Stránka 1 z 3

pro Motji,

Napsal: 18 lis 2011 12:59
od ponte
LOG ComboFix

ComboFix 11-11-18.01 - Luky . 11. 2011 12:51:44.2.3 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.421.1051.18.4093.2633 [GMT 1:00]
Running from: c:\users\Luky\Desktop\ComboFix.exe
AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Spyware Doctor *Disabled/Outdated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-- Previous Run --
.
Infected copy of c:\windows\SysWow64\userinit.exe was found and disinfected
Restored copy from - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
.
--------
.
.
((((((((((((((((((((((((( Files Created from 2011-10-18 to 2011-11-18 )))))))))))))))))))))))))))))))
.
.
2011-11-18 11:56 . 2011-11-18 11:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-17 14:17 . 2011-11-17 14:17 -------- d-----w- C:\_OTL
2011-11-17 13:20 . 2011-11-17 13:20 -------- d-----w- c:\programdata\ATI
2011-11-17 13:20 . 2011-11-17 13:20 -------- d-----w- c:\program files (x86)\AMD APP
2011-11-16 09:43 . 2011-11-16 09:43 -------- d-----w- c:\windows\system32\Macromed
2011-11-12 10:50 . 2010-12-16 03:06 47232 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2011-11-12 10:50 . 2011-11-12 10:50 -------- dc----w- c:\windows\system32\DRVSTORE
2011-11-12 10:08 . 2011-04-27 14:37 149456 ----a-w- c:\windows\SGDetectionTool.dll
2011-11-12 10:08 . 2011-04-27 14:37 2074576 ----a-w- c:\windows\PCTBDCore.dll
2011-11-12 10:08 . 2011-04-27 14:37 1533904 ----a-w- c:\windows\PCTBDRes.dll
2011-11-12 10:08 . 2011-04-27 14:36 767952 ----a-w- c:\windows\BDTSupport.dll
2011-11-12 10:00 . 2010-07-16 13:53 816016 ----a-w- c:\windows\system32\drivers\pctEFA64.sys
2011-11-12 10:00 . 2010-06-29 09:35 452872 ----a-w- c:\windows\system32\drivers\pctDS64.sys
2011-11-12 10:00 . 2011-03-24 11:39 140800 ----a-w- c:\windows\system32\drivers\pctwfpfilter64.sys
2011-11-12 10:00 . 2011-01-17 08:09 334976 ----a-w- c:\windows\system32\drivers\pctgntdi64.sys
2011-11-12 10:00 . 2011-03-10 09:07 282440 ----a-w- c:\windows\system32\drivers\PCTCore64.sys
2011-11-12 10:00 . 2011-03-10 08:08 279344 ----a-w- c:\windows\system32\drivers\PCTSD64.sys
2011-11-12 10:00 . 2010-12-16 06:46 92896 ----a-w- c:\windows\system32\drivers\pctplsg64.sys
2011-11-12 09:59 . 2011-11-16 22:21 -------- d-----w- c:\program files (x86)\PC Tools Security
2011-11-12 09:59 . 2011-11-16 22:03 -------- d-----w- c:\program files (x86)\Common Files\PC Tools
2011-11-12 09:59 . 2011-11-12 10:00 -------- d-----w- c:\programdata\PC Tools
2011-11-10 18:29 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-10 18:29 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-10 18:29 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys
2011-11-10 18:29 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-06 02:18 . 2011-11-06 02:18 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2011-11-05 16:48 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-11-05 16:14 . 2011-11-05 16:14 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-11-05 16:12 . 2010-12-17 11:40 715776 ----a-w- c:\windows\system32\kerberos.dll
2011-11-05 16:12 . 2010-12-17 07:07 542208 ----a-w- c:\windows\SysWow64\kerberos.dll
2011-11-05 16:12 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-11-05 16:12 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-11-05 16:09 . 2011-03-03 06:24 183296 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-11-05 16:08 . 2011-06-23 04:33 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-11-05 16:07 . 2011-02-19 09:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2011-11-05 15:30 . 2011-11-05 15:30 -------- d-----w- c:\programdata\Malwarebytes
2011-11-05 15:30 . 2010-11-29 16:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-11-05 15:30 . 2011-11-16 22:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-11-05 15:30 . 2010-11-29 16:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-05 15:20 . 2011-11-05 15:20 174200 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2011-11-05 15:20 . 2011-11-05 15:20 -------- d-----w- c:\program files\Common Files\Symantec Shared
2011-11-05 15:19 . 2011-11-09 09:50 -------- d-----w- c:\windows\system32\drivers\NISx64
2011-11-05 15:19 . 2011-11-05 15:19 -------- d-----w- c:\program files (x86)\Norton Internet Security
2011-11-05 15:19 . 2011-11-05 17:44 -------- d-----w- c:\programdata\Norton
2011-11-05 15:19 . 2011-11-05 15:19 -------- d-----w- c:\program files (x86)\NortonInstaller
2011-11-03 22:46 . 2011-11-05 14:43 -------- d-----w- c:\program files (x86)\Vuze
2011-11-03 22:46 . 2011-11-03 22:46 -------- d-----w- c:\program files (x86)\Conduit
2011-11-01 20:00 . 2011-11-01 11:08 -------- d-----w- c:\windows\Panther
2011-11-01 20:00 . 2011-11-05 14:55 -------- d-----w- C:\Boot
2011-11-01 19:59 . 2011-11-01 19:59 -------- d-----w- c:\windows\system32\OEM
2011-11-01 15:25 . 2011-11-17 12:51 -------- d-----w- C:\Downloads
2011-11-01 15:16 . 2011-11-01 15:16 525544 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-01 15:16 . 2011-11-01 15:16 -------- d-----w- c:\program files\Java
2011-11-01 15:04 . 2011-11-01 15:04 -------- d-----w- c:\program files (x86)\VideoLAN
2011-11-01 14:48 . 2011-11-17 14:17 -------- d-----w- c:\program files (x86)\Ask.com
2011-11-01 14:47 . 2011-11-01 14:48 -------- d-----w- c:\program files (x86)\The KMPlayer
2011-11-01 14:45 . 2011-11-01 14:45 -------- d-----w- c:\program files (x86)\Free Download Manager
2011-11-01 14:19 . 2011-11-16 09:43 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-01 14:03 . 2011-11-01 14:03 -------- d-----w- c:\programdata\Ahead
2011-11-01 14:03 . 2011-11-01 14:03 -------- d-----w- c:\program files (x86)\Common Files\Ahead
2011-11-01 14:03 . 2011-11-01 14:03 -------- d-----w- c:\programdata\Nero
2011-11-01 14:03 . 2011-11-01 14:03 -------- d-----w- c:\program files (x86)\Nero
2011-11-01 13:56 . 2011-11-01 13:56 -------- d-----w- c:\programdata\FLEXnet
2011-11-01 13:55 . 2011-11-01 13:55 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared
2011-11-01 13:55 . 2008-04-07 04:38 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2011-11-01 13:53 . 2011-11-01 13:55 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-11-01 13:47 . 2011-11-01 13:47 -------- d-----w- c:\program files (x86)\AIMP2
2011-11-01 13:41 . 2003-06-12 22:25 7062 ----a-w- c:\windows\SysWow64\audiopid.vxd
2011-11-01 13:39 . 2005-06-15 10:09 10752 ----a-w- c:\windows\system32\INRES.DLL
2011-11-01 13:39 . 2005-06-15 10:07 11264 ----a-w- c:\windows\SysWow64\INRES.DLL
2011-11-01 13:39 . 2011-11-01 13:40 -------- d-----w- c:\program files (x86)\Creative
2011-11-01 13:39 . 2011-11-01 13:41 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-11-01 13:39 . 2011-11-01 13:39 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2011-11-01 13:33 . 2011-11-01 13:33 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2011-11-01 13:32 . 2011-11-05 18:17 -------- d-----w- c:\program files (x86)\Microsoft.NET
2011-11-01 13:32 . 2011-11-01 13:32 -------- d-----w- c:\windows\PCHEALTH
2011-11-01 13:32 . 2011-11-01 13:32 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2011-11-01 13:32 . 2011-11-01 13:32 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2011-11-01 13:06 . 2011-11-01 13:06 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-11-01 13:05 . 2011-11-01 13:05 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-11-01 13:05 . 2011-11-01 13:35 -------- d-----w- c:\programdata\Microsoft Help
2011-11-01 13:05 . 2011-11-01 13:05 -------- d-----r- C:\MSOCache
2011-11-01 13:00 . 2011-11-01 13:00 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-11-01 13:00 . 2011-11-01 13:00 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2011-11-01 13:00 . 2011-11-17 13:20 -------- d-----w- c:\programdata\AMD
2011-11-01 13:00 . 2010-02-18 08:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2011-11-01 13:00 . 2011-11-01 13:00 -------- d-----w- c:\program files (x86)\ATI Technologies
2011-11-01 12:59 . 2011-11-17 13:20 -------- d-----w- c:\program files\ATI Technologies
2011-11-01 12:59 . 2011-11-01 12:59 -------- d-----w- c:\program files\ATI
2011-11-01 12:59 . 2011-11-01 12:59 -------- d-----w- C:\ATI
2011-11-01 12:49 . 2011-11-01 12:49 -------- d-----w- c:\windows\SysWow64\Macromed
2011-11-01 12:26 . 2011-11-01 12:26 -------- d-----w- c:\windows\system32\SPReview
2011-11-01 12:17 . 2010-11-20 04:13 6144 ----a-w- c:\windows\system32\drivers\en-US\rdvgkmd.sys.mui
2011-11-01 12:17 . 2010-11-20 04:01 2560 ----a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui
2011-11-01 12:17 . 2010-11-20 04:11 4096 ----a-w- c:\windows\system32\drivers\en-US\tsusbhub.sys.mui
2011-11-01 12:17 . 2010-11-20 03:57 3072 ----a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2011-11-01 12:17 . 2010-11-20 04:11 6144 ----a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui
2011-11-01 12:17 . 2010-11-20 04:10 4608 ----a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui
2011-11-01 12:10 . 2010-11-20 04:33 6656 ----a-w- c:\windows\system32\drivers\cs-CZ\rdvgkmd.sys.mui
2011-11-01 12:10 . 2010-11-20 04:32 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\rdpwd.sys.mui
2011-11-01 12:10 . 2010-11-20 04:26 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tsusbflt.sys.mui
2011-11-01 12:10 . 2010-11-20 04:25 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\tsusbhub.sys.mui
2011-11-01 12:10 . 2010-11-20 04:32 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
2011-11-01 12:10 . 2010-11-20 04:32 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2011-11-01 12:07 . 2010-11-20 04:32 2217856 ----a-w- c:\windows\system32\bootres.dll
2011-11-01 11:52 . 2011-10-18 01:27 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E2E05AA-D908-4085-A18F-958B52EDF55F}\mpengine.dll
2011-11-01 11:52 . 2011-05-24 18:14 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-11-01 11:35 . 2011-11-01 11:35 -------- d-----w- c:\windows\system32\EventProviders
2011-11-01 11:26 . 2011-11-01 11:26 -------- d-----w- c:\windows\system32\oodag
2011-11-01 11:25 . 2011-11-01 11:25 -------- d-----w- c:\program files\OO Software
2011-11-01 11:21 . 2011-11-01 11:21 -------- d-----w- c:\program files\CCleaner
2011-11-01 11:15 . 2011-11-01 11:15 -------- d-----w- c:\program files (x86)\Yamicsoft
2011-11-01 11:11 . 2011-08-15 12:19 34624 ----a-w- c:\windows\system32\TURegOpt.exe
2011-11-01 11:11 . 2011-08-15 12:13 25920 ----a-w- c:\windows\system32\authuitu.dll
2011-11-01 11:11 . 2011-08-15 12:13 21312 ----a-w- c:\windows\SysWow64\authuitu.dll
2011-11-01 11:11 . 2011-08-15 12:13 36160 ----a-w- c:\windows\system32\uxtuneup.dll
2011-11-01 11:11 . 2011-08-15 12:13 29504 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2011-11-01 11:10 . 2011-11-01 11:11 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2011
2011-11-01 11:10 . 2011-11-01 11:11 -------- d-----w- c:\programdata\TuneUp Software
2011-11-01 11:10 . 2011-11-17 13:20 -------- d-sh--w- c:\windows\Installer
2011-11-01 11:10 . 2011-11-01 11:10 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-11-01 11:09 . 2011-11-05 14:56 -------- d-----w- c:\users\Luky
2011-11-01 11:07 . 2011-11-01 11:07 -------- d-----w- C:\Recovery
2011-11-01 11:03 . 2011-11-01 11:03 0 ----a-w- c:\windows\ativpsrm.bin
2011-10-26 03:05 . 2011-10-26 03:05 10496512 ----a-w- c:\windows\system32\drivers\atikmdag.sys
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-05 17:26 . 2011-11-05 17:26 249344 ----a-w- c:\windows\system32\webcheck.dll
2011-11-05 17:26 . 2011-11-05 17:26 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2011-11-01 12:22 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-11-01 12:22 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-10-26 02:05 . 2011-10-12 20:14 748544 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-10-26 02:04 . 2011-10-12 20:13 892416 ----a-w- c:\windows\system32\aticfx64.dll
2011-10-26 02:01 . 2011-10-12 20:10 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-10-26 01:55 . 2011-10-12 20:04 4292096 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-10-26 01:46 . 2009-07-13 21:59 5041664 ----a-w- c:\windows\system32\atidxx64.dll
2011-10-26 01:43 . 2011-10-12 19:44 4044288 ----a-w- c:\windows\system32\atiumd6a.dll
2011-10-26 01:29 . 2011-10-12 19:38 5510144 ----a-w- c:\windows\system32\atiumd64.dll
2011-10-26 01:29 . 2011-10-12 19:39 58880 ----a-w- c:\windows\system32\coinst.dll
2011-10-26 01:22 . 2011-10-12 19:31 486912 ----a-w- c:\windows\system32\atiadlxx.dll
2011-10-26 01:21 . 2011-10-12 19:29 40960 ----a-w- c:\windows\system32\atiuxp64.dll
2011-10-26 01:21 . 2011-10-12 19:29 31744 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2011-10-26 01:21 . 2011-10-12 19:29 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-10-12 15:14 . 2011-10-12 15:14 51200 ----a-w- c:\windows\system32\OpenCL.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 15:54 175912 ----a-w- c:\program files (x86)\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2011-01-17 15:54 175912 ----a-w- c:\program files (x86)\Vuze_Remote\prxtbVuze.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" [2008-01-22 152872]
"Free Download Manager"="c:\program files (x86)\Free Download Manager\fdm.exe" [2011-08-24 4197376]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2011-08-23 887976]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-25 343168]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
.
R0 SMR210;Symantec SMR Utility Service 2.1.0;c:\windows\System32\drivers\SMR210.SYS [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-11-29 363344]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-11-01 79360]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files (x86)\PC Tools Security\pctsAuxs.exe [2011-02-18 371472]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [x]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x]
S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [x]
S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1302000.00A\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1302000.00A\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20111114.002\BHDrvx64.sys [2011-11-14 1156216]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1302000.00A\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20111116.030_f0c\IDSvia64.sys [2011-11-04 488568]
S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1302000.00A\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1302000.00A\SYMNETS.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-10-25 361984]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424]
S2 Browser Defender Update Service;Browser Defender Update Service;c:\program files (x86)\PC Tools Security\BDT\BDTUpdateService.exe [2011-04-27 337872]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.2.0.10\ccSvcHst.exe [2011-08-10 138760]
S2 OODefragAgent;O&O Defrag;c:\program files\OO Software\Defrag\oodag.exe [2011-06-29 3246920]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-08-15 2027840]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-11-17 138360]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-06-06 11856]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2011-06-29 3992904]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
IE: E&xportovať do programu Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&oslať do programu OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Prevziať pomocou FDM - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Prevziať video pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
IE: Prevziať vybrané pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Prevziať všetko pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: Prevést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Prevést cíl vazby do existujícího PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Prevést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Pridat do stávajícího PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll
TCP: DhcpNameServer = 192.168.10.1
FF - ProfilePath - c:\users\Luky\AppData\Roaming\Mozilla\Firefox\Profiles\w5p03w8b.default\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.2.0.10\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.2.0.10\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-11-18 12:58:45
ComboFix-quarantined-files.txt 2011-11-18 11:58
.
Pre-Run: 35 869 782 016 bytes free
Post-Run: 35 660 824 576 bytes free
.
- - End Of File - - 8E06FC675087944D67FE99C44DBE31A2

Re: pro Motji,

Napsal: 18 lis 2011 14:32
od ponte
ak este treba poslat nejaky log tak daj vediet a dakujem za tvoj čas že sa na to pzriš a tak.

Re: pro Motji,

Napsal: 18 lis 2011 16:01
od motji
Ach jo, Vy jste ten combofix spouštěl ještě jednou?

:arrow: Stáhněte TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- a uložte ho na plochu.
- 2x klikněte na ikonu programu a spusťte
- dejte volbu Spustit kontrolu - pak potvrdte start sken
- pokud program najde infikovaný soubor, ukáže se Vám předvolená akce Cure, v tom případě potvrdte tlačítko Continue
- pokud bude chtít program restartovat počítač, klikněte na tlačítko Reboot Now
- pokud si restart nevyžádá, klikněte na tlačítko Report. Měl vy na Vás vyskočit log, obsah logu zkopírujte do svého topicu.
- pokud se log nezobrazí, je uložený ve Vašem kořenovém adresáři.

Re: pro Motji,

Napsal: 18 lis 2011 16:03
od ponte
ano spuštel podla navodu

Re: pro Motji,

Napsal: 18 lis 2011 16:06
od ponte
no takže ten TDSSKiller nič nenašiel

16:04:28.0869 1116 TDSS rootkit removing tool 2.6.19.0 Nov 16 2011 12:18:50
16:04:29.0540 1116 ============================================================
16:04:29.0540 1116 Current date / time: 2011/11/18 16:04:29.0540
16:04:29.0540 1116 SystemInfo:
16:04:29.0540 1116
16:04:29.0540 1116 OS Version: 6.1.7601 ServicePack: 1.0
16:04:29.0540 1116 Product type: Workstation
16:04:29.0540 1116 ComputerName: LUKY-PC
16:04:29.0541 1116 UserName: Luky
16:04:29.0541 1116 Windows directory: C:\Windows
16:04:29.0541 1116 System windows directory: C:\Windows
16:04:29.0541 1116 Running under WOW64
16:04:29.0541 1116 Processor architecture: Intel x64
16:04:29.0541 1116 Number of processors: 3
16:04:29.0541 1116 Page size: 0x1000
16:04:29.0541 1116 Boot type: Normal boot
16:04:29.0541 1116 ============================================================
16:04:30.0620 1116 Initialize success
16:04:34.0773 2132 ============================================================
16:04:34.0773 2132 Scan started
16:04:34.0773 2132 Mode: Manual;
16:04:34.0773 2132 ============================================================
16:04:35.0229 2132 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:04:35.0233 2132 1394ohci - ok
16:04:35.0263 2132 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:04:35.0268 2132 ACPI - ok
16:04:35.0283 2132 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:04:35.0285 2132 AcpiPmi - ok
16:04:35.0317 2132 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:04:35.0323 2132 adp94xx - ok
16:04:35.0337 2132 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:04:35.0341 2132 adpahci - ok
16:04:35.0348 2132 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:04:35.0350 2132 adpu320 - ok
16:04:35.0400 2132 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
16:04:35.0412 2132 AFD - ok
16:04:35.0450 2132 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:04:35.0452 2132 agp440 - ok
16:04:35.0483 2132 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:04:35.0485 2132 aliide - ok
16:04:35.0498 2132 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:04:35.0499 2132 amdide - ok
16:04:35.0530 2132 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
16:04:35.0538 2132 amdiox64 - ok
16:04:35.0567 2132 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:04:35.0574 2132 AmdK8 - ok
16:04:35.0862 2132 amdkmdag (0415ffe1b6a6ea141feafca57567f57f) C:\Windows\system32\DRIVERS\atikmdag.sys
16:04:36.0009 2132 amdkmdag - ok
16:04:36.0095 2132 amdkmdap (dc24d6f38f17c0d643d9aa8a6852f8d0) C:\Windows\system32\DRIVERS\atikmpag.sys
16:04:36.0101 2132 amdkmdap - ok
16:04:36.0147 2132 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:04:36.0155 2132 AmdPPM - ok
16:04:36.0178 2132 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:04:36.0185 2132 amdsata - ok
16:04:36.0192 2132 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:04:36.0198 2132 amdsbs - ok
16:04:36.0212 2132 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:04:36.0223 2132 amdxata - ok
16:04:36.0264 2132 amd_sata (bb4fe7889db9cbbe61a308e99697f53c) C:\Windows\system32\DRIVERS\amd_sata.sys
16:04:36.0265 2132 amd_sata - ok
16:04:36.0333 2132 amd_xata (5631cba53f1cbea3f9e88348e6723391) C:\Windows\system32\DRIVERS\amd_xata.sys
16:04:36.0335 2132 amd_xata - ok
16:04:36.0394 2132 AODDriver4.01 (f312fad7dbd49ed21a194ac71b497832) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
16:04:36.0403 2132 AODDriver4.01 - ok
16:04:36.0439 2132 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:04:36.0441 2132 AppID - ok
16:04:36.0472 2132 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:04:36.0477 2132 arc - ok
16:04:36.0491 2132 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:04:36.0499 2132 arcsas - ok
16:04:36.0510 2132 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:04:36.0512 2132 AsyncMac - ok
16:04:36.0528 2132 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:04:36.0530 2132 atapi - ok
16:04:36.0575 2132 AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
16:04:36.0582 2132 AtiHDAudioService - ok
16:04:36.0793 2132 atikmdag (0415ffe1b6a6ea141feafca57567f57f) C:\Windows\system32\drivers\atikmdag.sys
16:04:36.0842 2132 atikmdag - ok
16:04:36.0970 2132 AtiPcie (e82e61f46d1336447f4deff8c074f13e) C:\Windows\system32\DRIVERS\AtiPcie64.sys
16:04:36.0979 2132 AtiPcie - ok
16:04:37.0037 2132 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:04:37.0042 2132 b06bdrv - ok
16:04:37.0079 2132 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:04:37.0090 2132 b57nd60a - ok
16:04:37.0114 2132 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:04:37.0121 2132 Beep - ok
16:04:37.0344 2132 BHDrvx64 (82c695630676079f7ad68c85a5e662e5) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20111114.002\BHDrvx64.sys
16:04:37.0365 2132 BHDrvx64 - ok
16:04:37.0452 2132 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:04:37.0454 2132 blbdrive - ok
16:04:37.0496 2132 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:04:37.0498 2132 bowser - ok
16:04:37.0520 2132 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:04:37.0527 2132 BrFiltLo - ok
16:04:37.0538 2132 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:04:37.0542 2132 BrFiltUp - ok
16:04:37.0570 2132 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:04:37.0574 2132 Brserid - ok
16:04:37.0595 2132 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:04:37.0597 2132 BrSerWdm - ok
16:04:37.0623 2132 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:04:37.0630 2132 BrUsbMdm - ok
16:04:37.0646 2132 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:04:37.0647 2132 BrUsbSer - ok
16:04:37.0663 2132 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:04:37.0670 2132 BTHMODEM - ok
16:04:37.0754 2132 ccSet_NIS (a8ad33c9dd88c810cac00acc7f4329fb) C:\Windows\system32\drivers\NISx64\1302000.00A\ccSetx64.sys
16:04:37.0764 2132 ccSet_NIS - ok
16:04:37.0785 2132 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:04:37.0790 2132 cdfs - ok
16:04:37.0829 2132 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
16:04:37.0850 2132 cdrom - ok
16:04:37.0872 2132 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:04:37.0879 2132 circlass - ok
16:04:37.0914 2132 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:04:37.0925 2132 CLFS - ok
16:04:37.0971 2132 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:04:37.0981 2132 CmBatt - ok
16:04:38.0006 2132 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:04:38.0015 2132 cmdide - ok
16:04:38.0049 2132 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
16:04:38.0059 2132 CNG - ok
16:04:38.0079 2132 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:04:38.0081 2132 Compbatt - ok
16:04:38.0105 2132 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:04:38.0112 2132 CompositeBus - ok
16:04:38.0132 2132 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:04:38.0138 2132 crcdisk - ok
16:04:38.0190 2132 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
16:04:38.0198 2132 CSC - ok
16:04:38.0240 2132 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:04:38.0245 2132 DfsC - ok
16:04:38.0268 2132 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:04:38.0270 2132 discache - ok
16:04:38.0287 2132 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:04:38.0297 2132 Disk - ok
16:04:38.0330 2132 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:04:38.0338 2132 drmkaud - ok
16:04:38.0380 2132 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:04:38.0390 2132 DXGKrnl - ok
16:04:38.0511 2132 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:04:38.0553 2132 ebdrv - ok
16:04:38.0767 2132 eeCtrl (5ccf1be80930aeb1cdebf561666325e8) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
16:04:38.0777 2132 eeCtrl - ok
16:04:38.0870 2132 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:04:38.0876 2132 elxstor - ok
16:04:38.0957 2132 EraserUtilRebootDrv (7a898e4a744621711be7e7b796c69876) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
16:04:38.0966 2132 EraserUtilRebootDrv - ok
16:04:39.0056 2132 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:04:39.0072 2132 ErrDev - ok
16:04:39.0146 2132 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:04:39.0157 2132 exfat - ok
16:04:39.0186 2132 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:04:39.0191 2132 fastfat - ok
16:04:39.0233 2132 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:04:39.0240 2132 fdc - ok
16:04:39.0279 2132 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:04:39.0290 2132 FileInfo - ok
16:04:39.0308 2132 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:04:39.0313 2132 Filetrace - ok
16:04:39.0345 2132 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:04:39.0347 2132 flpydisk - ok
16:04:39.0390 2132 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:04:39.0401 2132 FltMgr - ok
16:04:39.0463 2132 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:04:39.0473 2132 FsDepends - ok
16:04:39.0491 2132 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:04:39.0493 2132 Fs_Rec - ok
16:04:39.0524 2132 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:04:39.0532 2132 fvevol - ok
16:04:39.0556 2132 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:04:39.0564 2132 gagp30kx - ok
16:04:39.0598 2132 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:04:39.0599 2132 hcw85cir - ok
16:04:39.0632 2132 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:04:39.0643 2132 HdAudAddService - ok
16:04:39.0678 2132 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:04:39.0680 2132 HDAudBus - ok
16:04:39.0723 2132 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:04:39.0733 2132 HidBatt - ok
16:04:39.0759 2132 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:04:39.0766 2132 HidBth - ok
16:04:39.0783 2132 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:04:39.0792 2132 HidIr - ok
16:04:39.0820 2132 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
16:04:39.0822 2132 HidUsb - ok
16:04:39.0853 2132 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:04:39.0855 2132 HpSAMD - ok
16:04:39.0900 2132 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:04:39.0915 2132 HTTP - ok
16:04:39.0956 2132 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:04:39.0968 2132 hwpolicy - ok
16:04:40.0008 2132 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:04:40.0017 2132 i8042prt - ok
16:04:40.0058 2132 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:04:40.0063 2132 iaStorV - ok
16:04:40.0240 2132 IDSVia64 (0b97f1a640ad3d159a7b5d2164c42e50) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20111117.030\IDSvia64.sys
16:04:40.0246 2132 IDSVia64 - ok
16:04:40.0334 2132 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:04:40.0345 2132 iirsp - ok
16:04:40.0418 2132 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:04:40.0434 2132 intelide - ok
16:04:40.0488 2132 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:04:40.0498 2132 intelppm - ok
16:04:40.0553 2132 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:04:40.0560 2132 IpFilterDriver - ok
16:04:40.0618 2132 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:04:40.0633 2132 IPMIDRV - ok
16:04:40.0711 2132 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:04:40.0722 2132 IPNAT - ok
16:04:40.0743 2132 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:04:40.0746 2132 IRENUM - ok
16:04:40.0815 2132 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:04:40.0830 2132 isapnp - ok
16:04:40.0861 2132 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:04:40.0871 2132 iScsiPrt - ok
16:04:40.0922 2132 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:04:40.0931 2132 kbdclass - ok
16:04:40.0998 2132 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:04:41.0027 2132 kbdhid - ok
16:04:41.0088 2132 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
16:04:41.0103 2132 KSecDD - ok
16:04:41.0175 2132 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
16:04:41.0179 2132 KSecPkg - ok
16:04:41.0238 2132 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:04:41.0243 2132 ksthunk - ok
16:04:41.0271 2132 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:04:41.0282 2132 lltdio - ok
16:04:41.0334 2132 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:04:41.0343 2132 LSI_FC - ok
16:04:41.0366 2132 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:04:41.0373 2132 LSI_SAS - ok
16:04:41.0401 2132 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:04:41.0403 2132 LSI_SAS2 - ok
16:04:41.0422 2132 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:04:41.0427 2132 LSI_SCSI - ok
16:04:41.0450 2132 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:04:41.0453 2132 luafv - ok
16:04:41.0518 2132 MBAMProtector (de5d0dd632ee6977979799de64ce0951) C:\Windows\system32\drivers\mbam.sys
16:04:41.0520 2132 MBAMProtector - ok
16:04:41.0585 2132 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:04:41.0596 2132 megasas - ok
16:04:41.0608 2132 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:04:41.0618 2132 MegaSR - ok
16:04:41.0653 2132 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:04:41.0655 2132 Modem - ok
16:04:41.0701 2132 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:04:41.0719 2132 monitor - ok
16:04:41.0747 2132 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
16:04:41.0759 2132 mouclass - ok
16:04:41.0780 2132 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:04:41.0786 2132 mouhid - ok
16:04:41.0817 2132 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:04:41.0826 2132 mountmgr - ok
16:04:41.0849 2132 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:04:41.0868 2132 mpio - ok
16:04:41.0920 2132 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:04:41.0936 2132 mpsdrv - ok
16:04:41.0983 2132 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:04:41.0990 2132 MRxDAV - ok
16:04:42.0018 2132 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:04:42.0034 2132 mrxsmb - ok
16:04:42.0066 2132 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:04:42.0076 2132 mrxsmb10 - ok
16:04:42.0149 2132 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:04:42.0154 2132 mrxsmb20 - ok
16:04:42.0199 2132 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:04:42.0200 2132 msahci - ok
16:04:42.0238 2132 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:04:42.0241 2132 msdsm - ok
16:04:42.0299 2132 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:04:42.0301 2132 Msfs - ok
16:04:42.0312 2132 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:04:42.0314 2132 mshidkmdf - ok
16:04:42.0339 2132 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:04:42.0340 2132 msisadrv - ok
16:04:42.0366 2132 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:04:42.0377 2132 MSKSSRV - ok
16:04:42.0395 2132 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:04:42.0396 2132 MSPCLOCK - ok
16:04:42.0428 2132 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:04:42.0429 2132 MSPQM - ok
16:04:42.0500 2132 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:04:42.0513 2132 MsRPC - ok
16:04:42.0555 2132 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:04:42.0562 2132 mssmbios - ok
16:04:42.0596 2132 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:04:42.0606 2132 MSTEE - ok
16:04:42.0666 2132 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:04:42.0684 2132 MTConfig - ok
16:04:42.0703 2132 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:04:42.0714 2132 Mup - ok
16:04:42.0776 2132 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:04:42.0782 2132 NativeWifiP - ok
16:04:42.0952 2132 NAVENG (2dbe90210de76be6e1653bb20ec70ec2) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20111117.036\ENG64.SYS
16:04:42.0958 2132 NAVENG - ok
16:04:43.0070 2132 NAVEX15 (346da70e203b8e2c850277713de8f71b) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20111117.036\EX64.SYS
16:04:43.0107 2132 NAVEX15 - ok
16:04:43.0248 2132 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:04:43.0263 2132 NDIS - ok
16:04:43.0331 2132 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:04:43.0333 2132 NdisCap - ok
16:04:43.0364 2132 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:04:43.0372 2132 NdisTapi - ok
16:04:43.0428 2132 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:04:43.0444 2132 Ndisuio - ok
16:04:43.0452 2132 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:04:43.0455 2132 NdisWan - ok
16:04:43.0497 2132 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:04:43.0504 2132 NDProxy - ok
16:04:43.0558 2132 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:04:43.0560 2132 NetBIOS - ok
16:04:43.0609 2132 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:04:43.0618 2132 NetBT - ok
16:04:43.0671 2132 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:04:43.0678 2132 nfrd960 - ok
16:04:43.0708 2132 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:04:43.0715 2132 Npfs - ok
16:04:43.0745 2132 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:04:43.0747 2132 nsiproxy - ok
16:04:43.0809 2132 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:04:43.0825 2132 Ntfs - ok
16:04:43.0916 2132 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:04:43.0924 2132 Null - ok
16:04:43.0970 2132 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:04:43.0979 2132 nvraid - ok
16:04:44.0000 2132 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:04:44.0004 2132 nvstor - ok
16:04:44.0050 2132 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:04:44.0059 2132 nv_agp - ok
16:04:44.0089 2132 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:04:44.0097 2132 ohci1394 - ok
16:04:44.0177 2132 P17 (66a2c70da35e8559982ee9d205329e1a) C:\Windows\system32\drivers\P17.sys
16:04:44.0199 2132 P17 - ok
16:04:44.0298 2132 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:04:44.0300 2132 Parport - ok
16:04:44.0345 2132 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:04:44.0347 2132 partmgr - ok
16:04:44.0380 2132 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:04:44.0395 2132 pci - ok
16:04:44.0424 2132 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:04:44.0425 2132 pciide - ok
16:04:44.0477 2132 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:04:44.0484 2132 pcmcia - ok
16:04:44.0565 2132 PCTCore (bf907ec8c6783e861246c8060e788334) C:\Windows\system32\drivers\PCTCore64.sys
16:04:44.0569 2132 PCTCore - ok
16:04:44.0586 2132 pctDS (ff43e3b1687e4e2140de6349ea5c7372) C:\Windows\system32\drivers\pctDS64.sys
16:04:44.0593 2132 pctDS - ok
16:04:44.0635 2132 pctEFA (60e9a05852af7e9cb11237c00aee4ccf) C:\Windows\system32\drivers\pctEFA64.sys
16:04:44.0652 2132 pctEFA - ok
16:04:44.0698 2132 PCTSD (dea3e7a33e268d4f1fbb4516c784646b) C:\Windows\system32\Drivers\PCTSD64.sys
16:04:44.0702 2132 PCTSD - ok
16:04:44.0741 2132 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:04:44.0743 2132 pcw - ok
16:04:44.0765 2132 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:04:44.0776 2132 PEAUTH - ok
16:04:44.0859 2132 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:04:44.0862 2132 PptpMiniport - ok
16:04:44.0884 2132 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:04:44.0886 2132 Processor - ok
16:04:44.0924 2132 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:04:44.0935 2132 Psched - ok
16:04:45.0007 2132 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:04:45.0031 2132 ql2300 - ok
16:04:45.0111 2132 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:04:45.0117 2132 ql40xx - ok
16:04:45.0142 2132 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:04:45.0152 2132 QWAVEdrv - ok
16:04:45.0174 2132 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:04:45.0176 2132 RasAcd - ok
16:04:45.0223 2132 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:04:45.0225 2132 RasAgileVpn - ok
16:04:45.0271 2132 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:04:45.0280 2132 Rasl2tp - ok
16:04:45.0311 2132 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:04:45.0319 2132 RasPppoe - ok
16:04:45.0342 2132 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:04:45.0348 2132 RasSstp - ok
16:04:45.0392 2132 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:04:45.0402 2132 rdbss - ok
16:04:45.0456 2132 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:04:45.0475 2132 rdpbus - ok
16:04:45.0500 2132 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:04:45.0507 2132 RDPCDD - ok
16:04:45.0540 2132 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
16:04:45.0547 2132 RDPDR - ok
16:04:45.0592 2132 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:04:45.0598 2132 RDPENCDD - ok
16:04:45.0611 2132 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:04:45.0612 2132 RDPREFMP - ok
16:04:45.0655 2132 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
16:04:45.0662 2132 RdpVideoMiniport - ok
16:04:45.0699 2132 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
16:04:45.0707 2132 RDPWD - ok
16:04:45.0750 2132 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:04:45.0753 2132 rdyboost - ok
16:04:45.0817 2132 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:04:45.0825 2132 rspndr - ok
16:04:45.0862 2132 RTL8167 (abcb5a38a0d85bdf69b7877e1ad1eed5) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:04:45.0873 2132 RTL8167 - ok
16:04:45.0912 2132 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
16:04:45.0918 2132 s3cap - ok
16:04:45.0960 2132 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:04:45.0972 2132 sbp2port - ok
16:04:46.0010 2132 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:04:46.0016 2132 scfilter - ok
16:04:46.0049 2132 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:04:46.0050 2132 secdrv - ok
16:04:46.0093 2132 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:04:46.0103 2132 Serenum - ok
16:04:46.0124 2132 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:04:46.0132 2132 Serial - ok
16:04:46.0166 2132 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:04:46.0171 2132 sermouse - ok
16:04:46.0201 2132 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:04:46.0203 2132 sffdisk - ok
16:04:46.0223 2132 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:04:46.0224 2132 sffp_mmc - ok
16:04:46.0240 2132 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:04:46.0246 2132 sffp_sd - ok
16:04:46.0272 2132 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:04:46.0273 2132 sfloppy - ok
16:04:46.0310 2132 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:04:46.0312 2132 SiSRaid2 - ok
16:04:46.0339 2132 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:04:46.0341 2132 SiSRaid4 - ok
16:04:46.0353 2132 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:04:46.0356 2132 Smb - ok
16:04:46.0365 2132 SMR210 - ok
16:04:46.0398 2132 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:04:46.0409 2132 spldr - ok
16:04:46.0522 2132 SRTSP (1321a6c3c92bbd3f3bbe1292cff8e91a) C:\Windows\System32\Drivers\NISx64\1302000.00A\SRTSP64.SYS
16:04:46.0536 2132 SRTSP - ok
16:04:46.0623 2132 SRTSPX (bd129c22c3b8c2e584227269dfa77b09) C:\Windows\system32\drivers\NISx64\1302000.00A\SRTSPX64.SYS
16:04:46.0633 2132 SRTSPX - ok
16:04:46.0662 2132 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:04:46.0668 2132 srv - ok
16:04:46.0732 2132 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:04:46.0743 2132 srv2 - ok
16:04:46.0771 2132 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:04:46.0775 2132 srvnet - ok
16:04:46.0821 2132 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:04:46.0829 2132 stexstor - ok
16:04:46.0865 2132 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
16:04:46.0870 2132 storflt - ok
16:04:46.0892 2132 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
16:04:46.0904 2132 storvsc - ok
16:04:46.0925 2132 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:04:46.0934 2132 swenum - ok
16:04:47.0008 2132 SymDS (8b2430762099598da40686f754632efd) C:\Windows\system32\drivers\NISx64\1302000.00A\SYMDS64.SYS
16:04:47.0013 2132 SymDS - ok
16:04:47.0075 2132 SymEFA (d89a88ad71e12f963b1f436a0e91dcbf) C:\Windows\system32\drivers\NISx64\1302000.00A\SYMEFA64.SYS
16:04:47.0086 2132 SymEFA - ok
16:04:47.0181 2132 SymEvent (36b77f5c9e21f88a8c8ec67ad5415819) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
16:04:47.0193 2132 SymEvent - ok
16:04:47.0254 2132 SymIRON (dd70da422460fded831d211df151d560) C:\Windows\system32\drivers\NISx64\1302000.00A\Ironx64.SYS
16:04:47.0261 2132 SymIRON - ok
16:04:47.0290 2132 SymNetS (bce4eb2eef05e388959b46fd21388c2d) C:\Windows\System32\Drivers\NISx64\1302000.00A\SYMNETS.SYS
16:04:47.0294 2132 SymNetS - ok
16:04:47.0317 2132 Synth3dVsc - ok
16:04:47.0387 2132 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
16:04:47.0426 2132 Tcpip - ok
16:04:47.0523 2132 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
16:04:47.0533 2132 TCPIP6 - ok
16:04:47.0627 2132 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:04:47.0635 2132 tcpipreg - ok
16:04:47.0683 2132 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:04:47.0685 2132 TDPIPE - ok
16:04:47.0711 2132 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
16:04:47.0718 2132 TDTCP - ok
16:04:47.0741 2132 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:04:47.0744 2132 tdx - ok
16:04:47.0773 2132 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
16:04:47.0776 2132 TermDD - ok
16:04:47.0819 2132 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:04:47.0823 2132 tssecsrv - ok
16:04:47.0863 2132 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:04:47.0870 2132 TsUsbFlt - ok
16:04:47.0880 2132 tsusbhub - ok
16:04:47.0935 2132 TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys
16:04:47.0946 2132 TuneUpUtilitiesDrv - ok
16:04:48.0029 2132 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:04:48.0044 2132 tunnel - ok
16:04:48.0097 2132 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:04:48.0104 2132 uagp35 - ok
16:04:48.0170 2132 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:04:48.0186 2132 udfs - ok
16:04:48.0255 2132 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:04:48.0262 2132 uliagpkx - ok
16:04:48.0309 2132 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
16:04:48.0320 2132 umbus - ok
16:04:48.0385 2132 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:04:48.0395 2132 UmPass - ok
16:04:48.0436 2132 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\drivers\usbccgp.sys
16:04:48.0438 2132 usbccgp - ok
16:04:48.0465 2132 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:04:48.0471 2132 usbcir - ok
16:04:48.0514 2132 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:04:48.0521 2132 usbehci - ok
16:04:48.0584 2132 usbfilter (573d192e268f0c5b486b7e96f661e538) C:\Windows\system32\DRIVERS\usbfilter.sys
16:04:48.0594 2132 usbfilter - ok
16:04:48.0628 2132 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:04:48.0640 2132 usbhub - ok
16:04:48.0727 2132 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
16:04:48.0735 2132 usbohci - ok
16:04:48.0775 2132 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:04:48.0786 2132 usbprint - ok
16:04:48.0867 2132 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:04:48.0879 2132 USBSTOR - ok
16:04:48.0969 2132 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
16:04:48.0973 2132 usbuhci - ok
16:04:49.0041 2132 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:04:49.0047 2132 vdrvroot - ok
16:04:49.0103 2132 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:04:49.0110 2132 vga - ok
16:04:49.0136 2132 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:04:49.0138 2132 VgaSave - ok
16:04:49.0160 2132 VGPU - ok
16:04:49.0214 2132 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:04:49.0219 2132 vhdmp - ok
16:04:49.0279 2132 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:04:49.0288 2132 viaide - ok
16:04:49.0318 2132 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
16:04:49.0329 2132 vmbus - ok
16:04:49.0351 2132 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
16:04:49.0353 2132 VMBusHID - ok
16:04:49.0361 2132 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:04:49.0363 2132 volmgr - ok
16:04:49.0405 2132 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:04:49.0412 2132 volmgrx - ok
16:04:49.0448 2132 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:04:49.0463 2132 volsnap - ok
16:04:49.0512 2132 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:04:49.0515 2132 vsmraid - ok
16:04:49.0542 2132 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
16:04:49.0548 2132 vwifibus - ok
16:04:49.0585 2132 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:04:49.0590 2132 WacomPen - ok
16:04:49.0638 2132 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:04:49.0644 2132 WANARP - ok
16:04:49.0647 2132 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:04:49.0648 2132 Wanarpv6 - ok
16:04:49.0725 2132 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:04:49.0730 2132 Wd - ok
16:04:49.0769 2132 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:04:49.0787 2132 Wdf01000 - ok
16:04:49.0819 2132 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:04:49.0827 2132 WfpLwf - ok
16:04:49.0851 2132 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:04:49.0855 2132 WIMMount - ok
16:04:49.0900 2132 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:04:49.0911 2132 WmiAcpi - ok
16:04:49.0966 2132 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:04:49.0968 2132 ws2ifsl - ok
16:04:50.0059 2132 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:04:50.0071 2132 WudfPf - ok
16:04:50.0112 2132 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:04:50.0117 2132 WUDFRd - ok
16:04:50.0164 2132 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16:04:50.0174 2132 \Device\Harddisk0\DR0 - ok
16:04:50.0185 2132 Boot (0x1200) (6f121858b8c1ef296aa14aeafc642c79) \Device\Harddisk0\DR0\Partition0
16:04:50.0187 2132 \Device\Harddisk0\DR0\Partition0 - ok
16:04:50.0199 2132 Boot (0x1200) (c7cb279b6afc999c49d89218312df7a9) \Device\Harddisk0\DR0\Partition1
16:04:50.0211 2132 \Device\Harddisk0\DR0\Partition1 - ok
16:04:50.0233 2132 Boot (0x1200) (093e8993d9f893cf81c4d0a3a4d13e5b) \Device\Harddisk0\DR0\Partition2
16:04:50.0256 2132 \Device\Harddisk0\DR0\Partition2 - ok
16:04:50.0257 2132 ============================================================
16:04:50.0257 2132 Scan finished
16:04:50.0257 2132 ============================================================
16:04:50.0265 3740 Detected object count: 0
16:04:50.0265 3740 Actual detected object count: 0
16:05:16.0737 3312 ============================================================
16:05:16.0737 3312 Scan started
16:05:16.0737 3312 Mode: Manual;
16:05:16.0737 3312 ============================================================
16:05:17.0089 3312 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:05:17.0090 3312 1394ohci - ok
16:05:17.0140 3312 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:05:17.0141 3312 ACPI - ok
16:05:17.0168 3312 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:05:17.0168 3312 AcpiPmi - ok
16:05:17.0210 3312 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:05:17.0212 3312 adp94xx - ok
16:05:17.0238 3312 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:05:17.0240 3312 adpahci - ok
16:05:17.0265 3312 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:05:17.0267 3312 adpu320 - ok
16:05:17.0326 3312 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
16:05:17.0328 3312 AFD - ok
16:05:17.0368 3312 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:05:17.0369 3312 agp440 - ok
16:05:17.0418 3312 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:05:17.0419 3312 aliide - ok
16:05:17.0441 3312 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:05:17.0442 3312 amdide - ok
16:05:17.0464 3312 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
16:05:17.0465 3312 amdiox64 - ok
16:05:17.0493 3312 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:05:17.0494 3312 AmdK8 - ok
16:05:17.0744 3312 amdkmdag (0415ffe1b6a6ea141feafca57567f57f) C:\Windows\system32\DRIVERS\atikmdag.sys
16:05:17.0792 3312 amdkmdag - ok
16:05:17.0872 3312 amdkmdap (dc24d6f38f17c0d643d9aa8a6852f8d0) C:\Windows\system32\DRIVERS\atikmpag.sys
16:05:17.0873 3312 amdkmdap - ok
16:05:17.0915 3312 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:05:17.0915 3312 AmdPPM - ok
16:05:17.0947 3312 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:05:17.0947 3312 amdsata - ok
16:05:17.0973 3312 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:05:17.0974 3312 amdsbs - ok
16:05:18.0005 3312 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:05:18.0005 3312 amdxata - ok
16:05:18.0049 3312 amd_sata (bb4fe7889db9cbbe61a308e99697f53c) C:\Windows\system32\DRIVERS\amd_sata.sys
16:05:18.0050 3312 amd_sata - ok
16:05:18.0093 3312 amd_xata (5631cba53f1cbea3f9e88348e6723391) C:\Windows\system32\DRIVERS\amd_xata.sys
16:05:18.0094 3312 amd_xata - ok
16:05:18.0196 3312 AODDriver4.01 (f312fad7dbd49ed21a194ac71b497832) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
16:05:18.0196 3312 AODDriver4.01 - ok
16:05:18.0291 3312 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:05:18.0291 3312 AppID - ok
16:05:18.0348 3312 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:05:18.0349 3312 arc - ok
16:05:18.0375 3312 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:05:18.0376 3312 arcsas - ok
16:05:18.0395 3312 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:05:18.0395 3312 AsyncMac - ok
16:05:18.0429 3312 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:05:18.0430 3312 atapi - ok
16:05:18.0468 3312 AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
16:05:18.0470 3312 AtiHDAudioService - ok
16:05:18.0686 3312 atikmdag (0415ffe1b6a6ea141feafca57567f57f) C:\Windows\system32\drivers\atikmdag.sys
16:05:18.0735 3312 atikmdag - ok
16:05:18.0847 3312 AtiPcie (e82e61f46d1336447f4deff8c074f13e) C:\Windows\system32\DRIVERS\AtiPcie64.sys
16:05:18.0847 3312 AtiPcie - ok
16:05:18.0896 3312 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:05:18.0899 3312 b06bdrv - ok
16:05:18.0939 3312 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:05:18.0941 3312 b57nd60a - ok
16:05:18.0966 3312 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:05:18.0966 3312 Beep - ok
16:05:19.0187 3312 BHDrvx64 (82c695630676079f7ad68c85a5e662e5) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20111114.002\BHDrvx64.sys
16:05:19.0193 3312 BHDrvx64 - ok
16:05:19.0270 3312 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:05:19.0271 3312 blbdrive - ok
16:05:19.0305 3312 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:05:19.0306 3312 bowser - ok
16:05:19.0330 3312 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:05:19.0330 3312 BrFiltLo - ok
16:05:19.0356 3312 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:05:19.0357 3312 BrFiltUp - ok
16:05:19.0379 3312 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:05:19.0381 3312 Brserid - ok
16:05:19.0413 3312 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:05:19.0414 3312 BrSerWdm - ok
16:05:19.0433 3312 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:05:19.0433 3312 BrUsbMdm - ok
16:05:19.0455 3312 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:05:19.0456 3312 BrUsbSer - ok
16:05:19.0481 3312 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:05:19.0482 3312 BTHMODEM - ok
16:05:19.0539 3312 ccSet_NIS (a8ad33c9dd88c810cac00acc7f4329fb) C:\Windows\system32\drivers\NISx64\1302000.00A\ccSetx64.sys
16:05:19.0540 3312 ccSet_NIS - ok
16:05:19.0561 3312 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:05:19.0562 3312 cdfs - ok
16:05:19.0614 3312 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
16:05:19.0615 3312 cdrom - ok
16:05:19.0665 3312 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:05:19.0666 3312 circlass - ok
16:05:19.0707 3312 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:05:19.0709 3312 CLFS - ok
16:05:19.0756 3312 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:05:19.0756 3312 CmBatt - ok
16:05:19.0800 3312 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:05:19.0800 3312 cmdide - ok
16:05:19.0842 3312 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
16:05:19.0845 3312 CNG - ok
16:05:19.0871 3312 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:05:19.0872 3312 Compbatt - ok
16:05:19.0915 3312 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:05:19.0915 3312 CompositeBus - ok
16:05:19.0933 3312 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:05:19.0934 3312 crcdisk - ok
16:05:19.0974 3312 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
16:05:19.0977 3312 CSC - ok
16:05:20.0033 3312 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:05:20.0034 3312 DfsC - ok
16:05:20.0077 3312 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:05:20.0078 3312 discache - ok
16:05:20.0094 3312 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:05:20.0095 3312 Disk - ok
16:05:20.0123 3312 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:05:20.0124 3312 drmkaud - ok
16:05:20.0173 3312 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:05:20.0178 3312 DXGKrnl - ok
16:05:20.0277 3312 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:05:20.0293 3312 ebdrv - ok
16:05:20.0369 3312 eeCtrl (5ccf1be80930aeb1cdebf561666325e8) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
16:05:20.0378 3312 eeCtrl - ok
16:05:20.0480 3312 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:05:20.0487 3312 elxstor - ok
16:05:20.0542 3312 EraserUtilRebootDrv (7a898e4a744621711be7e7b796c69876) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
16:05:20.0544 3312 EraserUtilRebootDrv - ok
16:05:20.0649 3312 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:05:20.0651 3312 ErrDev - ok
16:05:20.0697 3312 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:05:20.0707 3312 exfat - ok
16:05:20.0721 3312 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:05:20.0724 3312 fastfat - ok
16:05:20.0743 3312 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:05:20.0748 3312 fdc - ok
16:05:20.0772 3312 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:05:20.0783 3312 FileInfo - ok
16:05:20.0802 3312 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:05:20.0804 3312 Filetrace - ok
16:05:20.0830 3312 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:05:20.0841 3312 flpydisk - ok
16:05:20.0875 3312 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:05:20.0879 3312 FltMgr - ok
16:05:20.0898 3312 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:05:20.0906 3312 FsDepends - ok
16:05:20.0926 3312 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:05:20.0932 3312 Fs_Rec - ok
16:05:20.0976 3312 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:05:20.0999 3312 fvevol - ok
16:05:21.0066 3312 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:05:21.0073 3312 gagp30kx - ok
16:05:21.0108 3312 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:05:21.0111 3312 hcw85cir - ok
16:05:21.0142 3312 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:05:21.0158 3312 HdAudAddService - ok
16:05:21.0179 3312 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:05:21.0182 3312 HDAudBus - ok
16:05:21.0216 3312 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:05:21.0223 3312 HidBatt - ok
16:05:21.0252 3312 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:05:21.0263 3312 HidBth - ok
16:05:21.0284 3312 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:05:21.0290 3312 HidIr - ok
16:05:21.0330 3312 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
16:05:21.0340 3312 HidUsb - ok
16:05:21.0413 3312 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:05:21.0426 3312 HpSAMD - ok
16:05:21.0485 3312 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:05:21.0496 3312 HTTP - ok
16:05:21.0558 3312 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:05:21.0572 3312 hwpolicy - ok
16:05:21.0635 3312 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:05:21.0637 3312 i8042prt - ok
16:05:21.0709 3312 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:05:21.0716 3312 iaStorV - ok
16:05:21.0917 3312 IDSVia64 (0b97f1a640ad3d159a7b5d2164c42e50) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20111117.030\IDSvia64.sys
16:05:21.0933 3312 IDSVia64 - ok
16:05:22.0078 3312 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:05:22.0089 3312 iirsp - ok
16:05:22.0195 3312 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:05:22.0205 3312 intelide - ok
16:05:22.0256 3312 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:05:22.0258 3312 intelppm - ok
16:05:22.0321 3312 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:05:22.0329 3312 IpFilterDriver - ok
16:05:22.0378 3312 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:05:22.0404 3312 IPMIDRV - ok
16:05:22.0496 3312 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:05:22.0503 3312 IPNAT - ok
16:05:22.0577 3312 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:05:22.0579 3312 IRENUM - ok
16:05:22.0616 3312 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:05:22.0629 3312 isapnp - ok
16:05:22.0670 3312 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:05:22.0674 3312 iScsiPrt - ok
16:05:22.0698 3312 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:05:22.0710 3312 kbdclass - ok
16:05:22.0750 3312 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:05:22.0760 3312 kbdhid - ok
16:05:22.0815 3312 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
16:05:22.0817 3312 KSecDD - ok
16:05:22.0868 3312 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
16:05:22.0874 3312 KSecPkg - ok
16:05:22.0906 3312 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:05:22.0917 3312 ksthunk - ok
16:05:23.0006 3312 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:05:23.0010 3312 lltdio - ok
16:05:23.0061 3312 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:05:23.0073 3312 LSI_FC - ok
16:05:23.0084 3312 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:05:23.0088 3312 LSI_SAS - ok
16:05:23.0128 3312 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:05:23.0139 3312 LSI_SAS2 - ok
16:05:23.0173 3312 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:05:23.0176 3312 LSI_SCSI - ok
16:05:23.0193 3312 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:05:23.0201 3312 luafv - ok
16:05:23.0235 3312 MBAMProtector (de5d0dd632ee6977979799de64ce0951) C:\Windows\system32\drivers\mbam.sys
16:05:23.0237 3312 MBAMProtector - ok
16:05:23.0279 3312 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:05:23.0288 3312 megasas - ok
16:05:23.0305 3312 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:05:23.0311 3312 MegaSR - ok
16:05:23.0380 3312 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:05:23.0381 3312 Modem - ok
16:05:23.0403 3312 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:05:23.0405 3312 monitor - ok
16:05:23.0431 3312 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
16:05:23.0440 3312 mouclass - ok
16:05:23.0465 3312 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:05:23.0473 3312 mouhid - ok
16:05:23.0510 3312 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:05:23.0521 3312 mountmgr - ok
16:05:23.0584 3312 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:05:23.0586 3312 mpio - ok
16:05:23.0638 3312 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:05:23.0646 3312 mpsdrv - ok
16:05:23.0752 3312 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:05:23.0754 3312 MRxDAV - ok
16:05:23.0778 3312 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:05:23.0789 3312 mrxsmb - ok
16:05:23.0867 3312 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:05:23.0908 3312 mrxsmb10 - ok
16:05:23.0915 3312 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:05:23.0920 3312 mrxsmb20 - ok
16:05:23.0967 3312 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:05:23.0968 3312 msahci - ok
16:05:24.0005 3312 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:05:24.0012 3312 msdsm - ok
16:05:24.0050 3312 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:05:24.0058 3312 Msfs - ok
16:05:24.0088 3312 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:05:24.0090 3312 mshidkmdf - ok
16:05:24.0125 3312 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:05:24.0132 3312 msisadrv - ok
16:05:24.0176 3312 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:05:24.0178 3312 MSKSSRV - ok
16:05:24.0188 3312 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:05:24.0199 3312 MSPCLOCK - ok
16:05:24.0206 3312 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:05:24.0208 3312 MSPQM - ok
16:05:24.0252 3312 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:05:24.0262 3312 MsRPC - ok
16:05:24.0432 3312 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:05:24.0434 3312 mssmbios - ok
16:05:24.0465 3312 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:05:24.0475 3312 MSTEE - ok
16:05:24.0502 3312 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:05:24.0511 3312 MTConfig - ok
16:05:24.0530 3312 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:05:24.0535 3312 Mup - ok
16:05:24.0570 3312 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:05:24.0574 3312 NativeWifiP - ok
16:05:24.0721 3312 NAVENG (2dbe90210de76be6e1653bb20ec70ec2) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20111117.036\ENG64.SYS
16:05:24.0733 3312 NAVENG - ok
16:05:24.0814 3312 NAVEX15 (346da70e203b8e2c850277713de8f71b) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20111117.036\EX64.SYS
16:05:24.0840 3312 NAVEX15 - ok
16:05:24.0942 3312 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:05:24.0951 3312 NDIS - ok
16:05:24.0992 3312 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:05:24.0993 3312 NdisCap - ok
16:05:25.0017 3312 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:05:25.0025 3312 NdisTapi - ok
16:05:25.0064 3312 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:05:25.0075 3312 Ndisuio - ok
16:05:25.0083 3312 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:05:25.0085 3312 NdisWan - ok
16:05:25.0133 3312 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:05:25.0135 3312 NDProxy - ok
16:05:25.0169 3312 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:05:25.0175 3312 NetBIOS - ok
16:05:25.0211 3312 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:05:25.0223 3312 NetBT - ok
16:05:25.0249 3312 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:05:25.0255 3312 nfrd960 - ok
16:05:25.0286 3312 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:05:25.0287 3312 Npfs - ok
16:05:25.0296 3312 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:05:25.0297 3312 nsiproxy - ok
16:05:25.0378 3312 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:05:25.0408 3312 Ntfs - ok
16:05:25.0435 3312 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:05:25.0440 3312 Null - ok
16:05:25.0481 3312 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:05:25.0488 3312 nvraid - ok
16:05:25.0528 3312 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:05:25.0534 3312 nvstor - ok
16:05:25.0570 3312 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:05:25.0577 3312 nv_agp - ok
16:05:25.0617 3312 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:05:25.0628 3312 ohci1394 - ok
16:05:25.0708 3312 P17 (66a2c70da35e8559982ee9d205329e1a) C:\Windows\system32\drivers\P17.sys
16:05:25.0720 3312 P17 - ok
16:05:25.0767 3312 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:05:25.0772 3312 Parport - ok
16:05:25.0806 3312 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:05:25.0814 3312 partmgr - ok
16:05:25.0859 3312 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:05:25.0863 3312 pci - ok
16:05:25.0877 3312 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:05:25.0878 3312 pciide - ok
16:05:25.0921 3312 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:05:25.0931 3312 pcmcia - ok
16:05:25.0960 3312 PCTCore (bf907ec8c6783e861246c8060e788334) C:\Windows\system32\drivers\PCTCore64.sys
16:05:25.0971 3312 PCTCore - ok
16:05:26.0003 3312 pctDS (ff43e3b1687e4e2140de6349ea5c7372) C:\Windows\system32\drivers\pctDS64.sys
16:05:26.0011 3312 pctDS - ok
16:05:26.0054 3312 pctEFA (60e9a05852af7e9cb11237c00aee4ccf) C:\Windows\system32\drivers\pctEFA64.sys
16:05:26.0066 3312 pctEFA - ok
16:05:26.0109 3312 PCTSD (dea3e7a33e268d4f1fbb4516c784646b) C:\Windows\system32\Drivers\PCTSD64.sys
16:05:26.0113 3312 PCTSD - ok
16:05:26.0135 3312 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:05:26.0144 3312 pcw - ok
16:05:26.0167 3312 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:05:26.0177 3312 PEAUTH - ok
16:05:26.0245 3312 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:05:26.0250 3312 PptpMiniport - ok
16:05:26.0279 3312 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:05:26.0290 3312 Processor - ok
16:05:26.0336 3312 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:05:26.0347 3312 Psched - ok
16:05:26.0418 3312 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:05:26.0432 3312 ql2300 - ok
16:05:26.0443 3312 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:05:26.0453 3312 ql40xx - ok
16:05:26.0487 3312 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:05:26.0488 3312 QWAVEdrv - ok
16:05:26.0510 3312 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:05:26.0521 3312 RasAcd - ok
16:05:26.0576 3312 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:05:26.0584 3312 RasAgileVpn - ok
16:05:26.0624 3312 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:05:26.0626 3312 Rasl2tp - ok
16:05:26.0661 3312 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:05:26.0663 3312 RasPppoe - ok
16:05:26.0687 3312 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:05:26.0693 3312 RasSstp - ok
16:05:26.0728 3312 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:05:26.0737 3312 rdbss - ok
16:05:26.0775 3312 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:05:26.0784 3312 rdpbus - ok
16:05:26.0803 3312 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:05:26.0810 3312 RDPCDD - ok
16:05:26.0843 3312 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
16:05:26.0849 3312 RDPDR - ok
16:05:26.0886 3312 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:05:26.0888 3312 RDPENCDD - ok
16:05:26.0911 3312 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:05:26.0912 3312 RDPREFMP - ok
16:05:26.0950 3312 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
16:05:26.0962 3312 RdpVideoMiniport - ok
16:05:27.0001 3312 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
16:05:27.0011 3312 RDPWD - ok
16:05:27.0069 3312 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:05:27.0076 3312 rdyboost - ok
16:05:27.0120 3312 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:05:27.0132 3312 rspndr - ok
16:05:27.0165 3312 RTL8167 (abcb5a38a0d85bdf69b7877e1ad1eed5) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:05:27.0168 3312 RTL8167 - ok
16:05:27.0190 3312 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
16:05:27.0191 3312 s3cap - ok
16:05:27.0221 3312 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:05:27.0226 3312 sbp2port - ok
16:05:27.0263 3312 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:05:27.0268 3312 scfilter - ok
16:05:27.0310 3312 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:05:27.0321 3312 secdrv - ok
16:05:27.0346 3312 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:05:27.0358 3312 Serenum - ok
16:05:27.0377 3312 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:05:27.0387 3312 Serial - ok
16:05:27.0419 3312 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:05:27.0426 3312 sermouse - ok
16:05:27.0479 3312 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:05:27.0480 3312 sffdisk - ok
16:05:27.0496 3312 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:05:27.0497 3312 sffp_mmc - ok
16:05:27.0526 3312 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:05:27.0535 3312 sffp_sd - ok
16:05:27.0562 3312 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:05:27.0567 3312 sfloppy - ok
16:05:27.0588 3312 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:05:27.0599 3312 SiSRaid2 - ok
16:05:27.0616 3312 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:05:27.0624 3312 SiSRaid4 - ok
16:05:27.0656 3312 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:05:27.0665 3312 Smb - ok
16:05:27.0676 3312 SMR210 - ok
16:05:27.0726 3312 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:05:27.0735 3312 spldr - ok
16:05:27.0824 3312 SRTSP (1321a6c3c92bbd3f3bbe1292cff8e91a) C:\Windows\System32\Drivers\NISx64\1302000.00A\SRTSP64.SYS
16:05:27.0840 3312 SRTSP - ok
16:05:27.0884 3312 SRTSPX (bd129c22c3b8c2e584227269dfa77b09) C:\Windows\system32\drivers\NISx64\1302000.00A\SRTSPX64.SYS
16:05:27.0892 3312 SRTSPX - ok
16:05:27.0924 3312 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:05:27.0929 3312 srv - ok
16:05:27.0960 3312 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:05:27.0972 3312 srv2 - ok
16:05:28.0024 3312 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:05:28.0029 3312 srvnet - ok
16:05:28.0083 3312 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:05:28.0084 3312 stexstor - ok
16:05:28.0134 3312 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
16:05:28.0136 3312 storflt - ok
16:05:28.0170 3312 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
16:05:28.0177 3312 storvsc - ok
16:05:28.0228 3312 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:05:28.0235 3312 swenum - ok
16:05:28.0303 3312 SymDS (8b2430762099598da40686f754632efd) C:\Windows\system32\drivers\NISx64\1302000.00A\SYMDS64.SYS
16:05:28.0310 3312 SymDS - ok
16:05:28.0382 3312 SymEFA (d89a88ad71e12f963b1f436a0e91dcbf) C:\Windows\system32\drivers\NISx64\1302000.00A\SYMEFA64.SYS
16:05:28.0395 3312 SymEFA - ok
16:05:28.0459 3312 SymEvent (36b77f5c9e21f88a8c8ec67ad5415819) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
16:05:28.0462 3312 SymEvent - ok
16:05:28.0516 3312 SymIRON (dd70da422460fded831d211df151d560) C:\Windows\system32\drivers\NISx64\1302000.00A\Ironx64.SYS
16:05:28.0518 3312 SymIRON - ok
16:05:28.0559 3312 SymNetS (bce4eb2eef05e388959b46fd21388c2d) C:\Windows\System32\Drivers\NISx64\1302000.00A\SYMNETS.SYS
16:05:28.0567 3312 SymNetS - ok
16:05:28.0595 3312 Synth3dVsc - ok
16:05:28.0689 3312 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
16:05:28.0718 3312 Tcpip - ok
16:05:28.0839 3312 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
16:05:28.0848 3312 TCPIP6 - ok
16:05:28.0963 3312 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:05:28.0969 3312 tcpipreg - ok
16:05:29.0069 3312 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:05:29.0081 3312 TDPIPE - ok
16:05:29.0122 3312 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
16:05:29.0132 3312 TDTCP - ok
16:05:29.0160 3312 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:05:29.0166 3312 tdx - ok
16:05:29.0201 3312 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
16:05:29.0211 3312 TermDD - ok
16:05:29.0271 3312 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:05:29.0273 3312 tssecsrv - ok
16:05:29.0316 3312 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:05:29.0324 3312 TsUsbFlt - ok
16:05:29.0353 3312 tsusbhub - ok
16:05:29.0429 3312 TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys
16:05:29.0436 3312 TuneUpUtilitiesDrv - ok
16:05:29.0507 3312 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:05:29.0516 3312 tunnel - ok
16:05:29.0574 3312 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:05:29.0584 3312 uagp35 - ok
16:05:29.0756 3312 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:05:29.0768 3312 udfs - ok
16:05:29.0924 3312 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:05:29.0939 3312 uliagpkx - ok
16:05:30.0053 3312 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
16:05:30.0057 3312 umbus - ok
16:05:30.0104 3312 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:05:30.0122 3312 UmPass - ok
16:05:30.0238 3312 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\drivers\usbccgp.sys
16:05:30.0251 3312 usbccgp - ok
16:05:30.0325 3312 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:05:30.0332 3312 usbcir - ok
16:05:30.0366 3312 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:05:30.0371 3312 usbehci - ok
16:05:30.0420 3312 usbfilter (573d192e268f0c5b486b7e96f661e538) C:\Windows\system32\DRIVERS\usbfilter.sys
16:05:30.0427 3312 usbfilter - ok
16:05:30.0455 3312 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:05:30.0465 3312 usbhub - ok
16:05:30.0504 3312 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
16:05:30.0514 3312 usbohci - ok
16:05:30.0569 3312 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:05:30.0574 3312 usbprint - ok
16:05:30.0619 3312 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:05:30.0627 3312 USBSTOR - ok
16:05:30.0672 3312 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
16:05:30.0678 3312 usbuhci - ok
16:05:30.0727 3312 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:05:30.0732 3312 vdrvroot - ok
16:05:30.0764 3312 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:05:30.0766 3312 vga - ok
16:05:30.0788 3312 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:05:30.0796 3312 VgaSave - ok
16:05:30.0804 3312 VGPU - ok
16:05:30.0824 3312 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:05:30.0828 3312 vhdmp - ok
16:05:30.0872 3312 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:05:30.0880 3312 viaide - ok
16:05:30.0928 3312 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
16:05:30.0938 3312 vmbus - ok
16:05:30.0953 3312 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
16:05:30.0964 3312 VMBusHID - ok
16:05:30.0974 3312 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:05:30.0977 3312 volmgr - ok
16:05:31.0002 3312 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:05:31.0014 3312 volmgrx - ok
16:05:31.0083 3312 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:05:31.0090 3312 volsnap - ok
16:05:31.0147 3312 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:05:31.0157 3312 vsmraid - ok
16:05:31.0194 3312 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
16:05:31.0199 3312 vwifibus - ok
16:05:31.0261 3312 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:05:31.0263 3312 WacomPen - ok
16:05:31.0307 3312 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:05:31.0314 3312 WANARP - ok
16:05:31.0317 3312 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:05:31.0319 3312 Wanarpv6 - ok
16:05:31.0360 3312 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:05:31.0361 3312 Wd - ok
16:05:31.0379 3312 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:05:31.0387 3312 Wdf01000 - ok
16:05:31.0437 3312 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:05:31.0448 3312 WfpLwf - ok
16:05:31.0478 3312 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:05:31.0479 3312 WIMMount - ok
16:05:31.0519 3312 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:05:31.0520 3312 WmiAcpi - ok
16:05:31.0543 3312 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:05:31.0545 3312 ws2ifsl - ok
16:05:31.0578 3312 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:05:31.0580 3312 WudfPf - ok
16:05:31.0597 3312 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:05:31.0600 3312 WUDFRd - ok
16:05:31.0615 3312 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16:05:31.0620 3312 \Device\Harddisk0\DR0 - ok
16:05:31.0622 3312 Boot (0x1200) (6f121858b8c1ef296aa14aeafc642c79) \Device\Harddisk0\DR0\Partition0
16:05:31.0623 3312 \Device\Harddisk0\DR0\Partition0 - ok
16:05:31.0635 3312 Boot (0x1200) (c7cb279b6afc999c49d89218312df7a9) \Device\Harddisk0\DR0\Partition1
16:05:31.0637 3312 \Device\Harddisk0\DR0\Partition1 - ok
16:05:31.0660 3312 Boot (0x1200) (093e8993d9f893cf81c4d0a3a4d13e5b) \Device\Harddisk0\DR0\Partition2
16:05:31.0662 3312 \Device\Harddisk0\DR0\Partition2 - ok
16:05:31.0662 3312 ============================================================
16:05:31.0662 3312 Scan finished
16:05:31.0662 3312 ============================================================
16:05:31.0669 3668 Detected object count: 0
16:05:31.0669 3668 Actual detected object count: 0
16:05:38.0008 2140 Deinitialize success

Re: pro Motji,

Napsal: 18 lis 2011 16:17
od motji
Fajn, co počítač?
Otestujte na www.virustotal.com
c:\windows\SysWow64\userinit.exe (dáte reanalyze a načtete ten Váš soubor z pc)

Re: pro Motji,

Napsal: 18 lis 2011 16:19
od ponte
no myslim že zatial je to v pohode len je zvlaštne že ten combofix my po druhom skene ten userinit už nedekoval ako infikovane

Re: pro Motji,

Napsal: 18 lis 2011 16:23
od ponte
takže na virus total je to bez infikovania čiže nič nenašlo.

Re: pro Motji,

Napsal: 18 lis 2011 16:24
od motji
Protože ho úpřitom prvním spuštěním opravil, ale ten první sken se Vám regulérně neukončil. Proto také brblu, děláte mi v tom zmatek, že nevidím pořádně logy :)
-- Previous Run --
.
Infected copy of c:\windows\SysWow64\userinit.exe was found and disinfected
Restored copy from - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
Otestujte ten userinit a vložte sem link k výsledku, zda je už čistý :)
.

Re: pro Motji,

Napsal: 18 lis 2011 16:31
od ponte

Re: pro Motji,

Napsal: 18 lis 2011 16:33
od ponte
to ano to mate pravdu mal som radšej najprv počkat na Vas a pak postupne sme to maly asi delat takže sa ospravedlnujem za zmatek

Re: pro Motji,

Napsal: 18 lis 2011 16:43
od motji
Hlavně ten první sken mohl něco smazat, ale já se už nedovím co....
Vypadá to dobře. Ještě pro jistotu zkontrolujte pc s mbam. Budu tu až večer :)

:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

:arrow: Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT :!:
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Re: pro Motji,

Napsal: 18 lis 2011 16:51
od ponte
Takže ten T-Cleaner my nieco vyhadzuje zatial vam moc pekne dekuji

Re: pro Motji,

Napsal: 18 lis 2011 17:41
od ponte
Takže všetko hore som urobyl ako bolo napisane aj ten sken MBAM som urobil tu je vipis respektive log

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verzia databázy: 8187

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

18. 11. 2011 17:39:17
mbam-log-2011-11-18 (17-39-17).txt

Typ kontroly: Úplná kontrola (C:\|)
Objektov kontrolovaných: 302542
Uplynutý čas: 22 min, 46 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

Re: pro Motji,

Napsal: 18 lis 2011 19:37
od motji
Poprosím o log ze rsitu, viz můj podpis.