Dobrý den, prosím o pomoc ohledně mého PC. Havět se mi do PC dostala v rozmezí 2 dnů, naštěstí sem rozpoznal zavirovaný soubor (AV nikoliv) tak sem ho smazal ručně odstranil. Dokonce jsem přerušil procesy ty se však obnovily ikdyž soubor byl smazán, tak sem je provizorně zablokoval v COMODu a už se dál nezapínali. PC mi ale už 3x zahlásilo tzv "Modrou obrazovku smrti" nezávisle na práci na notebooku. Systém jsem pročistil podle obecného postupu (Aktualizace AV,offline,AV...)
AV mi ale našel Backdoor.Win32.Agent.~EEE@85633213,který také úspěšně odstranil.
Předem děkuji za pomoc.
Logfile of random's system information tool 1.09 (written by random/random)
Run by admin at 2011-10-06 13:54:43
Microsoft Windows 7 Home Premium
System drive C: has 21 GB (7%) free of 287 GB
Total RAM: 3066 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:54:56, on 6.10.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\Program Files\TeamViewer\Version6\TeamViewer.exe
C:\windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Nuance\PaperPort\pptd40nt.exe
C:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\system32\rundll32.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\system32\taskeng.exe
C:\Users\admin\Desktop\RSIT.exe
C:\Program Files\trend micro\admin.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: VirtualCamera IEMenu Class - {0246A1A7-820A-469A-85A7-7B7F01EB808C} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [QlbCtrl.exe] "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [WirelessAssistant] "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
O4 - HKLM\..\Run: [SynTPEnh] "%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] "C:\Program Files\Analog Devices\Core\smax4pnp.exe"
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\soundmax.exe" /tray
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SwitchBoard] "C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\Nuance\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\Nuance\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [PPort12reminder] "C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\12\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [PDFHook] C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe
O4 - HKLM\..\Run: [PDF5 Registry Controller] C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] "C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Google Update] "C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: AutorunsDisabled
O4 - Global Startup: firefox_reload.lnk = C:\Program Files\Mozilla Firefox\management\MFsurf1.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Otevřít programem PDF Viewer Plus - res://C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://C:\Program Files\Desktop Sidebar\sbhelp.dll/menuhandler.html
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
O17 - HKLM\System\CS1\Services\Tcpip\..\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file)
O20 - AppInit_DLLs: C:\windows\system32\guard32.dll
O22 - SharedTaskScheduler: ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe (file missing)
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files\Browny02\BrYNSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: PDFProFiltSrvPP - Nuance Communications, Inc. - C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (http://www.webroot.com) - C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
--
End of file - 14107 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://home.sweetim.com"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... 2.0.0.1&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5]
"Description"=Office Live Update v1.5
"Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npnul32.dll
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\extensions\
{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\searchplugins\
sweetim.xml
wtejte-u-sharry.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0246A1A7-820A-469A-85A7-7B7F01EB808C}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-02-27 520192]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{551A852F-39A6-44A7-9C13-AFBEC9185A9D}]
PlusIEEventHelper Class - C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06 249856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-08-03 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-02-27 520192]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-07-28 288312]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2009-06-18 563736]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-30 1545512]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-04 98304]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-08-11 2554696]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"IndexSearch"=C:\Program Files\Nuance\PaperPort\IndexSearch.exe [2010-03-09 46368]
"PaperPort PTD"=C:\Program Files\Nuance\PaperPort\pptd40nt.exe [2010-03-09 29984]
"PPort12reminder"=C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe [2010-02-09 328992]
"PDFHook"=C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [2010-03-05 636192]
"PDF5 Registry Controller"=C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [2010-03-05 62752]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]
"Google Update"=C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 136176]
"ISUSPM"=C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2009-05-05 222496]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe start []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2009-07-30 795936]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
C:\PROGRA~1\MAGICD~1\MAGICD~1.EXE [2009-02-23 576000]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
firefox_reload.lnk - C:\Program Files\Mozilla Firefox\management\MFsurf1.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
AutorunsDisabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll [2010-10-04 511344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll, memgvmcd.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WebrootSpySweeperService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WRConsumerService]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FMVC"=fmcodec.dll
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-10-06 13:51:57 ----D---- C:\rsit
2011-10-06 13:51:57 ----D---- C:\Program Files\trend micro
2011-10-06 13:43:30 ----D---- C:\Users\admin\AppData\Roaming\Windows Live Writer
2011-10-06 10:53:07 ----D---- C:\Program Files\NetBeans 7.0.1
2011-10-05 18:53:12 ----D---- C:\windows\pss
2011-10-05 17:39:56 ----SHD---- C:\Config.Msi
2011-10-05 17:35:38 ----A---- C:\windows\NeroDigital.ini
2011-10-05 17:34:27 ----D---- C:\ProgramData\Premium
2011-10-05 17:34:25 ----D---- C:\ProgramData\InstallMate
2011-09-28 16:11:46 ----HD---- C:\Infovox2.lic
2011-09-28 16:11:03 ----D---- C:\Users\admin\AppData\Roaming\Balabolka
2011-09-28 16:10:50 ----D---- C:\Program Files\Balabolka
2011-09-27 09:29:00 ----A---- C:\windows\system32\drivers\mcdbus.sys
2011-09-27 09:28:58 ----D---- C:\Program Files\MagicDisc
2011-09-23 15:34:35 ----A---- C:\cmdlog.txt
======List of files/folders modified in the last 1 month======
2011-10-06 13:54:31 ----D---- C:\windows\Prefetch
2011-10-06 13:54:30 ----D---- C:\windows\Temp
2011-10-06 13:51:57 ----RD---- C:\Program Files
2011-10-06 13:48:12 ----D---- C:\windows\system32\config
2011-10-06 13:42:55 ----D---- C:\windows\System32
2011-10-06 13:42:55 ----D---- C:\windows\inf
2011-10-06 13:42:55 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-10-06 09:16:50 ----D---- C:\Windows
2011-10-06 09:15:20 ----D---- C:\windows\Minidump
2011-10-05 18:54:42 ----D---- C:\Program Files\LucasArts
2011-10-05 17:46:20 ----D---- C:\Program Files\Mozilla Firefox
2011-10-05 17:40:19 ----SHD---- C:\windows\Installer
2011-10-05 17:39:58 ----HD---- C:\ProgramData
2011-10-05 17:38:41 ----D---- C:\windows\system32\Tasks
2011-10-03 08:11:33 ----D---- C:\ProgramData\PDFC
2011-09-30 08:08:03 ----D---- C:\windows\system32\catroot2
2011-09-28 16:11:51 ----D---- C:\windows\Speech
2011-09-28 16:11:46 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-27 19:43:55 ----D---- C:\Users\admin\AppData\Roaming\uTorrent
2011-09-27 09:29:09 ----D---- C:\windows\system32\DriverStore
2011-09-27 09:29:00 ----D---- C:\windows\system32\drivers
2011-09-23 15:22:57 ----D---- C:\windows\winsxs
2011-09-23 15:22:25 ----RSD---- C:\windows\assembly
2011-09-10 14:16:17 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-09-09 21:59:47 ----RD---- C:\Users
2011-09-09 21:59:47 ----D---- C:\asw
2011-09-09 16:19:01 ----D---- C:\ProgramData\Apple Computer
2011-09-09 14:37:27 ----D---- C:\Photoshop
2011-09-09 14:37:26 ----D---- C:\PerfLogs
2011-09-09 14:37:26 ----D---- C:\ATF
2011-09-09 14:27:40 ----D---- C:\Brother
2011-09-08 16:37:56 ----D---- C:\Users\admin\AppData\Roaming\Skype
2011-09-08 16:35:19 ----D---- C:\Users\admin\AppData\Roaming\skypePM
2011-09-08 16:27:52 ----D---- C:\windows\system32\catroot
2011-09-07 18:05:04 ----D---- C:\windows\system32\NDF
2011-09-07 17:53:36 ----D---- C:\windows\Microsoft.NET
2011-09-07 00:17:00 ----D---- C:\windows\system32\en-US
2011-09-07 00:16:53 ----D---- C:\Program Files\Microsoft.NET
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 iaStor;Intel RAID Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 ssfs0bbc;ssfs0bbc; C:\windows\system32\DRIVERS\ssfs0bbc.sys [2009-11-06 29808]
R0 sshrmd;Sshrmd; C:\windows\system32\DRIVERS\sshrmd.sys [2009-11-06 23152]
R0 ssidrv;Ssidrv; C:\windows\system32\DRIVERS\ssidrv.sys [2009-11-06 176752]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\windows\System32\DRIVERS\cmderd.sys [2011-08-11 19088]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\windows\System32\DRIVERS\cmdguard.sys [2011-08-11 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\windows\System32\DRIVERS\cmdhlp.sys [2011-08-11 37592]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-30 218688]
R1 eusk2par;Aladdin SmartKey Parallel Driver; \??\C:\windows\system32\Drivers\eusk2par.sys [2008-12-18 25680]
R1 inspect;COMODO Internet Security Firewall Driver; C:\windows\system32\DRIVERS\inspect.sys [2011-08-11 82400]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R1 MpKsl2b063bc5;MpKsl2b063bc5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsl2b063bc5.sys [2011-10-05 28752]
R1 MpKsle65cdd9d;MpKsle65cdd9d; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsle65cdd9d.sys [2011-10-06 28752]
R1 MpKslfd417ccc;MpKslfd417ccc; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKslfd417ccc.sys [2011-10-03 28752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 npf;NetGroup Packet Filter Driver; C:\windows\system32\drivers\npf.sys [2009-11-16 50704]
R3 5U876UVC;HP Webcam [2 MP series]; C:\windows\system32\DRIVERS\5U876.sys [2009-06-30 118656]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\windows\system32\drivers\AtiHdmi.sys [2009-07-24 103440]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-08-04 4994048]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl6.sys [2010-02-27 2506232]
R3 BthEnum;Bluetooth Enumerator Service; C:\windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\windows\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-07-30 213680]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S1 MpKsl00ddde7b;MpKsl00ddde7b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{967A22DB-F31C-46B2-A95D-55522876CF90}\MpKsl00ddde7b.sys []
S1 MpKsl4bac2904;MpKsl4bac2904; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{84D13C62-E8DB-4090-8FBC-B010A0ED5C4F}\MpKsl4bac2904.sys []
S1 MpKslc24e7c67;MpKslc24e7c67; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{464D7FF2-3CE7-4CDA-B01C-F8556E05920B}\MpKslc24e7c67.sys []
S1 npelpchm;npelpchm; \??\C:\windows\system32\drivers\npelpchm.sys []
S2 cnmpar21;C; \??\C:\BJPrinter\CNMwindows\Canon PIXMA iP1500 Installer\Inst2\cnmpar21.sys []
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S4 BrSerIb;Brother Serial Interface Driver(WDM); C:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]
S4 BrUsbSIb;Brother Serial USB Driver(WDM); C:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]
S4 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-12-15 79816]
S4 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-12-15 35272]
S4 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-12-15 214664]
S4 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-12-15 34248]
S4 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-12-15 55304]
S4 VirtualCam;VirtualCamera; C:\windows\system32\DRIVERS\VirtualCam.sys [2007-02-21 192512]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AEADIFilters;Andrea ADI Filters Service; C:\windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-07-27 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2009-08-04 176128]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 582944]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-08-11 1793712]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-09 144672]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine; C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe [2009-11-06 4048240]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 WRConsumerService;Webroot Client Service; C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe [2010-12-05 1201640]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-05-01 229944]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 BrYNSvc;BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [2010-01-25 245760]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
BSoD, mírně zpomalené PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: BSoD, mírně zpomalené PC
Pardón, vím že je to důležité ohledně poškozeni WIN ale tento soubor je naprosto nepodstatný takže jeho smazáním by nemělo dojít k chybě ne?
C:\Users\admin\Downloads\wow-3.1.1.9806-to-3.1.1.9835-engb-patch.zip|WoW-3.1.1.9806-to-3.1.1.9835-enGB-patch.exe
C:\Users\admin\Downloads\wow-3.1.1.9806-to-3.1.1.9835-engb-patch.zip|WoW-3.1.1.9806-to-3.1.1.9835-enGB-patch.exe
Re: BSoD, mírně zpomalené PC
Při rozbalování Combofixu se objeví BsoD a následuje restart (odzkoušeno 3x) zkosím krok 2.
Re: BSoD, mírně zpomalené PC
Kaspersky:
15:31:23.0238 3544 TDSS rootkit removing tool 2.6.5.0 Oct 5 2011 20:52:46
15:31:23.0373 3544 ============================================================
15:31:23.0373 3544 Current date / time: 2011/10/06 15:31:23.0373
15:31:23.0373 3544 SystemInfo:
15:31:23.0373 3544
15:31:23.0374 3544 OS Version: 6.1.7600 ServicePack: 0.0
15:31:23.0374 3544 Product type: Workstation
15:31:23.0374 3544 ComputerName: ADMIN-PC
15:31:23.0374 3544 UserName: admin
15:31:23.0374 3544 Windows directory: C:\windows
15:31:23.0374 3544 System windows directory: C:\windows
15:31:23.0374 3544 Processor architecture: Intel x86
15:31:23.0374 3544 Number of processors: 2
15:31:23.0374 3544 Page size: 0x1000
15:31:23.0374 3544 Boot type: Normal boot
15:31:23.0374 3544 ============================================================
15:31:24.0204 3544 Initialize success
15:31:51.0916 5828 ============================================================
15:31:51.0916 5828 Scan started
15:31:51.0916 5828 Mode: Manual; SigCheck; TDLFS;
15:31:51.0916 5828 ============================================================
15:31:53.0020 5828 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
15:31:53.0164 5828 1394ohci - ok
15:31:53.0231 5828 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
15:31:53.0335 5828 5U876UVC - ok
15:31:53.0376 5828 Accelerometer (4df5e6215a102a192b2b6dbb61f2fba5) C:\windows\system32\DRIVERS\Accelerometer.sys
15:31:53.0459 5828 Accelerometer - ok
15:31:53.0535 5828 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
15:31:53.0555 5828 ACPI - ok
15:31:53.0599 5828 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
15:31:53.0637 5828 AcpiPmi - ok
15:31:53.0718 5828 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
15:31:53.0876 5828 ADIHdAudAddService - ok
15:31:53.0961 5828 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
15:31:53.0991 5828 adp94xx - ok
15:31:54.0031 5828 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
15:31:54.0058 5828 adpahci - ok
15:31:54.0136 5828 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
15:31:54.0160 5828 adpu320 - ok
15:31:54.0270 5828 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\windows\system32\drivers\afd.sys
15:31:54.0339 5828 AFD - ok
15:31:54.0474 5828 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\windows\system32\DRIVERS\AGRSM.sys
15:31:54.0536 5828 AgereSoftModem - ok
15:31:54.0567 5828 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
15:31:54.0583 5828 agp440 - ok
15:31:54.0629 5828 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
15:31:54.0645 5828 aic78xx - ok
15:31:54.0712 5828 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
15:31:54.0728 5828 aliide - ok
15:31:54.0759 5828 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
15:31:54.0777 5828 amdagp - ok
15:31:54.0810 5828 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
15:31:54.0827 5828 amdide - ok
15:31:54.0849 5828 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
15:31:54.0887 5828 AmdK8 - ok
15:31:54.0927 5828 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
15:31:54.0962 5828 AmdPPM - ok
15:31:54.0996 5828 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
15:31:55.0015 5828 amdsata - ok
15:31:55.0066 5828 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
15:31:55.0088 5828 amdsbs - ok
15:31:55.0114 5828 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
15:31:55.0131 5828 amdxata - ok
15:31:55.0165 5828 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
15:31:55.0202 5828 AppID - ok
15:31:55.0275 5828 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
15:31:55.0293 5828 arc - ok
15:31:55.0319 5828 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
15:31:55.0338 5828 arcsas - ok
15:31:55.0485 5828 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
15:31:55.0608 5828 AsyncMac - ok
15:31:55.0672 5828 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
15:31:55.0689 5828 atapi - ok
15:31:55.0730 5828 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
15:31:55.0839 5828 AtiHdmiService - ok
15:31:56.0151 5828 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
15:31:56.0872 5828 atikmdag - ok
15:31:57.0101 5828 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
15:31:57.0152 5828 b06bdrv - ok
15:31:57.0257 5828 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
15:31:57.0347 5828 b57nd60x - ok
15:31:57.0541 5828 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
15:31:57.0596 5828 BCM43XX - ok
15:31:57.0647 5828 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
15:31:57.0699 5828 Beep - ok
15:31:57.0823 5828 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
15:31:57.0878 5828 blbdrive - ok
15:31:57.0948 5828 bowser (fcafaef6798d7b51ff029f99a9898961) C:\windows\system32\DRIVERS\bowser.sys
15:31:58.0069 5828 bowser - ok
15:31:58.0144 5828 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
15:31:58.0296 5828 BrFiltLo - ok
15:31:58.0401 5828 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
15:31:58.0542 5828 BrFiltUp - ok
15:31:58.0702 5828 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
15:31:58.0851 5828 BrSerIb - ok
15:31:58.0900 5828 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
15:31:58.0941 5828 Brserid - ok
15:31:58.0992 5828 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
15:31:59.0018 5828 BrSerWdm - ok
15:31:59.0066 5828 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
15:31:59.0106 5828 BrUsbMdm - ok
15:31:59.0128 5828 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
15:31:59.0151 5828 BrUsbSer - ok
15:31:59.0210 5828 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
15:31:59.0308 5828 BrUsbSIb - ok
15:31:59.0354 5828 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
15:31:59.0379 5828 BthEnum - ok
15:31:59.0424 5828 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
15:31:59.0464 5828 BTHMODEM - ok
15:31:59.0511 5828 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
15:31:59.0535 5828 BthPan - ok
15:31:59.0584 5828 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
15:31:59.0620 5828 BTHPORT - ok
15:31:59.0674 5828 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
15:31:59.0712 5828 BTHUSB - ok
15:31:59.0771 5828 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
15:31:59.0853 5828 btwaudio - ok
15:31:59.0883 5828 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
15:32:00.0004 5828 btwavdt - ok
15:32:00.0054 5828 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
15:32:00.0066 5828 btwl2cap - ok
15:32:00.0116 5828 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
15:32:00.0190 5828 btwrchid - ok
15:32:00.0240 5828 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
15:32:00.0300 5828 cdfs - ok
15:32:00.0344 5828 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
15:32:00.0384 5828 cdrom - ok
15:32:00.0450 5828 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
15:32:00.0488 5828 circlass - ok
15:32:00.0566 5828 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
15:32:00.0613 5828 CLFS - ok
15:32:00.0843 5828 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
15:32:00.0892 5828 CmBatt - ok
15:32:01.0070 5828 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
15:32:01.0148 5828 cmderd - ok
15:32:01.0208 5828 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
15:32:01.0340 5828 cmdGuard - ok
15:32:01.0405 5828 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
15:32:01.0487 5828 cmdHlp - ok
15:32:01.0543 5828 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
15:32:01.0559 5828 cmdide - ok
15:32:01.0605 5828 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
15:32:01.0683 5828 CNG - ok
15:32:01.0740 5828 cnmpar21 - ok
15:32:01.0791 5828 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
15:32:01.0801 5828 Compbatt - ok
15:32:01.0848 5828 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
15:32:01.0864 5828 CompositeBus - ok
15:32:01.0927 5828 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
15:32:01.0945 5828 crcdisk - ok
15:32:02.0034 5828 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\windows\system32\Drivers\dfsc.sys
15:32:02.0083 5828 DfsC - ok
15:32:02.0140 5828 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
15:32:02.0190 5828 discache - ok
15:32:02.0261 5828 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
15:32:02.0278 5828 Disk - ok
15:32:02.0317 5828 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
15:32:02.0354 5828 drmkaud - ok
15:32:02.0447 5828 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
15:32:02.0463 5828 dtsoftbus01 - ok
15:32:02.0566 5828 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\windows\System32\drivers\dxgkrnl.sys
15:32:02.0597 5828 DXGKrnl - ok
15:32:02.0771 5828 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
15:32:03.0005 5828 ebdrv - ok
15:32:03.0142 5828 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
15:32:03.0195 5828 elxstor - ok
15:32:03.0292 5828 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
15:32:03.0325 5828 ErrDev - ok
15:32:03.0449 5828 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
15:32:03.0463 5828 eusk2par - ok
15:32:03.0521 5828 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
15:32:03.0561 5828 exfat - ok
15:32:03.0598 5828 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
15:32:03.0652 5828 fastfat - ok
15:32:03.0730 5828 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
15:32:03.0769 5828 fdc - ok
15:32:03.0961 5828 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
15:32:03.0978 5828 FileInfo - ok
15:32:04.0111 5828 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
15:32:04.0169 5828 Filetrace - ok
15:32:04.0248 5828 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
15:32:04.0317 5828 flpydisk - ok
15:32:04.0411 5828 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
15:32:04.0459 5828 FltMgr - ok
15:32:04.0512 5828 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
15:32:04.0555 5828 FsDepends - ok
15:32:04.0607 5828 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
15:32:04.0624 5828 Fs_Rec - ok
15:32:04.0694 5828 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
15:32:04.0856 5828 fvevol - ok
15:32:04.0948 5828 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
15:32:04.0973 5828 gagp30kx - ok
15:32:05.0063 5828 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
15:32:05.0088 5828 hcw85cir - ok
15:32:05.0143 5828 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
15:32:05.0179 5828 HdAudAddService - ok
15:32:05.0229 5828 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
15:32:05.0264 5828 HDAudBus - ok
15:32:05.0304 5828 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
15:32:05.0335 5828 HidBatt - ok
15:32:05.0366 5828 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
15:32:05.0409 5828 HidBth - ok
15:32:05.0460 5828 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
15:32:05.0486 5828 HidIr - ok
15:32:05.0519 5828 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
15:32:05.0550 5828 HidUsb - ok
15:32:05.0582 5828 hpdskflt (e1d82f0c8456abb03b7df5d623ca47d1) C:\windows\system32\DRIVERS\hpdskflt.sys
15:32:05.0669 5828 hpdskflt - ok
15:32:05.0744 5828 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
15:32:05.0864 5828 HpqKbFiltr - ok
15:32:05.0907 5828 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
15:32:05.0926 5828 HpSAMD - ok
15:32:06.0046 5828 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
15:32:06.0139 5828 HTTP - ok
15:32:06.0172 5828 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
15:32:06.0190 5828 hwpolicy - ok
15:32:06.0223 5828 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
15:32:06.0286 5828 i8042prt - ok
15:32:06.0337 5828 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
15:32:06.0355 5828 iaStor - ok
15:32:06.0412 5828 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
15:32:06.0439 5828 iaStorV - ok
15:32:06.0613 5828 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
15:32:06.0960 5828 igfx - ok
15:32:07.0012 5828 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
15:32:07.0029 5828 iirsp - ok
15:32:07.0098 5828 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
15:32:07.0180 5828 inspect - ok
15:32:07.0220 5828 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
15:32:07.0236 5828 intelide - ok
15:32:07.0317 5828 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
15:32:07.0347 5828 intelppm - ok
15:32:07.0394 5828 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
15:32:07.0447 5828 IpFilterDriver - ok
15:32:07.0507 5828 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
15:32:07.0536 5828 IPMIDRV - ok
15:32:07.0570 5828 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
15:32:07.0616 5828 IPNAT - ok
15:32:07.0661 5828 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
15:32:07.0698 5828 IRENUM - ok
15:32:07.0723 5828 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
15:32:07.0740 5828 isapnp - ok
15:32:07.0802 5828 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
15:32:07.0829 5828 iScsiPrt - ok
15:32:07.0906 5828 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
15:32:07.0923 5828 kbdclass - ok
15:32:07.0961 5828 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
15:32:07.0988 5828 kbdhid - ok
15:32:08.0129 5828 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
15:32:08.0148 5828 KSecDD - ok
15:32:08.0261 5828 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
15:32:08.0366 5828 KSecPkg - ok
15:32:08.0469 5828 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
15:32:08.0519 5828 lltdio - ok
15:32:08.0614 5828 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
15:32:08.0632 5828 LSI_FC - ok
15:32:08.0695 5828 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
15:32:08.0714 5828 LSI_SAS - ok
15:32:08.0768 5828 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
15:32:08.0785 5828 LSI_SAS2 - ok
15:32:08.0833 5828 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
15:32:08.0851 5828 LSI_SCSI - ok
15:32:08.0907 5828 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
15:32:08.0954 5828 luafv - ok
15:32:09.0041 5828 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
15:32:09.0150 5828 mcdbus ( UnsignedFile.Multi.Generic ) - warning
15:32:09.0150 5828 mcdbus - detected UnsignedFile.Multi.Generic (1)
15:32:09.0205 5828 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
15:32:09.0221 5828 megasas - ok
15:32:09.0270 5828 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
15:32:09.0294 5828 MegaSR - ok
15:32:09.0361 5828 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
15:32:09.0448 5828 MfeAVFK - ok
15:32:09.0506 5828 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
15:32:09.0587 5828 MfeBOPK - ok
15:32:09.0633 5828 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
15:32:09.0770 5828 mfehidk - ok
15:32:09.0790 5828 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
15:32:09.0868 5828 MfeRKDK - ok
15:32:09.0902 5828 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
15:32:09.0983 5828 mfetdik - ok
15:32:10.0024 5828 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
15:32:10.0071 5828 Modem - ok
15:32:10.0104 5828 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
15:32:10.0136 5828 monitor - ok
15:32:10.0182 5828 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
15:32:10.0198 5828 mouclass - ok
15:32:10.0221 5828 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
15:32:10.0249 5828 mouhid - ok
15:32:10.0283 5828 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
15:32:10.0301 5828 mountmgr - ok
15:32:10.0343 5828 MpFilter (c98301ad8173a2235a9ab828955c32bb) C:\windows\system32\DRIVERS\MpFilter.sys
15:32:10.0362 5828 MpFilter - ok
15:32:10.0386 5828 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
15:32:10.0405 5828 mpio - ok
15:32:10.0466 5828 MpKsl00ddde7b - ok
15:32:10.0554 5828 MpKsl2b063bc5 (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsl2b063bc5.sys
15:32:10.0639 5828 MpKsl2b063bc5 - ok
15:32:10.0656 5828 MpKsl4bac2904 - ok
15:32:10.0688 5828 MpKslc24e7c67 - ok
15:32:10.0730 5828 MpKsle65cdd9d (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsle65cdd9d.sys
15:32:10.0813 5828 MpKsle65cdd9d - ok
15:32:10.0872 5828 MpKslfd417ccc (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKslfd417ccc.sys
15:32:10.0955 5828 MpKslfd417ccc - ok
15:32:10.0999 5828 MpNWMon (aeb186afff5d9cfed823c15d846aac3b) C:\windows\system32\DRIVERS\MpNWMon.sys
15:32:11.0015 5828 MpNWMon - ok
15:32:11.0044 5828 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
15:32:11.0081 5828 mpsdrv - ok
15:32:11.0116 5828 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
15:32:11.0153 5828 MRxDAV - ok
15:32:11.0183 5828 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\windows\system32\DRIVERS\mrxsmb.sys
15:32:11.0319 5828 mrxsmb - ok
15:32:11.0334 5828 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\windows\system32\DRIVERS\mrxsmb10.sys
15:32:11.0492 5828 mrxsmb10 - ok
15:32:11.0515 5828 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\windows\system32\DRIVERS\mrxsmb20.sys
15:32:11.0623 5828 mrxsmb20 - ok
15:32:11.0649 5828 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
15:32:11.0665 5828 msahci - ok
15:32:11.0703 5828 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
15:32:11.0722 5828 msdsm - ok
15:32:11.0769 5828 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
15:32:11.0806 5828 Msfs - ok
15:32:11.0825 5828 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
15:32:11.0863 5828 mshidkmdf - ok
15:32:11.0895 5828 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
15:32:11.0910 5828 msisadrv - ok
15:32:11.0957 5828 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
15:32:12.0004 5828 MSKSSRV - ok
15:32:12.0036 5828 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
15:32:12.0078 5828 MSPCLOCK - ok
15:32:12.0103 5828 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
15:32:12.0151 5828 MSPQM - ok
15:32:12.0173 5828 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
15:32:12.0194 5828 MsRPC - ok
15:32:12.0218 5828 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
15:32:12.0235 5828 mssmbios - ok
15:32:12.0255 5828 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
15:32:12.0292 5828 MSTEE - ok
15:32:12.0318 5828 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
15:32:12.0347 5828 MTConfig - ok
15:32:12.0381 5828 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
15:32:12.0398 5828 Mup - ok
15:32:12.0452 5828 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
15:32:12.0488 5828 NativeWifiP - ok
15:32:12.0535 5828 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
15:32:12.0566 5828 NDIS - ok
15:32:12.0597 5828 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
15:32:12.0629 5828 NdisCap - ok
15:32:12.0660 5828 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
15:32:12.0709 5828 NdisTapi - ok
15:32:12.0739 5828 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
15:32:12.0775 5828 Ndisuio - ok
15:32:12.0799 5828 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
15:32:12.0844 5828 NdisWan - ok
15:32:12.0868 5828 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
15:32:12.0906 5828 NDProxy - ok
15:32:12.0926 5828 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
15:32:12.0962 5828 NetBIOS - ok
15:32:12.0987 5828 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
15:32:13.0039 5828 NetBT - ok
15:32:13.0209 5828 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
15:32:13.0364 5828 netw5v32 - ok
15:32:13.0408 5828 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
15:32:13.0424 5828 nfrd960 - ok
15:32:13.0487 5828 npelpchm - ok
15:32:13.0532 5828 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
15:32:13.0546 5828 npf - ok
15:32:13.0571 5828 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
15:32:13.0616 5828 Npfs - ok
15:32:13.0645 5828 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
15:32:13.0694 5828 nsiproxy - ok
15:32:13.0753 5828 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
15:32:13.0813 5828 Ntfs - ok
15:32:13.0831 5828 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
15:32:13.0880 5828 Null - ok
15:32:13.0920 5828 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
15:32:13.0939 5828 nvraid - ok
15:32:13.0968 5828 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
15:32:13.0989 5828 nvstor - ok
15:32:14.0011 5828 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
15:32:14.0031 5828 nv_agp - ok
15:32:14.0075 5828 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
15:32:14.0111 5828 ohci1394 - ok
15:32:14.0181 5828 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
15:32:14.0217 5828 Parport - ok
15:32:14.0258 5828 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
15:32:14.0275 5828 partmgr - ok
15:32:14.0308 5828 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
15:32:14.0331 5828 Parvdm - ok
15:32:14.0376 5828 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
15:32:14.0394 5828 pci - ok
15:32:14.0433 5828 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
15:32:14.0448 5828 pciide - ok
15:32:14.0485 5828 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
15:32:14.0508 5828 pcmcia - ok
15:32:14.0567 5828 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
15:32:14.0583 5828 pcw - ok
15:32:14.0628 5828 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
15:32:14.0693 5828 PEAUTH - ok
15:32:14.0795 5828 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
15:32:14.0843 5828 PptpMiniport - ok
15:32:14.0869 5828 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
15:32:14.0905 5828 Processor - ok
15:32:14.0943 5828 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
15:32:14.0990 5828 Psched - ok
15:32:15.0026 5828 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
15:32:15.0040 5828 PxHelp20 - ok
15:32:15.0086 5828 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
15:32:15.0156 5828 ql2300 - ok
15:32:15.0195 5828 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
15:32:15.0215 5828 ql40xx - ok
15:32:15.0245 5828 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
15:32:15.0278 5828 QWAVEdrv - ok
15:32:15.0298 5828 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
15:32:15.0334 5828 RasAcd - ok
15:32:15.0366 5828 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
15:32:15.0408 5828 RasAgileVpn - ok
15:32:15.0443 5828 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
15:32:15.0487 5828 Rasl2tp - ok
15:32:15.0545 5828 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
15:32:15.0593 5828 RasPppoe - ok
15:32:15.0628 5828 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
15:32:15.0676 5828 RasSstp - ok
15:32:15.0708 5828 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
15:32:15.0762 5828 rdbss - ok
15:32:15.0800 5828 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
15:32:15.0825 5828 rdpbus - ok
15:32:15.0850 5828 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
15:32:15.0893 5828 RDPCDD - ok
15:32:15.0921 5828 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
15:32:15.0956 5828 RDPENCDD - ok
15:32:15.0983 5828 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
15:32:16.0023 5828 RDPREFMP - ok
15:32:16.0049 5828 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
15:32:16.0101 5828 RDPWD - ok
15:32:16.0139 5828 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
15:32:16.0161 5828 rdyboost - ok
15:32:16.0221 5828 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
15:32:16.0249 5828 RFCOMM - ok
15:32:16.0308 5828 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
15:32:16.0345 5828 rspndr - ok
15:32:16.0387 5828 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
15:32:16.0405 5828 sbp2port - ok
15:32:16.0431 5828 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
15:32:16.0468 5828 scfilter - ok
15:32:16.0506 5828 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
15:32:16.0549 5828 secdrv - ok
15:32:16.0614 5828 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
15:32:16.0639 5828 Serenum - ok
15:32:16.0667 5828 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
15:32:16.0705 5828 Serial - ok
15:32:16.0731 5828 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
15:32:16.0755 5828 sermouse - ok
15:32:16.0802 5828 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
15:32:16.0828 5828 sffdisk - ok
15:32:16.0853 5828 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
15:32:16.0892 5828 sffp_mmc - ok
15:32:16.0916 5828 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
15:32:16.0940 5828 sffp_sd - ok
15:32:16.0963 5828 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
15:32:17.0001 5828 sfloppy - ok
15:32:17.0041 5828 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
15:32:17.0059 5828 sisagp - ok
15:32:17.0086 5828 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
15:32:17.0103 5828 SiSRaid2 - ok
15:32:17.0129 5828 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
15:32:17.0148 5828 SiSRaid4 - ok
15:32:17.0203 5828 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
15:32:17.0248 5828 Smb - ok
15:32:17.0303 5828 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
15:32:17.0319 5828 spldr - ok
15:32:17.0381 5828 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\windows\system32\DRIVERS\srv.sys
15:32:17.0522 5828 srv - ok
15:32:17.0553 5828 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\windows\system32\DRIVERS\srv2.sys
15:32:17.0706 5828 srv2 - ok
15:32:17.0733 5828 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\windows\system32\DRIVERS\srvnet.sys
15:32:17.0850 5828 srvnet - ok
15:32:17.0897 5828 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
15:32:17.0911 5828 ssfs0bbc - ok
15:32:17.0944 5828 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
15:32:17.0957 5828 sshrmd - ok
15:32:17.0980 5828 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
15:32:17.0999 5828 ssidrv - ok
15:32:18.0034 5828 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
15:32:18.0051 5828 stexstor - ok
15:32:18.0095 5828 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
15:32:18.0112 5828 swenum - ok
15:32:18.0189 5828 SynTP (1de40024679cde0e573465253519730e) C:\windows\system32\DRIVERS\SynTP.sys
15:32:18.0317 5828 SynTP - ok
15:32:18.0404 5828 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\drivers\tcpip.sys
15:32:18.0617 5828 Tcpip - ok
15:32:18.0648 5828 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\DRIVERS\tcpip.sys
15:32:18.0695 5828 TCPIP6 - ok
15:32:18.0727 5828 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
15:32:18.0764 5828 tcpipreg - ok
15:32:18.0792 5828 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
15:32:18.0838 5828 TDPIPE - ok
15:32:18.0866 5828 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
15:32:18.0902 5828 TDTCP - ok
15:32:18.0922 5828 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
15:32:18.0970 5828 tdx - ok
15:32:19.0028 5828 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
15:32:19.0057 5828 teamviewervpn - ok
15:32:19.0091 5828 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
15:32:19.0109 5828 TermDD - ok
15:32:19.0169 5828 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
15:32:19.0198 5828 TPM - ok
15:32:19.0244 5828 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
15:32:19.0289 5828 tssecsrv - ok
15:32:19.0326 5828 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
15:32:19.0377 5828 tunnel - ok
15:32:19.0415 5828 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
15:32:19.0433 5828 uagp35 - ok
15:32:19.0488 5828 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
15:32:19.0586 5828 udfs - ok
15:32:19.0650 5828 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
15:32:19.0668 5828 uliagpkx - ok
15:32:19.0732 5828 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
15:32:19.0766 5828 umbus - ok
15:32:19.0811 5828 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
15:32:19.0836 5828 UmPass - ok
15:32:19.0923 5828 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
15:32:19.0954 5828 usbccgp - ok
15:32:20.0022 5828 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
15:32:20.0051 5828 usbcir - ok
15:32:20.0087 5828 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
15:32:20.0119 5828 usbehci - ok
15:32:20.0213 5828 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
15:32:20.0253 5828 usbhub - ok
15:32:20.0304 5828 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
15:32:20.0336 5828 usbohci - ok
15:32:20.0411 5828 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
15:32:20.0437 5828 usbprint - ok
15:32:20.0531 5828 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
15:32:20.0557 5828 usbscan - ok
15:32:20.0619 5828 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
15:32:20.0644 5828 USBSTOR - ok
15:32:20.0695 5828 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
15:32:20.0718 5828 usbuhci - ok
15:32:20.0851 5828 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
15:32:20.0999 5828 usbvideo - ok
15:32:21.0085 5828 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
15:32:21.0103 5828 vdrvroot - ok
15:32:21.0148 5828 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
15:32:21.0187 5828 vga - ok
15:32:21.0221 5828 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
15:32:21.0271 5828 VgaSave - ok
15:32:21.0350 5828 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
15:32:21.0388 5828 vhdmp - ok
15:32:21.0441 5828 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
15:32:21.0459 5828 viaagp - ok
15:32:21.0595 5828 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
15:32:21.0620 5828 ViaC7 - ok
15:32:21.0662 5828 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
15:32:21.0678 5828 viaide - ok
15:32:21.0775 5828 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
15:32:21.0895 5828 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
15:32:21.0895 5828 VirtualCam - detected UnsignedFile.Multi.Generic (1)
15:32:21.0957 5828 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
15:32:21.0975 5828 volmgr - ok
15:32:22.0044 5828 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
15:32:22.0104 5828 volmgrx - ok
15:32:22.0155 5828 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
15:32:22.0181 5828 volsnap - ok
15:32:22.0245 5828 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
15:32:22.0265 5828 vsmraid - ok
15:32:22.0306 5828 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
15:32:22.0334 5828 vwifibus - ok
15:32:22.0406 5828 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
15:32:22.0455 5828 vwififlt - ok
15:32:22.0507 5828 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
15:32:22.0542 5828 vwifimp - ok
15:32:22.0603 5828 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
15:32:22.0627 5828 WacomPen - ok
15:32:22.0707 5828 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:32:22.0751 5828 WANARP - ok
15:32:22.0761 5828 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:32:22.0798 5828 Wanarpv6 - ok
15:32:22.0989 5828 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
15:32:23.0005 5828 Wd - ok
15:32:23.0056 5828 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
15:32:23.0087 5828 Wdf01000 - ok
15:32:23.0241 5828 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
15:32:23.0278 5828 WfpLwf - ok
15:32:23.0336 5828 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
15:32:23.0351 5828 WIMMount - ok
15:32:23.0509 5828 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
15:32:23.0549 5828 WinUsb - ok
15:32:23.0669 5828 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
15:32:23.0690 5828 WmiAcpi - ok
15:32:23.0828 5828 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
15:32:23.0863 5828 ws2ifsl - ok
15:32:23.0958 5828 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
15:32:24.0011 5828 WudfPf - ok
15:32:24.0059 5828 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
15:32:24.0116 5828 WUDFRd - ok
15:32:24.0206 5828 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
15:32:24.0233 5828 yukonw7 - ok
15:32:24.0299 5828 MBR (0x1B8) (e2623ec53824142420ae2f36878e5488) \Device\Harddisk0\DR0
15:32:24.0301 5828 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
15:32:24.0301 5828 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
15:32:24.0335 5828 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
15:32:24.0335 5828 \Device\Harddisk0\DR0 - detected TDSS File System (1)
15:32:24.0376 5828 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
15:32:24.0378 5828 \Device\Harddisk0\DR0\Partition0 - ok
15:32:24.0390 5828 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
15:32:24.0397 5828 \Device\Harddisk0\DR0\Partition1 - ok
15:32:24.0424 5828 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
15:32:24.0426 5828 \Device\Harddisk0\DR0\Partition2 - ok
15:32:24.0441 5828 Boot (0x1200) (0adc60955e80da72fa713d415a2b3f8e) \Device\Harddisk0\DR0\Partition3
15:32:24.0442 5828 \Device\Harddisk0\DR0\Partition3 - ok
15:32:24.0442 5828 ============================================================
15:32:24.0442 5828 Scan finished
15:32:24.0442 5828 ============================================================
15:32:24.0480 0724 Detected object count: 4
15:32:24.0480 0724 Actual detected object count: 4
15:32:38.0835 0724 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
15:32:38.0835 0724 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:32:38.0837 0724 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
15:32:38.0837 0724 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:32:38.0839 0724 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - skipped by user
15:32:38.0839 0724 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Skip
15:32:38.0842 0724 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
15:32:38.0842 0724 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
15:32:56.0706 5668 Deinitialize success
15:31:23.0238 3544 TDSS rootkit removing tool 2.6.5.0 Oct 5 2011 20:52:46
15:31:23.0373 3544 ============================================================
15:31:23.0373 3544 Current date / time: 2011/10/06 15:31:23.0373
15:31:23.0373 3544 SystemInfo:
15:31:23.0373 3544
15:31:23.0374 3544 OS Version: 6.1.7600 ServicePack: 0.0
15:31:23.0374 3544 Product type: Workstation
15:31:23.0374 3544 ComputerName: ADMIN-PC
15:31:23.0374 3544 UserName: admin
15:31:23.0374 3544 Windows directory: C:\windows
15:31:23.0374 3544 System windows directory: C:\windows
15:31:23.0374 3544 Processor architecture: Intel x86
15:31:23.0374 3544 Number of processors: 2
15:31:23.0374 3544 Page size: 0x1000
15:31:23.0374 3544 Boot type: Normal boot
15:31:23.0374 3544 ============================================================
15:31:24.0204 3544 Initialize success
15:31:51.0916 5828 ============================================================
15:31:51.0916 5828 Scan started
15:31:51.0916 5828 Mode: Manual; SigCheck; TDLFS;
15:31:51.0916 5828 ============================================================
15:31:53.0020 5828 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
15:31:53.0164 5828 1394ohci - ok
15:31:53.0231 5828 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
15:31:53.0335 5828 5U876UVC - ok
15:31:53.0376 5828 Accelerometer (4df5e6215a102a192b2b6dbb61f2fba5) C:\windows\system32\DRIVERS\Accelerometer.sys
15:31:53.0459 5828 Accelerometer - ok
15:31:53.0535 5828 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
15:31:53.0555 5828 ACPI - ok
15:31:53.0599 5828 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
15:31:53.0637 5828 AcpiPmi - ok
15:31:53.0718 5828 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
15:31:53.0876 5828 ADIHdAudAddService - ok
15:31:53.0961 5828 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
15:31:53.0991 5828 adp94xx - ok
15:31:54.0031 5828 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
15:31:54.0058 5828 adpahci - ok
15:31:54.0136 5828 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
15:31:54.0160 5828 adpu320 - ok
15:31:54.0270 5828 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\windows\system32\drivers\afd.sys
15:31:54.0339 5828 AFD - ok
15:31:54.0474 5828 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\windows\system32\DRIVERS\AGRSM.sys
15:31:54.0536 5828 AgereSoftModem - ok
15:31:54.0567 5828 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
15:31:54.0583 5828 agp440 - ok
15:31:54.0629 5828 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
15:31:54.0645 5828 aic78xx - ok
15:31:54.0712 5828 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
15:31:54.0728 5828 aliide - ok
15:31:54.0759 5828 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
15:31:54.0777 5828 amdagp - ok
15:31:54.0810 5828 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
15:31:54.0827 5828 amdide - ok
15:31:54.0849 5828 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
15:31:54.0887 5828 AmdK8 - ok
15:31:54.0927 5828 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
15:31:54.0962 5828 AmdPPM - ok
15:31:54.0996 5828 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
15:31:55.0015 5828 amdsata - ok
15:31:55.0066 5828 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
15:31:55.0088 5828 amdsbs - ok
15:31:55.0114 5828 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
15:31:55.0131 5828 amdxata - ok
15:31:55.0165 5828 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
15:31:55.0202 5828 AppID - ok
15:31:55.0275 5828 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
15:31:55.0293 5828 arc - ok
15:31:55.0319 5828 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
15:31:55.0338 5828 arcsas - ok
15:31:55.0485 5828 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
15:31:55.0608 5828 AsyncMac - ok
15:31:55.0672 5828 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
15:31:55.0689 5828 atapi - ok
15:31:55.0730 5828 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
15:31:55.0839 5828 AtiHdmiService - ok
15:31:56.0151 5828 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
15:31:56.0872 5828 atikmdag - ok
15:31:57.0101 5828 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
15:31:57.0152 5828 b06bdrv - ok
15:31:57.0257 5828 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
15:31:57.0347 5828 b57nd60x - ok
15:31:57.0541 5828 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
15:31:57.0596 5828 BCM43XX - ok
15:31:57.0647 5828 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
15:31:57.0699 5828 Beep - ok
15:31:57.0823 5828 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
15:31:57.0878 5828 blbdrive - ok
15:31:57.0948 5828 bowser (fcafaef6798d7b51ff029f99a9898961) C:\windows\system32\DRIVERS\bowser.sys
15:31:58.0069 5828 bowser - ok
15:31:58.0144 5828 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
15:31:58.0296 5828 BrFiltLo - ok
15:31:58.0401 5828 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
15:31:58.0542 5828 BrFiltUp - ok
15:31:58.0702 5828 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
15:31:58.0851 5828 BrSerIb - ok
15:31:58.0900 5828 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
15:31:58.0941 5828 Brserid - ok
15:31:58.0992 5828 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
15:31:59.0018 5828 BrSerWdm - ok
15:31:59.0066 5828 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
15:31:59.0106 5828 BrUsbMdm - ok
15:31:59.0128 5828 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
15:31:59.0151 5828 BrUsbSer - ok
15:31:59.0210 5828 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
15:31:59.0308 5828 BrUsbSIb - ok
15:31:59.0354 5828 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
15:31:59.0379 5828 BthEnum - ok
15:31:59.0424 5828 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
15:31:59.0464 5828 BTHMODEM - ok
15:31:59.0511 5828 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
15:31:59.0535 5828 BthPan - ok
15:31:59.0584 5828 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
15:31:59.0620 5828 BTHPORT - ok
15:31:59.0674 5828 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
15:31:59.0712 5828 BTHUSB - ok
15:31:59.0771 5828 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
15:31:59.0853 5828 btwaudio - ok
15:31:59.0883 5828 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
15:32:00.0004 5828 btwavdt - ok
15:32:00.0054 5828 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
15:32:00.0066 5828 btwl2cap - ok
15:32:00.0116 5828 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
15:32:00.0190 5828 btwrchid - ok
15:32:00.0240 5828 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
15:32:00.0300 5828 cdfs - ok
15:32:00.0344 5828 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
15:32:00.0384 5828 cdrom - ok
15:32:00.0450 5828 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
15:32:00.0488 5828 circlass - ok
15:32:00.0566 5828 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
15:32:00.0613 5828 CLFS - ok
15:32:00.0843 5828 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
15:32:00.0892 5828 CmBatt - ok
15:32:01.0070 5828 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
15:32:01.0148 5828 cmderd - ok
15:32:01.0208 5828 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
15:32:01.0340 5828 cmdGuard - ok
15:32:01.0405 5828 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
15:32:01.0487 5828 cmdHlp - ok
15:32:01.0543 5828 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
15:32:01.0559 5828 cmdide - ok
15:32:01.0605 5828 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
15:32:01.0683 5828 CNG - ok
15:32:01.0740 5828 cnmpar21 - ok
15:32:01.0791 5828 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
15:32:01.0801 5828 Compbatt - ok
15:32:01.0848 5828 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
15:32:01.0864 5828 CompositeBus - ok
15:32:01.0927 5828 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
15:32:01.0945 5828 crcdisk - ok
15:32:02.0034 5828 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\windows\system32\Drivers\dfsc.sys
15:32:02.0083 5828 DfsC - ok
15:32:02.0140 5828 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
15:32:02.0190 5828 discache - ok
15:32:02.0261 5828 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
15:32:02.0278 5828 Disk - ok
15:32:02.0317 5828 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
15:32:02.0354 5828 drmkaud - ok
15:32:02.0447 5828 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
15:32:02.0463 5828 dtsoftbus01 - ok
15:32:02.0566 5828 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\windows\System32\drivers\dxgkrnl.sys
15:32:02.0597 5828 DXGKrnl - ok
15:32:02.0771 5828 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
15:32:03.0005 5828 ebdrv - ok
15:32:03.0142 5828 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
15:32:03.0195 5828 elxstor - ok
15:32:03.0292 5828 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
15:32:03.0325 5828 ErrDev - ok
15:32:03.0449 5828 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
15:32:03.0463 5828 eusk2par - ok
15:32:03.0521 5828 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
15:32:03.0561 5828 exfat - ok
15:32:03.0598 5828 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
15:32:03.0652 5828 fastfat - ok
15:32:03.0730 5828 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
15:32:03.0769 5828 fdc - ok
15:32:03.0961 5828 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
15:32:03.0978 5828 FileInfo - ok
15:32:04.0111 5828 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
15:32:04.0169 5828 Filetrace - ok
15:32:04.0248 5828 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
15:32:04.0317 5828 flpydisk - ok
15:32:04.0411 5828 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
15:32:04.0459 5828 FltMgr - ok
15:32:04.0512 5828 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
15:32:04.0555 5828 FsDepends - ok
15:32:04.0607 5828 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
15:32:04.0624 5828 Fs_Rec - ok
15:32:04.0694 5828 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
15:32:04.0856 5828 fvevol - ok
15:32:04.0948 5828 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
15:32:04.0973 5828 gagp30kx - ok
15:32:05.0063 5828 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
15:32:05.0088 5828 hcw85cir - ok
15:32:05.0143 5828 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
15:32:05.0179 5828 HdAudAddService - ok
15:32:05.0229 5828 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
15:32:05.0264 5828 HDAudBus - ok
15:32:05.0304 5828 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
15:32:05.0335 5828 HidBatt - ok
15:32:05.0366 5828 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
15:32:05.0409 5828 HidBth - ok
15:32:05.0460 5828 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
15:32:05.0486 5828 HidIr - ok
15:32:05.0519 5828 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
15:32:05.0550 5828 HidUsb - ok
15:32:05.0582 5828 hpdskflt (e1d82f0c8456abb03b7df5d623ca47d1) C:\windows\system32\DRIVERS\hpdskflt.sys
15:32:05.0669 5828 hpdskflt - ok
15:32:05.0744 5828 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
15:32:05.0864 5828 HpqKbFiltr - ok
15:32:05.0907 5828 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
15:32:05.0926 5828 HpSAMD - ok
15:32:06.0046 5828 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
15:32:06.0139 5828 HTTP - ok
15:32:06.0172 5828 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
15:32:06.0190 5828 hwpolicy - ok
15:32:06.0223 5828 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
15:32:06.0286 5828 i8042prt - ok
15:32:06.0337 5828 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
15:32:06.0355 5828 iaStor - ok
15:32:06.0412 5828 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
15:32:06.0439 5828 iaStorV - ok
15:32:06.0613 5828 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
15:32:06.0960 5828 igfx - ok
15:32:07.0012 5828 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
15:32:07.0029 5828 iirsp - ok
15:32:07.0098 5828 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
15:32:07.0180 5828 inspect - ok
15:32:07.0220 5828 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
15:32:07.0236 5828 intelide - ok
15:32:07.0317 5828 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
15:32:07.0347 5828 intelppm - ok
15:32:07.0394 5828 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
15:32:07.0447 5828 IpFilterDriver - ok
15:32:07.0507 5828 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
15:32:07.0536 5828 IPMIDRV - ok
15:32:07.0570 5828 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
15:32:07.0616 5828 IPNAT - ok
15:32:07.0661 5828 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
15:32:07.0698 5828 IRENUM - ok
15:32:07.0723 5828 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
15:32:07.0740 5828 isapnp - ok
15:32:07.0802 5828 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
15:32:07.0829 5828 iScsiPrt - ok
15:32:07.0906 5828 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
15:32:07.0923 5828 kbdclass - ok
15:32:07.0961 5828 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
15:32:07.0988 5828 kbdhid - ok
15:32:08.0129 5828 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
15:32:08.0148 5828 KSecDD - ok
15:32:08.0261 5828 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
15:32:08.0366 5828 KSecPkg - ok
15:32:08.0469 5828 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
15:32:08.0519 5828 lltdio - ok
15:32:08.0614 5828 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
15:32:08.0632 5828 LSI_FC - ok
15:32:08.0695 5828 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
15:32:08.0714 5828 LSI_SAS - ok
15:32:08.0768 5828 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
15:32:08.0785 5828 LSI_SAS2 - ok
15:32:08.0833 5828 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
15:32:08.0851 5828 LSI_SCSI - ok
15:32:08.0907 5828 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
15:32:08.0954 5828 luafv - ok
15:32:09.0041 5828 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
15:32:09.0150 5828 mcdbus ( UnsignedFile.Multi.Generic ) - warning
15:32:09.0150 5828 mcdbus - detected UnsignedFile.Multi.Generic (1)
15:32:09.0205 5828 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
15:32:09.0221 5828 megasas - ok
15:32:09.0270 5828 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
15:32:09.0294 5828 MegaSR - ok
15:32:09.0361 5828 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
15:32:09.0448 5828 MfeAVFK - ok
15:32:09.0506 5828 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
15:32:09.0587 5828 MfeBOPK - ok
15:32:09.0633 5828 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
15:32:09.0770 5828 mfehidk - ok
15:32:09.0790 5828 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
15:32:09.0868 5828 MfeRKDK - ok
15:32:09.0902 5828 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
15:32:09.0983 5828 mfetdik - ok
15:32:10.0024 5828 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
15:32:10.0071 5828 Modem - ok
15:32:10.0104 5828 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
15:32:10.0136 5828 monitor - ok
15:32:10.0182 5828 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
15:32:10.0198 5828 mouclass - ok
15:32:10.0221 5828 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
15:32:10.0249 5828 mouhid - ok
15:32:10.0283 5828 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
15:32:10.0301 5828 mountmgr - ok
15:32:10.0343 5828 MpFilter (c98301ad8173a2235a9ab828955c32bb) C:\windows\system32\DRIVERS\MpFilter.sys
15:32:10.0362 5828 MpFilter - ok
15:32:10.0386 5828 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
15:32:10.0405 5828 mpio - ok
15:32:10.0466 5828 MpKsl00ddde7b - ok
15:32:10.0554 5828 MpKsl2b063bc5 (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsl2b063bc5.sys
15:32:10.0639 5828 MpKsl2b063bc5 - ok
15:32:10.0656 5828 MpKsl4bac2904 - ok
15:32:10.0688 5828 MpKslc24e7c67 - ok
15:32:10.0730 5828 MpKsle65cdd9d (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKsle65cdd9d.sys
15:32:10.0813 5828 MpKsle65cdd9d - ok
15:32:10.0872 5828 MpKslfd417ccc (5f53edfead46fa7adb78eee9ecce8fdf) C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\MpKslfd417ccc.sys
15:32:10.0955 5828 MpKslfd417ccc - ok
15:32:10.0999 5828 MpNWMon (aeb186afff5d9cfed823c15d846aac3b) C:\windows\system32\DRIVERS\MpNWMon.sys
15:32:11.0015 5828 MpNWMon - ok
15:32:11.0044 5828 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
15:32:11.0081 5828 mpsdrv - ok
15:32:11.0116 5828 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
15:32:11.0153 5828 MRxDAV - ok
15:32:11.0183 5828 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\windows\system32\DRIVERS\mrxsmb.sys
15:32:11.0319 5828 mrxsmb - ok
15:32:11.0334 5828 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\windows\system32\DRIVERS\mrxsmb10.sys
15:32:11.0492 5828 mrxsmb10 - ok
15:32:11.0515 5828 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\windows\system32\DRIVERS\mrxsmb20.sys
15:32:11.0623 5828 mrxsmb20 - ok
15:32:11.0649 5828 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
15:32:11.0665 5828 msahci - ok
15:32:11.0703 5828 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
15:32:11.0722 5828 msdsm - ok
15:32:11.0769 5828 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
15:32:11.0806 5828 Msfs - ok
15:32:11.0825 5828 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
15:32:11.0863 5828 mshidkmdf - ok
15:32:11.0895 5828 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
15:32:11.0910 5828 msisadrv - ok
15:32:11.0957 5828 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
15:32:12.0004 5828 MSKSSRV - ok
15:32:12.0036 5828 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
15:32:12.0078 5828 MSPCLOCK - ok
15:32:12.0103 5828 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
15:32:12.0151 5828 MSPQM - ok
15:32:12.0173 5828 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
15:32:12.0194 5828 MsRPC - ok
15:32:12.0218 5828 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
15:32:12.0235 5828 mssmbios - ok
15:32:12.0255 5828 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
15:32:12.0292 5828 MSTEE - ok
15:32:12.0318 5828 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
15:32:12.0347 5828 MTConfig - ok
15:32:12.0381 5828 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
15:32:12.0398 5828 Mup - ok
15:32:12.0452 5828 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
15:32:12.0488 5828 NativeWifiP - ok
15:32:12.0535 5828 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
15:32:12.0566 5828 NDIS - ok
15:32:12.0597 5828 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
15:32:12.0629 5828 NdisCap - ok
15:32:12.0660 5828 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
15:32:12.0709 5828 NdisTapi - ok
15:32:12.0739 5828 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
15:32:12.0775 5828 Ndisuio - ok
15:32:12.0799 5828 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
15:32:12.0844 5828 NdisWan - ok
15:32:12.0868 5828 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
15:32:12.0906 5828 NDProxy - ok
15:32:12.0926 5828 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
15:32:12.0962 5828 NetBIOS - ok
15:32:12.0987 5828 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
15:32:13.0039 5828 NetBT - ok
15:32:13.0209 5828 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
15:32:13.0364 5828 netw5v32 - ok
15:32:13.0408 5828 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
15:32:13.0424 5828 nfrd960 - ok
15:32:13.0487 5828 npelpchm - ok
15:32:13.0532 5828 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
15:32:13.0546 5828 npf - ok
15:32:13.0571 5828 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
15:32:13.0616 5828 Npfs - ok
15:32:13.0645 5828 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
15:32:13.0694 5828 nsiproxy - ok
15:32:13.0753 5828 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
15:32:13.0813 5828 Ntfs - ok
15:32:13.0831 5828 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
15:32:13.0880 5828 Null - ok
15:32:13.0920 5828 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
15:32:13.0939 5828 nvraid - ok
15:32:13.0968 5828 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
15:32:13.0989 5828 nvstor - ok
15:32:14.0011 5828 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
15:32:14.0031 5828 nv_agp - ok
15:32:14.0075 5828 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
15:32:14.0111 5828 ohci1394 - ok
15:32:14.0181 5828 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
15:32:14.0217 5828 Parport - ok
15:32:14.0258 5828 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
15:32:14.0275 5828 partmgr - ok
15:32:14.0308 5828 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
15:32:14.0331 5828 Parvdm - ok
15:32:14.0376 5828 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
15:32:14.0394 5828 pci - ok
15:32:14.0433 5828 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
15:32:14.0448 5828 pciide - ok
15:32:14.0485 5828 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
15:32:14.0508 5828 pcmcia - ok
15:32:14.0567 5828 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
15:32:14.0583 5828 pcw - ok
15:32:14.0628 5828 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
15:32:14.0693 5828 PEAUTH - ok
15:32:14.0795 5828 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
15:32:14.0843 5828 PptpMiniport - ok
15:32:14.0869 5828 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
15:32:14.0905 5828 Processor - ok
15:32:14.0943 5828 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
15:32:14.0990 5828 Psched - ok
15:32:15.0026 5828 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
15:32:15.0040 5828 PxHelp20 - ok
15:32:15.0086 5828 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
15:32:15.0156 5828 ql2300 - ok
15:32:15.0195 5828 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
15:32:15.0215 5828 ql40xx - ok
15:32:15.0245 5828 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
15:32:15.0278 5828 QWAVEdrv - ok
15:32:15.0298 5828 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
15:32:15.0334 5828 RasAcd - ok
15:32:15.0366 5828 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
15:32:15.0408 5828 RasAgileVpn - ok
15:32:15.0443 5828 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
15:32:15.0487 5828 Rasl2tp - ok
15:32:15.0545 5828 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
15:32:15.0593 5828 RasPppoe - ok
15:32:15.0628 5828 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
15:32:15.0676 5828 RasSstp - ok
15:32:15.0708 5828 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
15:32:15.0762 5828 rdbss - ok
15:32:15.0800 5828 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
15:32:15.0825 5828 rdpbus - ok
15:32:15.0850 5828 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
15:32:15.0893 5828 RDPCDD - ok
15:32:15.0921 5828 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
15:32:15.0956 5828 RDPENCDD - ok
15:32:15.0983 5828 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
15:32:16.0023 5828 RDPREFMP - ok
15:32:16.0049 5828 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
15:32:16.0101 5828 RDPWD - ok
15:32:16.0139 5828 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
15:32:16.0161 5828 rdyboost - ok
15:32:16.0221 5828 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
15:32:16.0249 5828 RFCOMM - ok
15:32:16.0308 5828 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
15:32:16.0345 5828 rspndr - ok
15:32:16.0387 5828 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
15:32:16.0405 5828 sbp2port - ok
15:32:16.0431 5828 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
15:32:16.0468 5828 scfilter - ok
15:32:16.0506 5828 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
15:32:16.0549 5828 secdrv - ok
15:32:16.0614 5828 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
15:32:16.0639 5828 Serenum - ok
15:32:16.0667 5828 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
15:32:16.0705 5828 Serial - ok
15:32:16.0731 5828 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
15:32:16.0755 5828 sermouse - ok
15:32:16.0802 5828 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
15:32:16.0828 5828 sffdisk - ok
15:32:16.0853 5828 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
15:32:16.0892 5828 sffp_mmc - ok
15:32:16.0916 5828 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
15:32:16.0940 5828 sffp_sd - ok
15:32:16.0963 5828 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
15:32:17.0001 5828 sfloppy - ok
15:32:17.0041 5828 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
15:32:17.0059 5828 sisagp - ok
15:32:17.0086 5828 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
15:32:17.0103 5828 SiSRaid2 - ok
15:32:17.0129 5828 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
15:32:17.0148 5828 SiSRaid4 - ok
15:32:17.0203 5828 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
15:32:17.0248 5828 Smb - ok
15:32:17.0303 5828 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
15:32:17.0319 5828 spldr - ok
15:32:17.0381 5828 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\windows\system32\DRIVERS\srv.sys
15:32:17.0522 5828 srv - ok
15:32:17.0553 5828 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\windows\system32\DRIVERS\srv2.sys
15:32:17.0706 5828 srv2 - ok
15:32:17.0733 5828 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\windows\system32\DRIVERS\srvnet.sys
15:32:17.0850 5828 srvnet - ok
15:32:17.0897 5828 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
15:32:17.0911 5828 ssfs0bbc - ok
15:32:17.0944 5828 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
15:32:17.0957 5828 sshrmd - ok
15:32:17.0980 5828 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
15:32:17.0999 5828 ssidrv - ok
15:32:18.0034 5828 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
15:32:18.0051 5828 stexstor - ok
15:32:18.0095 5828 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
15:32:18.0112 5828 swenum - ok
15:32:18.0189 5828 SynTP (1de40024679cde0e573465253519730e) C:\windows\system32\DRIVERS\SynTP.sys
15:32:18.0317 5828 SynTP - ok
15:32:18.0404 5828 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\drivers\tcpip.sys
15:32:18.0617 5828 Tcpip - ok
15:32:18.0648 5828 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\DRIVERS\tcpip.sys
15:32:18.0695 5828 TCPIP6 - ok
15:32:18.0727 5828 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
15:32:18.0764 5828 tcpipreg - ok
15:32:18.0792 5828 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
15:32:18.0838 5828 TDPIPE - ok
15:32:18.0866 5828 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
15:32:18.0902 5828 TDTCP - ok
15:32:18.0922 5828 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
15:32:18.0970 5828 tdx - ok
15:32:19.0028 5828 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
15:32:19.0057 5828 teamviewervpn - ok
15:32:19.0091 5828 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
15:32:19.0109 5828 TermDD - ok
15:32:19.0169 5828 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
15:32:19.0198 5828 TPM - ok
15:32:19.0244 5828 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
15:32:19.0289 5828 tssecsrv - ok
15:32:19.0326 5828 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
15:32:19.0377 5828 tunnel - ok
15:32:19.0415 5828 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
15:32:19.0433 5828 uagp35 - ok
15:32:19.0488 5828 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
15:32:19.0586 5828 udfs - ok
15:32:19.0650 5828 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
15:32:19.0668 5828 uliagpkx - ok
15:32:19.0732 5828 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
15:32:19.0766 5828 umbus - ok
15:32:19.0811 5828 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
15:32:19.0836 5828 UmPass - ok
15:32:19.0923 5828 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
15:32:19.0954 5828 usbccgp - ok
15:32:20.0022 5828 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
15:32:20.0051 5828 usbcir - ok
15:32:20.0087 5828 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
15:32:20.0119 5828 usbehci - ok
15:32:20.0213 5828 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
15:32:20.0253 5828 usbhub - ok
15:32:20.0304 5828 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
15:32:20.0336 5828 usbohci - ok
15:32:20.0411 5828 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
15:32:20.0437 5828 usbprint - ok
15:32:20.0531 5828 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
15:32:20.0557 5828 usbscan - ok
15:32:20.0619 5828 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
15:32:20.0644 5828 USBSTOR - ok
15:32:20.0695 5828 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
15:32:20.0718 5828 usbuhci - ok
15:32:20.0851 5828 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
15:32:20.0999 5828 usbvideo - ok
15:32:21.0085 5828 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
15:32:21.0103 5828 vdrvroot - ok
15:32:21.0148 5828 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
15:32:21.0187 5828 vga - ok
15:32:21.0221 5828 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
15:32:21.0271 5828 VgaSave - ok
15:32:21.0350 5828 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
15:32:21.0388 5828 vhdmp - ok
15:32:21.0441 5828 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
15:32:21.0459 5828 viaagp - ok
15:32:21.0595 5828 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
15:32:21.0620 5828 ViaC7 - ok
15:32:21.0662 5828 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
15:32:21.0678 5828 viaide - ok
15:32:21.0775 5828 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
15:32:21.0895 5828 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
15:32:21.0895 5828 VirtualCam - detected UnsignedFile.Multi.Generic (1)
15:32:21.0957 5828 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
15:32:21.0975 5828 volmgr - ok
15:32:22.0044 5828 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
15:32:22.0104 5828 volmgrx - ok
15:32:22.0155 5828 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
15:32:22.0181 5828 volsnap - ok
15:32:22.0245 5828 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
15:32:22.0265 5828 vsmraid - ok
15:32:22.0306 5828 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
15:32:22.0334 5828 vwifibus - ok
15:32:22.0406 5828 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
15:32:22.0455 5828 vwififlt - ok
15:32:22.0507 5828 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
15:32:22.0542 5828 vwifimp - ok
15:32:22.0603 5828 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
15:32:22.0627 5828 WacomPen - ok
15:32:22.0707 5828 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:32:22.0751 5828 WANARP - ok
15:32:22.0761 5828 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:32:22.0798 5828 Wanarpv6 - ok
15:32:22.0989 5828 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
15:32:23.0005 5828 Wd - ok
15:32:23.0056 5828 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
15:32:23.0087 5828 Wdf01000 - ok
15:32:23.0241 5828 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
15:32:23.0278 5828 WfpLwf - ok
15:32:23.0336 5828 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
15:32:23.0351 5828 WIMMount - ok
15:32:23.0509 5828 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
15:32:23.0549 5828 WinUsb - ok
15:32:23.0669 5828 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
15:32:23.0690 5828 WmiAcpi - ok
15:32:23.0828 5828 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
15:32:23.0863 5828 ws2ifsl - ok
15:32:23.0958 5828 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
15:32:24.0011 5828 WudfPf - ok
15:32:24.0059 5828 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
15:32:24.0116 5828 WUDFRd - ok
15:32:24.0206 5828 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
15:32:24.0233 5828 yukonw7 - ok
15:32:24.0299 5828 MBR (0x1B8) (e2623ec53824142420ae2f36878e5488) \Device\Harddisk0\DR0
15:32:24.0301 5828 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
15:32:24.0301 5828 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
15:32:24.0335 5828 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
15:32:24.0335 5828 \Device\Harddisk0\DR0 - detected TDSS File System (1)
15:32:24.0376 5828 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
15:32:24.0378 5828 \Device\Harddisk0\DR0\Partition0 - ok
15:32:24.0390 5828 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
15:32:24.0397 5828 \Device\Harddisk0\DR0\Partition1 - ok
15:32:24.0424 5828 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
15:32:24.0426 5828 \Device\Harddisk0\DR0\Partition2 - ok
15:32:24.0441 5828 Boot (0x1200) (0adc60955e80da72fa713d415a2b3f8e) \Device\Harddisk0\DR0\Partition3
15:32:24.0442 5828 \Device\Harddisk0\DR0\Partition3 - ok
15:32:24.0442 5828 ============================================================
15:32:24.0442 5828 Scan finished
15:32:24.0442 5828 ============================================================
15:32:24.0480 0724 Detected object count: 4
15:32:24.0480 0724 Actual detected object count: 4
15:32:38.0835 0724 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
15:32:38.0835 0724 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:32:38.0837 0724 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
15:32:38.0837 0724 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:32:38.0839 0724 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - skipped by user
15:32:38.0839 0724 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Skip
15:32:38.0842 0724 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
15:32:38.0842 0724 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
15:32:56.0706 5668 Deinitialize success
Re: BSoD, mírně zpomalené PC
BSOD
==================================================
Dump File : 100611-21325-01.dmp
Crash Time : 6.10.2011 15:26:36
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0x00000000
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x8c32de85
Caused By Driver : iaStor.sys
Caused By Address : iaStor.sys+3de85
File Description : Intel Matrix Storage Manager driver - ia32
Product Name : Intel Matrix Storage Manager driver
Company : Intel Corporation
File Version : 8.9.2.1002
Processor : 32-bit
Crash Address : ntkrnlpa.exe+4682b
Stack Address 1 : iaStor.sys+3de85
Stack Address 2 : iaStor.sys+44cb6
Stack Address 3 : iaStor.sys+51e9
Computer Name :
Full Path : C:\windows\Minidump\100611-21325-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 143 224
==================================================
==================================================
Dump File : 100611-21325-01.dmp
Crash Time : 6.10.2011 15:26:36
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0x00000000
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x8c32de85
Caused By Driver : iaStor.sys
Caused By Address : iaStor.sys+3de85
File Description : Intel Matrix Storage Manager driver - ia32
Product Name : Intel Matrix Storage Manager driver
Company : Intel Corporation
File Version : 8.9.2.1002
Processor : 32-bit
Crash Address : ntkrnlpa.exe+4682b
Stack Address 1 : iaStor.sys+3de85
Stack Address 2 : iaStor.sys+44cb6
Stack Address 3 : iaStor.sys+51e9
Computer Name :
Full Path : C:\windows\Minidump\100611-21325-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 143 224
==================================================
Re: BSoD, mírně zpomalené PC
V nouzovém rezim combo sel
ComboFix 11-10-06.03 - admin 06.10.2011 16:07:05.1.2 - x86 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3066.1776 [GMT 2:00]
Spuštěný z: c:\users\admin\Downloads\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
AV: Microsoft Security Essentials *Disabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Microsoft Security Essentials *Disabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Spy Sweeper *Disabled/Updated* {8162D2B6-63C7-5812-E5F7-165FDC222080}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\admin\AppData\Local\ConduitInstaller.exe
c:\users\admin\AppData\Roaming\Local
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\.ddr
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\tcnuknjxmtrr.avi.ddr
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\.ddp
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\tcnuknjxmtrr.avi
c:\windows\system32\comct332.ocx
c:\windows\system32\tmp.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-06 do 2011-10-06 )))))))))))))))))))))))))))))))
.
.
2011-10-06 14:15 . 2011-10-06 14:15 -------- d-----w- c:\users\admin\AppData\Local\temp
2011-10-06 14:02 . 2011-10-06 14:02 56200 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\offreg.dll
2011-10-06 11:51 . 2011-10-06 11:54 -------- d-----w- c:\program files\trend micro
2011-10-06 11:51 . 2011-10-06 11:52 -------- d-----w- C:\rsit
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Local\Windows Live Writer
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Roaming\Windows Live Writer
2011-10-06 08:53 . 2011-10-06 09:17 -------- d-----w- c:\program files\NetBeans 7.0.1
2011-10-06 08:52 . 2011-10-06 09:19 -------- d-----w- c:\users\admin\.nbi
2011-10-06 07:13 . 2011-10-06 07:13 29548 ----a-w- C:\cc_20111006_091306.reg
2011-10-05 16:02 . 2011-10-05 16:48 -------- d-----w- c:\users\admin\AppData\Local\Conduit
2011-10-05 15:34 . 2011-10-05 15:34 -------- d-----w- c:\programdata\Premium
2011-10-05 15:34 . 2011-10-05 15:38 -------- d-----w- c:\programdata\InstallMate
2011-10-03 06:23 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\mpengine.dll
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- C:\Infovox2.lic
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- c:\users\admin\AppData\Roaming\Balabolka
2011-09-28 14:10 . 2011-09-28 14:11 -------- d-----w- c:\program files\Balabolka
2011-09-27 07:29 . 2009-02-24 16:42 116736 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2011-09-27 07:28 . 2011-09-27 07:29 -------- d-----w- c:\program files\MagicDisc
2011-09-23 13:34 . 2011-09-23 13:34 -------- d-----w- c:\users\admin\AppData\Local\LucasArts
2011-09-10 12:14 . 2011-09-10 12:14 10800 ----a-w- C:\cc_20110910_141435.reg
2011-09-06 14:16 . 2011-09-06 14:16 -------- d-----w- c:\users\admin\AppData\Roaming\Jpeg Resampler
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-12 23:14 . 2010-12-05 20:52 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-09-04 10:08 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-03 23:47 . 2011-09-03 23:47 1838 ----a-w- C:\cc_20110904_014725.reg
2011-08-27 21:48 . 2011-08-27 21:48 10544 ----a-w- C:\cc_20110827_234820.reg
2011-08-11 21:10 . 2010-09-10 22:41 285256 ----a-w- c:\windows\system32\guard32.dll
2011-08-11 21:09 . 2010-09-10 22:40 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-08-11 21:09 . 2010-09-10 22:40 37592 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-08-11 21:09 . 2010-09-10 22:40 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-08-11 21:09 . 2010-09-10 22:40 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-30 1545512]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-08-11 2554696]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
"PaperPort PTD"="c:\program files\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]
"PPort12reminder"="c:\program files\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"PDFHook"="c:\program files\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
"PDF5 Registry Controller"="c:\program files\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
.
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
firefox_reload.lnk - c:\program files\Mozilla Firefox\management\MFsurf1.exe [2011-3-13 276751]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders credssp.dll, memgvmcd.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-08-11 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-08-11 37592]
R1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\Drivers\eusk2par.sys [2008-12-18 25680]
R1 MpKsl00ddde7b;MpKsl00ddde7b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{967A22DB-F31C-46B2-A95D-55522876CF90}\MpKsl00ddde7b.sys [x]
R1 MpKsl4bac2904;MpKsl4bac2904;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84D13C62-E8DB-4090-8FBC-B010A0ED5C4F}\MpKsl4bac2904.sys [x]
R1 MpKslc24e7c67;MpKslc24e7c67;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{464D7FF2-3CE7-4CDA-B01C-F8556E05920B}\MpKslc24e7c67.sys [x]
R1 npelpchm;npelpchm;c:\windows\system32\drivers\npelpchm.sys [x]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-04 176128]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-11-16 50704]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-08 144672]
R2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R3 5U876UVC;HP Webcam [2 MP series];c:\windows\system32\DRIVERS\5U876.sys [2009-06-30 13:01 118656]
R3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
R4 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]
R4 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]
S0 ssfs0bbc;ssfs0bbc;c:\windows\system32\DRIVERS\ssfs0bbc.sys [2009-11-06 29808]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2011-08-11 19088]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-30 218688]
S2 WRConsumerService;Webroot Client Service;c:\program files\Webroot\WebrootSecurity\WRConsumerService.exe [2010-12-05 1201640]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
2010-02-16 18:02 114688 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002Core.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002UA.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://home.sweetim.com
mStart Page = hxxp://home.sweetim.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Otevřít programem PDF Viewer Plus - c:\program files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: Subscribe in Desktop Sidebar - c:\program files\Desktop Sidebar\sbhelp.dll/menuhandler.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: Interfaces\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
FF - ProfilePath - c:\users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: browser.startup.homepage - hxxp://home.sweetim.com
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
WebBrowser-{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
MSConfigStartUp-DivX Download Manager - c:\program files\DivX\DivX Plus Web Player\DDmService.exe
MSConfigStartUp-DivXUpdate - c:\program files\DivX\DivX Update\DivXUpdate.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-10-06 16:16:34
ComboFix-quarantined-files.txt 2011-10-06 14:16
.
Před spuštěním: Volných bajtů: 21 858 545 664
Po spuštění: Volných bajtů: 21 992 587 264
.
- - End Of File - - 82A7EC5CED2DE99CC948ACE2612EC4CA
ComboFix 11-10-06.03 - admin 06.10.2011 16:07:05.1.2 - x86 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3066.1776 [GMT 2:00]
Spuštěný z: c:\users\admin\Downloads\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
AV: Microsoft Security Essentials *Disabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Microsoft Security Essentials *Disabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Spy Sweeper *Disabled/Updated* {8162D2B6-63C7-5812-E5F7-165FDC222080}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\admin\AppData\Local\ConduitInstaller.exe
c:\users\admin\AppData\Roaming\Local
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\.ddr
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\tcnuknjxmtrr.avi.ddr
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\.ddp
c:\users\admin\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\tcnuknjxmtrr.avi
c:\windows\system32\comct332.ocx
c:\windows\system32\tmp.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-06 do 2011-10-06 )))))))))))))))))))))))))))))))
.
.
2011-10-06 14:15 . 2011-10-06 14:15 -------- d-----w- c:\users\admin\AppData\Local\temp
2011-10-06 14:02 . 2011-10-06 14:02 56200 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\offreg.dll
2011-10-06 11:51 . 2011-10-06 11:54 -------- d-----w- c:\program files\trend micro
2011-10-06 11:51 . 2011-10-06 11:52 -------- d-----w- C:\rsit
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Local\Windows Live Writer
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Roaming\Windows Live Writer
2011-10-06 08:53 . 2011-10-06 09:17 -------- d-----w- c:\program files\NetBeans 7.0.1
2011-10-06 08:52 . 2011-10-06 09:19 -------- d-----w- c:\users\admin\.nbi
2011-10-06 07:13 . 2011-10-06 07:13 29548 ----a-w- C:\cc_20111006_091306.reg
2011-10-05 16:02 . 2011-10-05 16:48 -------- d-----w- c:\users\admin\AppData\Local\Conduit
2011-10-05 15:34 . 2011-10-05 15:34 -------- d-----w- c:\programdata\Premium
2011-10-05 15:34 . 2011-10-05 15:38 -------- d-----w- c:\programdata\InstallMate
2011-10-03 06:23 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\mpengine.dll
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- C:\Infovox2.lic
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- c:\users\admin\AppData\Roaming\Balabolka
2011-09-28 14:10 . 2011-09-28 14:11 -------- d-----w- c:\program files\Balabolka
2011-09-27 07:29 . 2009-02-24 16:42 116736 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2011-09-27 07:28 . 2011-09-27 07:29 -------- d-----w- c:\program files\MagicDisc
2011-09-23 13:34 . 2011-09-23 13:34 -------- d-----w- c:\users\admin\AppData\Local\LucasArts
2011-09-10 12:14 . 2011-09-10 12:14 10800 ----a-w- C:\cc_20110910_141435.reg
2011-09-06 14:16 . 2011-09-06 14:16 -------- d-----w- c:\users\admin\AppData\Roaming\Jpeg Resampler
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-12 23:14 . 2010-12-05 20:52 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-09-04 10:08 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-03 23:47 . 2011-09-03 23:47 1838 ----a-w- C:\cc_20110904_014725.reg
2011-08-27 21:48 . 2011-08-27 21:48 10544 ----a-w- C:\cc_20110827_234820.reg
2011-08-11 21:10 . 2010-09-10 22:41 285256 ----a-w- c:\windows\system32\guard32.dll
2011-08-11 21:09 . 2010-09-10 22:40 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-08-11 21:09 . 2010-09-10 22:40 37592 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-08-11 21:09 . 2010-09-10 22:40 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-08-11 21:09 . 2010-09-10 22:40 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-30 1545512]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-08-11 2554696]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
"PaperPort PTD"="c:\program files\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]
"PPort12reminder"="c:\program files\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"PDFHook"="c:\program files\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
"PDF5 Registry Controller"="c:\program files\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
.
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
firefox_reload.lnk - c:\program files\Mozilla Firefox\management\MFsurf1.exe [2011-3-13 276751]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders credssp.dll, memgvmcd.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-08-11 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-08-11 37592]
R1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\Drivers\eusk2par.sys [2008-12-18 25680]
R1 MpKsl00ddde7b;MpKsl00ddde7b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{967A22DB-F31C-46B2-A95D-55522876CF90}\MpKsl00ddde7b.sys [x]
R1 MpKsl4bac2904;MpKsl4bac2904;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84D13C62-E8DB-4090-8FBC-B010A0ED5C4F}\MpKsl4bac2904.sys [x]
R1 MpKslc24e7c67;MpKslc24e7c67;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{464D7FF2-3CE7-4CDA-B01C-F8556E05920B}\MpKslc24e7c67.sys [x]
R1 npelpchm;npelpchm;c:\windows\system32\drivers\npelpchm.sys [x]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-04 176128]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-11-16 50704]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-08 144672]
R2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R3 5U876UVC;HP Webcam [2 MP series];c:\windows\system32\DRIVERS\5U876.sys [2009-06-30 13:01 118656]
R3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
R4 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]
R4 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]
S0 ssfs0bbc;ssfs0bbc;c:\windows\system32\DRIVERS\ssfs0bbc.sys [2009-11-06 29808]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2011-08-11 19088]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-30 218688]
S2 WRConsumerService;Webroot Client Service;c:\program files\Webroot\WebrootSecurity\WRConsumerService.exe [2010-12-05 1201640]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
2010-02-16 18:02 114688 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002Core.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002UA.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://home.sweetim.com
mStart Page = hxxp://home.sweetim.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Otevřít programem PDF Viewer Plus - c:\program files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: Subscribe in Desktop Sidebar - c:\program files\Desktop Sidebar\sbhelp.dll/menuhandler.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: Interfaces\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
FF - ProfilePath - c:\users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: browser.startup.homepage - hxxp://home.sweetim.com
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
WebBrowser-{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
MSConfigStartUp-DivX Download Manager - c:\program files\DivX\DivX Plus Web Player\DDmService.exe
MSConfigStartUp-DivXUpdate - c:\program files\DivX\DivX Update\DivXUpdate.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-10-06 16:16:34
ComboFix-quarantined-files.txt 2011-10-06 14:16
.
Před spuštěním: Volných bajtů: 21 858 545 664
Po spuštění: Volných bajtů: 21 992 587 264
.
- - End Of File - - 82A7EC5CED2DE99CC948ACE2612EC4CA
Re: BSoD, mírně zpomalené PC
SystemLook 30.07.11 by jpshortstuff
Log created at 17:13 on 06/10/2011 by admin
Administrator - Elevation successful
========== filefind ==========
Searching for "memgvmcd.dll"
No files found.
-= EOF =-
17:09:58.0020 2768 TDSS rootkit removing tool 2.6.5.0 Oct 5 2011 20:52:46
17:09:59.0252 2768 ============================================================
17:09:59.0252 2768 Current date / time: 2011/10/06 17:09:59.0252
17:09:59.0252 2768 SystemInfo:
17:09:59.0252 2768
17:09:59.0252 2768 OS Version: 6.1.7600 ServicePack: 0.0
17:09:59.0252 2768 Product type: Workstation
17:09:59.0253 2768 ComputerName: ADMIN-PC
17:09:59.0253 2768 UserName: admin
17:09:59.0253 2768 Windows directory: C:\windows
17:09:59.0253 2768 System windows directory: C:\windows
17:09:59.0253 2768 Processor architecture: Intel x86
17:09:59.0253 2768 Number of processors: 2
17:09:59.0253 2768 Page size: 0x1000
17:09:59.0253 2768 Boot type: Normal boot
17:09:59.0253 2768 ============================================================
17:10:00.0030 2768 Initialize success
17:10:07.0332 5852 ============================================================
17:10:07.0332 5852 Scan started
17:10:07.0332 5852 Mode: Manual; SigCheck; TDLFS;
17:10:07.0332 5852 ============================================================
17:10:07.0991 5852 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
17:10:08.0157 5852 1394ohci - ok
17:10:08.0234 5852 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
17:10:08.0390 5852 5U876UVC - ok
17:10:08.0453 5852 Accelerometer (4df5e6215a102a192b2b6dbb61f2fba5) C:\windows\system32\DRIVERS\Accelerometer.sys
17:10:08.0560 5852 Accelerometer - ok
17:10:08.0611 5852 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
17:10:08.0637 5852 ACPI - ok
17:10:08.0684 5852 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
17:10:08.0721 5852 AcpiPmi - ok
17:10:08.0794 5852 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
17:10:09.0052 5852 ADIHdAudAddService - ok
17:10:09.0087 5852 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
17:10:09.0119 5852 adp94xx - ok
17:10:09.0149 5852 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
17:10:09.0179 5852 adpahci - ok
17:10:09.0212 5852 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
17:10:09.0234 5852 adpu320 - ok
17:10:09.0280 5852 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\windows\system32\drivers\afd.sys
17:10:09.0444 5852 AFD - ok
17:10:09.0543 5852 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\windows\system32\DRIVERS\AGRSM.sys
17:10:09.0639 5852 AgereSoftModem - ok
17:10:09.0665 5852 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
17:10:09.0684 5852 agp440 - ok
17:10:09.0714 5852 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
17:10:09.0733 5852 aic78xx - ok
17:10:09.0781 5852 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
17:10:09.0798 5852 aliide - ok
17:10:09.0828 5852 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
17:10:09.0847 5852 amdagp - ok
17:10:09.0871 5852 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
17:10:09.0888 5852 amdide - ok
17:10:09.0910 5852 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
17:10:09.0947 5852 AmdK8 - ok
17:10:09.0963 5852 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
17:10:09.0998 5852 AmdPPM - ok
17:10:10.0032 5852 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
17:10:10.0052 5852 amdsata - ok
17:10:10.0068 5852 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
17:10:10.0094 5852 amdsbs - ok
17:10:10.0116 5852 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
17:10:10.0134 5852 amdxata - ok
17:10:10.0168 5852 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
17:10:10.0284 5852 AppID - ok
17:10:10.0327 5852 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
17:10:10.0347 5852 arc - ok
17:10:10.0381 5852 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
17:10:10.0401 5852 arcsas - ok
17:10:10.0437 5852 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
17:10:10.0485 5852 AsyncMac - ok
17:10:10.0526 5852 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
17:10:10.0536 5852 atapi - ok
17:10:10.0589 5852 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
17:10:10.0730 5852 AtiHdmiService - ok
17:10:10.0854 5852 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
17:10:11.0351 5852 atikmdag - ok
17:10:11.0458 5852 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
17:10:11.0545 5852 b06bdrv - ok
17:10:11.0609 5852 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
17:10:11.0639 5852 b57nd60x - ok
17:10:11.0731 5852 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
17:10:12.0128 5852 BCM43XX - ok
17:10:12.0154 5852 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
17:10:12.0204 5852 Beep - ok
17:10:12.0248 5852 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
17:10:12.0286 5852 blbdrive - ok
17:10:12.0307 5852 bowser (fcafaef6798d7b51ff029f99a9898961) C:\windows\system32\DRIVERS\bowser.sys
17:10:12.0359 5852 bowser - ok
17:10:12.0401 5852 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
17:10:12.0429 5852 BrFiltLo - ok
17:10:12.0449 5852 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
17:10:12.0497 5852 BrFiltUp - ok
17:10:12.0548 5852 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
17:10:12.0743 5852 BrSerIb - ok
17:10:12.0771 5852 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
17:10:12.0812 5852 Brserid - ok
17:10:12.0831 5852 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
17:10:12.0867 5852 BrSerWdm - ok
17:10:12.0905 5852 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
17:10:12.0944 5852 BrUsbMdm - ok
17:10:12.0967 5852 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
17:10:13.0037 5852 BrUsbSer - ok
17:10:13.0090 5852 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
17:10:13.0172 5852 BrUsbSIb - ok
17:10:13.0218 5852 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
17:10:13.0255 5852 BthEnum - ok
17:10:13.0279 5852 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
17:10:13.0306 5852 BTHMODEM - ok
17:10:13.0325 5852 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
17:10:13.0352 5852 BthPan - ok
17:10:13.0382 5852 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
17:10:13.0417 5852 BTHPORT - ok
17:10:13.0446 5852 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
17:10:13.0474 5852 BTHUSB - ok
17:10:13.0543 5852 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
17:10:13.0661 5852 btwaudio - ok
17:10:13.0713 5852 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
17:10:13.0865 5852 btwavdt - ok
17:10:13.0925 5852 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
17:10:13.0938 5852 btwl2cap - ok
17:10:13.0954 5852 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
17:10:14.0056 5852 btwrchid - ok
17:10:14.0133 5852 catchme - ok
17:10:14.0169 5852 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
17:10:14.0221 5852 cdfs - ok
17:10:14.0281 5852 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
17:10:14.0320 5852 cdrom - ok
17:10:14.0363 5852 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
17:10:14.0390 5852 circlass - ok
17:10:14.0416 5852 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
17:10:14.0443 5852 CLFS - ok
17:10:14.0500 5852 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
17:10:14.0541 5852 CmBatt - ok
17:10:14.0628 5852 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
17:10:14.0723 5852 cmderd - ok
17:10:14.0775 5852 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
17:10:14.0925 5852 cmdGuard - ok
17:10:14.0980 5852 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
17:10:15.0088 5852 cmdHlp - ok
17:10:15.0126 5852 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
17:10:15.0146 5852 cmdide - ok
17:10:15.0180 5852 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
17:10:15.0226 5852 CNG - ok
17:10:15.0246 5852 cnmpar21 - ok
17:10:15.0300 5852 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
17:10:15.0318 5852 Compbatt - ok
17:10:15.0349 5852 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
17:10:15.0388 5852 CompositeBus - ok
17:10:15.0428 5852 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
17:10:15.0446 5852 crcdisk - ok
17:10:15.0493 5852 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\windows\system32\Drivers\dfsc.sys
17:10:15.0544 5852 DfsC - ok
17:10:15.0575 5852 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
17:10:15.0625 5852 discache - ok
17:10:15.0671 5852 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
17:10:15.0691 5852 Disk - ok
17:10:15.0743 5852 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
17:10:15.0775 5852 drmkaud - ok
17:10:15.0840 5852 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
17:10:16.0062 5852 dtsoftbus01 - ok
17:10:16.0104 5852 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\windows\System32\drivers\dxgkrnl.sys
17:10:16.0152 5852 DXGKrnl - ok
17:10:16.0255 5852 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
17:10:16.0390 5852 ebdrv - ok
17:10:16.0443 5852 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
17:10:16.0477 5852 elxstor - ok
17:10:16.0504 5852 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
17:10:16.0537 5852 ErrDev - ok
17:10:16.0644 5852 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
17:10:16.0660 5852 eusk2par - ok
17:10:16.0707 5852 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
17:10:16.0749 5852 exfat - ok
17:10:16.0777 5852 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
17:10:16.0827 5852 fastfat - ok
17:10:16.0892 5852 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
17:10:16.0931 5852 fdc - ok
17:10:16.0974 5852 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
17:10:16.0994 5852 FileInfo - ok
17:10:17.0009 5852 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
17:10:17.0054 5852 Filetrace - ok
17:10:17.0081 5852 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
17:10:17.0147 5852 flpydisk - ok
17:10:17.0182 5852 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
17:10:17.0207 5852 FltMgr - ok
17:10:17.0237 5852 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
17:10:17.0255 5852 FsDepends - ok
17:10:17.0274 5852 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
17:10:17.0291 5852 Fs_Rec - ok
17:10:17.0328 5852 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
17:10:17.0503 5852 fvevol - ok
17:10:17.0558 5852 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
17:10:17.0576 5852 gagp30kx - ok
17:10:17.0631 5852 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
17:10:17.0677 5852 hcw85cir - ok
17:10:17.0716 5852 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
17:10:17.0759 5852 HdAudAddService - ok
17:10:17.0797 5852 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
17:10:17.0839 5852 HDAudBus - ok
17:10:17.0859 5852 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
17:10:17.0879 5852 HidBatt - ok
17:10:17.0928 5852 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
17:10:17.0969 5852 HidBth - ok
17:10:17.0995 5852 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
17:10:18.0022 5852 HidIr - ok
17:10:18.0062 5852 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
17:10:18.0092 5852 HidUsb - ok
17:10:18.0125 5852 hpdskflt (e1d82f0c8456abb03b7df5d623ca47d1) C:\windows\system32\DRIVERS\hpdskflt.sys
17:10:18.0244 5852 hpdskflt - ok
17:10:18.0303 5852 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
17:10:18.0475 5852 HpqKbFiltr - ok
17:10:18.0533 5852 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
17:10:18.0553 5852 HpSAMD - ok
17:10:18.0613 5852 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
17:10:18.0671 5852 HTTP - ok
17:10:18.0690 5852 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
17:10:18.0707 5852 hwpolicy - ok
17:10:18.0724 5852 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
17:10:18.0759 5852 i8042prt - ok
17:10:18.0797 5852 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
17:10:18.0815 5852 iaStor - ok
17:10:18.0855 5852 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
17:10:18.0883 5852 iaStorV - ok
17:10:18.0996 5852 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
17:10:19.0179 5852 igfx - ok
17:10:19.0217 5852 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
17:10:19.0235 5852 iirsp - ok
17:10:19.0286 5852 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
17:10:19.0369 5852 inspect - ok
17:10:19.0400 5852 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
17:10:19.0419 5852 intelide - ok
17:10:19.0444 5852 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
17:10:19.0478 5852 intelppm - ok
17:10:19.0497 5852 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
17:10:19.0535 5852 IpFilterDriver - ok
17:10:19.0572 5852 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
17:10:19.0603 5852 IPMIDRV - ok
17:10:19.0617 5852 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
17:10:19.0663 5852 IPNAT - ok
17:10:19.0685 5852 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
17:10:19.0743 5852 IRENUM - ok
17:10:19.0763 5852 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
17:10:19.0810 5852 isapnp - ok
17:10:19.0858 5852 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
17:10:19.0882 5852 iScsiPrt - ok
17:10:19.0905 5852 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
17:10:19.0925 5852 kbdclass - ok
17:10:19.0951 5852 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
17:10:19.0983 5852 kbdhid - ok
17:10:20.0003 5852 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
17:10:20.0032 5852 KSecDD - ok
17:10:20.0068 5852 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
17:10:20.0188 5852 KSecPkg - ok
17:10:20.0269 5852 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
17:10:20.0360 5852 lltdio - ok
17:10:20.0414 5852 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
17:10:20.0435 5852 LSI_FC - ok
17:10:20.0471 5852 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
17:10:20.0518 5852 LSI_SAS - ok
17:10:20.0568 5852 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
17:10:20.0587 5852 LSI_SAS2 - ok
17:10:20.0617 5852 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
17:10:20.0637 5852 LSI_SCSI - ok
17:10:20.0659 5852 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
17:10:20.0706 5852 luafv - ok
17:10:20.0775 5852 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
17:10:20.0868 5852 mcdbus ( UnsignedFile.Multi.Generic ) - warning
17:10:20.0868 5852 mcdbus - detected UnsignedFile.Multi.Generic (1)
17:10:20.0898 5852 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
17:10:20.0917 5852 megasas - ok
17:10:20.0955 5852 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
17:10:20.0981 5852 MegaSR - ok
17:10:21.0015 5852 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
17:10:21.0163 5852 MfeAVFK - ok
17:10:21.0208 5852 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
17:10:21.0317 5852 MfeBOPK - ok
17:10:21.0367 5852 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
17:10:21.0532 5852 mfehidk - ok
17:10:21.0566 5852 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
17:10:21.0694 5852 MfeRKDK - ok
17:10:21.0744 5852 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
17:10:21.0848 5852 mfetdik - ok
17:10:21.0891 5852 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
17:10:21.0938 5852 Modem - ok
17:10:21.0987 5852 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
17:10:22.0019 5852 monitor - ok
17:10:22.0057 5852 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
17:10:22.0097 5852 mouclass - ok
17:10:22.0154 5852 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
17:10:22.0183 5852 mouhid - ok
17:10:22.0224 5852 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
17:10:22.0267 5852 mountmgr - ok
17:10:22.0309 5852 MpFilter (c98301ad8173a2235a9ab828955c32bb) C:\windows\system32\DRIVERS\MpFilter.sys
17:10:22.0331 5852 MpFilter - ok
17:10:22.0351 5852 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
17:10:22.0372 5852 mpio - ok
17:10:22.0440 5852 MpKsl00ddde7b - ok
17:10:22.0457 5852 MpKsl4bac2904 - ok
17:10:22.0498 5852 MpKslc24e7c67 - ok
17:10:22.0520 5852 MpNWMon (aeb186afff5d9cfed823c15d846aac3b) C:\windows\system32\DRIVERS\MpNWMon.sys
17:10:22.0536 5852 MpNWMon - ok
17:10:22.0565 5852 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
17:10:22.0610 5852 mpsdrv - ok
17:10:22.0636 5852 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
17:10:22.0673 5852 MRxDAV - ok
17:10:22.0719 5852 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\windows\system32\DRIVERS\mrxsmb.sys
17:10:22.0930 5852 mrxsmb - ok
17:10:22.0956 5852 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\windows\system32\DRIVERS\mrxsmb10.sys
17:10:23.0105 5852 mrxsmb10 - ok
17:10:23.0120 5852 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\windows\system32\DRIVERS\mrxsmb20.sys
17:10:23.0279 5852 mrxsmb20 - ok
17:10:23.0310 5852 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
17:10:23.0327 5852 msahci - ok
17:10:23.0347 5852 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
17:10:23.0369 5852 msdsm - ok
17:10:23.0422 5852 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
17:10:23.0459 5852 Msfs - ok
17:10:23.0478 5852 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
17:10:23.0528 5852 mshidkmdf - ok
17:10:23.0564 5852 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
17:10:23.0581 5852 msisadrv - ok
17:10:23.0626 5852 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
17:10:23.0674 5852 MSKSSRV - ok
17:10:23.0706 5852 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
17:10:23.0748 5852 MSPCLOCK - ok
17:10:23.0772 5852 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
17:10:23.0819 5852 MSPQM - ok
17:10:23.0842 5852 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
17:10:23.0864 5852 MsRPC - ok
17:10:23.0888 5852 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
17:10:23.0905 5852 mssmbios - ok
17:10:23.0924 5852 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
17:10:23.0983 5852 MSTEE - ok
17:10:24.0020 5852 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
17:10:24.0099 5852 MTConfig - ok
17:10:24.0125 5852 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
17:10:24.0144 5852 Mup - ok
17:10:24.0193 5852 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
17:10:24.0239 5852 NativeWifiP - ok
17:10:24.0292 5852 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
17:10:24.0336 5852 NDIS - ok
17:10:24.0366 5852 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
17:10:24.0413 5852 NdisCap - ok
17:10:24.0440 5852 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
17:10:24.0485 5852 NdisTapi - ok
17:10:24.0515 5852 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
17:10:24.0551 5852 Ndisuio - ok
17:10:24.0575 5852 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
17:10:24.0620 5852 NdisWan - ok
17:10:24.0644 5852 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
17:10:24.0681 5852 NDProxy - ok
17:10:24.0702 5852 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
17:10:24.0740 5852 NetBIOS - ok
17:10:24.0763 5852 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
17:10:24.0815 5852 NetBT - ok
17:10:24.0994 5852 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
17:10:25.0147 5852 netw5v32 - ok
17:10:25.0192 5852 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
17:10:25.0211 5852 nfrd960 - ok
17:10:25.0280 5852 npelpchm - ok
17:10:25.0333 5852 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
17:10:25.0351 5852 npf - ok
17:10:25.0380 5852 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
17:10:25.0452 5852 Npfs - ok
17:10:25.0487 5852 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
17:10:25.0537 5852 nsiproxy - ok
17:10:25.0588 5852 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
17:10:25.0645 5852 Ntfs - ok
17:10:25.0673 5852 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
17:10:25.0724 5852 Null - ok
17:10:25.0757 5852 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
17:10:25.0780 5852 nvraid - ok
17:10:25.0810 5852 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
17:10:25.0836 5852 nvstor - ok
17:10:25.0861 5852 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
17:10:25.0911 5852 nv_agp - ok
17:10:25.0975 5852 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
17:10:26.0012 5852 ohci1394 - ok
17:10:26.0080 5852 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
17:10:26.0122 5852 Parport - ok
17:10:26.0158 5852 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
17:10:26.0179 5852 partmgr - ok
17:10:26.0199 5852 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
17:10:26.0226 5852 Parvdm - ok
17:10:26.0259 5852 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
17:10:26.0279 5852 pci - ok
17:10:26.0299 5852 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
17:10:26.0326 5852 pciide - ok
17:10:26.0352 5852 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
17:10:26.0377 5852 pcmcia - ok
17:10:26.0455 5852 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
17:10:26.0475 5852 pcw - ok
17:10:26.0537 5852 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
17:10:26.0604 5852 PEAUTH - ok
17:10:26.0711 5852 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
17:10:26.0759 5852 PptpMiniport - ok
17:10:26.0785 5852 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
17:10:26.0821 5852 Processor - ok
17:10:26.0868 5852 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
17:10:26.0930 5852 Psched - ok
17:10:26.0967 5852 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
17:10:26.0984 5852 PxHelp20 - ok
17:10:27.0035 5852 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
17:10:27.0107 5852 ql2300 - ok
17:10:27.0144 5852 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
17:10:27.0165 5852 ql40xx - ok
17:10:27.0194 5852 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
17:10:27.0227 5852 QWAVEdrv - ok
17:10:27.0256 5852 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
17:10:27.0296 5852 RasAcd - ok
17:10:27.0321 5852 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
17:10:27.0365 5852 RasAgileVpn - ok
17:10:27.0392 5852 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
17:10:27.0448 5852 Rasl2tp - ok
17:10:27.0501 5852 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
17:10:27.0552 5852 RasPppoe - ok
17:10:27.0577 5852 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
17:10:27.0627 5852 RasSstp - ok
17:10:27.0657 5852 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
17:10:27.0714 5852 rdbss - ok
17:10:27.0765 5852 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
17:10:27.0792 5852 rdpbus - ok
17:10:27.0824 5852 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
17:10:27.0870 5852 RDPCDD - ok
17:10:27.0903 5852 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
17:10:27.0944 5852 RDPENCDD - ok
17:10:27.0990 5852 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
17:10:28.0032 5852 RDPREFMP - ok
17:10:28.0064 5852 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
17:10:28.0119 5852 RDPWD - ok
17:10:28.0162 5852 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
17:10:28.0187 5852 rdyboost - ok
17:10:28.0245 5852 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
17:10:28.0302 5852 RFCOMM - ok
17:10:28.0357 5852 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
17:10:28.0454 5852 rspndr - ok
17:10:28.0501 5852 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
17:10:28.0521 5852 sbp2port - ok
17:10:28.0562 5852 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
17:10:28.0612 5852 scfilter - ok
17:10:28.0662 5852 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
17:10:28.0713 5852 secdrv - ok
17:10:28.0770 5852 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
17:10:28.0802 5852 Serenum - ok
17:10:28.0839 5852 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
17:10:28.0876 5852 Serial - ok
17:10:28.0911 5852 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
17:10:28.0942 5852 sermouse - ok
17:10:29.0001 5852 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
17:10:29.0070 5852 sffdisk - ok
17:10:29.0132 5852 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
17:10:29.0170 5852 sffp_mmc - ok
17:10:29.0217 5852 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
17:10:29.0271 5852 sffp_sd - ok
17:10:29.0333 5852 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
17:10:29.0380 5852 sfloppy - ok
17:10:29.0425 5852 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
17:10:29.0445 5852 sisagp - ok
17:10:29.0473 5852 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
17:10:29.0491 5852 SiSRaid2 - ok
17:10:29.0531 5852 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
17:10:29.0551 5852 SiSRaid4 - ok
17:10:29.0590 5852 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
17:10:29.0634 5852 Smb - ok
17:10:29.0692 5852 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
17:10:29.0710 5852 spldr - ok
17:10:29.0783 5852 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\windows\system32\DRIVERS\srv.sys
17:10:29.0978 5852 srv - ok
17:10:30.0006 5852 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\windows\system32\DRIVERS\srv2.sys
17:10:30.0207 5852 srv2 - ok
17:10:30.0235 5852 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\windows\system32\DRIVERS\srvnet.sys
17:10:30.0385 5852 srvnet - ok
17:10:30.0439 5852 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
17:10:30.0456 5852 ssfs0bbc - ok
17:10:30.0477 5852 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
17:10:30.0487 5852 sshrmd - ok
17:10:30.0523 5852 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
17:10:30.0545 5852 ssidrv - ok
17:10:30.0586 5852 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
17:10:30.0604 5852 stexstor - ok
17:10:30.0651 5852 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
17:10:30.0668 5852 swenum - ok
17:10:30.0740 5852 SynTP (1de40024679cde0e573465253519730e) C:\windows\system32\DRIVERS\SynTP.sys
17:10:30.0899 5852 SynTP - ok
17:10:30.0997 5852 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\drivers\tcpip.sys
17:10:31.0250 5852 Tcpip - ok
17:10:31.0294 5852 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\DRIVERS\tcpip.sys
17:10:31.0330 5852 TCPIP6 - ok
17:10:31.0362 5852 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
17:10:31.0400 5852 tcpipreg - ok
17:10:31.0435 5852 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
17:10:31.0482 5852 TDPIPE - ok
17:10:31.0508 5852 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
17:10:31.0539 5852 TDTCP - ok
17:10:31.0573 5852 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
17:10:31.0621 5852 tdx - ok
17:10:31.0678 5852 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
17:10:31.0720 5852 teamviewervpn - ok
17:10:31.0749 5852 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
17:10:31.0770 5852 TermDD - ok
17:10:31.0836 5852 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
17:10:31.0865 5852 TPM - ok
17:10:31.0911 5852 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
17:10:31.0956 5852 tssecsrv - ok
17:10:31.0992 5852 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
17:10:32.0043 5852 tunnel - ok
17:10:32.0081 5852 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
17:10:32.0100 5852 uagp35 - ok
17:10:32.0130 5852 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
17:10:32.0183 5852 udfs - ok
17:10:32.0242 5852 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
17:10:32.0261 5852 uliagpkx - ok
17:10:32.0291 5852 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
17:10:32.0325 5852 umbus - ok
17:10:32.0345 5852 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
17:10:32.0369 5852 UmPass - ok
17:10:32.0400 5852 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
17:10:32.0439 5852 usbccgp - ok
17:10:32.0466 5852 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
17:10:32.0493 5852 usbcir - ok
17:10:32.0523 5852 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
17:10:32.0555 5852 usbehci - ok
17:10:32.0581 5852 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
17:10:32.0623 5852 usbhub - ok
17:10:32.0649 5852 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
17:10:32.0677 5852 usbohci - ok
17:10:32.0723 5852 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
17:10:32.0753 5852 usbprint - ok
17:10:32.0794 5852 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
17:10:32.0819 5852 usbscan - ok
17:10:32.0840 5852 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
17:10:32.0877 5852 USBSTOR - ok
17:10:32.0899 5852 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
17:10:32.0933 5852 usbuhci - ok
17:10:32.0989 5852 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
17:10:33.0165 5852 usbvideo - ok
17:10:33.0232 5852 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
17:10:33.0250 5852 vdrvroot - ok
17:10:33.0295 5852 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
17:10:33.0343 5852 vga - ok
17:10:33.0388 5852 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
17:10:33.0485 5852 VgaSave - ok
17:10:33.0529 5852 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
17:10:33.0553 5852 vhdmp - ok
17:10:33.0579 5852 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
17:10:33.0598 5852 viaagp - ok
17:10:33.0618 5852 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
17:10:33.0643 5852 ViaC7 - ok
17:10:33.0677 5852 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
17:10:33.0695 5852 viaide - ok
17:10:33.0748 5852 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
17:10:33.0893 5852 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
17:10:33.0893 5852 VirtualCam - detected UnsignedFile.Multi.Generic (1)
17:10:33.0922 5852 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
17:10:33.0941 5852 volmgr - ok
17:10:33.0980 5852 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
17:10:34.0007 5852 volmgrx - ok
17:10:34.0027 5852 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
17:10:34.0052 5852 volsnap - ok
17:10:34.0102 5852 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
17:10:34.0124 5852 vsmraid - ok
17:10:34.0156 5852 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
17:10:34.0183 5852 vwifibus - ok
17:10:34.0240 5852 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
17:10:34.0281 5852 vwififlt - ok
17:10:34.0357 5852 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
17:10:34.0392 5852 vwifimp - ok
17:10:34.0437 5852 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
17:10:34.0470 5852 WacomPen - ok
17:10:34.0499 5852 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
17:10:34.0585 5852 WANARP - ok
17:10:34.0595 5852 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
17:10:34.0631 5852 Wanarpv6 - ok
17:10:34.0731 5852 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
17:10:34.0749 5852 Wd - ok
17:10:34.0782 5852 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
17:10:34.0814 5852 Wdf01000 - ok
17:10:34.0918 5852 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
17:10:34.0955 5852 WfpLwf - ok
17:10:34.0982 5852 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
17:10:35.0000 5852 WIMMount - ok
17:10:35.0112 5852 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
17:10:35.0152 5852 WinUsb - ok
17:10:35.0230 5852 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
17:10:35.0265 5852 WmiAcpi - ok
17:10:35.0366 5852 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
17:10:35.0405 5852 ws2ifsl - ok
17:10:35.0487 5852 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
17:10:35.0531 5852 WudfPf - ok
17:10:35.0562 5852 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
17:10:35.0611 5852 WUDFRd - ok
17:10:35.0685 5852 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
17:10:35.0904 5852 yukonw7 - ok
17:10:35.0960 5852 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
17:10:35.0995 5852 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
17:10:35.0995 5852 \Device\Harddisk0\DR0 - detected TDSS File System (1)
17:10:36.0001 5852 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR3
17:10:36.0869 5852 \Device\Harddisk1\DR3 - ok
17:10:36.0873 5852 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
17:10:36.0874 5852 \Device\Harddisk0\DR0\Partition0 - ok
17:10:36.0900 5852 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
17:10:36.0902 5852 \Device\Harddisk0\DR0\Partition1 - ok
17:10:36.0934 5852 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
17:10:36.0936 5852 \Device\Harddisk0\DR0\Partition2 - ok
17:10:36.0951 5852 Boot (0x1200) (0adc60955e80da72fa713d415a2b3f8e) \Device\Harddisk0\DR0\Partition3
17:10:36.0952 5852 \Device\Harddisk0\DR0\Partition3 - ok
17:10:36.0956 5852 Boot (0x1200) (2dd6d873c73f8ea538eb7b3fe1996902) \Device\Harddisk1\DR3\Partition0
17:10:36.0957 5852 \Device\Harddisk1\DR3\Partition0 - ok
17:10:36.0959 5852 ============================================================
17:10:36.0959 5852 Scan finished
17:10:36.0959 5852 ============================================================
17:10:36.0973 5676 Detected object count: 3
17:10:36.0973 5676 Actual detected object count: 3
17:11:00.0724 5676 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
17:11:00.0724 5676 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:11:00.0726 5676 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
17:11:00.0726 5676 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:11:00.0729 5676 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
17:11:00.0729 5676 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
Log created at 17:13 on 06/10/2011 by admin
Administrator - Elevation successful
========== filefind ==========
Searching for "memgvmcd.dll"
No files found.
-= EOF =-
17:09:58.0020 2768 TDSS rootkit removing tool 2.6.5.0 Oct 5 2011 20:52:46
17:09:59.0252 2768 ============================================================
17:09:59.0252 2768 Current date / time: 2011/10/06 17:09:59.0252
17:09:59.0252 2768 SystemInfo:
17:09:59.0252 2768
17:09:59.0252 2768 OS Version: 6.1.7600 ServicePack: 0.0
17:09:59.0252 2768 Product type: Workstation
17:09:59.0253 2768 ComputerName: ADMIN-PC
17:09:59.0253 2768 UserName: admin
17:09:59.0253 2768 Windows directory: C:\windows
17:09:59.0253 2768 System windows directory: C:\windows
17:09:59.0253 2768 Processor architecture: Intel x86
17:09:59.0253 2768 Number of processors: 2
17:09:59.0253 2768 Page size: 0x1000
17:09:59.0253 2768 Boot type: Normal boot
17:09:59.0253 2768 ============================================================
17:10:00.0030 2768 Initialize success
17:10:07.0332 5852 ============================================================
17:10:07.0332 5852 Scan started
17:10:07.0332 5852 Mode: Manual; SigCheck; TDLFS;
17:10:07.0332 5852 ============================================================
17:10:07.0991 5852 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
17:10:08.0157 5852 1394ohci - ok
17:10:08.0234 5852 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
17:10:08.0390 5852 5U876UVC - ok
17:10:08.0453 5852 Accelerometer (4df5e6215a102a192b2b6dbb61f2fba5) C:\windows\system32\DRIVERS\Accelerometer.sys
17:10:08.0560 5852 Accelerometer - ok
17:10:08.0611 5852 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
17:10:08.0637 5852 ACPI - ok
17:10:08.0684 5852 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
17:10:08.0721 5852 AcpiPmi - ok
17:10:08.0794 5852 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
17:10:09.0052 5852 ADIHdAudAddService - ok
17:10:09.0087 5852 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
17:10:09.0119 5852 adp94xx - ok
17:10:09.0149 5852 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
17:10:09.0179 5852 adpahci - ok
17:10:09.0212 5852 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
17:10:09.0234 5852 adpu320 - ok
17:10:09.0280 5852 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\windows\system32\drivers\afd.sys
17:10:09.0444 5852 AFD - ok
17:10:09.0543 5852 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\windows\system32\DRIVERS\AGRSM.sys
17:10:09.0639 5852 AgereSoftModem - ok
17:10:09.0665 5852 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
17:10:09.0684 5852 agp440 - ok
17:10:09.0714 5852 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
17:10:09.0733 5852 aic78xx - ok
17:10:09.0781 5852 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
17:10:09.0798 5852 aliide - ok
17:10:09.0828 5852 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
17:10:09.0847 5852 amdagp - ok
17:10:09.0871 5852 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
17:10:09.0888 5852 amdide - ok
17:10:09.0910 5852 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
17:10:09.0947 5852 AmdK8 - ok
17:10:09.0963 5852 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
17:10:09.0998 5852 AmdPPM - ok
17:10:10.0032 5852 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
17:10:10.0052 5852 amdsata - ok
17:10:10.0068 5852 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
17:10:10.0094 5852 amdsbs - ok
17:10:10.0116 5852 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
17:10:10.0134 5852 amdxata - ok
17:10:10.0168 5852 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
17:10:10.0284 5852 AppID - ok
17:10:10.0327 5852 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
17:10:10.0347 5852 arc - ok
17:10:10.0381 5852 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
17:10:10.0401 5852 arcsas - ok
17:10:10.0437 5852 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
17:10:10.0485 5852 AsyncMac - ok
17:10:10.0526 5852 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
17:10:10.0536 5852 atapi - ok
17:10:10.0589 5852 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
17:10:10.0730 5852 AtiHdmiService - ok
17:10:10.0854 5852 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
17:10:11.0351 5852 atikmdag - ok
17:10:11.0458 5852 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
17:10:11.0545 5852 b06bdrv - ok
17:10:11.0609 5852 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
17:10:11.0639 5852 b57nd60x - ok
17:10:11.0731 5852 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
17:10:12.0128 5852 BCM43XX - ok
17:10:12.0154 5852 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
17:10:12.0204 5852 Beep - ok
17:10:12.0248 5852 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
17:10:12.0286 5852 blbdrive - ok
17:10:12.0307 5852 bowser (fcafaef6798d7b51ff029f99a9898961) C:\windows\system32\DRIVERS\bowser.sys
17:10:12.0359 5852 bowser - ok
17:10:12.0401 5852 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
17:10:12.0429 5852 BrFiltLo - ok
17:10:12.0449 5852 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
17:10:12.0497 5852 BrFiltUp - ok
17:10:12.0548 5852 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
17:10:12.0743 5852 BrSerIb - ok
17:10:12.0771 5852 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
17:10:12.0812 5852 Brserid - ok
17:10:12.0831 5852 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
17:10:12.0867 5852 BrSerWdm - ok
17:10:12.0905 5852 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
17:10:12.0944 5852 BrUsbMdm - ok
17:10:12.0967 5852 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
17:10:13.0037 5852 BrUsbSer - ok
17:10:13.0090 5852 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
17:10:13.0172 5852 BrUsbSIb - ok
17:10:13.0218 5852 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
17:10:13.0255 5852 BthEnum - ok
17:10:13.0279 5852 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
17:10:13.0306 5852 BTHMODEM - ok
17:10:13.0325 5852 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
17:10:13.0352 5852 BthPan - ok
17:10:13.0382 5852 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
17:10:13.0417 5852 BTHPORT - ok
17:10:13.0446 5852 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
17:10:13.0474 5852 BTHUSB - ok
17:10:13.0543 5852 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
17:10:13.0661 5852 btwaudio - ok
17:10:13.0713 5852 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
17:10:13.0865 5852 btwavdt - ok
17:10:13.0925 5852 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
17:10:13.0938 5852 btwl2cap - ok
17:10:13.0954 5852 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
17:10:14.0056 5852 btwrchid - ok
17:10:14.0133 5852 catchme - ok
17:10:14.0169 5852 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
17:10:14.0221 5852 cdfs - ok
17:10:14.0281 5852 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
17:10:14.0320 5852 cdrom - ok
17:10:14.0363 5852 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
17:10:14.0390 5852 circlass - ok
17:10:14.0416 5852 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
17:10:14.0443 5852 CLFS - ok
17:10:14.0500 5852 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
17:10:14.0541 5852 CmBatt - ok
17:10:14.0628 5852 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
17:10:14.0723 5852 cmderd - ok
17:10:14.0775 5852 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
17:10:14.0925 5852 cmdGuard - ok
17:10:14.0980 5852 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
17:10:15.0088 5852 cmdHlp - ok
17:10:15.0126 5852 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
17:10:15.0146 5852 cmdide - ok
17:10:15.0180 5852 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
17:10:15.0226 5852 CNG - ok
17:10:15.0246 5852 cnmpar21 - ok
17:10:15.0300 5852 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
17:10:15.0318 5852 Compbatt - ok
17:10:15.0349 5852 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
17:10:15.0388 5852 CompositeBus - ok
17:10:15.0428 5852 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
17:10:15.0446 5852 crcdisk - ok
17:10:15.0493 5852 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\windows\system32\Drivers\dfsc.sys
17:10:15.0544 5852 DfsC - ok
17:10:15.0575 5852 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
17:10:15.0625 5852 discache - ok
17:10:15.0671 5852 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
17:10:15.0691 5852 Disk - ok
17:10:15.0743 5852 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
17:10:15.0775 5852 drmkaud - ok
17:10:15.0840 5852 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
17:10:16.0062 5852 dtsoftbus01 - ok
17:10:16.0104 5852 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\windows\System32\drivers\dxgkrnl.sys
17:10:16.0152 5852 DXGKrnl - ok
17:10:16.0255 5852 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
17:10:16.0390 5852 ebdrv - ok
17:10:16.0443 5852 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
17:10:16.0477 5852 elxstor - ok
17:10:16.0504 5852 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
17:10:16.0537 5852 ErrDev - ok
17:10:16.0644 5852 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
17:10:16.0660 5852 eusk2par - ok
17:10:16.0707 5852 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
17:10:16.0749 5852 exfat - ok
17:10:16.0777 5852 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
17:10:16.0827 5852 fastfat - ok
17:10:16.0892 5852 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
17:10:16.0931 5852 fdc - ok
17:10:16.0974 5852 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
17:10:16.0994 5852 FileInfo - ok
17:10:17.0009 5852 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
17:10:17.0054 5852 Filetrace - ok
17:10:17.0081 5852 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
17:10:17.0147 5852 flpydisk - ok
17:10:17.0182 5852 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
17:10:17.0207 5852 FltMgr - ok
17:10:17.0237 5852 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
17:10:17.0255 5852 FsDepends - ok
17:10:17.0274 5852 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
17:10:17.0291 5852 Fs_Rec - ok
17:10:17.0328 5852 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
17:10:17.0503 5852 fvevol - ok
17:10:17.0558 5852 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
17:10:17.0576 5852 gagp30kx - ok
17:10:17.0631 5852 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
17:10:17.0677 5852 hcw85cir - ok
17:10:17.0716 5852 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
17:10:17.0759 5852 HdAudAddService - ok
17:10:17.0797 5852 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
17:10:17.0839 5852 HDAudBus - ok
17:10:17.0859 5852 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
17:10:17.0879 5852 HidBatt - ok
17:10:17.0928 5852 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
17:10:17.0969 5852 HidBth - ok
17:10:17.0995 5852 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
17:10:18.0022 5852 HidIr - ok
17:10:18.0062 5852 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
17:10:18.0092 5852 HidUsb - ok
17:10:18.0125 5852 hpdskflt (e1d82f0c8456abb03b7df5d623ca47d1) C:\windows\system32\DRIVERS\hpdskflt.sys
17:10:18.0244 5852 hpdskflt - ok
17:10:18.0303 5852 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
17:10:18.0475 5852 HpqKbFiltr - ok
17:10:18.0533 5852 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
17:10:18.0553 5852 HpSAMD - ok
17:10:18.0613 5852 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
17:10:18.0671 5852 HTTP - ok
17:10:18.0690 5852 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
17:10:18.0707 5852 hwpolicy - ok
17:10:18.0724 5852 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
17:10:18.0759 5852 i8042prt - ok
17:10:18.0797 5852 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
17:10:18.0815 5852 iaStor - ok
17:10:18.0855 5852 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
17:10:18.0883 5852 iaStorV - ok
17:10:18.0996 5852 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
17:10:19.0179 5852 igfx - ok
17:10:19.0217 5852 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
17:10:19.0235 5852 iirsp - ok
17:10:19.0286 5852 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
17:10:19.0369 5852 inspect - ok
17:10:19.0400 5852 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
17:10:19.0419 5852 intelide - ok
17:10:19.0444 5852 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
17:10:19.0478 5852 intelppm - ok
17:10:19.0497 5852 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
17:10:19.0535 5852 IpFilterDriver - ok
17:10:19.0572 5852 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
17:10:19.0603 5852 IPMIDRV - ok
17:10:19.0617 5852 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
17:10:19.0663 5852 IPNAT - ok
17:10:19.0685 5852 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
17:10:19.0743 5852 IRENUM - ok
17:10:19.0763 5852 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
17:10:19.0810 5852 isapnp - ok
17:10:19.0858 5852 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
17:10:19.0882 5852 iScsiPrt - ok
17:10:19.0905 5852 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
17:10:19.0925 5852 kbdclass - ok
17:10:19.0951 5852 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
17:10:19.0983 5852 kbdhid - ok
17:10:20.0003 5852 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
17:10:20.0032 5852 KSecDD - ok
17:10:20.0068 5852 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
17:10:20.0188 5852 KSecPkg - ok
17:10:20.0269 5852 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
17:10:20.0360 5852 lltdio - ok
17:10:20.0414 5852 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
17:10:20.0435 5852 LSI_FC - ok
17:10:20.0471 5852 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
17:10:20.0518 5852 LSI_SAS - ok
17:10:20.0568 5852 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
17:10:20.0587 5852 LSI_SAS2 - ok
17:10:20.0617 5852 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
17:10:20.0637 5852 LSI_SCSI - ok
17:10:20.0659 5852 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
17:10:20.0706 5852 luafv - ok
17:10:20.0775 5852 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
17:10:20.0868 5852 mcdbus ( UnsignedFile.Multi.Generic ) - warning
17:10:20.0868 5852 mcdbus - detected UnsignedFile.Multi.Generic (1)
17:10:20.0898 5852 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
17:10:20.0917 5852 megasas - ok
17:10:20.0955 5852 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
17:10:20.0981 5852 MegaSR - ok
17:10:21.0015 5852 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
17:10:21.0163 5852 MfeAVFK - ok
17:10:21.0208 5852 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
17:10:21.0317 5852 MfeBOPK - ok
17:10:21.0367 5852 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
17:10:21.0532 5852 mfehidk - ok
17:10:21.0566 5852 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
17:10:21.0694 5852 MfeRKDK - ok
17:10:21.0744 5852 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
17:10:21.0848 5852 mfetdik - ok
17:10:21.0891 5852 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
17:10:21.0938 5852 Modem - ok
17:10:21.0987 5852 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
17:10:22.0019 5852 monitor - ok
17:10:22.0057 5852 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
17:10:22.0097 5852 mouclass - ok
17:10:22.0154 5852 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
17:10:22.0183 5852 mouhid - ok
17:10:22.0224 5852 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
17:10:22.0267 5852 mountmgr - ok
17:10:22.0309 5852 MpFilter (c98301ad8173a2235a9ab828955c32bb) C:\windows\system32\DRIVERS\MpFilter.sys
17:10:22.0331 5852 MpFilter - ok
17:10:22.0351 5852 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
17:10:22.0372 5852 mpio - ok
17:10:22.0440 5852 MpKsl00ddde7b - ok
17:10:22.0457 5852 MpKsl4bac2904 - ok
17:10:22.0498 5852 MpKslc24e7c67 - ok
17:10:22.0520 5852 MpNWMon (aeb186afff5d9cfed823c15d846aac3b) C:\windows\system32\DRIVERS\MpNWMon.sys
17:10:22.0536 5852 MpNWMon - ok
17:10:22.0565 5852 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
17:10:22.0610 5852 mpsdrv - ok
17:10:22.0636 5852 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
17:10:22.0673 5852 MRxDAV - ok
17:10:22.0719 5852 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\windows\system32\DRIVERS\mrxsmb.sys
17:10:22.0930 5852 mrxsmb - ok
17:10:22.0956 5852 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\windows\system32\DRIVERS\mrxsmb10.sys
17:10:23.0105 5852 mrxsmb10 - ok
17:10:23.0120 5852 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\windows\system32\DRIVERS\mrxsmb20.sys
17:10:23.0279 5852 mrxsmb20 - ok
17:10:23.0310 5852 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
17:10:23.0327 5852 msahci - ok
17:10:23.0347 5852 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
17:10:23.0369 5852 msdsm - ok
17:10:23.0422 5852 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
17:10:23.0459 5852 Msfs - ok
17:10:23.0478 5852 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
17:10:23.0528 5852 mshidkmdf - ok
17:10:23.0564 5852 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
17:10:23.0581 5852 msisadrv - ok
17:10:23.0626 5852 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
17:10:23.0674 5852 MSKSSRV - ok
17:10:23.0706 5852 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
17:10:23.0748 5852 MSPCLOCK - ok
17:10:23.0772 5852 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
17:10:23.0819 5852 MSPQM - ok
17:10:23.0842 5852 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
17:10:23.0864 5852 MsRPC - ok
17:10:23.0888 5852 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
17:10:23.0905 5852 mssmbios - ok
17:10:23.0924 5852 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
17:10:23.0983 5852 MSTEE - ok
17:10:24.0020 5852 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
17:10:24.0099 5852 MTConfig - ok
17:10:24.0125 5852 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
17:10:24.0144 5852 Mup - ok
17:10:24.0193 5852 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
17:10:24.0239 5852 NativeWifiP - ok
17:10:24.0292 5852 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
17:10:24.0336 5852 NDIS - ok
17:10:24.0366 5852 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
17:10:24.0413 5852 NdisCap - ok
17:10:24.0440 5852 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
17:10:24.0485 5852 NdisTapi - ok
17:10:24.0515 5852 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
17:10:24.0551 5852 Ndisuio - ok
17:10:24.0575 5852 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
17:10:24.0620 5852 NdisWan - ok
17:10:24.0644 5852 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
17:10:24.0681 5852 NDProxy - ok
17:10:24.0702 5852 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
17:10:24.0740 5852 NetBIOS - ok
17:10:24.0763 5852 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
17:10:24.0815 5852 NetBT - ok
17:10:24.0994 5852 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
17:10:25.0147 5852 netw5v32 - ok
17:10:25.0192 5852 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
17:10:25.0211 5852 nfrd960 - ok
17:10:25.0280 5852 npelpchm - ok
17:10:25.0333 5852 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
17:10:25.0351 5852 npf - ok
17:10:25.0380 5852 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
17:10:25.0452 5852 Npfs - ok
17:10:25.0487 5852 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
17:10:25.0537 5852 nsiproxy - ok
17:10:25.0588 5852 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
17:10:25.0645 5852 Ntfs - ok
17:10:25.0673 5852 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
17:10:25.0724 5852 Null - ok
17:10:25.0757 5852 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
17:10:25.0780 5852 nvraid - ok
17:10:25.0810 5852 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
17:10:25.0836 5852 nvstor - ok
17:10:25.0861 5852 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
17:10:25.0911 5852 nv_agp - ok
17:10:25.0975 5852 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
17:10:26.0012 5852 ohci1394 - ok
17:10:26.0080 5852 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
17:10:26.0122 5852 Parport - ok
17:10:26.0158 5852 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
17:10:26.0179 5852 partmgr - ok
17:10:26.0199 5852 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
17:10:26.0226 5852 Parvdm - ok
17:10:26.0259 5852 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
17:10:26.0279 5852 pci - ok
17:10:26.0299 5852 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
17:10:26.0326 5852 pciide - ok
17:10:26.0352 5852 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
17:10:26.0377 5852 pcmcia - ok
17:10:26.0455 5852 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
17:10:26.0475 5852 pcw - ok
17:10:26.0537 5852 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
17:10:26.0604 5852 PEAUTH - ok
17:10:26.0711 5852 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
17:10:26.0759 5852 PptpMiniport - ok
17:10:26.0785 5852 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
17:10:26.0821 5852 Processor - ok
17:10:26.0868 5852 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
17:10:26.0930 5852 Psched - ok
17:10:26.0967 5852 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
17:10:26.0984 5852 PxHelp20 - ok
17:10:27.0035 5852 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
17:10:27.0107 5852 ql2300 - ok
17:10:27.0144 5852 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
17:10:27.0165 5852 ql40xx - ok
17:10:27.0194 5852 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
17:10:27.0227 5852 QWAVEdrv - ok
17:10:27.0256 5852 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
17:10:27.0296 5852 RasAcd - ok
17:10:27.0321 5852 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
17:10:27.0365 5852 RasAgileVpn - ok
17:10:27.0392 5852 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
17:10:27.0448 5852 Rasl2tp - ok
17:10:27.0501 5852 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
17:10:27.0552 5852 RasPppoe - ok
17:10:27.0577 5852 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
17:10:27.0627 5852 RasSstp - ok
17:10:27.0657 5852 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
17:10:27.0714 5852 rdbss - ok
17:10:27.0765 5852 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
17:10:27.0792 5852 rdpbus - ok
17:10:27.0824 5852 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
17:10:27.0870 5852 RDPCDD - ok
17:10:27.0903 5852 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
17:10:27.0944 5852 RDPENCDD - ok
17:10:27.0990 5852 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
17:10:28.0032 5852 RDPREFMP - ok
17:10:28.0064 5852 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
17:10:28.0119 5852 RDPWD - ok
17:10:28.0162 5852 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
17:10:28.0187 5852 rdyboost - ok
17:10:28.0245 5852 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
17:10:28.0302 5852 RFCOMM - ok
17:10:28.0357 5852 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
17:10:28.0454 5852 rspndr - ok
17:10:28.0501 5852 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
17:10:28.0521 5852 sbp2port - ok
17:10:28.0562 5852 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
17:10:28.0612 5852 scfilter - ok
17:10:28.0662 5852 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
17:10:28.0713 5852 secdrv - ok
17:10:28.0770 5852 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
17:10:28.0802 5852 Serenum - ok
17:10:28.0839 5852 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
17:10:28.0876 5852 Serial - ok
17:10:28.0911 5852 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
17:10:28.0942 5852 sermouse - ok
17:10:29.0001 5852 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
17:10:29.0070 5852 sffdisk - ok
17:10:29.0132 5852 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
17:10:29.0170 5852 sffp_mmc - ok
17:10:29.0217 5852 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
17:10:29.0271 5852 sffp_sd - ok
17:10:29.0333 5852 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
17:10:29.0380 5852 sfloppy - ok
17:10:29.0425 5852 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
17:10:29.0445 5852 sisagp - ok
17:10:29.0473 5852 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
17:10:29.0491 5852 SiSRaid2 - ok
17:10:29.0531 5852 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
17:10:29.0551 5852 SiSRaid4 - ok
17:10:29.0590 5852 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
17:10:29.0634 5852 Smb - ok
17:10:29.0692 5852 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
17:10:29.0710 5852 spldr - ok
17:10:29.0783 5852 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\windows\system32\DRIVERS\srv.sys
17:10:29.0978 5852 srv - ok
17:10:30.0006 5852 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\windows\system32\DRIVERS\srv2.sys
17:10:30.0207 5852 srv2 - ok
17:10:30.0235 5852 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\windows\system32\DRIVERS\srvnet.sys
17:10:30.0385 5852 srvnet - ok
17:10:30.0439 5852 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
17:10:30.0456 5852 ssfs0bbc - ok
17:10:30.0477 5852 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
17:10:30.0487 5852 sshrmd - ok
17:10:30.0523 5852 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
17:10:30.0545 5852 ssidrv - ok
17:10:30.0586 5852 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
17:10:30.0604 5852 stexstor - ok
17:10:30.0651 5852 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
17:10:30.0668 5852 swenum - ok
17:10:30.0740 5852 SynTP (1de40024679cde0e573465253519730e) C:\windows\system32\DRIVERS\SynTP.sys
17:10:30.0899 5852 SynTP - ok
17:10:30.0997 5852 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\drivers\tcpip.sys
17:10:31.0250 5852 Tcpip - ok
17:10:31.0294 5852 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\windows\system32\DRIVERS\tcpip.sys
17:10:31.0330 5852 TCPIP6 - ok
17:10:31.0362 5852 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
17:10:31.0400 5852 tcpipreg - ok
17:10:31.0435 5852 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
17:10:31.0482 5852 TDPIPE - ok
17:10:31.0508 5852 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
17:10:31.0539 5852 TDTCP - ok
17:10:31.0573 5852 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
17:10:31.0621 5852 tdx - ok
17:10:31.0678 5852 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
17:10:31.0720 5852 teamviewervpn - ok
17:10:31.0749 5852 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
17:10:31.0770 5852 TermDD - ok
17:10:31.0836 5852 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
17:10:31.0865 5852 TPM - ok
17:10:31.0911 5852 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
17:10:31.0956 5852 tssecsrv - ok
17:10:31.0992 5852 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
17:10:32.0043 5852 tunnel - ok
17:10:32.0081 5852 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
17:10:32.0100 5852 uagp35 - ok
17:10:32.0130 5852 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
17:10:32.0183 5852 udfs - ok
17:10:32.0242 5852 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
17:10:32.0261 5852 uliagpkx - ok
17:10:32.0291 5852 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
17:10:32.0325 5852 umbus - ok
17:10:32.0345 5852 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
17:10:32.0369 5852 UmPass - ok
17:10:32.0400 5852 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
17:10:32.0439 5852 usbccgp - ok
17:10:32.0466 5852 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
17:10:32.0493 5852 usbcir - ok
17:10:32.0523 5852 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
17:10:32.0555 5852 usbehci - ok
17:10:32.0581 5852 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
17:10:32.0623 5852 usbhub - ok
17:10:32.0649 5852 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
17:10:32.0677 5852 usbohci - ok
17:10:32.0723 5852 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
17:10:32.0753 5852 usbprint - ok
17:10:32.0794 5852 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
17:10:32.0819 5852 usbscan - ok
17:10:32.0840 5852 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
17:10:32.0877 5852 USBSTOR - ok
17:10:32.0899 5852 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
17:10:32.0933 5852 usbuhci - ok
17:10:32.0989 5852 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
17:10:33.0165 5852 usbvideo - ok
17:10:33.0232 5852 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
17:10:33.0250 5852 vdrvroot - ok
17:10:33.0295 5852 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
17:10:33.0343 5852 vga - ok
17:10:33.0388 5852 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
17:10:33.0485 5852 VgaSave - ok
17:10:33.0529 5852 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
17:10:33.0553 5852 vhdmp - ok
17:10:33.0579 5852 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
17:10:33.0598 5852 viaagp - ok
17:10:33.0618 5852 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
17:10:33.0643 5852 ViaC7 - ok
17:10:33.0677 5852 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
17:10:33.0695 5852 viaide - ok
17:10:33.0748 5852 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
17:10:33.0893 5852 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
17:10:33.0893 5852 VirtualCam - detected UnsignedFile.Multi.Generic (1)
17:10:33.0922 5852 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
17:10:33.0941 5852 volmgr - ok
17:10:33.0980 5852 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
17:10:34.0007 5852 volmgrx - ok
17:10:34.0027 5852 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
17:10:34.0052 5852 volsnap - ok
17:10:34.0102 5852 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
17:10:34.0124 5852 vsmraid - ok
17:10:34.0156 5852 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
17:10:34.0183 5852 vwifibus - ok
17:10:34.0240 5852 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
17:10:34.0281 5852 vwififlt - ok
17:10:34.0357 5852 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
17:10:34.0392 5852 vwifimp - ok
17:10:34.0437 5852 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
17:10:34.0470 5852 WacomPen - ok
17:10:34.0499 5852 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
17:10:34.0585 5852 WANARP - ok
17:10:34.0595 5852 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
17:10:34.0631 5852 Wanarpv6 - ok
17:10:34.0731 5852 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
17:10:34.0749 5852 Wd - ok
17:10:34.0782 5852 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
17:10:34.0814 5852 Wdf01000 - ok
17:10:34.0918 5852 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
17:10:34.0955 5852 WfpLwf - ok
17:10:34.0982 5852 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
17:10:35.0000 5852 WIMMount - ok
17:10:35.0112 5852 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
17:10:35.0152 5852 WinUsb - ok
17:10:35.0230 5852 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
17:10:35.0265 5852 WmiAcpi - ok
17:10:35.0366 5852 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
17:10:35.0405 5852 ws2ifsl - ok
17:10:35.0487 5852 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
17:10:35.0531 5852 WudfPf - ok
17:10:35.0562 5852 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
17:10:35.0611 5852 WUDFRd - ok
17:10:35.0685 5852 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
17:10:35.0904 5852 yukonw7 - ok
17:10:35.0960 5852 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
17:10:35.0995 5852 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
17:10:35.0995 5852 \Device\Harddisk0\DR0 - detected TDSS File System (1)
17:10:36.0001 5852 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR3
17:10:36.0869 5852 \Device\Harddisk1\DR3 - ok
17:10:36.0873 5852 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
17:10:36.0874 5852 \Device\Harddisk0\DR0\Partition0 - ok
17:10:36.0900 5852 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
17:10:36.0902 5852 \Device\Harddisk0\DR0\Partition1 - ok
17:10:36.0934 5852 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
17:10:36.0936 5852 \Device\Harddisk0\DR0\Partition2 - ok
17:10:36.0951 5852 Boot (0x1200) (0adc60955e80da72fa713d415a2b3f8e) \Device\Harddisk0\DR0\Partition3
17:10:36.0952 5852 \Device\Harddisk0\DR0\Partition3 - ok
17:10:36.0956 5852 Boot (0x1200) (2dd6d873c73f8ea538eb7b3fe1996902) \Device\Harddisk1\DR3\Partition0
17:10:36.0957 5852 \Device\Harddisk1\DR3\Partition0 - ok
17:10:36.0959 5852 ============================================================
17:10:36.0959 5852 Scan finished
17:10:36.0959 5852 ============================================================
17:10:36.0973 5676 Detected object count: 3
17:10:36.0973 5676 Actual detected object count: 3
17:11:00.0724 5676 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
17:11:00.0724 5676 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:11:00.0726 5676 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
17:11:00.0726 5676 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:11:00.0729 5676 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
17:11:00.0729 5676 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
Re: BSoD, mírně zpomalené PC
Bohužel mi to cure nenabízí (samozřejmě spouštím jako správce)
Log z Combofix v normal režimu
ComboFix 11-10-06.03 - admin 06.10.2011 18:59:39.3.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3066.1871 [GMT 2:00]
Spuštěný z: c:\users\admin\Downloads\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
AV: Microsoft Security Essentials *Disabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Disabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Microsoft Security Essentials *Disabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Spy Sweeper *Disabled/Updated* {8162D2B6-63C7-5812-E5F7-165FDC222080}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-06 do 2011-10-06 )))))))))))))))))))))))))))))))
.
.
2011-10-06 17:11 . 2011-10-06 17:11 -------- d-----w- c:\users\Mamka\AppData\Local\temp
2011-10-06 17:11 . 2011-10-06 17:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-06 15:55 . 2011-10-06 16:56 56200 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\offreg.dll
2011-10-06 14:16 . 2011-10-06 17:11 -------- d-----w- c:\users\admin\AppData\Local\temp
2011-10-06 11:51 . 2011-10-06 11:54 -------- d-----w- c:\program files\trend micro
2011-10-06 11:51 . 2011-10-06 11:52 -------- d-----w- C:\rsit
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Local\Windows Live Writer
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Roaming\Windows Live Writer
2011-10-06 08:53 . 2011-10-06 09:17 -------- d-----w- c:\program files\NetBeans 7.0.1
2011-10-06 08:52 . 2011-10-06 09:19 -------- d-----w- c:\users\admin\.nbi
2011-10-06 07:13 . 2011-10-06 07:13 29548 ----a-w- C:\cc_20111006_091306.reg
2011-10-05 16:02 . 2011-10-05 16:48 -------- d-----w- c:\users\admin\AppData\Local\Conduit
2011-10-05 15:34 . 2011-10-05 15:34 -------- d-----w- c:\programdata\Premium
2011-10-05 15:34 . 2011-10-05 15:38 -------- d-----w- c:\programdata\InstallMate
2011-10-03 06:23 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\mpengine.dll
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- C:\Infovox2.lic
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- c:\users\admin\AppData\Roaming\Balabolka
2011-09-28 14:10 . 2011-09-28 14:11 -------- d-----w- c:\program files\Balabolka
2011-09-27 07:29 . 2009-02-24 16:42 116736 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2011-09-27 07:28 . 2011-09-27 07:29 -------- d-----w- c:\program files\MagicDisc
2011-09-23 13:34 . 2011-09-23 13:34 -------- d-----w- c:\users\admin\AppData\Local\LucasArts
2011-09-10 12:14 . 2011-09-10 12:14 10800 ----a-w- C:\cc_20110910_141435.reg
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-12 23:14 . 2010-12-05 20:52 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-09-04 10:08 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-03 23:47 . 2011-09-03 23:47 1838 ----a-w- C:\cc_20110904_014725.reg
2011-08-27 21:48 . 2011-08-27 21:48 10544 ----a-w- C:\cc_20110827_234820.reg
2011-08-11 21:10 . 2010-09-10 22:41 285256 ----a-w- c:\windows\system32\guard32.dll
2011-08-11 21:09 . 2010-09-10 22:40 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-08-11 21:09 . 2010-09-10 22:40 37592 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-08-11 21:09 . 2010-09-10 22:40 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-08-11 21:09 . 2010-09-10 22:40 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-30 1545512]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-08-11 2554696]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
"PaperPort PTD"="c:\program files\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]
"PPort12reminder"="c:\program files\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"PDFHook"="c:\program files\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
"PDF5 Registry Controller"="c:\program files\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
.
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
firefox_reload.lnk - c:\program files\Mozilla Firefox\management\MFsurf1.exe [N/A]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R1 MpKsl00ddde7b;MpKsl00ddde7b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{967A22DB-F31C-46B2-A95D-55522876CF90}\MpKsl00ddde7b.sys [x]
R1 MpKsl4bac2904;MpKsl4bac2904;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84D13C62-E8DB-4090-8FBC-B010A0ED5C4F}\MpKsl4bac2904.sys [x]
R1 MpKslc24e7c67;MpKslc24e7c67;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{464D7FF2-3CE7-4CDA-B01C-F8556E05920B}\MpKslc24e7c67.sys [x]
R1 npelpchm;npelpchm;c:\windows\system32\drivers\npelpchm.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
R4 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]
R4 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]
S0 ssfs0bbc;ssfs0bbc;c:\windows\system32\DRIVERS\ssfs0bbc.sys [2009-11-06 29808]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2011-08-11 19088]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-08-11 238960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-08-11 37592]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-30 218688]
S1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\Drivers\eusk2par.sys [2008-12-18 25680]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-04 176128]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-11-16 50704]
S2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-08 144672]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
S2 WRConsumerService;Webroot Client Service;c:\program files\Webroot\WebrootSecurity\WRConsumerService.exe [2010-12-05 1201640]
S3 5U876UVC;HP Webcam [2 MP series];c:\windows\system32\DRIVERS\5U876.sys [2009-06-30 13:01 118656]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
2010-02-16 18:02 114688 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002Core.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002UA.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://home.sweetim.com
mStart Page = hxxp://home.sweetim.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Otevřít programem PDF Viewer Plus - c:\program files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: Subscribe in Desktop Sidebar - c:\program files\Desktop Sidebar\sbhelp.dll/menuhandler.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
FF - ProfilePath - c:\users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: browser.startup.homepage - hxxp://home.sweetim.com
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(608)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'Explorer.exe'(1552)
c:\windows\system32\guard32.dll
c:\program files\Stardock\ObjectDockFree\ODMenu.dll
.
Celkový čas: 2011-10-06 19:13:37
ComboFix-quarantined-files.txt 2011-10-06 17:13
ComboFix2.txt 2011-10-06 14:16
.
Před spuštěním: Volných bajtů: 21 932 023 808
Po spuštění: Volných bajtů: 21 866 156 032
.
- - End Of File - - 75A9D24CCCF1D228FFF12E41702D5732
Log z Combofix v normal režimu
ComboFix 11-10-06.03 - admin 06.10.2011 18:59:39.3.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3066.1871 [GMT 2:00]
Spuštěný z: c:\users\admin\Downloads\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
AV: Microsoft Security Essentials *Disabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Disabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Microsoft Security Essentials *Disabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Spy Sweeper *Disabled/Updated* {8162D2B6-63C7-5812-E5F7-165FDC222080}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-06 do 2011-10-06 )))))))))))))))))))))))))))))))
.
.
2011-10-06 17:11 . 2011-10-06 17:11 -------- d-----w- c:\users\Mamka\AppData\Local\temp
2011-10-06 17:11 . 2011-10-06 17:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-06 15:55 . 2011-10-06 16:56 56200 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\offreg.dll
2011-10-06 14:16 . 2011-10-06 17:11 -------- d-----w- c:\users\admin\AppData\Local\temp
2011-10-06 11:51 . 2011-10-06 11:54 -------- d-----w- c:\program files\trend micro
2011-10-06 11:51 . 2011-10-06 11:52 -------- d-----w- C:\rsit
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Local\Windows Live Writer
2011-10-06 11:43 . 2011-10-06 11:43 -------- d-----w- c:\users\admin\AppData\Roaming\Windows Live Writer
2011-10-06 08:53 . 2011-10-06 09:17 -------- d-----w- c:\program files\NetBeans 7.0.1
2011-10-06 08:52 . 2011-10-06 09:19 -------- d-----w- c:\users\admin\.nbi
2011-10-06 07:13 . 2011-10-06 07:13 29548 ----a-w- C:\cc_20111006_091306.reg
2011-10-05 16:02 . 2011-10-05 16:48 -------- d-----w- c:\users\admin\AppData\Local\Conduit
2011-10-05 15:34 . 2011-10-05 15:34 -------- d-----w- c:\programdata\Premium
2011-10-05 15:34 . 2011-10-05 15:38 -------- d-----w- c:\programdata\InstallMate
2011-10-03 06:23 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE465970-7C49-4DD9-A23E-BA6EE50E9ECF}\mpengine.dll
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- C:\Infovox2.lic
2011-09-28 14:11 . 2011-09-28 14:11 -------- d-----w- c:\users\admin\AppData\Roaming\Balabolka
2011-09-28 14:10 . 2011-09-28 14:11 -------- d-----w- c:\program files\Balabolka
2011-09-27 07:29 . 2009-02-24 16:42 116736 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2011-09-27 07:28 . 2011-09-27 07:29 -------- d-----w- c:\program files\MagicDisc
2011-09-23 13:34 . 2011-09-23 13:34 -------- d-----w- c:\users\admin\AppData\Local\LucasArts
2011-09-10 12:14 . 2011-09-10 12:14 10800 ----a-w- C:\cc_20110910_141435.reg
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-12 23:14 . 2010-12-05 20:52 7269712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-09-04 10:08 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-03 23:47 . 2011-09-03 23:47 1838 ----a-w- C:\cc_20110904_014725.reg
2011-08-27 21:48 . 2011-08-27 21:48 10544 ----a-w- C:\cc_20110827_234820.reg
2011-08-11 21:10 . 2010-09-10 22:41 285256 ----a-w- c:\windows\system32\guard32.dll
2011-08-11 21:09 . 2010-09-10 22:40 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-08-11 21:09 . 2010-09-10 22:40 37592 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-08-11 21:09 . 2010-09-10 22:40 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-08-11 21:09 . 2010-09-10 22:40 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-30 1545512]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-08-11 2554696]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
"PaperPort PTD"="c:\program files\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]
"PPort12reminder"="c:\program files\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"PDFHook"="c:\program files\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
"PDF5 Registry Controller"="c:\program files\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
.
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
firefox_reload.lnk - c:\program files\Mozilla Firefox\management\MFsurf1.exe [N/A]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockFree\ODMenu.dll" [2010-10-04 511344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R1 MpKsl00ddde7b;MpKsl00ddde7b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{967A22DB-F31C-46B2-A95D-55522876CF90}\MpKsl00ddde7b.sys [x]
R1 MpKsl4bac2904;MpKsl4bac2904;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84D13C62-E8DB-4090-8FBC-B010A0ED5C4F}\MpKsl4bac2904.sys [x]
R1 MpKslc24e7c67;MpKslc24e7c67;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{464D7FF2-3CE7-4CDA-B01C-F8556E05920B}\MpKslc24e7c67.sys [x]
R1 npelpchm;npelpchm;c:\windows\system32\drivers\npelpchm.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 136176]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
R4 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]
R4 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]
S0 ssfs0bbc;ssfs0bbc;c:\windows\system32\DRIVERS\ssfs0bbc.sys [2009-11-06 29808]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2011-08-11 19088]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-08-11 238960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-08-11 37592]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-01-30 218688]
S1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\Drivers\eusk2par.sys [2008-12-18 25680]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-04 176128]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-11-16 50704]
S2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-08 144672]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
S2 WRConsumerService;Webroot Client Service;c:\program files\Webroot\WebrootSecurity\WRConsumerService.exe [2010-12-05 1201640]
S3 5U876UVC;HP Webcam [2 MP series];c:\windows\system32\DRIVERS\5U876.sys [2009-06-30 13:01 118656]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
2010-02-16 18:02 114688 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 16:56]
.
2011-10-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002Core.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
2011-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2177769794-494754885-1007681250-1002UA.job
- c:\users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-17 19:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://home.sweetim.com
mStart Page = hxxp://home.sweetim.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Otevřít programem PDF Viewer Plus - c:\program files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: Subscribe in Desktop Sidebar - c:\program files\Desktop Sidebar\sbhelp.dll/menuhandler.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{5E93EF31-0710-4284-9416-96A3EF376196}: NameServer = 195.39.74.193
FF - ProfilePath - c:\users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\sgkx912e.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: browser.startup.homepage - hxxp://home.sweetim.com
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(608)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'Explorer.exe'(1552)
c:\windows\system32\guard32.dll
c:\program files\Stardock\ObjectDockFree\ODMenu.dll
.
Celkový čas: 2011-10-06 19:13:37
ComboFix-quarantined-files.txt 2011-10-06 17:13
ComboFix2.txt 2011-10-06 14:16
.
Před spuštěním: Volných bajtů: 21 932 023 808
Po spuštění: Volných bajtů: 21 866 156 032
.
- - End Of File - - 75A9D24CCCF1D228FFF12E41702D5732
Re: BSoD, mírně zpomalené PC
Omlouvám se byl sem 2 offline a BsoD se mi zatím neukázalo, ale uvažuji o reinstall windows, PC už mám 2 roky a od 1. zapnutí až do teď mi připadá že už je zahlcené ikdyž pravidelně používám CCleaner apod. (3-4) sem to měl zavirované,myslíte že by to mohlo pomoct ke svižnosti systému?
Re: BSoD, mírně zpomalené PC
Teď comodo našel
TrojWare.Win32.Llac.C@96918198
\Device\HarddiskVolumeShadowCopy1\Users\admin\AppData\Roaming\Help\svchost.exe
No reinstal OS mám v plánu ale nechce se mi formtovat HDD = není po ruce žádné záložní médium.
TrojWare.Win32.Llac.C@96918198
\Device\HarddiskVolumeShadowCopy1\Users\admin\AppData\Roaming\Help\svchost.exe
No reinstal OS mám v plánu ale nechce se mi formtovat HDD = není po ruce žádné záložní médium.
Re: BSoD, mírně zpomalené PC
Log z tdskiller
22:53:45.0170 1188 TDSS rootkit removing tool 2.6.6.0 Oct 7 2011 12:45:24
22:53:45.0597 1188 ============================================================
22:53:45.0597 1188 Current date / time: 2011/10/09 22:53:45.0597
22:53:45.0597 1188 SystemInfo:
22:53:45.0597 1188
22:53:45.0597 1188 OS Version: 6.1.7600 ServicePack: 0.0
22:53:45.0597 1188 Product type: Workstation
22:53:45.0597 1188 ComputerName: ADMIN-PC
22:53:45.0597 1188 UserName: admin
22:53:45.0597 1188 Windows directory: C:\windows
22:53:45.0597 1188 System windows directory: C:\windows
22:53:45.0597 1188 Processor architecture: Intel x86
22:53:45.0597 1188 Number of processors: 2
22:53:45.0597 1188 Page size: 0x1000
22:53:45.0597 1188 Boot type: Normal boot
22:53:45.0597 1188 ============================================================
22:53:50.0477 1188 Initialize success
22:53:55.0894 4120 ============================================================
22:53:55.0894 4120 Scan started
22:53:55.0894 4120 Mode: Manual; SigCheck; TDLFS;
22:53:55.0894 4120 ============================================================
22:53:59.0165 4120 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
22:53:59.0380 4120 1394ohci - ok
22:53:59.0473 4120 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
22:53:59.0618 4120 5U876UVC - ok
22:53:59.0682 4120 Accelerometer (cc1f1d3d70dc13c2c281488d347d4415) C:\windows\system32\DRIVERS\Accelerometer.sys
22:53:59.0779 4120 Accelerometer - ok
22:53:59.0834 4120 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
22:53:59.0865 4120 ACPI - ok
22:53:59.0989 4120 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
22:54:00.0045 4120 AcpiPmi - ok
22:54:00.0158 4120 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
22:54:00.0442 4120 ADIHdAudAddService - ok
22:54:00.0491 4120 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
22:54:00.0529 4120 adp94xx - ok
22:54:00.0562 4120 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
22:54:00.0600 4120 adpahci - ok
22:54:00.0633 4120 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
22:54:00.0663 4120 adpu320 - ok
22:54:00.0745 4120 AFD (0db7a48388d54d154ebec120461a0fcd) C:\windows\system32\drivers\afd.sys
22:54:00.0983 4120 AFD - ok
22:54:01.0128 4120 AgereSoftModem (c6fa08a8cca9001f3197525b07331715) C:\windows\system32\DRIVERS\AGRSM.sys
22:54:01.0373 4120 AgereSoftModem - ok
22:54:01.0416 4120 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
22:54:01.0443 4120 agp440 - ok
22:54:01.0482 4120 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
22:54:01.0509 4120 aic78xx - ok
22:54:01.0581 4120 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
22:54:01.0607 4120 aliide - ok
22:54:01.0645 4120 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
22:54:01.0673 4120 amdagp - ok
22:54:01.0737 4120 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
22:54:01.0763 4120 amdide - ok
22:54:01.0784 4120 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
22:54:01.0828 4120 AmdK8 - ok
22:54:01.0847 4120 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
22:54:01.0897 4120 AmdPPM - ok
22:54:01.0932 4120 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
22:54:01.0965 4120 amdsata - ok
22:54:01.0984 4120 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
22:54:02.0014 4120 amdsbs - ok
22:54:02.0032 4120 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
22:54:02.0058 4120 amdxata - ok
22:54:02.0092 4120 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
22:54:02.0164 4120 AppID - ok
22:54:02.0210 4120 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
22:54:02.0239 4120 arc - ok
22:54:02.0256 4120 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
22:54:02.0284 4120 arcsas - ok
22:54:02.0320 4120 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
22:54:02.0377 4120 AsyncMac - ok
22:54:02.0418 4120 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
22:54:02.0446 4120 atapi - ok
22:54:02.0497 4120 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
22:54:02.0641 4120 AtiHdmiService - ok
22:54:02.0781 4120 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
22:54:03.0295 4120 atikmdag - ok
22:54:03.0390 4120 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
22:54:03.0475 4120 b06bdrv - ok
22:54:03.0556 4120 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
22:54:03.0605 4120 b57nd60x - ok
22:54:03.0747 4120 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
22:54:03.0816 4120 BCM43XX - ok
22:54:03.0839 4120 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
22:54:03.0895 4120 Beep - ok
22:54:03.0941 4120 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
22:54:03.0993 4120 blbdrive - ok
22:54:04.0031 4120 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\windows\system32\DRIVERS\bowser.sys
22:54:04.0182 4120 bowser - ok
22:54:04.0210 4120 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
22:54:04.0255 4120 BrFiltLo - ok
22:54:04.0274 4120 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
22:54:04.0328 4120 BrFiltUp - ok
22:54:04.0382 4120 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
22:54:04.0533 4120 BrSerIb - ok
22:54:04.0572 4120 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
22:54:04.0613 4120 Brserid - ok
22:54:04.0656 4120 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
22:54:04.0715 4120 BrSerWdm - ok
22:54:04.0747 4120 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
22:54:04.0802 4120 BrUsbMdm - ok
22:54:04.0825 4120 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
22:54:04.0871 4120 BrUsbSer - ok
22:54:04.0898 4120 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
22:54:05.0003 4120 BrUsbSIb - ok
22:54:05.0043 4120 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
22:54:05.0087 4120 BthEnum - ok
22:54:05.0105 4120 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
22:54:05.0156 4120 BTHMODEM - ok
22:54:05.0175 4120 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
22:54:05.0214 4120 BthPan - ok
22:54:05.0249 4120 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
22:54:05.0311 4120 BTHPORT - ok
22:54:05.0379 4120 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
22:54:05.0424 4120 BTHUSB - ok
22:54:05.0476 4120 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
22:54:05.0579 4120 btwaudio - ok
22:54:05.0614 4120 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
22:54:05.0750 4120 btwavdt - ok
22:54:05.0792 4120 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
22:54:05.0815 4120 btwl2cap - ok
22:54:05.0846 4120 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
22:54:05.0935 4120 btwrchid - ok
22:54:06.0014 4120 catchme - ok
22:54:06.0061 4120 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
22:54:06.0119 4120 cdfs - ok
22:54:06.0164 4120 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
22:54:06.0211 4120 cdrom - ok
22:54:06.0255 4120 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
22:54:06.0303 4120 circlass - ok
22:54:06.0349 4120 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
22:54:06.0384 4120 CLFS - ok
22:54:06.0441 4120 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
22:54:06.0488 4120 CmBatt - ok
22:54:06.0561 4120 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
22:54:06.0585 4120 cmderd - ok
22:54:06.0608 4120 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
22:54:06.0634 4120 cmdGuard - ok
22:54:06.0665 4120 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
22:54:06.0686 4120 cmdHlp - ok
22:54:06.0712 4120 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
22:54:06.0738 4120 cmdide - ok
22:54:06.0767 4120 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
22:54:06.0829 4120 CNG - ok
22:54:06.0841 4120 cnmpar21 - ok
22:54:06.0896 4120 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
22:54:06.0921 4120 Compbatt - ok
22:54:06.0960 4120 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
22:54:07.0006 4120 CompositeBus - ok
22:54:07.0040 4120 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
22:54:07.0067 4120 crcdisk - ok
22:54:07.0132 4120 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\windows\system32\Drivers\dfsc.sys
22:54:07.0303 4120 DfsC - ok
22:54:07.0351 4120 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
22:54:07.0398 4120 discache - ok
22:54:07.0448 4120 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
22:54:07.0476 4120 Disk - ok
22:54:07.0536 4120 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
22:54:07.0589 4120 drmkaud - ok
22:54:07.0641 4120 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
22:54:07.0665 4120 dtsoftbus01 - ok
22:54:07.0716 4120 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\windows\System32\drivers\dxgkrnl.sys
22:54:07.0881 4120 DXGKrnl - ok
22:54:07.0968 4120 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
22:54:08.0090 4120 ebdrv - ok
22:54:08.0129 4120 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
22:54:08.0169 4120 elxstor - ok
22:54:08.0190 4120 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
22:54:08.0245 4120 ErrDev - ok
22:54:08.0355 4120 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
22:54:08.0379 4120 eusk2par - ok
22:54:08.0418 4120 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
22:54:08.0472 4120 exfat - ok
22:54:08.0503 4120 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
22:54:08.0567 4120 fastfat - ok
22:54:08.0603 4120 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
22:54:08.0649 4120 fdc - ok
22:54:08.0677 4120 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
22:54:08.0704 4120 FileInfo - ok
22:54:08.0720 4120 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
22:54:08.0780 4120 Filetrace - ok
22:54:08.0800 4120 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
22:54:08.0846 4120 flpydisk - ok
22:54:08.0885 4120 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
22:54:08.0917 4120 FltMgr - ok
22:54:08.0948 4120 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
22:54:08.0974 4120 FsDepends - ok
22:54:09.0009 4120 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
22:54:09.0038 4120 Fs_Rec - ok
22:54:09.0080 4120 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
22:54:09.0269 4120 fvevol - ok
22:54:09.0310 4120 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
22:54:09.0337 4120 gagp30kx - ok
22:54:09.0392 4120 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
22:54:09.0451 4120 hcw85cir - ok
22:54:09.0493 4120 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
22:54:09.0543 4120 HdAudAddService - ok
22:54:09.0582 4120 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
22:54:09.0624 4120 HDAudBus - ok
22:54:09.0648 4120 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
22:54:09.0680 4120 HidBatt - ok
22:54:09.0721 4120 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
22:54:09.0768 4120 HidBth - ok
22:54:09.0797 4120 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
22:54:09.0831 4120 HidIr - ok
22:54:09.0864 4120 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
22:54:09.0903 4120 HidUsb - ok
22:54:09.0939 4120 hpdskflt (4ef10b866c62abbeaf7511cdd05a19be) C:\windows\system32\DRIVERS\hpdskflt.sys
22:54:10.0037 4120 hpdskflt - ok
22:54:10.0080 4120 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
22:54:10.0230 4120 HpqKbFiltr - ok
22:54:10.0268 4120 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
22:54:10.0296 4120 HpSAMD - ok
22:54:10.0341 4120 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
22:54:10.0414 4120 HTTP - ok
22:54:10.0434 4120 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
22:54:10.0460 4120 hwpolicy - ok
22:54:10.0485 4120 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
22:54:10.0534 4120 i8042prt - ok
22:54:10.0575 4120 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
22:54:10.0603 4120 iaStor - ok
22:54:10.0657 4120 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
22:54:10.0694 4120 iaStorV - ok
22:54:10.0840 4120 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
22:54:11.0012 4120 igfx - ok
22:54:11.0043 4120 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
22:54:11.0070 4120 iirsp - ok
22:54:11.0121 4120 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
22:54:11.0142 4120 inspect - ok
22:54:11.0169 4120 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
22:54:11.0194 4120 intelide - ok
22:54:11.0241 4120 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
22:54:11.0286 4120 intelppm - ok
22:54:11.0304 4120 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
22:54:11.0354 4120 IpFilterDriver - ok
22:54:11.0390 4120 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
22:54:11.0436 4120 IPMIDRV - ok
22:54:11.0450 4120 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
22:54:11.0508 4120 IPNAT - ok
22:54:11.0544 4120 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
22:54:11.0606 4120 IRENUM - ok
22:54:11.0647 4120 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
22:54:11.0673 4120 isapnp - ok
22:54:11.0701 4120 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
22:54:11.0733 4120 iScsiPrt - ok
22:54:11.0756 4120 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
22:54:11.0788 4120 kbdclass - ok
22:54:11.0810 4120 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
22:54:11.0850 4120 kbdhid - ok
22:54:11.0880 4120 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
22:54:11.0907 4120 KSecDD - ok
22:54:11.0944 4120 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
22:54:12.0054 4120 KSecPkg - ok
22:54:12.0129 4120 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
22:54:12.0185 4120 lltdio - ok
22:54:12.0233 4120 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
22:54:12.0264 4120 LSI_FC - ok
22:54:12.0298 4120 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
22:54:12.0328 4120 LSI_SAS - ok
22:54:12.0363 4120 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
22:54:12.0389 4120 LSI_SAS2 - ok
22:54:12.0410 4120 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
22:54:12.0438 4120 LSI_SCSI - ok
22:54:12.0468 4120 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
22:54:12.0523 4120 luafv - ok
22:54:12.0602 4120 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
22:54:12.0712 4120 mcdbus ( UnsignedFile.Multi.Generic ) - warning
22:54:12.0712 4120 mcdbus - detected UnsignedFile.Multi.Generic (1)
22:54:12.0749 4120 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
22:54:12.0776 4120 megasas - ok
22:54:12.0815 4120 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
22:54:12.0847 4120 MegaSR - ok
22:54:12.0897 4120 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
22:54:13.0004 4120 MfeAVFK - ok
22:54:13.0051 4120 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
22:54:13.0155 4120 MfeBOPK - ok
22:54:13.0202 4120 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
22:54:13.0357 4120 mfehidk - ok
22:54:13.0384 4120 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
22:54:13.0480 4120 MfeRKDK - ok
22:54:13.0513 4120 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
22:54:13.0630 4120 mfetdik - ok
22:54:13.0660 4120 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
22:54:13.0731 4120 Modem - ok
22:54:13.0764 4120 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
22:54:13.0803 4120 monitor - ok
22:54:13.0833 4120 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
22:54:13.0861 4120 mouclass - ok
22:54:13.0890 4120 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
22:54:13.0935 4120 mouhid - ok
22:54:13.0960 4120 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
22:54:13.0989 4120 mountmgr - ok
22:54:14.0020 4120 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
22:54:14.0049 4120 mpio - ok
22:54:14.0143 4120 MpKsl00ddde7b - ok
22:54:14.0176 4120 MpKsl4bac2904 - ok
22:54:14.0210 4120 MpKslc24e7c67 - ok
22:54:14.0234 4120 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
22:54:14.0373 4120 mpsdrv - ok
22:54:14.0429 4120 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
22:54:14.0473 4120 MRxDAV - ok
22:54:14.0527 4120 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\windows\system32\DRIVERS\mrxsmb.sys
22:54:14.0749 4120 mrxsmb - ok
22:54:14.0775 4120 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\windows\system32\DRIVERS\mrxsmb10.sys
22:54:14.0959 4120 mrxsmb10 - ok
22:54:14.0987 4120 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\windows\system32\DRIVERS\mrxsmb20.sys
22:54:15.0122 4120 mrxsmb20 - ok
22:54:15.0151 4120 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
22:54:15.0177 4120 msahci - ok
22:54:15.0255 4120 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
22:54:15.0284 4120 msdsm - ok
22:54:15.0355 4120 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
22:54:15.0400 4120 Msfs - ok
22:54:15.0444 4120 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
22:54:15.0570 4120 mshidkmdf - ok
22:54:15.0637 4120 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
22:54:15.0787 4120 msisadrv - ok
22:54:15.0831 4120 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
22:54:16.0199 4120 MSKSSRV - ok
22:54:16.0249 4120 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
22:54:16.0511 4120 MSPCLOCK - ok
22:54:16.0530 4120 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
22:54:16.0765 4120 MSPQM - ok
22:54:16.0789 4120 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
22:54:16.0978 4120 MsRPC - ok
22:54:17.0008 4120 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
22:54:17.0033 4120 mssmbios - ok
22:54:17.0053 4120 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
22:54:17.0205 4120 MSTEE - ok
22:54:17.0248 4120 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
22:54:17.0517 4120 MTConfig - ok
22:54:17.0543 4120 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
22:54:17.0646 4120 Mup - ok
22:54:17.0696 4120 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
22:54:17.0841 4120 NativeWifiP - ok
22:54:17.0886 4120 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
22:54:17.0931 4120 NDIS - ok
22:54:17.0974 4120 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
22:54:18.0221 4120 NdisCap - ok
22:54:18.0254 4120 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
22:54:18.0305 4120 NdisTapi - ok
22:54:18.0370 4120 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
22:54:18.0427 4120 Ndisuio - ok
22:54:18.0455 4120 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
22:54:18.0514 4120 NdisWan - ok
22:54:18.0540 4120 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
22:54:18.0591 4120 NDProxy - ok
22:54:18.0615 4120 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
22:54:18.0662 4120 NetBIOS - ok
22:54:18.0725 4120 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
22:54:18.0793 4120 NetBT - ok
22:54:18.0974 4120 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
22:54:19.0141 4120 netw5v32 - ok
22:54:19.0180 4120 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
22:54:19.0211 4120 nfrd960 - ok
22:54:19.0275 4120 npelpchm - ok
22:54:19.0328 4120 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
22:54:19.0352 4120 npf - ok
22:54:19.0392 4120 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
22:54:19.0445 4120 Npfs - ok
22:54:19.0474 4120 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
22:54:19.0529 4120 nsiproxy - ok
22:54:19.0582 4120 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
22:54:19.0654 4120 Ntfs - ok
22:54:19.0676 4120 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
22:54:19.0737 4120 Null - ok
22:54:19.0761 4120 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
22:54:19.0790 4120 nvraid - ok
22:54:19.0813 4120 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
22:54:19.0844 4120 nvstor - ok
22:54:19.0873 4120 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
22:54:19.0901 4120 nv_agp - ok
22:54:19.0945 4120 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
22:54:19.0988 4120 ohci1394 - ok
22:54:20.0059 4120 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
22:54:20.0099 4120 Parport - ok
22:54:20.0136 4120 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
22:54:20.0163 4120 partmgr - ok
22:54:20.0186 4120 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
22:54:20.0234 4120 Parvdm - ok
22:54:20.0263 4120 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
22:54:20.0292 4120 pci - ok
22:54:20.0319 4120 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
22:54:20.0345 4120 pciide - ok
22:54:20.0373 4120 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
22:54:20.0411 4120 pcmcia - ok
22:54:20.0446 4120 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
22:54:20.0474 4120 pcw - ok
22:54:20.0556 4120 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
22:54:20.0628 4120 PEAUTH - ok
22:54:20.0731 4120 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
22:54:20.0780 4120 PptpMiniport - ok
22:54:20.0813 4120 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
22:54:20.0856 4120 Processor - ok
22:54:20.0905 4120 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
22:54:20.0958 4120 Psched - ok
22:54:20.0995 4120 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
22:54:21.0023 4120 PxHelp20 - ok
22:54:21.0089 4120 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
22:54:21.0163 4120 ql2300 - ok
22:54:21.0197 4120 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
22:54:21.0226 4120 ql40xx - ok
22:54:21.0255 4120 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
22:54:21.0304 4120 QWAVEdrv - ok
22:54:21.0353 4120 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
22:54:21.0407 4120 RasAcd - ok
22:54:21.0434 4120 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
22:54:21.0491 4120 RasAgileVpn - ok
22:54:21.0528 4120 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
22:54:21.0588 4120 Rasl2tp - ok
22:54:21.0629 4120 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
22:54:21.0685 4120 RasPppoe - ok
22:54:21.0746 4120 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
22:54:21.0808 4120 RasSstp - ok
22:54:21.0884 4120 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
22:54:21.0945 4120 rdbss - ok
22:54:22.0000 4120 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
22:54:22.0035 4120 rdpbus - ok
22:54:22.0677 4120 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
22:54:23.0539 4120 RDPCDD - ok
22:54:24.0011 4120 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
22:54:24.0059 4120 RDPENCDD - ok
22:54:24.0122 4120 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
22:54:24.0180 4120 RDPREFMP - ok
22:54:24.0247 4120 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
22:54:24.0318 4120 RDPWD - ok
22:54:24.0387 4120 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
22:54:24.0435 4120 rdyboost - ok
22:54:24.0494 4120 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
22:54:24.0532 4120 RFCOMM - ok
22:54:24.0623 4120 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
22:54:24.0673 4120 rspndr - ok
22:54:24.0733 4120 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
22:54:24.0759 4120 sbp2port - ok
22:54:24.0802 4120 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
22:54:24.0856 4120 scfilter - ok
22:54:24.0902 4120 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
22:54:24.0959 4120 secdrv - ok
22:54:25.0027 4120 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
22:54:25.0065 4120 Serenum - ok
22:54:25.0088 4120 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
22:54:25.0130 4120 Serial - ok
22:54:25.0151 4120 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
22:54:25.0200 4120 sermouse - ok
22:54:25.0264 4120 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
22:54:25.0315 4120 sffdisk - ok
22:54:25.0348 4120 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
22:54:25.0390 4120 sffp_mmc - ok
22:54:25.0460 4120 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
22:54:25.0491 4120 sffp_sd - ok
22:54:25.0515 4120 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
22:54:25.0569 4120 sfloppy - ok
22:54:25.0800 4120 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
22:54:25.0825 4120 sisagp - ok
22:54:25.0862 4120 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
22:54:25.0886 4120 SiSRaid2 - ok
22:54:25.0937 4120 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
22:54:25.0964 4120 SiSRaid4 - ok
22:54:26.0020 4120 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
22:54:26.0070 4120 Smb - ok
22:54:26.0131 4120 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
22:54:26.0154 4120 spldr - ok
22:54:26.0271 4120 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\windows\system32\DRIVERS\srv.sys
22:54:26.0558 4120 srv - ok
22:54:26.0594 4120 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\windows\system32\DRIVERS\srv2.sys
22:54:26.0777 4120 srv2 - ok
22:54:26.0817 4120 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\windows\system32\DRIVERS\srvnet.sys
22:54:26.0954 4120 srvnet - ok
22:54:27.0001 4120 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
22:54:27.0024 4120 ssfs0bbc - ok
22:54:27.0050 4120 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
22:54:27.0071 4120 sshrmd - ok
22:54:27.0094 4120 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
22:54:27.0121 4120 ssidrv - ok
22:54:27.0165 4120 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
22:54:27.0190 4120 stexstor - ok
22:54:27.0255 4120 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
22:54:27.0282 4120 swenum - ok
22:54:27.0416 4120 SynTP (0e8676fb3bb95aa40fdf7a4a31018c8b) C:\windows\system32\DRIVERS\SynTP.sys
22:54:27.0628 4120 SynTP - ok
22:54:27.0823 4120 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\drivers\tcpip.sys
22:54:28.0227 4120 Tcpip - ok
22:54:28.0425 4120 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\DRIVERS\tcpip.sys
22:54:28.0469 4120 TCPIP6 - ok
22:54:28.0563 4120 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
22:54:28.0638 4120 tcpipreg - ok
22:54:28.0731 4120 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
22:54:28.0777 4120 TDPIPE - ok
22:54:28.0821 4120 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
22:54:28.0866 4120 TDTCP - ok
22:54:28.0919 4120 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
22:54:28.0999 4120 tdx - ok
22:54:29.0255 4120 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
22:54:29.0368 4120 teamviewervpn - ok
22:54:29.0508 4120 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
22:54:29.0538 4120 TermDD - ok
22:54:29.0776 4120 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
22:54:29.0813 4120 TPM - ok
22:54:29.0983 4120 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
22:54:30.0043 4120 tssecsrv - ok
22:54:30.0097 4120 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
22:54:30.0153 4120 tunnel - ok
22:54:30.0203 4120 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
22:54:30.0228 4120 uagp35 - ok
22:54:30.0261 4120 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
22:54:30.0319 4120 udfs - ok
22:54:30.0381 4120 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
22:54:30.0407 4120 uliagpkx - ok
22:54:30.0446 4120 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
22:54:30.0485 4120 umbus - ok
22:54:30.0517 4120 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
22:54:30.0566 4120 UmPass - ok
22:54:30.0594 4120 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
22:54:30.0632 4120 usbccgp - ok
22:54:30.0661 4120 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
22:54:30.0697 4120 usbcir - ok
22:54:30.0727 4120 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
22:54:30.0773 4120 usbehci - ok
22:54:30.0819 4120 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
22:54:30.0866 4120 usbhub - ok
22:54:30.0894 4120 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
22:54:30.0925 4120 usbohci - ok
22:54:30.0977 4120 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
22:54:31.0021 4120 usbprint - ok
22:54:31.0056 4120 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
22:54:31.0089 4120 usbscan - ok
22:54:31.0119 4120 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
22:54:31.0160 4120 USBSTOR - ok
22:54:31.0227 4120 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
22:54:31.0307 4120 usbuhci - ok
22:54:31.0367 4120 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
22:54:31.0535 4120 usbvideo - ok
22:54:31.0585 4120 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
22:54:31.0608 4120 vdrvroot - ok
22:54:31.0656 4120 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
22:54:31.0700 4120 vga - ok
22:54:31.0732 4120 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
22:54:31.0783 4120 VgaSave - ok
22:54:31.0815 4120 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
22:54:31.0846 4120 vhdmp - ok
22:54:31.0882 4120 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
22:54:31.0908 4120 viaagp - ok
22:54:31.0946 4120 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
22:54:31.0984 4120 ViaC7 - ok
22:54:32.0013 4120 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
22:54:32.0037 4120 viaide - ok
22:54:32.0093 4120 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
22:54:32.0197 4120 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
22:54:32.0197 4120 VirtualCam - detected UnsignedFile.Multi.Generic (1)
22:54:32.0226 4120 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
22:54:32.0251 4120 volmgr - ok
22:54:32.0292 4120 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
22:54:32.0327 4120 volmgrx - ok
22:54:32.0349 4120 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
22:54:32.0381 4120 volsnap - ok
22:54:32.0411 4120 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
22:54:32.0442 4120 vsmraid - ok
22:54:32.0473 4120 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
22:54:32.0504 4120 vwifibus - ok
22:54:32.0559 4120 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
22:54:32.0606 4120 vwififlt - ok
22:54:32.0643 4120 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
22:54:32.0684 4120 vwifimp - ok
22:54:32.0748 4120 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
22:54:32.0786 4120 WacomPen - ok
22:54:32.0818 4120 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
22:54:32.0869 4120 WANARP - ok
22:54:32.0880 4120 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
22:54:32.0925 4120 Wanarpv6 - ok
22:54:33.0158 4120 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
22:54:33.0188 4120 Wd - ok
22:54:33.0234 4120 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
22:54:33.0276 4120 Wdf01000 - ok
22:54:33.0411 4120 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
22:54:33.0455 4120 WfpLwf - ok
22:54:33.0491 4120 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
22:54:33.0516 4120 WIMMount - ok
22:54:33.0633 4120 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
22:54:33.0680 4120 WinUsb - ok
22:54:33.0773 4120 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
22:54:33.0816 4120 WmiAcpi - ok
22:54:33.0909 4120 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
22:54:33.0983 4120 ws2ifsl - ok
22:54:34.0095 4120 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
22:54:34.0163 4120 WudfPf - ok
22:54:34.0212 4120 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
22:54:34.0273 4120 WUDFRd - ok
22:54:34.0359 4120 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
22:54:34.0418 4120 yukonw7 - ok
22:54:34.0486 4120 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
22:54:34.0521 4120 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
22:54:34.0521 4120 \Device\Harddisk0\DR0 - detected TDSS File System (1)
22:54:34.0526 4120 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
22:54:34.0527 4120 \Device\Harddisk0\DR0\Partition0 - ok
22:54:34.0560 4120 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
22:54:34.0563 4120 \Device\Harddisk0\DR0\Partition1 - ok
22:54:34.0611 4120 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
22:54:34.0613 4120 \Device\Harddisk0\DR0\Partition2 - ok
22:54:34.0644 4120 Boot (0x1200) (d882680a0c8d5c5f3062fa6397f15f1d) \Device\Harddisk0\DR0\Partition3
22:54:34.0646 4120 \Device\Harddisk0\DR0\Partition3 - ok
22:54:34.0646 4120 ============================================================
22:54:34.0646 4120 Scan finished
22:54:34.0646 4120 ============================================================
22:54:34.0723 3664 Detected object count: 3
22:54:34.0723 3664 Actual detected object count: 3
22:54:44.0061 3664 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
22:54:44.0062 3664 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:54:44.0064 3664 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
22:54:44.0064 3664 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:54:44.0066 3664 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
22:54:44.0066 3664 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
22:54:48.0941 3668 Deinitialize success
22:53:45.0170 1188 TDSS rootkit removing tool 2.6.6.0 Oct 7 2011 12:45:24
22:53:45.0597 1188 ============================================================
22:53:45.0597 1188 Current date / time: 2011/10/09 22:53:45.0597
22:53:45.0597 1188 SystemInfo:
22:53:45.0597 1188
22:53:45.0597 1188 OS Version: 6.1.7600 ServicePack: 0.0
22:53:45.0597 1188 Product type: Workstation
22:53:45.0597 1188 ComputerName: ADMIN-PC
22:53:45.0597 1188 UserName: admin
22:53:45.0597 1188 Windows directory: C:\windows
22:53:45.0597 1188 System windows directory: C:\windows
22:53:45.0597 1188 Processor architecture: Intel x86
22:53:45.0597 1188 Number of processors: 2
22:53:45.0597 1188 Page size: 0x1000
22:53:45.0597 1188 Boot type: Normal boot
22:53:45.0597 1188 ============================================================
22:53:50.0477 1188 Initialize success
22:53:55.0894 4120 ============================================================
22:53:55.0894 4120 Scan started
22:53:55.0894 4120 Mode: Manual; SigCheck; TDLFS;
22:53:55.0894 4120 ============================================================
22:53:59.0165 4120 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
22:53:59.0380 4120 1394ohci - ok
22:53:59.0473 4120 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
22:53:59.0618 4120 5U876UVC - ok
22:53:59.0682 4120 Accelerometer (cc1f1d3d70dc13c2c281488d347d4415) C:\windows\system32\DRIVERS\Accelerometer.sys
22:53:59.0779 4120 Accelerometer - ok
22:53:59.0834 4120 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
22:53:59.0865 4120 ACPI - ok
22:53:59.0989 4120 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
22:54:00.0045 4120 AcpiPmi - ok
22:54:00.0158 4120 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
22:54:00.0442 4120 ADIHdAudAddService - ok
22:54:00.0491 4120 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
22:54:00.0529 4120 adp94xx - ok
22:54:00.0562 4120 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
22:54:00.0600 4120 adpahci - ok
22:54:00.0633 4120 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
22:54:00.0663 4120 adpu320 - ok
22:54:00.0745 4120 AFD (0db7a48388d54d154ebec120461a0fcd) C:\windows\system32\drivers\afd.sys
22:54:00.0983 4120 AFD - ok
22:54:01.0128 4120 AgereSoftModem (c6fa08a8cca9001f3197525b07331715) C:\windows\system32\DRIVERS\AGRSM.sys
22:54:01.0373 4120 AgereSoftModem - ok
22:54:01.0416 4120 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
22:54:01.0443 4120 agp440 - ok
22:54:01.0482 4120 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
22:54:01.0509 4120 aic78xx - ok
22:54:01.0581 4120 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
22:54:01.0607 4120 aliide - ok
22:54:01.0645 4120 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
22:54:01.0673 4120 amdagp - ok
22:54:01.0737 4120 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
22:54:01.0763 4120 amdide - ok
22:54:01.0784 4120 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
22:54:01.0828 4120 AmdK8 - ok
22:54:01.0847 4120 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
22:54:01.0897 4120 AmdPPM - ok
22:54:01.0932 4120 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
22:54:01.0965 4120 amdsata - ok
22:54:01.0984 4120 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
22:54:02.0014 4120 amdsbs - ok
22:54:02.0032 4120 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
22:54:02.0058 4120 amdxata - ok
22:54:02.0092 4120 AppID (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
22:54:02.0164 4120 AppID - ok
22:54:02.0210 4120 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
22:54:02.0239 4120 arc - ok
22:54:02.0256 4120 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
22:54:02.0284 4120 arcsas - ok
22:54:02.0320 4120 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
22:54:02.0377 4120 AsyncMac - ok
22:54:02.0418 4120 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
22:54:02.0446 4120 atapi - ok
22:54:02.0497 4120 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
22:54:02.0641 4120 AtiHdmiService - ok
22:54:02.0781 4120 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
22:54:03.0295 4120 atikmdag - ok
22:54:03.0390 4120 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
22:54:03.0475 4120 b06bdrv - ok
22:54:03.0556 4120 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
22:54:03.0605 4120 b57nd60x - ok
22:54:03.0747 4120 BCM43XX (b9e94d37fc08525d893b632a0ca2e18c) C:\windows\system32\DRIVERS\bcmwl6.sys
22:54:03.0816 4120 BCM43XX - ok
22:54:03.0839 4120 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
22:54:03.0895 4120 Beep - ok
22:54:03.0941 4120 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
22:54:03.0993 4120 blbdrive - ok
22:54:04.0031 4120 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\windows\system32\DRIVERS\bowser.sys
22:54:04.0182 4120 bowser - ok
22:54:04.0210 4120 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
22:54:04.0255 4120 BrFiltLo - ok
22:54:04.0274 4120 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
22:54:04.0328 4120 BrFiltUp - ok
22:54:04.0382 4120 BrSerIb (9f80879913dc2712fd0c4d734e3f519b) C:\windows\system32\DRIVERS\BrSerIb.sys
22:54:04.0533 4120 BrSerIb - ok
22:54:04.0572 4120 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
22:54:04.0613 4120 Brserid - ok
22:54:04.0656 4120 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
22:54:04.0715 4120 BrSerWdm - ok
22:54:04.0747 4120 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
22:54:04.0802 4120 BrUsbMdm - ok
22:54:04.0825 4120 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
22:54:04.0871 4120 BrUsbSer - ok
22:54:04.0898 4120 BrUsbSIb (b67512da42c0c90bf236d5485226c1c7) C:\windows\system32\DRIVERS\BrUsbSIb.sys
22:54:05.0003 4120 BrUsbSIb - ok
22:54:05.0043 4120 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\DRIVERS\BthEnum.sys
22:54:05.0087 4120 BthEnum - ok
22:54:05.0105 4120 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
22:54:05.0156 4120 BTHMODEM - ok
22:54:05.0175 4120 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
22:54:05.0214 4120 BthPan - ok
22:54:05.0249 4120 BTHPORT (4a34888e13224678dd062466afec4240) C:\windows\system32\Drivers\BTHport.sys
22:54:05.0311 4120 BTHPORT - ok
22:54:05.0379 4120 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\windows\system32\Drivers\BTHUSB.sys
22:54:05.0424 4120 BTHUSB - ok
22:54:05.0476 4120 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
22:54:05.0579 4120 btwaudio - ok
22:54:05.0614 4120 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
22:54:05.0750 4120 btwavdt - ok
22:54:05.0792 4120 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
22:54:05.0815 4120 btwl2cap - ok
22:54:05.0846 4120 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
22:54:05.0935 4120 btwrchid - ok
22:54:06.0014 4120 catchme - ok
22:54:06.0061 4120 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
22:54:06.0119 4120 cdfs - ok
22:54:06.0164 4120 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
22:54:06.0211 4120 cdrom - ok
22:54:06.0255 4120 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
22:54:06.0303 4120 circlass - ok
22:54:06.0349 4120 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
22:54:06.0384 4120 CLFS - ok
22:54:06.0441 4120 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
22:54:06.0488 4120 CmBatt - ok
22:54:06.0561 4120 cmderd (c791be39288de62ddf40c32651703232) C:\windows\system32\DRIVERS\cmderd.sys
22:54:06.0585 4120 cmderd - ok
22:54:06.0608 4120 cmdGuard (5a4d5c5c53e0be9c98c126f01fa01599) C:\windows\system32\DRIVERS\cmdguard.sys
22:54:06.0634 4120 cmdGuard - ok
22:54:06.0665 4120 cmdHlp (ffc3347c03c253b55d8ca5f3c94ddade) C:\windows\system32\DRIVERS\cmdhlp.sys
22:54:06.0686 4120 cmdHlp - ok
22:54:06.0712 4120 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
22:54:06.0738 4120 cmdide - ok
22:54:06.0767 4120 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
22:54:06.0829 4120 CNG - ok
22:54:06.0841 4120 cnmpar21 - ok
22:54:06.0896 4120 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
22:54:06.0921 4120 Compbatt - ok
22:54:06.0960 4120 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
22:54:07.0006 4120 CompositeBus - ok
22:54:07.0040 4120 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
22:54:07.0067 4120 crcdisk - ok
22:54:07.0132 4120 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\windows\system32\Drivers\dfsc.sys
22:54:07.0303 4120 DfsC - ok
22:54:07.0351 4120 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
22:54:07.0398 4120 discache - ok
22:54:07.0448 4120 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
22:54:07.0476 4120 Disk - ok
22:54:07.0536 4120 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
22:54:07.0589 4120 drmkaud - ok
22:54:07.0641 4120 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\windows\system32\DRIVERS\dtsoftbus01.sys
22:54:07.0665 4120 dtsoftbus01 - ok
22:54:07.0716 4120 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\windows\System32\drivers\dxgkrnl.sys
22:54:07.0881 4120 DXGKrnl - ok
22:54:07.0968 4120 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
22:54:08.0090 4120 ebdrv - ok
22:54:08.0129 4120 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
22:54:08.0169 4120 elxstor - ok
22:54:08.0190 4120 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
22:54:08.0245 4120 ErrDev - ok
22:54:08.0355 4120 eusk2par (0c79689b4840ef8ec522598343f26849) C:\windows\system32\Drivers\eusk2par.sys
22:54:08.0379 4120 eusk2par - ok
22:54:08.0418 4120 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
22:54:08.0472 4120 exfat - ok
22:54:08.0503 4120 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
22:54:08.0567 4120 fastfat - ok
22:54:08.0603 4120 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
22:54:08.0649 4120 fdc - ok
22:54:08.0677 4120 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
22:54:08.0704 4120 FileInfo - ok
22:54:08.0720 4120 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
22:54:08.0780 4120 Filetrace - ok
22:54:08.0800 4120 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
22:54:08.0846 4120 flpydisk - ok
22:54:08.0885 4120 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
22:54:08.0917 4120 FltMgr - ok
22:54:08.0948 4120 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
22:54:08.0974 4120 FsDepends - ok
22:54:09.0009 4120 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
22:54:09.0038 4120 Fs_Rec - ok
22:54:09.0080 4120 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\windows\system32\DRIVERS\fvevol.sys
22:54:09.0269 4120 fvevol - ok
22:54:09.0310 4120 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
22:54:09.0337 4120 gagp30kx - ok
22:54:09.0392 4120 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
22:54:09.0451 4120 hcw85cir - ok
22:54:09.0493 4120 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
22:54:09.0543 4120 HdAudAddService - ok
22:54:09.0582 4120 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
22:54:09.0624 4120 HDAudBus - ok
22:54:09.0648 4120 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
22:54:09.0680 4120 HidBatt - ok
22:54:09.0721 4120 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
22:54:09.0768 4120 HidBth - ok
22:54:09.0797 4120 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
22:54:09.0831 4120 HidIr - ok
22:54:09.0864 4120 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
22:54:09.0903 4120 HidUsb - ok
22:54:09.0939 4120 hpdskflt (4ef10b866c62abbeaf7511cdd05a19be) C:\windows\system32\DRIVERS\hpdskflt.sys
22:54:10.0037 4120 hpdskflt - ok
22:54:10.0080 4120 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
22:54:10.0230 4120 HpqKbFiltr - ok
22:54:10.0268 4120 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
22:54:10.0296 4120 HpSAMD - ok
22:54:10.0341 4120 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
22:54:10.0414 4120 HTTP - ok
22:54:10.0434 4120 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
22:54:10.0460 4120 hwpolicy - ok
22:54:10.0485 4120 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
22:54:10.0534 4120 i8042prt - ok
22:54:10.0575 4120 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
22:54:10.0603 4120 iaStor - ok
22:54:10.0657 4120 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
22:54:10.0694 4120 iaStorV - ok
22:54:10.0840 4120 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
22:54:11.0012 4120 igfx - ok
22:54:11.0043 4120 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
22:54:11.0070 4120 iirsp - ok
22:54:11.0121 4120 inspect (5f2116fbf97a557b5adee8761d0b9c48) C:\windows\system32\DRIVERS\inspect.sys
22:54:11.0142 4120 inspect - ok
22:54:11.0169 4120 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
22:54:11.0194 4120 intelide - ok
22:54:11.0241 4120 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
22:54:11.0286 4120 intelppm - ok
22:54:11.0304 4120 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
22:54:11.0354 4120 IpFilterDriver - ok
22:54:11.0390 4120 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
22:54:11.0436 4120 IPMIDRV - ok
22:54:11.0450 4120 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
22:54:11.0508 4120 IPNAT - ok
22:54:11.0544 4120 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
22:54:11.0606 4120 IRENUM - ok
22:54:11.0647 4120 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
22:54:11.0673 4120 isapnp - ok
22:54:11.0701 4120 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
22:54:11.0733 4120 iScsiPrt - ok
22:54:11.0756 4120 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
22:54:11.0788 4120 kbdclass - ok
22:54:11.0810 4120 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
22:54:11.0850 4120 kbdhid - ok
22:54:11.0880 4120 KSecDD (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
22:54:11.0907 4120 KSecDD - ok
22:54:11.0944 4120 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
22:54:12.0054 4120 KSecPkg - ok
22:54:12.0129 4120 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
22:54:12.0185 4120 lltdio - ok
22:54:12.0233 4120 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
22:54:12.0264 4120 LSI_FC - ok
22:54:12.0298 4120 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
22:54:12.0328 4120 LSI_SAS - ok
22:54:12.0363 4120 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
22:54:12.0389 4120 LSI_SAS2 - ok
22:54:12.0410 4120 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
22:54:12.0438 4120 LSI_SCSI - ok
22:54:12.0468 4120 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
22:54:12.0523 4120 luafv - ok
22:54:12.0602 4120 mcdbus (8fd868e32459ece2a1bb0169f513d31e) C:\windows\system32\DRIVERS\mcdbus.sys
22:54:12.0712 4120 mcdbus ( UnsignedFile.Multi.Generic ) - warning
22:54:12.0712 4120 mcdbus - detected UnsignedFile.Multi.Generic (1)
22:54:12.0749 4120 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
22:54:12.0776 4120 megasas - ok
22:54:12.0815 4120 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
22:54:12.0847 4120 MegaSR - ok
22:54:12.0897 4120 MfeAVFK (32bcd2aec12cee766b2488731a78127c) C:\windows\system32\drivers\MfeAVFK.sys
22:54:13.0004 4120 MfeAVFK - ok
22:54:13.0051 4120 MfeBOPK (963abf1a4d3a19206f7b059e5a1a190b) C:\windows\system32\drivers\MfeBOPK.sys
22:54:13.0155 4120 MfeBOPK - ok
22:54:13.0202 4120 mfehidk (586a07b1fa933c340d990419d6894d7a) C:\windows\system32\drivers\mfehidk.sys
22:54:13.0357 4120 mfehidk - ok
22:54:13.0384 4120 MfeRKDK (820d6aa3f7f0cfa8a1fa8f63d3f1df04) C:\windows\system32\drivers\MfeRKDK.sys
22:54:13.0480 4120 MfeRKDK - ok
22:54:13.0513 4120 mfetdik (3812e49fa67a3f604895f0d0c2e1ef90) C:\windows\system32\drivers\mfetdik.sys
22:54:13.0630 4120 mfetdik - ok
22:54:13.0660 4120 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
22:54:13.0731 4120 Modem - ok
22:54:13.0764 4120 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
22:54:13.0803 4120 monitor - ok
22:54:13.0833 4120 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
22:54:13.0861 4120 mouclass - ok
22:54:13.0890 4120 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
22:54:13.0935 4120 mouhid - ok
22:54:13.0960 4120 mountmgr (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
22:54:13.0989 4120 mountmgr - ok
22:54:14.0020 4120 mpio (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
22:54:14.0049 4120 mpio - ok
22:54:14.0143 4120 MpKsl00ddde7b - ok
22:54:14.0176 4120 MpKsl4bac2904 - ok
22:54:14.0210 4120 MpKslc24e7c67 - ok
22:54:14.0234 4120 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
22:54:14.0373 4120 mpsdrv - ok
22:54:14.0429 4120 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
22:54:14.0473 4120 MRxDAV - ok
22:54:14.0527 4120 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\windows\system32\DRIVERS\mrxsmb.sys
22:54:14.0749 4120 mrxsmb - ok
22:54:14.0775 4120 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\windows\system32\DRIVERS\mrxsmb10.sys
22:54:14.0959 4120 mrxsmb10 - ok
22:54:14.0987 4120 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\windows\system32\DRIVERS\mrxsmb20.sys
22:54:15.0122 4120 mrxsmb20 - ok
22:54:15.0151 4120 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
22:54:15.0177 4120 msahci - ok
22:54:15.0255 4120 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
22:54:15.0284 4120 msdsm - ok
22:54:15.0355 4120 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
22:54:15.0400 4120 Msfs - ok
22:54:15.0444 4120 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
22:54:15.0570 4120 mshidkmdf - ok
22:54:15.0637 4120 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
22:54:15.0787 4120 msisadrv - ok
22:54:15.0831 4120 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
22:54:16.0199 4120 MSKSSRV - ok
22:54:16.0249 4120 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
22:54:16.0511 4120 MSPCLOCK - ok
22:54:16.0530 4120 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
22:54:16.0765 4120 MSPQM - ok
22:54:16.0789 4120 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
22:54:16.0978 4120 MsRPC - ok
22:54:17.0008 4120 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
22:54:17.0033 4120 mssmbios - ok
22:54:17.0053 4120 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
22:54:17.0205 4120 MSTEE - ok
22:54:17.0248 4120 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
22:54:17.0517 4120 MTConfig - ok
22:54:17.0543 4120 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
22:54:17.0646 4120 Mup - ok
22:54:17.0696 4120 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
22:54:17.0841 4120 NativeWifiP - ok
22:54:17.0886 4120 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
22:54:17.0931 4120 NDIS - ok
22:54:17.0974 4120 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
22:54:18.0221 4120 NdisCap - ok
22:54:18.0254 4120 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
22:54:18.0305 4120 NdisTapi - ok
22:54:18.0370 4120 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
22:54:18.0427 4120 Ndisuio - ok
22:54:18.0455 4120 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
22:54:18.0514 4120 NdisWan - ok
22:54:18.0540 4120 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
22:54:18.0591 4120 NDProxy - ok
22:54:18.0615 4120 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
22:54:18.0662 4120 NetBIOS - ok
22:54:18.0725 4120 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
22:54:18.0793 4120 NetBT - ok
22:54:18.0974 4120 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
22:54:19.0141 4120 netw5v32 - ok
22:54:19.0180 4120 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
22:54:19.0211 4120 nfrd960 - ok
22:54:19.0275 4120 npelpchm - ok
22:54:19.0328 4120 npf (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\drivers\npf.sys
22:54:19.0352 4120 npf - ok
22:54:19.0392 4120 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
22:54:19.0445 4120 Npfs - ok
22:54:19.0474 4120 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
22:54:19.0529 4120 nsiproxy - ok
22:54:19.0582 4120 Ntfs (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
22:54:19.0654 4120 Ntfs - ok
22:54:19.0676 4120 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
22:54:19.0737 4120 Null - ok
22:54:19.0761 4120 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
22:54:19.0790 4120 nvraid - ok
22:54:19.0813 4120 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
22:54:19.0844 4120 nvstor - ok
22:54:19.0873 4120 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
22:54:19.0901 4120 nv_agp - ok
22:54:19.0945 4120 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
22:54:19.0988 4120 ohci1394 - ok
22:54:20.0059 4120 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
22:54:20.0099 4120 Parport - ok
22:54:20.0136 4120 partmgr (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
22:54:20.0163 4120 partmgr - ok
22:54:20.0186 4120 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
22:54:20.0234 4120 Parvdm - ok
22:54:20.0263 4120 pci (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
22:54:20.0292 4120 pci - ok
22:54:20.0319 4120 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
22:54:20.0345 4120 pciide - ok
22:54:20.0373 4120 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
22:54:20.0411 4120 pcmcia - ok
22:54:20.0446 4120 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
22:54:20.0474 4120 pcw - ok
22:54:20.0556 4120 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
22:54:20.0628 4120 PEAUTH - ok
22:54:20.0731 4120 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
22:54:20.0780 4120 PptpMiniport - ok
22:54:20.0813 4120 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
22:54:20.0856 4120 Processor - ok
22:54:20.0905 4120 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
22:54:20.0958 4120 Psched - ok
22:54:20.0995 4120 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\windows\system32\Drivers\PxHelp20.sys
22:54:21.0023 4120 PxHelp20 - ok
22:54:21.0089 4120 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
22:54:21.0163 4120 ql2300 - ok
22:54:21.0197 4120 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
22:54:21.0226 4120 ql40xx - ok
22:54:21.0255 4120 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
22:54:21.0304 4120 QWAVEdrv - ok
22:54:21.0353 4120 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
22:54:21.0407 4120 RasAcd - ok
22:54:21.0434 4120 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
22:54:21.0491 4120 RasAgileVpn - ok
22:54:21.0528 4120 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
22:54:21.0588 4120 Rasl2tp - ok
22:54:21.0629 4120 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
22:54:21.0685 4120 RasPppoe - ok
22:54:21.0746 4120 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
22:54:21.0808 4120 RasSstp - ok
22:54:21.0884 4120 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
22:54:21.0945 4120 rdbss - ok
22:54:22.0000 4120 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
22:54:22.0035 4120 rdpbus - ok
22:54:22.0677 4120 RDPCDD (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
22:54:23.0539 4120 RDPCDD - ok
22:54:24.0011 4120 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
22:54:24.0059 4120 RDPENCDD - ok
22:54:24.0122 4120 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
22:54:24.0180 4120 RDPREFMP - ok
22:54:24.0247 4120 RDPWD (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
22:54:24.0318 4120 RDPWD - ok
22:54:24.0387 4120 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
22:54:24.0435 4120 rdyboost - ok
22:54:24.0494 4120 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
22:54:24.0532 4120 RFCOMM - ok
22:54:24.0623 4120 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
22:54:24.0673 4120 rspndr - ok
22:54:24.0733 4120 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
22:54:24.0759 4120 sbp2port - ok
22:54:24.0802 4120 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
22:54:24.0856 4120 scfilter - ok
22:54:24.0902 4120 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
22:54:24.0959 4120 secdrv - ok
22:54:25.0027 4120 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
22:54:25.0065 4120 Serenum - ok
22:54:25.0088 4120 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
22:54:25.0130 4120 Serial - ok
22:54:25.0151 4120 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
22:54:25.0200 4120 sermouse - ok
22:54:25.0264 4120 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
22:54:25.0315 4120 sffdisk - ok
22:54:25.0348 4120 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
22:54:25.0390 4120 sffp_mmc - ok
22:54:25.0460 4120 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
22:54:25.0491 4120 sffp_sd - ok
22:54:25.0515 4120 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
22:54:25.0569 4120 sfloppy - ok
22:54:25.0800 4120 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
22:54:25.0825 4120 sisagp - ok
22:54:25.0862 4120 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
22:54:25.0886 4120 SiSRaid2 - ok
22:54:25.0937 4120 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
22:54:25.0964 4120 SiSRaid4 - ok
22:54:26.0020 4120 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
22:54:26.0070 4120 Smb - ok
22:54:26.0131 4120 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
22:54:26.0154 4120 spldr - ok
22:54:26.0271 4120 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\windows\system32\DRIVERS\srv.sys
22:54:26.0558 4120 srv - ok
22:54:26.0594 4120 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\windows\system32\DRIVERS\srv2.sys
22:54:26.0777 4120 srv2 - ok
22:54:26.0817 4120 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\windows\system32\DRIVERS\srvnet.sys
22:54:26.0954 4120 srvnet - ok
22:54:27.0001 4120 ssfs0bbc (a3cc244f1e043c2b7ae32899ff99a0a0) C:\windows\system32\DRIVERS\ssfs0bbc.sys
22:54:27.0024 4120 ssfs0bbc - ok
22:54:27.0050 4120 sshrmd (e041026dafa17af2610afc4da8f4ea14) C:\windows\system32\DRIVERS\sshrmd.sys
22:54:27.0071 4120 sshrmd - ok
22:54:27.0094 4120 ssidrv (5a40b485825cc31b3a49bb4701b30d35) C:\windows\system32\DRIVERS\ssidrv.sys
22:54:27.0121 4120 ssidrv - ok
22:54:27.0165 4120 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
22:54:27.0190 4120 stexstor - ok
22:54:27.0255 4120 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
22:54:27.0282 4120 swenum - ok
22:54:27.0416 4120 SynTP (0e8676fb3bb95aa40fdf7a4a31018c8b) C:\windows\system32\DRIVERS\SynTP.sys
22:54:27.0628 4120 SynTP - ok
22:54:27.0823 4120 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\drivers\tcpip.sys
22:54:28.0227 4120 Tcpip - ok
22:54:28.0425 4120 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\DRIVERS\tcpip.sys
22:54:28.0469 4120 TCPIP6 - ok
22:54:28.0563 4120 tcpipreg (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
22:54:28.0638 4120 tcpipreg - ok
22:54:28.0731 4120 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
22:54:28.0777 4120 TDPIPE - ok
22:54:28.0821 4120 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
22:54:28.0866 4120 TDTCP - ok
22:54:28.0919 4120 tdx (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
22:54:28.0999 4120 tdx - ok
22:54:29.0255 4120 teamviewervpn (9101fffcfccd1a30e870a5b8a9091b10) C:\windows\system32\DRIVERS\teamviewervpn.sys
22:54:29.0368 4120 teamviewervpn - ok
22:54:29.0508 4120 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
22:54:29.0538 4120 TermDD - ok
22:54:29.0776 4120 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
22:54:29.0813 4120 TPM - ok
22:54:29.0983 4120 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
22:54:30.0043 4120 tssecsrv - ok
22:54:30.0097 4120 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
22:54:30.0153 4120 tunnel - ok
22:54:30.0203 4120 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
22:54:30.0228 4120 uagp35 - ok
22:54:30.0261 4120 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
22:54:30.0319 4120 udfs - ok
22:54:30.0381 4120 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
22:54:30.0407 4120 uliagpkx - ok
22:54:30.0446 4120 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
22:54:30.0485 4120 umbus - ok
22:54:30.0517 4120 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
22:54:30.0566 4120 UmPass - ok
22:54:30.0594 4120 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
22:54:30.0632 4120 usbccgp - ok
22:54:30.0661 4120 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
22:54:30.0697 4120 usbcir - ok
22:54:30.0727 4120 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\windows\system32\DRIVERS\usbehci.sys
22:54:30.0773 4120 usbehci - ok
22:54:30.0819 4120 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\windows\system32\DRIVERS\usbhub.sys
22:54:30.0866 4120 usbhub - ok
22:54:30.0894 4120 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
22:54:30.0925 4120 usbohci - ok
22:54:30.0977 4120 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
22:54:31.0021 4120 usbprint - ok
22:54:31.0056 4120 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
22:54:31.0089 4120 usbscan - ok
22:54:31.0119 4120 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
22:54:31.0160 4120 USBSTOR - ok
22:54:31.0227 4120 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
22:54:31.0307 4120 usbuhci - ok
22:54:31.0367 4120 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\windows\System32\Drivers\usbvideo.sys
22:54:31.0535 4120 usbvideo - ok
22:54:31.0585 4120 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
22:54:31.0608 4120 vdrvroot - ok
22:54:31.0656 4120 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
22:54:31.0700 4120 vga - ok
22:54:31.0732 4120 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
22:54:31.0783 4120 VgaSave - ok
22:54:31.0815 4120 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
22:54:31.0846 4120 vhdmp - ok
22:54:31.0882 4120 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
22:54:31.0908 4120 viaagp - ok
22:54:31.0946 4120 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
22:54:31.0984 4120 ViaC7 - ok
22:54:32.0013 4120 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
22:54:32.0037 4120 viaide - ok
22:54:32.0093 4120 VirtualCam (b6ef92c628d993c5f777807ed76a7568) C:\windows\system32\DRIVERS\VirtualCam.sys
22:54:32.0197 4120 VirtualCam ( UnsignedFile.Multi.Generic ) - warning
22:54:32.0197 4120 VirtualCam - detected UnsignedFile.Multi.Generic (1)
22:54:32.0226 4120 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
22:54:32.0251 4120 volmgr - ok
22:54:32.0292 4120 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
22:54:32.0327 4120 volmgrx - ok
22:54:32.0349 4120 volsnap (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
22:54:32.0381 4120 volsnap - ok
22:54:32.0411 4120 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
22:54:32.0442 4120 vsmraid - ok
22:54:32.0473 4120 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
22:54:32.0504 4120 vwifibus - ok
22:54:32.0559 4120 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
22:54:32.0606 4120 vwififlt - ok
22:54:32.0643 4120 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
22:54:32.0684 4120 vwifimp - ok
22:54:32.0748 4120 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
22:54:32.0786 4120 WacomPen - ok
22:54:32.0818 4120 WANARP (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
22:54:32.0869 4120 WANARP - ok
22:54:32.0880 4120 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
22:54:32.0925 4120 Wanarpv6 - ok
22:54:33.0158 4120 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
22:54:33.0188 4120 Wd - ok
22:54:33.0234 4120 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
22:54:33.0276 4120 Wdf01000 - ok
22:54:33.0411 4120 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
22:54:33.0455 4120 WfpLwf - ok
22:54:33.0491 4120 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
22:54:33.0516 4120 WIMMount - ok
22:54:33.0633 4120 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
22:54:33.0680 4120 WinUsb - ok
22:54:33.0773 4120 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
22:54:33.0816 4120 WmiAcpi - ok
22:54:33.0909 4120 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
22:54:33.0983 4120 ws2ifsl - ok
22:54:34.0095 4120 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
22:54:34.0163 4120 WudfPf - ok
22:54:34.0212 4120 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
22:54:34.0273 4120 WUDFRd - ok
22:54:34.0359 4120 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
22:54:34.0418 4120 yukonw7 - ok
22:54:34.0486 4120 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
22:54:34.0521 4120 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
22:54:34.0521 4120 \Device\Harddisk0\DR0 - detected TDSS File System (1)
22:54:34.0526 4120 Boot (0x1200) (71a91550d1265d8a13c3be3a9d3ee537) \Device\Harddisk0\DR0\Partition0
22:54:34.0527 4120 \Device\Harddisk0\DR0\Partition0 - ok
22:54:34.0560 4120 Boot (0x1200) (f4de4e5b9bbfbb865c3154fb31d9e9c4) \Device\Harddisk0\DR0\Partition1
22:54:34.0563 4120 \Device\Harddisk0\DR0\Partition1 - ok
22:54:34.0611 4120 Boot (0x1200) (84985b662bb1c124854cff929a0db9fb) \Device\Harddisk0\DR0\Partition2
22:54:34.0613 4120 \Device\Harddisk0\DR0\Partition2 - ok
22:54:34.0644 4120 Boot (0x1200) (d882680a0c8d5c5f3062fa6397f15f1d) \Device\Harddisk0\DR0\Partition3
22:54:34.0646 4120 \Device\Harddisk0\DR0\Partition3 - ok
22:54:34.0646 4120 ============================================================
22:54:34.0646 4120 Scan finished
22:54:34.0646 4120 ============================================================
22:54:34.0723 3664 Detected object count: 3
22:54:34.0723 3664 Actual detected object count: 3
22:54:44.0061 3664 mcdbus ( UnsignedFile.Multi.Generic ) - skipped by user
22:54:44.0062 3664 mcdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:54:44.0064 3664 VirtualCam ( UnsignedFile.Multi.Generic ) - skipped by user
22:54:44.0064 3664 VirtualCam ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:54:44.0066 3664 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
22:54:44.0066 3664 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
22:54:48.0941 3668 Deinitialize success
Re: BSoD, mírně zpomalené PC
Oki tak sem si zaopatřil zálohovací médium a zítra to vidím na formátování,defragmentaci a reinstal.
Re: BSoD, mírně zpomalené PC
Tak už mám zálohu hotovu a chystám si soft,myslíte že mi bude stačit COMODO firewall + antvirus? Po téhle zkušenosti bych měl rád už chvíli pokoj 
Re: BSoD, mírně zpomalené PC
Ups, já sem uplně zapomněl že mám OEM, co teď? Jde něco sosnout z microsoftu nebo nějaký reinstalační balíček?
Re: BSoD, mírně zpomalené PC
Reinstal a format hotovo PC šlape jak nové, děkuji za pomoc 
Přispějete na provoz fóra?