============================================================
20:45:00.0843 4064 Scan finished
20:45:00.0843 4064 ============================================================
20:45:00.0853 6744 Detected object count: 1
20:45:00.0853 6744 Actual detected object count: 1
20:45:04.0483 6744 \Device\Harddisk0\DR0\# - copied to quarantine
20:45:04.0483 6744 \Device\Harddisk0\DR0 - copied to quarantine
20:45:04.0561 6744 \Device\Harddisk0\DR0 - processing error
20:51:16.0360 6744 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - User select action: Cure
20:51:20.0407 4200 Deinitialize success

Takto ,pytal sa na nieco ine, ci chces dat vlastny zavadzac, a podla logu ako vidim vyliecil:
20:51:16.0360 6744 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - User select action: Cure
20:51:20.0407 4200 Deinitialize success

1: najdi na C:\ TDSSKILLER_Qarantine a otestuj na WWW.virustotal.com
Device\Harddisk0\DR0 - copied to quarantine


Link vloz sem, restart a spust znova TDSSKILLER, a uvidime ci tam bude infekcia, ak ano, tak existuje moznost ze opravis zavadzac, a to tak ze odstranis cely 300mb oddiel , a spustis z disku opravu spustenia systemu, ale to uz ako posledna moznost pred reinstalom,,navod ti dam.

rootkit je tam stale, zahlasila ho avira aj tdsskiller, ako som pisal, wo warningu dam no a tym sa mbr neprepise standardnou.

Dobre, pojdes do nudzoveho rezimu, spustis TDSSKILLER, kliknes na change parameters, a hore zafajknes,
MBR a services, a spustis, log vloz sem.
ak sa spyta <Write standard boot code? das Yes,,pretoze nevidel som tam ziaden ovladac na sifrovanie, takze nemas zavadac sifrovany,
Potom spustis v nudzovom rezime aj combofix

http://www.bleepingcomputer.com/combofi ... t-combofix
log vloz sem.

tdsskiller

22:45:18.0693 1680 TDSS rootkit removing tool 2.7.10.0 Feb 7 2012 15:14:46
22:45:19.0114 1680 ============================================================
22:45:19.0114 1680 Current date / time: 2012/02/08 22:45:19.0114
22:45:19.0114 1680 SystemInfo:
22:45:19.0114 1680
22:45:19.0114 1680 OS Version: 6.1.7600 ServicePack: 0.0
22:45:19.0114 1680 Product type: Workstation
22:45:19.0114 1680 ComputerName: SKN11005
22:45:19.0114 1680 UserName: ajdus
22:45:19.0114 1680 Windows directory: C:\Windows
22:45:19.0114 1680 System windows directory: C:\Windows
22:45:19.0114 1680 Running under WOW64
22:45:19.0114 1680 Processor architecture: Intel x64
22:45:19.0114 1680 Number of processors: 4
22:45:19.0114 1680 Page size: 0x1000
22:45:19.0114 1680 Boot type: Safe boot with network
22:45:19.0114 1680 ============================================================
22:45:19.0910 1680 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:45:19.0910 1680 \Device\Harddisk0\DR0:
22:45:19.0910 1680 MBR used
22:45:19.0910 1680 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x96000
22:45:19.0910 1680 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x96800, BlocksNum 0x1AF2D800
22:45:19.0910 1680 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1AFC4000, BlocksNum 0x1E00000
22:45:19.0910 1680 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x1CDC4000, BlocksNum 0x3FD800
22:45:20.0113 1680 Initialize success
22:45:20.0113 1680 ============================================================
22:46:08.0863 1784 ============================================================
22:46:08.0863 1784 Scan started
22:46:08.0863 1784 Mode: Manual;
22:46:08.0863 1784 ============================================================
22:46:09.0440 1784 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
22:46:09.0440 1784 1394ohci - ok
22:46:09.0534 1784 Accelerometer (1cffe9c06e66a57dae1452e449a58240) C:\Windows\system32\DRIVERS\Accelerometer.sys
22:46:09.0534 1784 Accelerometer - ok
22:46:09.0596 1784 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
22:46:09.0627 1784 ACPI - ok
22:46:09.0643 1784 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
22:46:09.0658 1784 AcpiPmi - ok
22:46:09.0721 1784 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:46:09.0736 1784 adp94xx - ok
22:46:09.0768 1784 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:46:09.0768 1784 adpahci - ok
22:46:09.0783 1784 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:46:09.0799 1784 adpu320 - ok
22:46:09.0955 1784 AF15BDA (d0982acdda4ba27621ff4b1d7dd2c6cd) C:\Windows\system32\Drivers\AF15BDA.sys
22:46:10.0002 1784 AF15BDA - ok
22:46:10.0126 1784 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
22:46:10.0142 1784 AFD - ok
22:46:10.0314 1784 AgereSoftModem (c98356d813b581e9c425b42a5d146ce0) C:\Windows\system32\DRIVERS\agrsm64.sys
22:46:10.0360 1784 AgereSoftModem - ok
22:46:10.0407 1784 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
22:46:10.0407 1784 agp440 - ok
22:46:10.0438 1784 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
22:46:10.0438 1784 aliide - ok
22:46:10.0516 1784 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
22:46:10.0516 1784 amdide - ok
22:46:10.0610 1784 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:46:10.0610 1784 AmdK8 - ok
22:46:10.0657 1784 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:46:10.0657 1784 AmdPPM - ok
22:46:10.0735 1784 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
22:46:10.0750 1784 amdsata - ok
22:46:10.0797 1784 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:46:10.0797 1784 amdsbs - ok
22:46:10.0875 1784 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
22:46:10.0891 1784 amdxata - ok
22:46:10.0984 1784 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
22:46:10.0984 1784 AppID - ok
22:46:11.0078 1784 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:46:11.0078 1784 arc - ok
22:46:11.0156 1784 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:46:11.0156 1784 arcsas - ok
22:46:11.0296 1784 ArcSec (a7409b5c0e35ddee64f16f3054e5530b) C:\Windows\system32\drivers\ArcSec.sys
22:46:11.0296 1784 ArcSec - ok
22:46:11.0390 1784 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:46:11.0390 1784 AsyncMac - ok
22:46:11.0437 1784 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
22:46:11.0437 1784 atapi - ok
22:46:11.0515 1784 avgntflt (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
22:46:11.0515 1784 avgntflt - ok
22:46:11.0624 1784 avipbb (f1c9db5f7b2a56a0b29667d22ba540fc) C:\Windows\system32\DRIVERS\avipbb.sys
22:46:11.0624 1784 avipbb - ok
22:46:11.0655 1784 avkmgr (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
22:46:11.0655 1784 avkmgr - ok
22:46:11.0686 1784 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:46:11.0686 1784 b06bdrv - ok
22:46:11.0780 1784 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:46:11.0780 1784 b57nd60a - ok
22:46:11.0811 1784 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:46:11.0811 1784 Beep - ok
22:46:11.0905 1784 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:46:11.0905 1784 blbdrive - ok
22:46:11.0936 1784 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
22:46:11.0936 1784 bowser - ok
22:46:11.0967 1784 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:46:11.0967 1784 BrFiltLo - ok
22:46:11.0983 1784 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:46:11.0983 1784 BrFiltUp - ok
22:46:12.0061 1784 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:46:12.0076 1784 Brserid - ok
22:46:12.0123 1784 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:46:12.0123 1784 BrSerWdm - ok
22:46:12.0186 1784 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:46:12.0186 1784 BrUsbMdm - ok
22:46:12.0264 1784 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:46:12.0264 1784 BrUsbSer - ok
22:46:12.0326 1784 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
22:46:12.0342 1784 BthEnum - ok
22:46:12.0357 1784 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:46:12.0373 1784 BTHMODEM - ok
22:46:12.0435 1784 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
22:46:12.0435 1784 BthPan - ok
22:46:12.0466 1784 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
22:46:12.0482 1784 BTHPORT - ok
22:46:12.0529 1784 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
22:46:12.0529 1784 BTHUSB - ok
22:46:12.0560 1784 btwaudio (4bdbdb86abba924e029fb2683be7c505) C:\Windows\system32\drivers\btwaudio.sys
22:46:12.0560 1784 btwaudio - ok
22:46:12.0591 1784 btwavdt (5c849bd7c78791c5cee9f4651d7fe38d) C:\Windows\system32\DRIVERS\btwavdt.sys
22:46:12.0591 1784 btwavdt - ok
22:46:12.0607 1784 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
22:46:12.0607 1784 btwl2cap - ok
22:46:12.0654 1784 btwrchid (3e1991afa851a36dc978b0a1b0535c8b) C:\Windows\system32\DRIVERS\btwrchid.sys
22:46:12.0669 1784 btwrchid - ok
22:46:12.0700 1784 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:46:12.0716 1784 cdfs - ok
22:46:12.0841 1784 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
22:46:12.0841 1784 cdrom - ok
22:46:12.0903 1784 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:46:12.0903 1784 circlass - ok
22:46:12.0966 1784 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:46:12.0981 1784 CLFS - ok
22:46:13.0012 1784 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:46:13.0012 1784 CmBatt - ok
22:46:13.0044 1784 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
22:46:13.0044 1784 cmdide - ok
22:46:13.0137 1784 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
22:46:13.0168 1784 CNG - ok
22:46:13.0215 1784 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:46:13.0215 1784 Compbatt - ok
22:46:13.0231 1784 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
22:46:13.0246 1784 CompositeBus - ok
22:46:13.0278 1784 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:46:13.0293 1784 crcdisk - ok
22:46:13.0402 1784 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
22:46:13.0418 1784 CSC - ok
22:46:13.0527 1784 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
22:46:13.0527 1784 DfsC - ok
22:46:13.0574 1784 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:46:13.0574 1784 discache - ok
22:46:13.0605 1784 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:46:13.0621 1784 Disk - ok
22:46:13.0714 1784 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:46:13.0714 1784 drmkaud - ok
22:46:13.0839 1784 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
22:46:13.0870 1784 DXGKrnl - ok
22:46:13.0902 1784 e1kexpress (711405da1fbc40b820db5a2b4dd939f0) C:\Windows\system32\DRIVERS\e1k62x64.sys
22:46:13.0917 1784 e1kexpress - ok
22:46:14.0104 1784 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:46:14.0182 1784 ebdrv - ok
22:46:14.0276 1784 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:46:14.0292 1784 elxstor - ok
22:46:14.0354 1784 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
22:46:14.0354 1784 ErrDev - ok
22:46:14.0448 1784 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:46:14.0463 1784 exfat - ok
22:46:14.0526 1784 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:46:14.0526 1784 fastfat - ok
22:46:14.0588 1784 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:46:14.0588 1784 fdc - ok
22:46:14.0666 1784 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:46:14.0666 1784 FileInfo - ok
22:46:14.0775 1784 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:46:14.0775 1784 Filetrace - ok
22:46:14.0791 1784 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:46:14.0791 1784 flpydisk - ok
22:46:14.0822 1784 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
22:46:14.0838 1784 FltMgr - ok
22:46:14.0853 1784 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:46:14.0853 1784 FsDepends - ok
22:46:14.0916 1784 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:46:14.0916 1784 Fs_Rec - ok
22:46:14.0978 1784 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:46:14.0978 1784 fvevol - ok
22:46:15.0009 1784 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:46:15.0009 1784 gagp30kx - ok
22:46:15.0087 1784 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:46:15.0087 1784 hcw85cir - ok
22:46:15.0134 1784 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
22:46:15.0150 1784 HdAudAddService - ok
22:46:15.0196 1784 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
22:46:15.0212 1784 HDAudBus - ok
22:46:15.0274 1784 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
22:46:15.0274 1784 HECIx64 - ok
22:46:15.0321 1784 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:46:15.0321 1784 HidBatt - ok
22:46:15.0368 1784 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:46:15.0368 1784 HidBth - ok
22:46:15.0415 1784 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:46:15.0415 1784 HidIr - ok
22:46:15.0462 1784 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
22:46:15.0462 1784 HidUsb - ok
22:46:15.0540 1784 hpdskflt (05712fddbd45a5864eb326faabc6a4e3) C:\Windows\system32\DRIVERS\hpdskflt.sys
22:46:15.0540 1784 hpdskflt - ok
22:46:15.0633 1784 HpqKbFiltr (9af482d058be59cc28bce52e7c4b747c) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
22:46:15.0633 1784 HpqKbFiltr - ok
22:46:15.0664 1784 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
22:46:15.0664 1784 HpSAMD - ok
22:46:15.0742 1784 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
22:46:15.0758 1784 HTTP - ok
22:46:15.0789 1784 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
22:46:15.0789 1784 hwpolicy - ok
22:46:15.0836 1784 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
22:46:15.0836 1784 i8042prt - ok
22:46:15.0930 1784 iaStor (bbb3b6df1abb0fe35802ede85cc1c011) C:\Windows\system32\DRIVERS\iaStor.sys
22:46:15.0930 1784 iaStor - ok
22:46:16.0101 1784 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
22:46:16.0148 1784 iaStorV - ok
22:46:16.0632 1784 igfx (f59ac361dfe9bfd9be81e20b04eadaa2) C:\Windows\system32\DRIVERS\igdkmd64.sys
22:46:16.0819 1784 igfx - ok
22:46:16.0897 1784 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:46:16.0897 1784 iirsp - ok
22:46:17.0068 1784 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
22:46:17.0068 1784 Impcd - ok
22:46:17.0131 1784 IntcDAud (4429b91b0fe91f9be8e24e93cc960368) C:\Windows\system32\DRIVERS\IntcDAud.sys
22:46:17.0131 1784 IntcDAud - ok
22:46:17.0209 1784 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
22:46:17.0224 1784 intelide - ok
22:46:17.0334 1784 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:46:17.0334 1784 intelppm - ok
22:46:17.0380 1784 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:46:17.0396 1784 IpFilterDriver - ok
22:46:17.0458 1784 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
22:46:17.0458 1784 IPMIDRV - ok
22:46:17.0536 1784 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:46:17.0536 1784 IPNAT - ok
22:46:17.0583 1784 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:46:17.0583 1784 IRENUM - ok
22:46:17.0630 1784 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
22:46:17.0630 1784 isapnp - ok
22:46:17.0724 1784 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
22:46:17.0739 1784 iScsiPrt - ok
22:46:17.0770 1784 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:46:17.0770 1784 kbdclass - ok
22:46:17.0802 1784 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
22:46:17.0802 1784 kbdhid - ok
22:46:17.0864 1784 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
22:46:17.0864 1784 KSecDD - ok
22:46:17.0973 1784 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
22:46:17.0973 1784 KSecPkg - ok
22:46:18.0020 1784 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:46:18.0020 1784 ksthunk - ok
22:46:18.0051 1784 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:46:18.0051 1784 lltdio - ok
22:46:18.0098 1784 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:46:18.0098 1784 LSI_FC - ok
22:46:18.0145 1784 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:46:18.0160 1784 LSI_SAS - ok
22:46:18.0192 1784 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:46:18.0192 1784 LSI_SAS2 - ok
22:46:18.0207 1784 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:46:18.0207 1784 LSI_SCSI - ok
22:46:18.0254 1784 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:46:18.0270 1784 luafv - ok
22:46:18.0301 1784 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:46:18.0301 1784 megasas - ok
22:46:18.0332 1784 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:46:18.0332 1784 MegaSR - ok
22:46:18.0394 1784 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:46:18.0410 1784 Modem - ok
22:46:18.0441 1784 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:46:18.0457 1784 monitor - ok
22:46:18.0488 1784 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:46:18.0488 1784 mouclass - ok
22:46:18.0519 1784 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:46:18.0519 1784 mouhid - ok
22:46:18.0535 1784 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
22:46:18.0535 1784 mountmgr - ok
22:46:18.0566 1784 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
22:46:18.0582 1784 mpio - ok
22:46:18.0644 1784 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:46:18.0644 1784 mpsdrv - ok
22:46:18.0691 1784 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
22:46:18.0706 1784 MRxDAV - ok
22:46:18.0784 1784 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:46:18.0784 1784 mrxsmb - ok
22:46:18.0847 1784 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:46:18.0847 1784 mrxsmb10 - ok
22:46:18.0894 1784 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:46:18.0894 1784 mrxsmb20 - ok
22:46:18.0925 1784 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
22:46:18.0925 1784 msahci - ok
22:46:19.0003 1784 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
22:46:19.0003 1784 msdsm - ok
22:46:19.0065 1784 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:46:19.0065 1784 Msfs - ok
22:46:19.0112 1784 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:46:19.0128 1784 mshidkmdf - ok
22:46:19.0159 1784 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
22:46:19.0159 1784 msisadrv - ok
22:46:19.0206 1784 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:46:19.0206 1784 MSKSSRV - ok
22:46:19.0237 1784 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:46:19.0237 1784 MSPCLOCK - ok
22:46:19.0284 1784 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:46:19.0284 1784 MSPQM - ok
22:46:19.0346 1784 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
22:46:19.0346 1784 MsRPC - ok
22:46:19.0377 1784 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
22:46:19.0377 1784 mssmbios - ok
22:46:19.0408 1784 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:46:19.0408 1784 MSTEE - ok
22:46:19.0424 1784 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:46:19.0424 1784 MTConfig - ok
22:46:19.0502 1784 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:46:19.0502 1784 Mup - ok
22:46:19.0549 1784 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:46:19.0564 1784 NativeWifiP - ok
22:46:19.0611 1784 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
22:46:19.0627 1784 NDIS - ok
22:46:19.0658 1784 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:46:19.0658 1784 NdisCap - ok
22:46:19.0674 1784 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:46:19.0674 1784 NdisTapi - ok
22:46:19.0689 1784 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
22:46:19.0689 1784 Ndisuio - ok
22:46:19.0752 1784 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
22:46:19.0752 1784 NdisWan - ok
22:46:19.0783 1784 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
22:46:19.0783 1784 NDProxy - ok
22:46:19.0814 1784 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:46:19.0814 1784 NetBIOS - ok
22:46:19.0830 1784 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
22:46:19.0830 1784 NetBT - ok
22:46:20.0017 1784 NETw5s64 (39ede676d17f37af4573c2b33ec28aca) C:\Windows\system32\DRIVERS\NETw5s64.sys
22:46:20.0173 1784 NETw5s64 - ok
22:46:20.0220 1784 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:46:20.0235 1784 nfrd960 - ok
22:46:20.0298 1784 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:46:20.0298 1784 Npfs - ok
22:46:20.0360 1784 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:46:20.0360 1784 nsiproxy - ok
22:46:20.0454 1784 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
22:46:20.0485 1784 Ntfs - ok
22:46:20.0516 1784 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:46:20.0516 1784 Null - ok
22:46:20.0594 1784 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
22:46:20.0610 1784 nvraid - ok
22:46:20.0656 1784 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
22:46:20.0656 1784 nvstor - ok
22:46:20.0688 1784 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
22:46:20.0688 1784 nv_agp - ok
22:46:20.0703 1784 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
22:46:20.0703 1784 ohci1394 - ok
22:46:20.0781 1784 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:46:20.0781 1784 Parport - ok
22:46:20.0797 1784 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
22:46:20.0797 1784 partmgr - ok
22:46:20.0828 1784 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
22:46:20.0828 1784 pci - ok
22:46:20.0859 1784 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
22:46:20.0859 1784 pciide - ok
22:46:20.0875 1784 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:46:20.0875 1784 pcmcia - ok
22:46:20.0906 1784 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:46:20.0906 1784 pcw - ok
22:46:20.0937 1784 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:46:20.0937 1784 PEAUTH - ok
22:46:21.0000 1784 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
22:46:21.0000 1784 PptpMiniport - ok
22:46:21.0031 1784 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:46:21.0031 1784 Processor - ok
22:46:21.0046 1784 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
22:46:21.0062 1784 Psched - ok
22:46:21.0093 1784 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:46:21.0124 1784 ql2300 - ok
22:46:21.0140 1784 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:46:21.0140 1784 ql40xx - ok
22:46:21.0202 1784 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:46:21.0202 1784 QWAVEdrv - ok
22:46:21.0234 1784 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:46:21.0234 1784 RasAcd - ok
22:46:21.0249 1784 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:46:21.0249 1784 RasAgileVpn - ok
22:46:21.0280 1784 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:46:21.0280 1784 Rasl2tp - ok
22:46:21.0312 1784 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:46:21.0312 1784 RasPppoe - ok
22:46:21.0327 1784 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:46:21.0327 1784 RasSstp - ok
22:46:21.0358 1784 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
22:46:21.0358 1784 rdbss - ok
22:46:21.0374 1784 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:46:21.0374 1784 rdpbus - ok
22:46:21.0405 1784 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:46:21.0405 1784 RDPCDD - ok
22:46:21.0436 1784 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
22:46:21.0436 1784 RDPDR - ok
22:46:21.0483 1784 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:46:21.0483 1784 RDPENCDD - ok
22:46:21.0499 1784 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:46:21.0499 1784 RDPREFMP - ok
22:46:21.0530 1784 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
22:46:21.0546 1784 RDPWD - ok
22:46:21.0561 1784 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
22:46:21.0561 1784 rdyboost - ok
22:46:21.0608 1784 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
22:46:21.0608 1784 RFCOMM - ok
22:46:21.0655 1784 rimmptsk (6faf5b04bedc66d300d9d233b2d222f0) C:\Windows\system32\DRIVERS\rimmpx64.sys
22:46:21.0655 1784 rimmptsk - ok
22:46:21.0686 1784 rismcx64 (d018844dc53d8428410a2feeeee9373e) C:\Windows\system32\DRIVERS\rismcx64.sys
22:46:21.0686 1784 rismcx64 - ok
22:46:21.0733 1784 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:46:21.0733 1784 rspndr - ok
22:46:21.0842 1784 s0016bus (ea268bce30691c2dd24f02e617fd2eb5) C:\Windows\system32\DRIVERS\s0016bus.sys
22:46:21.0842 1784 s0016bus - ok
22:46:21.0920 1784 s0016mdfl (f5f9deb89996d333ef976624d37e24e3) C:\Windows\system32\DRIVERS\s0016mdfl.sys
22:46:21.0920 1784 s0016mdfl - ok
22:46:21.0982 1784 s0016mdm (c17ce2aee67480febcc36eccb54c0be8) C:\Windows\system32\DRIVERS\s0016mdm.sys
22:46:21.0982 1784 s0016mdm - ok
22:46:22.0060 1784 s0016mgmt (cc267f04c54c5ec5b7bd658d7628469f) C:\Windows\system32\DRIVERS\s0016mgmt.sys
22:46:22.0060 1784 s0016mgmt - ok
22:46:22.0107 1784 s0016nd5 (30a35bbce09d9fe67482fd62c61911fc) C:\Windows\system32\DRIVERS\s0016nd5.sys
22:46:22.0107 1784 s0016nd5 - ok
22:46:22.0170 1784 s0016obex (ca394dcc38579c7ad82e83ee64d798a0) C:\Windows\system32\DRIVERS\s0016obex.sys
22:46:22.0170 1784 s0016obex - ok
22:46:22.0248 1784 s0016unic (eb267ccea84e6e8598d92f73332ac67b) C:\Windows\system32\DRIVERS\s0016unic.sys
22:46:22.0263 1784 s0016unic - ok
22:46:22.0372 1784 s1018bus (301fba4594fb5c0a469299a65106b4aa) C:\Windows\system32\DRIVERS\s1018bus.sys
22:46:22.0372 1784 s1018bus - ok
22:46:22.0419 1784 s1018mdfl (d1d7c744f79710357e60fc04d125ed01) C:\Windows\system32\DRIVERS\s1018mdfl.sys
22:46:22.0419 1784 s1018mdfl - ok
22:46:22.0450 1784 s1018mdm (7dbe12cccd837d4266b2ddd80a329c09) C:\Windows\system32\DRIVERS\s1018mdm.sys
22:46:22.0450 1784 s1018mdm - ok
22:46:22.0482 1784 s1018mgmt (065ff5e62d2d18a6d93fd925546cd549) C:\Windows\system32\DRIVERS\s1018mgmt.sys
22:46:22.0482 1784 s1018mgmt - ok
22:46:22.0497 1784 s1018nd5 (5101d815bdf0d667e3d5f0ea727caaee) C:\Windows\system32\DRIVERS\s1018nd5.sys
22:46:22.0497 1784 s1018nd5 - ok
22:46:22.0528 1784 s1018obex (13f220c65b444ac9bda49dacfc3230bb) C:\Windows\system32\DRIVERS\s1018obex.sys
22:46:22.0544 1784 s1018obex - ok
22:46:22.0560 1784 s1018unic (ce7d8bce80211d8a35f6bd7a87791860) C:\Windows\system32\DRIVERS\s1018unic.sys
22:46:22.0575 1784 s1018unic - ok
22:46:22.0622 1784 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
22:46:22.0622 1784 s3cap - ok
22:46:22.0653 1784 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
22:46:22.0653 1784 sbp2port - ok
22:46:22.0731 1784 SCDEmu (b2f50286dc82b93c013e3fc57ba1a956) C:\Windows\system32\drivers\SCDEmu.sys
22:46:22.0731 1784 SCDEmu - ok
22:46:22.0747 1784 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
22:46:22.0747 1784 scfilter - ok
22:46:22.0794 1784 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
22:46:22.0809 1784 sdbus - ok
22:46:22.0809 1784 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:46:22.0809 1784 secdrv - ok
22:46:22.0856 1784 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:46:22.0856 1784 Serenum - ok
22:46:22.0872 1784 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:46:22.0872 1784 Serial - ok
22:46:22.0887 1784 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:46:22.0887 1784 sermouse - ok
22:46:22.0918 1784 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
22:46:22.0918 1784 sffdisk - ok
22:46:22.0918 1784 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
22:46:22.0918 1784 sffp_mmc - ok
22:46:22.0934 1784 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
22:46:22.0950 1784 sffp_sd - ok
22:46:22.0981 1784 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:46:22.0981 1784 sfloppy - ok
22:46:23.0012 1784 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:46:23.0012 1784 SiSRaid2 - ok
22:46:23.0059 1784 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:46:23.0059 1784 SiSRaid4 - ok
22:46:23.0074 1784 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:46:23.0074 1784 Smb - ok
22:46:23.0137 1784 SNP2UVC (a676e7f5c305cbc3d3d0e4d718f23329) C:\Windows\system32\DRIVERS\snp2uvc.sys
22:46:23.0168 1784 SNP2UVC - ok
22:46:23.0184 1784 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:46:23.0184 1784 spldr - ok
22:46:23.0246 1784 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
22:46:23.0262 1784 srv - ok
22:46:23.0277 1784 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
22:46:23.0277 1784 srv2 - ok
22:46:23.0308 1784 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
22:46:23.0308 1784 srvnet - ok
22:46:23.0340 1784 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:46:23.0340 1784 stexstor - ok
22:46:23.0371 1784 STHDA (97fdbc63c92e6dab900fd37656cca782) C:\Windows\system32\DRIVERS\stwrt64.sys
22:46:23.0386 1784 STHDA - ok
22:46:23.0418 1784 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
22:46:23.0418 1784 storflt - ok
22:46:23.0480 1784 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
22:46:23.0480 1784 storvsc - ok
22:46:23.0511 1784 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
22:46:23.0511 1784 swenum - ok
22:46:23.0542 1784 SynTP (2f827bb08cc7f1a17df2ead7b424d731) C:\Windows\system32\DRIVERS\SynTP.sys
22:46:23.0542 1784 SynTP - ok
22:46:23.0620 1784 tap0901 (18a198fcb0c3efd891bd567b69ada6da) C:\Windows\system32\DRIVERS\tap0901.sys
22:46:23.0620 1784 tap0901 - ok
22:46:23.0792 1784 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
22:46:23.0823 1784 Tcpip - ok
22:46:23.0854 1784 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
22:46:23.0870 1784 TCPIP6 - ok
22:46:23.0886 1784 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
22:46:23.0886 1784 tcpipreg - ok
22:46:23.0932 1784 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:46:23.0932 1784 TDPIPE - ok
22:46:23.0948 1784 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:46:23.0948 1784 TDTCP - ok
22:46:23.0979 1784 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
22:46:23.0979 1784 tdx - ok
22:46:23.0995 1784 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
22:46:23.0995 1784 TermDD - ok
22:46:24.0026 1784 TfFsMon - ok
22:46:24.0057 1784 TfNetMon - ok
22:46:24.0057 1784 TfSysMon - ok
22:46:24.0088 1784 TPM (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
22:46:24.0088 1784 TPM - ok
22:46:24.0120 1784 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:46:24.0120 1784 tssecsrv - ok
22:46:24.0135 1784 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
22:46:24.0135 1784 tunnel - ok
22:46:24.0166 1784 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:46:24.0166 1784 uagp35 - ok
22:46:24.0198 1784 udfs (c06e6f4679ceb8f430b90a51d76d8d3c) C:\Windows\system32\DRIVERS\udfs.sys
22:46:24.0213 1784 udfs - ok
22:46:24.0244 1784 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
22:46:24.0244 1784 uliagpkx - ok
22:46:24.0276 1784 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
22:46:24.0276 1784 umbus - ok
22:46:24.0291 1784 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:46:24.0291 1784 UmPass - ok
22:46:24.0385 1784 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
22:46:24.0385 1784 usbaudio - ok
22:46:24.0447 1784 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
22:46:24.0447 1784 usbccgp - ok
22:46:24.0463 1784 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
22:46:24.0478 1784 usbcir - ok
22:46:24.0510 1784 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
22:46:24.0510 1784 usbehci - ok
22:46:24.0525 1784 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
22:46:24.0541 1784 usbhub - ok
22:46:24.0572 1784 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
22:46:24.0572 1784 usbohci - ok
22:46:24.0588 1784 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:46:24.0588 1784 usbprint - ok
22:46:24.0619 1784 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:46:24.0634 1784 USBSTOR - ok
22:46:24.0650 1784 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
22:46:24.0650 1784 usbuhci - ok
22:46:24.0697 1784 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
22:46:24.0697 1784 usbvideo - ok
22:46:24.0759 1784 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys
22:46:24.0759 1784 usb_rndisx - ok
22:46:24.0790 1784 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
22:46:24.0790 1784 vdrvroot - ok
22:46:24.0822 1784 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:46:24.0822 1784 vga - ok
22:46:24.0837 1784 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:46:24.0837 1784 VgaSave - ok
22:46:24.0853 1784 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
22:46:24.0853 1784 vhdmp - ok
22:46:24.0868 1784 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
22:46:24.0884 1784 viaide - ok
22:46:24.0915 1784 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
22:46:24.0915 1784 vmbus - ok
22:46:24.0946 1784 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
22:46:24.0946 1784 VMBusHID - ok
22:46:25.0009 1784 vmm (c117cedfb9bfeadb29106fdac1358470) C:\Windows\system32\Drivers\vmm.sys
22:46:25.0009 1784 vmm - ok
22:46:25.0040 1784 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
22:46:25.0040 1784 volmgr - ok
22:46:25.0087 1784 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
22:46:25.0087 1784 volmgrx - ok
22:46:25.0118 1784 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
22:46:25.0118 1784 volsnap - ok
22:46:25.0212 1784 VPCNetS2 (bc2ea40b98b5e866d9a4f98afb66b682) C:\Windows\system32\DRIVERS\VMNetSrv.sys
22:46:25.0212 1784 VPCNetS2 - ok
22:46:25.0227 1784 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:46:25.0227 1784 vsmraid - ok
22:46:25.0258 1784 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
22:46:25.0258 1784 vwifibus - ok
22:46:25.0274 1784 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
22:46:25.0274 1784 vwififlt - ok
22:46:25.0290 1784 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
22:46:25.0290 1784 vwifimp - ok
22:46:25.0336 1784 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:46:25.0336 1784 WacomPen - ok
22:46:25.0352 1784 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:46:25.0352 1784 WANARP - ok
22:46:25.0368 1784 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:46:25.0368 1784 Wanarpv6 - ok
22:46:25.0399 1784 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:46:25.0399 1784 Wd - ok
22:46:25.0430 1784 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:46:25.0446 1784 Wdf01000 - ok
22:46:25.0477 1784 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:46:25.0477 1784 WfpLwf - ok
22:46:25.0508 1784 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:46:25.0508 1784 WIMMount - ok
22:46:25.0555 1784 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUSB.sys
22:46:25.0555 1784 WinUSB - ok
22:46:25.0586 1784 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
22:46:25.0586 1784 WmiAcpi - ok
22:46:25.0633 1784 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:46:25.0633 1784 ws2ifsl - ok
22:46:25.0664 1784 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
22:46:25.0664 1784 WudfPf - ok
22:46:25.0695 1784 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:46:25.0695 1784 WUDFRd - ok
22:46:25.0711 1784 xpvcom - ok
22:46:25.0742 1784 MBR (0x1B8) (812f91cb609970fc0addb2e76794ea47) \Device\Harddisk0\DR0
22:46:25.0773 1784 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - infected
22:46:25.0773 1784 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.a (0)
22:46:25.0804 1784 Boot (0x1200) (4fb228dfd9f38de9a0ec25a4c47cdc0c) \Device\Harddisk0\DR0\Partition0
22:46:25.0804 1784 \Device\Harddisk0\DR0\Partition0 - ok
22:46:25.0820 1784 Boot (0x1200) (49446caf705899add26073122a3b3b7a) \Device\Harddisk0\DR0\Partition1
22:46:25.0820 1784 \Device\Harddisk0\DR0\Partition1 - ok
22:46:25.0851 1784 Boot (0x1200) (ff03c564f2946870f35e72d376be29cb) \Device\Harddisk0\DR0\Partition2
22:46:25.0851 1784 \Device\Harddisk0\DR0\Partition2 - ok
22:46:25.0867 1784 Boot (0x1200) (86767097ee8dc6aa38057aba4dbbecd7) \Device\Harddisk0\DR0\Partition3
22:46:25.0867 1784 \Device\Harddisk0\DR0\Partition3 - ok
22:46:25.0867 1784 ============================================================
22:46:25.0867 1784 Scan finished
22:46:25.0867 1784 ============================================================
22:46:25.0882 1096 Detected object count: 1
22:46:25.0882 1096 Actual detected object count: 1
22:46:46.0989 1096 \Device\Harddisk0\DR0\# - copied to quarantine
22:46:46.0989 1096 \Device\Harddisk0\DR0 - copied to quarantine
22:46:47.0114 1096 \Device\Harddisk0\DR0 - processing error
22:46:48.0955 1096 \Device\Harddisk0\DR0 - will be restored on reboot
22:46:48.0955 1096 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - User select action: Cure Restore
22:46:58.0034 1108 Deinitialize success

Ok, este log z combofixu.

cmbfix sa mi nepodarilo na prvy krat spustit, sarapatila mi tam avira a nevedel som v nudzovom rezime vypnut real time protection, takze som dal restart - nestihol som hodit do safe mode, nabehol normalny win a uz avira nehlasi rootkit, takisto ani tdsskiller nic nenasiel. Mam ybehnut este aj ten combofix?

Ok, nevadi v nudzovom si mal len odklikat ok,ok,,,pretoze combofix tare..
Ale spust to tu v normalnom mode , pretoze este v systeme pravdepodobne nieco bude,log vloz sem, ak tu uz nebudem tak zajtra to dorazime,

cmbfix ->

ComboFix 12-02-08.02 - ajdus . 02. 2012 23:30:37.1.4 - x64 NETWORK
Microsoft Windows 7 Professional 6.1.7600.0.1250.421.1033.18.3894.3214 [GMT 1:00]
Running from: c:\users\ajdus\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\~RPeuEvZhDIbKPI
c:\programdata\~RPeuEvZhDIbKPIr
c:\programdata\RPeuEvZhDIbKPI
c:\users\ajdus\AppData\Local\assembly\tmp
c:\users\ajdus\AppData\Roaming\EurekaLog
c:\users\ajdus\AppData\Roaming\EurekaLog\SQLiteExpertPro\SQLiteExpertPro.elf
c:\users\ajdus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
c:\users\ajdus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check\System Check.lnk
c:\users\ajdus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check\Uninstall System Check.lnk
c:\users\ajdus\Desktop\System Check.lnk
c:\users\ajdus\g2mdlhlpx.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-01-08 to 2012-02-08 )))))))))))))))))))))))))))))))
.
.
2012-02-08 22:36 . 2012-02-08 22:36 -------- d-----w- c:\users\VisAdmin\AppData\Local\temp
2012-02-08 22:36 . 2012-02-08 22:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-08 12:02 . 2012-02-08 21:46 -------- d-----w- C:\TDSSKiller_Quarantine
2012-02-08 11:14 . 2012-01-17 03:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AEE8F3D5-7773-439E-862B-A44EC3FC1B0D}\mpengine.dll
2012-02-07 11:50 . 2012-02-07 11:50 -------- d-----w- c:\program files (x86)\MetaGeek
2012-02-02 21:05 . 2012-02-02 21:14 -------- d-sha-w- c:\users\Public\DRM
2012-02-02 21:04 . 2012-02-02 21:04 -------- d-----w- c:\users\ajdus\AppData\Local\HHD Software
2012-02-01 09:28 . 2012-02-01 09:28 -------- d-----w- c:\program files\Microsoft Device Emulator
2012-01-30 09:16 . 2012-01-30 09:16 -------- d-----w- c:\program files\Microsoft Silverlight
2012-01-30 09:16 . 2012-01-30 09:16 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-01-30 09:10 . 2012-01-30 09:10 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-29 10:37 . 2012-01-29 10:38 -------- d-----w- C:\FRST
2012-01-29 00:01 . 2012-01-29 00:01 512 ----a-w- C:\Physical0MBR.bin
2012-01-28 13:01 . 2012-01-29 04:48 -------- d-----w- c:\users\ajdus\AppData\Local\Solid State Networks
2012-01-24 14:41 . 2012-01-24 14:42 -------- d-----w- C:\rsit
2012-01-24 14:41 . 2012-01-24 14:42 -------- d-----w- c:\program files\trend micro
2012-01-24 14:17 . 2012-02-08 22:25 7220 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2012-01-24 14:12 . 2012-01-24 14:12 -------- d-----w- c:\program files\CCleaner
2012-01-24 14:12 . 2012-01-24 14:12 -------- d-----w- c:\program files\Google
2012-01-24 14:11 . 2012-01-24 14:12 -------- d-----w- c:\program files (x86)\Google
2012-01-24 07:35 . 2011-02-19 06:37 1135104 ----a-w- c:\windows\system32\FntCache.dll
2012-01-24 07:34 . 2011-02-19 05:32 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-01-24 07:33 . 2011-02-19 06:37 1540608 ----a-w- c:\windows\system32\DWrite.dll
2012-01-24 07:33 . 2011-02-19 06:36 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-01-24 07:32 . 2011-02-19 05:32 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-01-24 07:04 . 2012-01-24 12:51 -------- d-----w- c:\users\ajdus\AppData\Roaming\PCToolsFirewallPlus
2012-01-24 07:04 . 2012-01-24 07:04 -------- d-----w- c:\users\ajdus\AppData\Roaming\Spam Monitor
2012-01-24 02:19 . 2012-01-24 02:19 -------- d-----w- c:\windows\symbols
2012-01-24 02:12 . 2012-01-24 02:12 -------- d-----w- c:\programdata\VS
2012-01-23 20:21 . 2012-01-23 20:21 -------- d-----w- c:\users\ajdus\AppData\Local\Threat Expert
2012-01-23 08:20 . 2011-11-17 07:10 340992 ----a-w- c:\windows\system32\schannel.dll
2012-01-23 07:20 . 2012-01-23 07:20 -------- d-----w- c:\windows\SysWow64\Wat
2012-01-23 07:20 . 2012-01-23 07:20 -------- d-----w- c:\windows\system32\Wat
2012-01-22 21:14 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2012-01-22 21:14 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2012-01-22 21:04 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2012-01-22 21:04 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2012-01-22 20:46 . 2012-01-22 20:46 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-01-22 20:44 . 2012-01-22 20:44 -------- d-----w- c:\program files (x86)\Microsoft CAPICOM 2.1.0.2
2012-01-22 20:38 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-01-22 20:03 . 2012-01-22 20:03 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-01-22 17:22 . 2012-01-22 17:22 -------- d-----w- C:\3ee0d68a4f7d2aafdf29dd853885fa
2012-01-22 17:00 . 2010-03-04 04:40 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2012-01-22 17:00 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2012-01-22 16:38 . 2012-01-24 14:35 -------- d-----w- c:\program files (x86)\Spyware Doctor
2012-01-22 16:38 . 2012-01-24 14:35 -------- d-----w- c:\program files (x86)\Common Files\PC Tools
2012-01-22 16:38 . 2012-01-24 14:31 -------- d-----w- c:\programdata\PC Tools
2012-01-22 16:34 . 2012-01-22 16:38 -------- d-----w- c:\users\ajdus\AppData\Roaming\GetRightToGo
2012-01-22 16:19 . 2010-12-18 06:11 714752 ----a-w- c:\windows\system32\kerberos.dll
2012-01-22 16:19 . 2010-12-18 05:29 541184 ----a-w- c:\windows\SysWow64\kerberos.dll
2012-01-22 16:18 . 2011-06-15 09:58 212992 ----a-w- c:\windows\system32\odbctrac.dll
2012-01-22 16:18 . 2011-06-15 09:58 163840 ----a-w- c:\windows\system32\odbccp32.dll
2012-01-22 16:18 . 2011-06-15 09:58 106496 ----a-w- c:\windows\system32\odbccu32.dll
2012-01-22 16:18 . 2011-06-15 09:58 106496 ----a-w- c:\windows\system32\odbccr32.dll
2012-01-22 16:18 . 2011-06-15 09:58 126976 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
2012-01-22 16:18 . 2011-06-15 09:04 86016 ----a-w- c:\windows\SysWow64\odbccu32.dll
2012-01-22 16:18 . 2011-06-15 09:04 81920 ----a-w- c:\windows\SysWow64\odbccr32.dll
2012-01-22 16:18 . 2011-06-15 09:04 319488 ----a-w- c:\windows\SysWow64\odbcjt32.dll
2012-01-22 16:18 . 2011-06-15 09:04 122880 ----a-w- c:\windows\SysWow64\odbccp32.dll
2012-01-22 16:18 . 2011-06-15 09:04 94208 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdaosp.dll
2012-01-22 16:18 . 2011-06-15 09:04 163840 ----a-w- c:\windows\SysWow64\odbctrac.dll
2012-01-22 16:16 . 2010-11-02 05:18 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2012-01-22 16:15 . 2009-09-03 07:36 1975296 ----a-w- c:\windows\system32\CertEnroll.dll
2012-01-22 16:14 . 2011-10-26 05:19 43520 ----a-w- c:\windows\system32\csrsrv.dll
2012-01-22 16:14 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-01-22 16:14 . 2011-02-24 06:30 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-01-22 16:14 . 2011-02-24 05:32 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2012-01-22 16:14 . 2010-08-21 06:31 633856 ----a-w- c:\windows\system32\comctl32.dll
2012-01-22 16:14 . 2010-08-21 05:33 530432 ----a-w- c:\windows\SysWow64\comctl32.dll
2012-01-22 16:14 . 2011-03-12 12:03 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2012-01-22 16:14 . 2011-03-12 11:31 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2012-01-22 16:14 . 2009-10-28 06:24 389632 ----a-w- c:\windows\system32\winlogon.exe
2012-01-22 16:12 . 2010-08-21 06:29 558592 ----a-w- c:\windows\system32\spoolsv.exe
2012-01-22 16:12 . 2010-07-29 06:30 82944 ----a-w- c:\windows\SysWow64\iccvid.dll
2012-01-22 16:12 . 2009-09-26 06:20 223448 ----a-w- c:\windows\system32\drivers\fvevol.sys
2012-01-22 16:07 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll
2012-01-22 16:07 . 2011-08-17 05:27 288256 ----a-w- c:\windows\system32\MSNP.ax
2012-01-22 16:07 . 2011-08-17 05:27 75776 ----a-w- c:\windows\system32\MSDvbNP.ax
2012-01-22 16:07 . 2011-08-17 05:27 108032 ----a-w- c:\windows\system32\psisrndr.ax
2012-01-22 16:07 . 2011-08-17 05:27 104960 ----a-w- c:\windows\system32\Mpeg2Data.ax
2012-01-22 16:07 . 2011-08-17 04:26 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll
2012-01-22 16:07 . 2011-08-17 04:22 75776 ----a-w- c:\windows\SysWow64\psisrndr.ax
2012-01-22 16:07 . 2011-08-17 04:22 72704 ----a-w- c:\windows\SysWow64\Mpeg2Data.ax
2012-01-22 16:07 . 2011-08-17 04:22 204288 ----a-w- c:\windows\SysWow64\MSNP.ax
2012-01-22 16:07 . 2011-08-17 04:22 59904 ----a-w- c:\windows\SysWow64\MSDvbNP.ax
2012-01-22 16:07 . 2010-10-12 05:00 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2012-01-22 16:07 . 2010-10-12 05:05 35328 ----a-w- c:\program files\Windows Mail\wabfind.dll
2012-01-22 16:07 . 2010-10-12 04:25 516096 ----a-w- c:\program files (x86)\Windows Mail\wab.exe
2012-01-22 16:04 . 2011-05-24 11:21 404992 ----a-w- c:\windows\system32\umpnpmgr.dll
2012-01-22 16:03 . 2011-02-18 06:33 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-01-22 16:02 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
2012-01-22 15:54 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-22 15:54 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-22 15:03 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2012-01-22 15:03 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2012-01-22 15:03 . 2009-12-29 08:03 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-01-22 15:03 . 2009-12-29 06:55 172032 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-01-22 11:44 . 2012-01-22 11:44 -------- d-----w- c:\users\ajdus\AppData\Roaming\Malwarebytes
2012-01-22 11:42 . 2012-01-22 11:42 -------- d-----w- c:\programdata\Malwarebytes
2012-01-22 11:42 . 2012-01-24 14:28 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-22 11:15 . 2012-01-22 11:15 -------- d-----w- c:\users\ajdus\AppData\Roaming\QuickScan
2012-01-20 18:28 . 2012-01-20 18:28 -------- d-----w- c:\programdata\Web Installer
2012-01-19 15:33 . 2012-01-19 15:33 -------- d-----w- c:\program files (x86)\sharerapid
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-26 23:52 . 2011-03-24 12:35 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-26 10:27 . 2011-11-02 15:26 188128 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2011-11-17 07:10 . 2012-01-23 08:20 340992 ----a-w- c:\windows\system32\schannel.dll
2011-11-17 05:39 . 2012-01-23 08:20 224768 ----a-w- c:\windows\SysWow64\schannel.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-11 287800]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-06-15 307200]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-09-23 258512]
.
c:\users\ajdus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
"DisablePersonalDirChange"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-814806384-1302983816-2195790352-1525\Scripts\Logon\0\0]
"Script"=FreeBusyInfo.vbs
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
R1 ArcSec;ArcSec;c:\windows\system32\drivers\ArcSec.sys [x]
R1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-09-23 86224]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-24 136176]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]
R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-24 136176]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [x]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [x]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [x]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [x]
R3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\DRIVERS\s0016nd5.sys [x]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [x]
R3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\DRIVERS\s0016unic.sys [x]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 xpvcom;XPVCOM Port;c:\windows\system32\Drivers\xpvcom.sys [x]
R4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_c06efa65923f756e\AESTSr64.exe [2009-03-03 89600]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 rismcx64;RICOH Smart Card Reader;c:\windows\system32\DRIVERS\rismcx64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-24 14:12]
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-24 14:12]
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-814806384-1302983816-2195790352-1525Core.job
- c:\users\ajdus\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-29 07:08]
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-814806384-1302983816-2195790352-1525UA.job
- c:\users\ajdus\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-29 07:08]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-11-18 487424]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-06-21 162584]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-06-21 386840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-06-21 417560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.254
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-02-08 23:40:02
ComboFix-quarantined-files.txt 2012-02-08 22:40
.
Pre-Run: 34 983 288 832 bytes free
Post-Run: 35 578 888 192 bytes free
.
- - End Of File - - F20CD253F7333BA87715C10D04FDE3EC

nic

Nieco combofix este domazal, zajtra to docistime ,
1:Teraz vypni obnovu systemu restartuj a zapni spat,]
2:Precisti CCleanerom.
3:A ak sa ti este chce tak sprav uplnu kontrolu Malwarebytes, a najdene zmaz,, log vloz sem
Dnes koncim.
Dobru noc.

Dik, dnes uz nemam sil, budem sa tomu zas venovat az zajtra vecer.
Bru

ok,
Takze budes pokracovat takto
1:Spustis Malwarebytes Uplnu kontrolu, najdene odstranit,, log vloz sem
http://forum.viry.cz/viewtopic.php?f=29 ... 1#p1031821

Odinstalujes Malwarebytes a c:\program files (x86)\Spyware Doctor

2:Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do nehocelý tex:
Potom klik na Subor -> Uložiť ako.. .-> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *]všetky súbory
A ulož ho na plochu> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log .

Odinstaluj combofix, premnuj ikonu combofixu na uninstall a spust.

3:Ak dobre som videl mas tam program OTL.EXE.
Ak nemas tak stiahni na plochu
http://oldtimer.geekstogo.com/OTL.exe
spust, do okna skopiruj tento script, a klikni na Gombik OPRAVIT, log vloz sem 4:Spustis prikazovy riadok a spravca a zadas tento prikaz
chkdsk c: /f/r
Enter>.suhlasis,, restart, a nechas aby chkdsk skontroloval disk.

4:Spravis Defrag,Mozes pouzit defraggler
http://www.piriform.com/defraggler

5:Precisti pc CCleanerom a ak vsetko bude fungovat korektne tak to je vsetko.