VIRY.CZ

Opakovaně vyskakují okna s hlášením o viru z Avastu, po kliknutí na smazat, nahlasí, že se nepodařilo smazat.
Děkuji za radu.
Přikládám log z rsit:

EDIT: Teď to například hlásí: Win32/Agent.SUC.Gen trojský kůň

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marta at 2012-02-03 14:10:25
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 49 GB (41%) free of 119 GB
Total RAM: 2937 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:15:07, on 3.2.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe
C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\ThpSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\TOSHIBA\3GUty\tw3gctrl.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\TOSHIBA\TOSHIBA Wireless Manager\WirelessManager.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\YouSendIt\Express\YouSendIt.exe
C:\Program Files\Infineon\Security Platform Software\PSDrt.exe
C:\Program Files\Infineon\Security Platform Software\SpTna.exe
C:\Program Files\Windows Live\Mesh\WLSync.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Windows Live\Mesh\MOE.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe
C:\Windows\explorer.exe
C:\Windows\system32\taskhost.exe
C:\Users\NB\Downloads\RSIT.exe
C:\Program Files\trend micro\Marta.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O1 - Hosts: 188.119.151.113 http://www.google-analytics.com.
O1 - Hosts: 188.119.151.113 ad-emea.doubleclick.net.
O1 - Hosts: 188.119.151.113 http://www.statcounter.com.
O1 - Hosts: 69.72.252.254 http://www.google-analytics.com.
O1 - Hosts: 69.72.252.254 ad-emea.doubleclick.net.
O1 - Hosts: 69.72.252.254 http://www.statcounter.com.
O2 - BHO: BHOHOOK - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\TFPU\TFPUPWDBankBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TFPUPWDBankService] C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe /start
O4 - HKLM\..\Run: [TFPUService] C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe /start
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [IFXSPMGT] "C:\Program Files\Infineon\Security Platform Software\ifxspmgt.exe" /NotifyLogon
O4 - HKLM\..\Run: [ThpSrv] C:\Windows\system32\thpsrv /logon
O4 - HKLM\..\Run: [TOSDCR] %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TOSHIBA_3G_UTY] C:\Program Files\Toshiba\3GUty\TW3GCTRL.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [WirelessManager] C:\Program Files\TOSHIBA\TOSHIBA Wireless Manager\WirelessManager.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [YouSendIt.exe] C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none
O4 - HKCU\..\Run: [Google Update] "C:\Users\NB\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [NVIDIA driver monitor] C:\Users\Public\nvsvc32.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WLSync] "C:\Program Files\Windows Live\Mesh\WLSync.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} (Active602XMLFiller Control) - https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader2.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Program Files\Infineon\Security Platform Software\ifxspmgt.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Program Files\Infineon\Security Platform Software\ifxtcs.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Program Files\Infineon\Security Platform Software\IfxPsdSv.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ochrana HDD TOSHIBA (Thpsrv) - TOSHIBA Corporation - C:\Windows\system32\ThpSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA Touch Pad Service (TTPDSrv) - TOSHIBA Corporation - C:\Windows\System32\TTPDSRV.exe
O23 - Service: 3G RF Power Control Utility (TW3GSVC) - TOSHIBA CORPORATION - C:\Program Files\Toshiba\3GUty\tw3gsvc.exe
O23 - Service: Mobile Broadband Service (WMCoreService) - Ericsson AB - C:\Program Files\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe
O23 - Service: WTouch Service (WTouchService) - Wacom Technology, Corp. - C:\Program Files\WTouch\WTouchService.exe

--
End of file - 12766 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9}]
TFPUPWDBankBHO Class - C:\Program Files\TOSHIBA\TFPU\TFPUPWDBankBHO.dll [2009-09-15 45488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2011-05-13 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-15 342128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-15 342128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-02 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-02 174104]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-02 151064]
"TFPUPWDBankService"=C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe [2009-09-15 888752]
"TFPUService"=C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe [2009-09-15 784304]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2009-07-22 83336]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-07-28 7625248]
"IFXSPMGT"=C:\Program Files\Infineon\Security Platform Software\ifxspmgt.exe [2009-08-04 1107232]
"ThpSrv"=C:\Windows\system32\thpsrv /logon []
"TOSDCR"=C:\Program Files\TOSHIBA\PasswordUtility\TOSDCR.exe [2007-08-28 169296]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2009-11-05 480608]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2009-03-09 55160]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 521528]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2009-11-10 738616]
"Camera Assistant Software"=C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [2009-07-27 424496]
"TOSHIBA_3G_UTY"=C:\Program Files\Toshiba\3GUty\TW3GCTRL.exe [2010-05-27 1592264]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-04-07 2145000]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-01-03 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WirelessManager"=C:\Program Files\TOSHIBA\TOSHIBA Wireless Manager\WirelessManager.exe [2010-05-11 190504]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-06-21 39408]
"YouSendIt.exe"=C:\Program Files\YouSendIt\Express\YouSendIt.exe [2011-05-02 198144]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-27 217088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-04-28 203776]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-02-03 09:49:52 ----D---- C:\Program Files\CCleaner
2012-02-03 09:34:13 ----SHD---- C:\$RECYCLE.BIN
2012-02-03 09:23:21 ----D---- C:\Windows\ERDNT
2012-02-03 09:07:05 ----D---- C:\Program Files\trend micro
2012-02-03 09:07:04 ----D---- C:\rsit
2012-02-03 07:31:13 ----D---- C:\Program Files\Common Files\Java
2012-02-03 07:30:55 ----A---- C:\Windows\system32\javaws.exe
2012-02-03 07:30:55 ----A---- C:\Windows\system32\javaw.exe
2012-02-03 07:30:55 ----A---- C:\Windows\system32\java.exe
2012-02-02 22:03:29 ----A---- C:\Windows\UC.PIF
2012-02-02 22:03:29 ----A---- C:\Windows\RAR.PIF
2012-02-02 22:03:29 ----A---- C:\Windows\NOCLOSE.PIF
2012-02-02 22:03:29 ----A---- C:\Windows\LHA.PIF
2012-02-02 22:03:29 ----A---- C:\Windows\ARJ.PIF
2012-02-02 22:03:28 ----D---- C:\Users\NB\AppData\Roaming\GHISLER
2012-02-02 22:03:28 ----D---- C:\totalcmd
2012-01-25 18:50:08 ----A---- C:\Windows\system32\webio.dll
2012-01-25 18:50:08 ----A---- C:\Windows\system32\schannel.dll
2012-01-25 18:50:08 ----A---- C:\Windows\system32\lsass.exe
2012-01-25 18:50:08 ----A---- C:\Windows\system32\lsasrv.dll
2012-01-25 18:50:08 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-01-25 18:50:08 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-01-25 18:50:08 ----A---- C:\Windows\system32\drivers\cng.sys
2012-01-25 18:50:07 ----A---- C:\Windows\system32\sspisrv.dll
2012-01-25 18:50:07 ----A---- C:\Windows\system32\sspicli.dll
2012-01-25 18:50:07 ----A---- C:\Windows\system32\secur32.dll
2012-01-20 15:03:08 ----D---- C:\Users\NB\AppData\Roaming\Malwarebytes
2012-01-20 15:03:00 ----D---- C:\ProgramData\Malwarebytes
2012-01-20 15:02:58 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-01-20 15:02:58 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-01-20 13:22:17 ----SHD---- C:\Users\NB\AppData\Roaming\Internet Security Guard
2012-01-20 13:22:17 ----SHD---- C:\ProgramData\ISJXDYHG
2012-01-20 13:21:56 ----SHD---- C:\ProgramData\f48c58
2012-01-15 15:16:41 ----D---- C:\Program Files\MSECache
2012-01-15 15:05:39 ----D---- C:\Windows\cs
2012-01-15 15:04:17 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2012-01-15 15:02:49 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2012-01-15 15:00:07 ----D---- C:\Program Files\Windows Live
2012-01-15 14:58:43 ----D---- C:\Program Files\Microsoft
2012-01-15 14:58:41 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-01-15 14:58:41 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-01-15 14:58:40 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-01-15 14:58:18 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-01-15 14:57:21 ----D---- C:\Program Files\Microsoft Silverlight
2012-01-15 14:55:19 ----D---- C:\Program Files\Common Files\Windows Live
2012-01-11 13:27:17 ----A---- C:\Windows\system32\ntdll.dll
2012-01-11 13:27:15 ----A---- C:\Windows\system32\packager.dll
2012-01-11 13:27:14 ----A---- C:\Windows\system32\quartz.dll
2012-01-11 13:27:13 ----A---- C:\Windows\system32\qdvd.dll

======List of files/folders modified in the last 1 month======

2012-02-03 14:10:26 ----D---- C:\Windows\Temp
2012-02-03 14:05:06 ----D---- C:\Users\NB\AppData\Roaming\Skype
2012-02-03 14:04:16 ----D---- C:\Windows\system32\config
2012-02-03 13:59:49 ----D---- C:\Windows\inf
2012-02-03 13:59:40 ----D---- C:\Windows\tracing
2012-02-03 13:59:36 ----D---- C:\Windows
2012-02-03 10:06:04 ----D---- C:\Windows\Panther
2012-02-03 10:06:04 ----D---- C:\Windows\ModemLogs
2012-02-03 10:06:03 ----D---- C:\Windows\Minidump
2012-02-03 10:06:03 ----D---- C:\Windows\Logs
2012-02-03 10:06:03 ----D---- C:\Windows\debug
2012-02-03 09:49:52 ----RD---- C:\Program Files
2012-02-03 09:36:36 ----SHD---- C:\System Volume Information
2012-02-03 09:32:12 ----A---- C:\Windows\system.ini
2012-02-03 09:32:06 ----D---- C:\Windows\system32\drivers\etc
2012-02-03 09:28:53 ----D---- C:\Windows\system32\drivers
2012-02-03 09:28:53 ----D---- C:\Windows\System32
2012-02-03 09:28:53 ----D---- C:\Windows\AppPatch
2012-02-03 09:28:52 ----D---- C:\Program Files\Common Files
2012-02-03 07:31:13 ----SHD---- C:\Windows\Installer
2012-02-03 07:31:13 ----D---- C:\Config.Msi
2012-02-03 07:30:54 ----D---- C:\Program Files\Java
2012-02-02 22:03:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-01 10:13:50 ----D---- C:\Windows\Prefetch
2012-02-01 10:08:43 ----D---- C:\Users\NB\AppData\Roaming\gtk-2.0
2012-01-31 17:22:39 ----D---- C:\Windows\system32\FxsTmp
2012-01-31 17:07:17 ----SD---- C:\ProgramData\Microsoft
2012-01-30 10:16:33 ----D---- C:\Users\NB\AppData\Roaming\602Installer
2012-01-27 00:21:24 ----N---- C:\Windows\system32\MpSigStub.exe
2012-01-26 10:31:50 ----D---- C:\Windows\winsxs
2012-01-26 08:52:01 ----D---- C:\Windows\system32\catroot2
2012-01-25 18:49:02 ----D---- C:\Windows\system32\catroot
2012-01-23 13:08:09 ----D---- C:\Windows\system32\NDF
2012-01-20 21:42:50 ----D---- C:\Windows\AppCompat
2012-01-20 15:03:00 ----D---- C:\ProgramData
2012-01-20 14:56:35 ----D---- C:\Windows\system32\Tasks
2012-01-20 14:55:13 ----D---- C:\Windows\system32\appmgmt
2012-01-20 14:54:07 ----D---- C:\Program Files\Family Toolbar
2012-01-20 14:47:17 ----D---- C:\Users\NB\AppData\Roaming\TeamViewer
2012-01-20 10:12:10 ----D---- C:\Windows\Tasks
2012-01-20 10:12:10 ----D---- C:\Windows\system32\wfp
2012-01-20 10:12:10 ----D---- C:\Windows\system32\wbem
2012-01-20 10:12:10 ----D---- C:\Windows\system32\DriverStore
2012-01-20 10:12:10 ----D---- C:\Windows\system32\CodeIntegrity
2012-01-20 10:11:49 ----D---- C:\Windows\registration
2012-01-20 10:11:18 ----RD---- C:\MSOCache
2012-01-15 15:59:40 ----D---- C:\Windows\Microsoft.NET
2012-01-15 15:58:36 ----RSD---- C:\Windows\assembly
2012-01-15 15:39:25 ----SD---- C:\Users\NB\AppData\Roaming\Microsoft
2012-01-15 15:04:17 ----DC---- C:\Windows\system32\DRVSTORE
2012-01-15 14:59:57 ----D---- C:\Program Files\Common Files\microsoft shared
2012-01-13 10:03:52 ----D---- C:\Program Files\Common Files\Adobe
2012-01-13 10:03:51 ----D---- C:\ProgramData\Adobe
2012-01-13 10:03:49 ----D---- C:\Program Files\Adobe
2012-01-11 18:22:31 ----A---- C:\Windows\system32\MRT.exe
2012-01-11 18:22:23 ----D---- C:\Windows\ehome
2012-01-11 18:22:18 ----D---- C:\ProgramData\Microsoft Help
2012-01-05 10:03:55 ----A---- C:\Windows\win.ini
2012-01-05 10:03:54 ----D---- C:\Program Files\Common Files\System

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 330264]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\Windows\system32\DRIVERS\thpdrv.sys [2009-06-29 30272]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\Windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 13120]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ.SYS [2009-07-14 23512]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 PersonalSecureDrive;PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [2009-07-19 39712]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2009-07-28 69480]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-04-07 96896]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-06-25 48128]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-06-25 44544]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2009-06-25 38400]
R3 AgereSoftModem;TOSHIBA V.92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-21 1161760]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-09-14 659328]
R3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R); C:\Windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
R3 ecnssndis;Service for enabling selective suspend to NDIS device; C:\Windows\System32\Drivers\wwanuss.sys [2010-03-03 23592]
R3 ecnssndisfltr;SSNDIS filter service; C:\Windows\System32\Drivers\wwanussf.sys [2010-03-03 26152]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2010-06-17 40832]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-08-27 5946368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-07-28 2735504]
R3 Mbm3CBus;TOSHIBA Mobile Broadband Device (WDM); C:\Windows\system32\DRIVERS\Mbm3CBus.sys [2010-04-27 329160]
R3 Mbm3DevMt;TOSHIBA Mobile Broadband Device Management Driver (WDM); C:\Windows\system32\DRIVERS\Mbm3DevMt.sys [2010-04-27 388552]
R3 Mbm3mdfl;TOSHIBA Mobile Broadband Modem Filter; C:\Windows\system32\DRIVERS\Mbm3mdfl.sys [2010-04-27 14920]
R3 Mbm3Mdm;TOSHIBA Mobile Broadband Modem Driver; C:\Windows\system32\DRIVERS\Mbm3Mdm.sys [2010-04-27 405320]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 t36wgps;TOSHIBA Mobile Broadband GPS Port; C:\Windows\system32\DRIVERS\t36wgps.sys [2010-01-25 82984]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2009-06-17 46984]
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2010-04-07 171240]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2009-07-13 15216]
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 79872]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2010-04-08 50936]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2009-04-10 17960]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 WacomVTHid;Virtual Touch Driver; C:\Windows\system32\DRIVERS\WacomVTHid.sys [2008-07-09 13992]
R3 wisdpen;Wacom Penabled MiniDriver; C:\Windows\system32\DRIVERS\wisdpen.sys [2008-03-27 30888]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\NB\AppData\Local\Temp\catchme.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 16384]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 10752]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2011-05-13 39272]
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [2009-08-10 89600]
S3 HPFXBULK;HPFXBULK; C:\Windows\system32\drivers\hpfxbulk.sys [2007-07-06 9344]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2011-08-17 137472]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2011-08-17 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2009-06-19 42472]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 21608]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2010-03-23 53760]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-03-14 84520]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-03-27 14336]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\AtService.exe [2009-09-11 1811704]
R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [2009-08-10 185712]
R2 ConfigFree Service;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-04-07 810120]
R2 IFXSpMgtSrv;Security Platform Management Service; C:\Program Files\Infineon\Security Platform Software\ifxspmgt.exe [2009-08-04 1107232]
R2 IFXTCS;Trusted Platform Core Service; C:\Program Files\Infineon\Security Platform Software\ifxtcs.exe [2009-07-19 984352]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 PersonalSecureDriveService;Personal Secure Drive Service; C:\Program Files\Infineon\Security Platform Software\IfxPsdSv.exe [2009-07-19 214304]
R2 Thpsrv;Ochrana HDD TOSHIBA; C:\Windows\system32\ThpSrv.exe [2009-08-24 575552]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2009-11-05 468320]
R2 TTPDSrv;TOSHIBA Touch Pad Service; C:\Windows\System32\TTPDSRV.exe [2007-11-07 73728]
R2 TW3GSVC;3G RF Power Control Utility; C:\Program Files\Toshiba\3GUty\tw3gsvc.exe [2009-12-18 127384]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 WMCoreService;Mobile Broadband Service; C:\Program Files\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe [2010-04-28 462888]
R3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2010-04-12 152944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-04-07 33560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-06-21 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-18 1343400]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Dopsal jsem to ještě do původního příspěvku - teď to hlásí Win32/Agent.SUC.Gen trojský kůň.

Díky.

Pardon a díky za reakci

Přikládám protokol z Avastu, napište si co by se ještě hodilo.

Kroky z minulého příspěvku provedu a napíšu, díky.

Takže dnešní protokol z Avastu:
3.2.2012 14:59:00 Rezidentní ochrana soubor C:\WINDOWS\SYSTEM32\DRIVERS\WDF01000.SYS Win32/Agent.SUC.Gen trojský kůň chyba při mazání NT AUTHORITY\SYSTEM Tato skutečnost byla zjištěna při pokusu o přístup k souboru aplikací: C:\Windows\System32\svchost.exe.

Report z MBRscanu:

Kód: Vybrat vše

MBRScan v1.0.8

OS             : Windows 7 Service Pack 1 (32 bit)
PROCESSOR      : x86 Family 6 Model 23 Stepping 6, GenuineIntel
BOOT           : Normal Boot
DATE           : 2012/02/03 (ISO 8601) at 15:21:16
________________________________________________________________________________

DISK           : Device\Harddisk0\DR0 __Hitachi HTS543225L9S (FBEO)
BUS_TYPE       : (0x03)  P-ATA
USE_PIO        : NO
MAX_TRANSFER   : 128 Kb
ALIGNMENT_MASK : word aligned
________________________________________________________________________________

DISK           : Device\Harddisk1\DR1 __2500BEV External (1.04)
BUS_TYPE       : (0x07)  USB
USE_PIO        : NO
MAX_TRANSFER   : 64 Kb
ALIGNMENT_MASK : byte aligned
________________________________________________________________________________

Device\Harddisk0\DR0	232.9 Go  [Fixed] ==> 7 MBR Code

MBR_MD5   : C3606FAB37AD74E65AD27DA8B4204AD3
MBR_SHA1  : A6BC783E3F15DAF90DC54E9E03F29832325EDFC3

Device\Harddisk0\Partition1	1.46 Go  	0x27 RE Hidden partition 
Device\Harddisk0\Partition2	116.4 Go  	0x07 NTFS / HPFS __ BOOTABLE __
Device\Harddisk0\Partition3	115.0 Go  	0x07 NTFS / HPFS
________________________________________________________________________________

Device\Harddisk1\DR1	232.9 Go  [Fixed] ==> Vista MBR Code ....

MBR_MD5   : 267ABDF7F6CAD6A8F4683B6CFC3C527B
MBR_SHA1  : 8D95AB33C3A2DF7E4C7DB797694ECCF6236E894A

Device\Harddisk1\Partition1	232.9 Go  	0x07 NTFS / HPFS __ BOOTABLE __
________________________________________________________________________________


_______MBR   \Device\Harddisk0\DR0  

0x00000000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00   3À.Ð¼.|.À.Ø¾.|¿.
0x00000010   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00   .¹..üó¤Ph..Ëû¹..
0x00000020   BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10   ½¾..~..|......Å.
0x00000030   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00   âñÍ..V.UÆF..ÆF..
0x00000040   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09   ´A»ªUÍ.]r..ûUªu.
0x00000050   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74   ÷Á..t.þF.f`.~..t
0x00000060   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00   &fh....f.v.h..h.
0x00000070   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13   |h..h..´B.V..ôÍ.
0x00000080   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00   ..Ä..ë.¸..».|.V.
0x00000090   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE   .v..N..n.Í.fas.þ
0x000000A0   4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84   N.u..~......².ë.
0x000000B0   55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55   U2ä.V.Í.]ë..>þ}U
0x000000C0   AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64   ªun.v.è..u.ú°Ñæd
0x000000D0   E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75   è..°ßæ`è|.°.ædèu
0x000000E0   00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54   .û¸.»Í.f#Àu;f.ûT
0x000000F0   43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00   CPAu2.ù..r,fh.».
0x00000100   00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66   .fh....fh....fSf
0x00000110   53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66   SfUfh....fh.|..f
0x00000120   61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD   ah...Í.Z2öê.|..Í
0x00000130   18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4   ..·.ë..¶.ë..µ.2ä
0x00000140   05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD   ....ð¬<.t.»..´.Í
0x00000150   10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8   .ëòôëý+Éädë.$.àø
0x00000160   24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69   $.ÃInvalid parti
0x00000170   74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72   tion table.Error
0x00000180   20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69    loading operati
0x00000190   6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E   ng system.Missin
0x000001A0   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74   g operating syst
0x000001B0   65 6D 00 00 00 63 7B 9A B2 FE D8 16 00 00 00 20   em...c{.²þØ.... 
0x000001C0   21 00 27 59 1A BF 00 08 00 00 00 E0 2E 00 80 59   !.'Y.¿.....à...Y
0x000001D0   1B BF 07 FE FF FF 00 E8 2E 00 00 20 8E 0E 00 FE   .¿.þ...è... ...þ
0x000001E0   FF FF 07 FE FF FF 00 08 BD 0E 00 50 5F 0E 00 00   ...þ....½..P_...
0x000001F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA   ..............Uª

__________________________16_BIT_ASM_CODE
   
0x0000    33c0            XOR AX, AX   
0x0002    8ed0            MOV SS, AX   
0x0004    bc 007c         MOV SP, 0x7c00   
0x0007    8ec0            MOV ES, AX   
0x0009    8ed8            MOV DS, AX   
0x000B    be 007c         MOV SI, 0x7c00   
0x000E    bf 0006         MOV DI, 0x600   
0x0011    b9 0002         MOV CX, 0x200   
0x0014    fc              CLD   
0x0015    f3 a4           REP MOVSB   
0x0017    50              PUSH AX   
0x0018    68 1c06         PUSH 0x61c   
0x001B    cb              RETF   
0x001C    fb              STI   
0x001D    b9 0400         MOV CX, 0x4   
0x0020    bd be07         MOV BP, 0x7be   
0x0023    807e 00 00      CMP BYTE [BP+0x0], 0x0   
0x0027    7c 0b           JL 0x34   
0x0029    0f85 0e01       JNZ 0x13b   
0x002D    83c5 10         ADD BP, 0x10   
0x0030    e2 f1           LOOP 0x23   
0x0032    cd 18           INT 0x18   
0x0034    8856 00         MOV [BP+0x0], DL   
0x0037    55              PUSH BP   
0x0038    c646 11 05      MOV BYTE [BP+0x11], 0x5   
0x003C    c646 10 00      MOV BYTE [BP+0x10], 0x0   
0x0040    b4 41           MOV AH, 0x41   
0x0042    bb aa55         MOV BX, 0x55aa   
0x0045    cd 13           INT 0x13   
0x0047    5d              POP BP   
0x0048    72 0f           JB 0x59   
0x004A    81fb 55aa       CMP BX, 0xaa55   
0x004E    75 09           JNZ 0x59   
0x0050    f7c1 0100       TEST CX, 0x1   
0x0054    74 03           JZ 0x59   
0x0056    fe46 10         INC BYTE [BP+0x10]   
0x0059    66 60           PUSHAD   
0x005B    807e 10 00      CMP BYTE [BP+0x10], 0x0   
0x005F    74 26           JZ 0x87   
0x0061    66 68 00000000  PUSH 0x0   
0x0067    66 ff76 08      PUSH DWORD [BP+0x8]   
0x006B    68 0000         PUSH 0x0   
0x006E    68 007c         PUSH 0x7c00   
0x0071    68 0100         PUSH 0x1   
0x0074    68 1000         PUSH 0x10   
0x0077    b4 42           MOV AH, 0x42   
0x0079    8a56 00         MOV DL, [BP+0x0]   
0x007C    8bf4            MOV SI, SP   
0x007E    cd 13           INT 0x13   
0x0080    9f              LAHF   
0x0081    83c4 10         ADD SP, 0x10   
0x0084    9e              SAHF   
0x0085    eb 14           JMP 0x9b   
0x0087    b8 0102         MOV AX, 0x201   
0x008A    bb 007c         MOV BX, 0x7c00   
0x008D    8a56 00         MOV DL, [BP+0x0]   
0x0090    8a76 01         MOV DH, [BP+0x1]   
0x0093    8a4e 02         MOV CL, [BP+0x2]   
0x0096    8a6e 03         MOV CH, [BP+0x3]   
0x0099    cd 13           INT 0x13   
0x009B    66 61           POPAD   
0x009D    73 1c           JAE 0xbb   
0x009F    fe4e 11         DEC BYTE [BP+0x11]   
0x00A2    75 0c           JNZ 0xb0   
0x00A4    807e 00 80      CMP BYTE [BP+0x0], 0x80   
0x00A8    0f84 8a00       JZ 0x136   
0x00AC    b2 80           MOV DL, 0x80   
0x00AE    eb 84           JMP 0x34   
0x00B0    55              PUSH BP   
0x00B1    32e4            XOR AH, AH   
0x00B3    8a56 00         MOV DL, [BP+0x0]   
0x00B6    cd 13           INT 0x13   
0x00B8    5d              POP BP   
0x00B9    eb 9e           JMP 0x59   
0x00BB    813e fe7d 55aa  CMP WORD [0x7dfe], 0xaa55   
0x00C1    75 6e           JNZ 0x131   
0x00C3    ff76 00         PUSH WORD [BP+0x0]   
0x00C6    e8 8d00         CALL 0x156   
0x00C9    75 17           JNZ 0xe2   
0x00CB    fa              CLI   
0x00CC    b0 d1           MOV AL, 0xd1   
0x00CE    e6 64           OUT 0x64, AL   
0x00D0    e8 8300         CALL 0x156   
0x00D3    b0 df           MOV AL, 0xdf   
0x00D5    e6 60           OUT 0x60, AL   
0x00D7    e8 7c00         CALL 0x156   
0x00DA    b0 ff           MOV AL, 0xff   
0x00DC    e6 64           OUT 0x64, AL   
0x00DE    e8 7500         CALL 0x156   
0x00E1    fb              STI   
0x00E2    b8 00bb         MOV AX, 0xbb00   
0x00E5    cd 1a           INT 0x1a   
0x00E7    66 23c0         AND EAX, EAX   
0x00EA    75 3b           JNZ 0x127   
0x00EC    66 81fb 54435041CMP EBX, 0x41504354   
0x00F3    75 32           JNZ 0x127   
0x00F5    81f9 0201       CMP CX, 0x102   
0x00F9    72 2c           JB 0x127   
0x00FB    66 68 07bb0000  PUSH 0xbb07   
0x0101    66 68 00020000  PUSH 0x200   
0x0107    66 68 08000000  PUSH 0x8   
0x010D    66 53           PUSH EBX   
0x010F    66 53           PUSH EBX   
0x0111    66 55           PUSH EBP   
0x0113    66 68 00000000  PUSH 0x0   
0x0119    66 68 007c0000  PUSH 0x7c00   
0x011F    66 61           POPAD   
0x0121    68 0000         PUSH 0x0   
0x0124    07              POP ES   
0x0125    cd 1a           INT 0x1a   
0x0127    5a              POP DX   
0x0128    32f6            XOR DH, DH   
0x012A    ea 007c 0000    JMP FAR 0x0:0x7c00   
0x012F    cd 18           INT 0x18   
0x0131    a0 b707         MOV AL, [0x7b7]   
0x0134    eb 08           JMP 0x13e   
0x0136    a0 b607         MOV AL, [0x7b6]   
0x0139    eb 03           JMP 0x13e   
0x013B    a0 b507         MOV AL, [0x7b5]   
0x013E    32e4            XOR AH, AH   
0x0140    05 0007         ADD AX, 0x700   
0x0143    8bf0            MOV SI, AX   
0x0145    ac              LODSB   
0x0146    3c 00           CMP AL, 0x0   
0x0148    74 09           JZ 0x153   
0x014A    bb 0700         MOV BX, 0x7   
0x014D    b4 0e           MOV AH, 0xe   
0x014F    cd 10           INT 0x10   
0x0151    eb f2           JMP 0x145   
0x0153    f4              HLT   
0x0154    eb fd           JMP 0x153   
0x0156    2bc9            SUB CX, CX   
0x0158    e4 64           IN AL, 0x64   
0x015A    eb 00           JMP 0x15c   
0x015C    24 02           AND AL, 0x2   
0x015E    e0 f8           LOOPNZ 0x158   
0x0160    24 02           AND AL, 0x2   
0x0162    c3              RET   
0x0163    49              DEC CX   
0x0164    6e              OUTSB   
0x0165    76 61           JBE 0x1c8   
0x0167    6c              INSB   
0x0168    6964 20 7061    IMUL SP, [SI+0x20], 0x6170   
0x016D    72 74           JB 0x1e3   
0x016F    6974 69 6f6e    IMUL SI, [SI+0x69], 0x6e6f   
0x0174    2074 61         AND [SI+0x61], DH   
0x0177    626c 65         BOUND BP, [SI+0x65]   
0x017A    0045 72         ADD [DI+0x72], AL   
0x017D    72 6f           JB 0x1ee   
0x017F    72 20           JB 0x1a1   
0x0181    6c              INSB   
0x0182    6f              OUTSW   
0x0183    61              POPA   
0x0184    64 696e 67 206f IMUL BP, FS:[BP+0x67], 0x6f20   
0x018A    70 65           JO 0x1f1   
0x018C    72 61           JB 0x1ef   
0x018E    74 69           JZ 0x1f9   
0x0190    6e              OUTSB   
0x0191    67 2073 79      AND [EBX+0x79], DH   
0x0195    73 74           JAE 0x20b   
0x0197    65 6d           INS WORD GS:[DI], DX   
0x0199    004d 69         ADD [DI+0x69], CL   
0x019C    73 73           JAE 0x211   
0x019E    696e 67 206f    IMUL BP, [BP+0x67], 0x6f20   
0x01A3    70 65           JO 0x20a   
0x01A5    72 61           JB 0x208   
0x01A7    74 69           JZ 0x212   
0x01A9    6e              OUTSB   
0x01AA    67 2073 79      AND [EBX+0x79], DH   
0x01AE    73 74           JAE 0x224   
0x01B0    65 6d           INS WORD GS:[DI], DX   
0x01B2    0000            ADD [BX+SI], AL   
0x01B4    0063 7b         ADD [BP+DI+0x7b], AH   
0x01B7    9a b2fe d816    CALL FAR 0x16d8:0xfeb2   
0x01BC    0000            ADD [BX+SI], AL   
0x01BE    0020            ADD [BX+SI], AH   
0x01C0    2100            AND [BX+SI], AX   
0x01C2    27              DAA   
0x01C3    59              POP CX   
0x01C4    1abf 0008       SBB BH, [BX+0x800]   
0x01C8    0000            ADD [BX+SI], AL   
0x01CA    00e0            ADD AL, AH   
0x01CC    2e 0080 591b    ADD CS:[BX+SI+0x1b59], AL   
0x01D1    bf 07fe         MOV DI, 0xfe07   
0x01D4    ff              DB 0xff   
0x01D5    ff00            INC WORD [BX+SI]   
0x01D7    e8 2e00         CALL 0x208   
0x01DA    0020            ADD [BX+SI], AH   
0x01DC    8e              DB 0x8e   
0x01DD    0e              PUSH CS   
0x01DE    00fe            ADD DH, BH   
0x01E0    ff              DB 0xff   
0x01E1    ff07            INC WORD [BX]   
0x01E3    fe              DB 0xfe   
0x01E4    ff              DB 0xff   
0x01E5    ff00            INC WORD [BX+SI]   
0x01E7    08bd 0e00       OR [DI+0xe], BH   
0x01EB    50              PUSH AX   
0x01EC    5f              POP DI   
0x01ED    0e              PUSH CS   
0x01EE    0000            ADD [BX+SI], AL   
0x01F0    0000            ADD [BX+SI], AL   
0x01F2    0000            ADD [BX+SI], AL   
0x01F4    0000            ADD [BX+SI], AL   
0x01F6    0000            ADD [BX+SI], AL   
0x01F8    0000            ADD [BX+SI], AL   
0x01FA    0000            ADD [BX+SI], AL   
0x01FC    0000            ADD [BX+SI], AL   
0x01FE    55              PUSH BP   
0x01FF    aa              STOSB   


_______MBR   \Device\Harddisk1\DR1  

0x00000000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00   3À.Ð¼.|.À.Ø¾.|¿.
0x00000010   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00   .¹..üó¤Ph..Ëû¹..
0x00000020   BD BE 07 80 7E 00 00 7C 0B 0F 85 10 01 83 C5 10   ½¾..~..|......Å.
0x00000030   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00   âñÍ..V.UÆF..ÆF..
0x00000040   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09   ´A»ªUÍ.]r..ûUªu.
0x00000050   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74   ÷Á..t.þF.f`.~..t
0x00000060   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00   &fh....f.v.h..h.
0x00000070   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13   |h..h..´B.V..ôÍ.
0x00000080   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00   ..Ä..ë.¸..».|.V.
0x00000090   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1E FE   .v..N..n.Í.fas.þ
0x000000A0   4E 11 0F 85 0C 00 80 7E 00 80 0F 84 8A 00 B2 80   N......~......².
0x000000B0   EB 82 55 32 E4 8A 56 00 CD 13 5D EB 9C 81 3E FE   ë.U2ä.V.Í.]ë..>þ
0x000000C0   7D 55 AA 75 6E FF 76 00 E8 8A 00 0F 85 15 00 B0   }Uªun.v.è......°
0x000000D0   D1 E6 64 E8 7F 00 B0 DF E6 60 E8 78 00 B0 FF E6   Ñædè..°ßæ`èx.°.æ
0x000000E0   64 E8 71 00 B8 00 BB CD 1A 66 23 C0 75 3B 66 81   dèq.¸.»Í.f#Àu;f.
0x000000F0   FB 54 43 50 41 75 32 81 F9 02 01 72 2C 66 68 07   ûTCPAu2.ù..r,fh.
0x00000100   BB 00 00 66 68 00 02 00 00 66 68 08 00 00 00 66   »..fh....fh....f
0x00000110   53 66 53 66 55 66 68 00 00 00 00 66 68 00 7C 00   SfSfUfh....fh.|.
0x00000120   00 66 61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00   .fah...Í.Z2öê.|.
0x00000130   00 CD 18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07   .Í..·.ë..¶.ë..µ.
0x00000140   32 E4 05 00 07 8B F0 AC 3C 00 74 FC BB 07 00 B4   2ä....ð¬<.tü»..´
0x00000150   0E CD 10 EB F2 2B C9 E4 64 EB 00 24 02 E0 F8 24   .Í.ëò+Éädë.$.àø$
0x00000160   02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69 74   .ÃInvalid partit
0x00000170   69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72 20   ion table.Error 
0x00000180   6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69 6E   loading operatin
0x00000190   67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E 67   g system.Missing
0x000001A0   20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 65    operating syste
0x000001B0   6D 00 00 00 00 62 7A 99 EC 3E 95 94 00 00 80 20   m....bz.ì>..... 
0x000001C0   21 00 07 FE FF FF 00 08 00 00 00 48 1C 1D 00 00   !..þ.......H....
0x000001D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x000001E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x000001F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA   ..............Uª

__________________________16_BIT_ASM_CODE
   
0x0000    33c0            XOR AX, AX   
0x0002    8ed0            MOV SS, AX   
0x0004    bc 007c         MOV SP, 0x7c00   
0x0007    8ec0            MOV ES, AX   
0x0009    8ed8            MOV DS, AX   
0x000B    be 007c         MOV SI, 0x7c00   
0x000E    bf 0006         MOV DI, 0x600   
0x0011    b9 0002         MOV CX, 0x200   
0x0014    fc              CLD   
0x0015    f3 a4           REP MOVSB   
0x0017    50              PUSH AX   
0x0018    68 1c06         PUSH 0x61c   
0x001B    cb              RETF   
0x001C    fb              STI   
0x001D    b9 0400         MOV CX, 0x4   
0x0020    bd be07         MOV BP, 0x7be   
0x0023    807e 00 00      CMP BYTE [BP+0x0], 0x0   
0x0027    7c 0b           JL 0x34   
0x0029    0f85 1001       JNZ 0x13d   
0x002D    83c5 10         ADD BP, 0x10   
0x0030    e2 f1           LOOP 0x23   
0x0032    cd 18           INT 0x18   
0x0034    8856 00         MOV [BP+0x0], DL   
0x0037    55              PUSH BP   
0x0038    c646 11 05      MOV BYTE [BP+0x11], 0x5   
0x003C    c646 10 00      MOV BYTE [BP+0x10], 0x0   
0x0040    b4 41           MOV AH, 0x41   
0x0042    bb aa55         MOV BX, 0x55aa   
0x0045    cd 13           INT 0x13   
0x0047    5d              POP BP   
0x0048    72 0f           JB 0x59   
0x004A    81fb 55aa       CMP BX, 0xaa55   
0x004E    75 09           JNZ 0x59   
0x0050    f7c1 0100       TEST CX, 0x1   
0x0054    74 03           JZ 0x59   
0x0056    fe46 10         INC BYTE [BP+0x10]   
0x0059    66 60           PUSHAD   
0x005B    807e 10 00      CMP BYTE [BP+0x10], 0x0   
0x005F    74 26           JZ 0x87   
0x0061    66 68 00000000  PUSH 0x0   
0x0067    66 ff76 08      PUSH DWORD [BP+0x8]   
0x006B    68 0000         PUSH 0x0   
0x006E    68 007c         PUSH 0x7c00   
0x0071    68 0100         PUSH 0x1   
0x0074    68 1000         PUSH 0x10   
0x0077    b4 42           MOV AH, 0x42   
0x0079    8a56 00         MOV DL, [BP+0x0]   
0x007C    8bf4            MOV SI, SP   
0x007E    cd 13           INT 0x13   
0x0080    9f              LAHF   
0x0081    83c4 10         ADD SP, 0x10   
0x0084    9e              SAHF   
0x0085    eb 14           JMP 0x9b   
0x0087    b8 0102         MOV AX, 0x201   
0x008A    bb 007c         MOV BX, 0x7c00   
0x008D    8a56 00         MOV DL, [BP+0x0]   
0x0090    8a76 01         MOV DH, [BP+0x1]   
0x0093    8a4e 02         MOV CL, [BP+0x2]   
0x0096    8a6e 03         MOV CH, [BP+0x3]   
0x0099    cd 13           INT 0x13   
0x009B    66 61           POPAD   
0x009D    73 1e           JAE 0xbd   
0x009F    fe4e 11         DEC BYTE [BP+0x11]   
0x00A2    0f85 0c00       JNZ 0xb2   
0x00A6    807e 00 80      CMP BYTE [BP+0x0], 0x80   
0x00AA    0f84 8a00       JZ 0x138   
0x00AE    b2 80           MOV DL, 0x80   
0x00B0    eb 82           JMP 0x34   
0x00B2    55              PUSH BP   
0x00B3    32e4            XOR AH, AH   
0x00B5    8a56 00         MOV DL, [BP+0x0]   
0x00B8    cd 13           INT 0x13   
0x00BA    5d              POP BP   
0x00BB    eb 9c           JMP 0x59   
0x00BD    813e fe7d 55aa  CMP WORD [0x7dfe], 0xaa55   
0x00C3    75 6e           JNZ 0x133   
0x00C5    ff76 00         PUSH WORD [BP+0x0]   
0x00C8    e8 8a00         CALL 0x155   
0x00CB    0f85 1500       JNZ 0xe4   
0x00CF    b0 d1           MOV AL, 0xd1   
0x00D1    e6 64           OUT 0x64, AL   
0x00D3    e8 7f00         CALL 0x155   
0x00D6    b0 df           MOV AL, 0xdf   
0x00D8    e6 60           OUT 0x60, AL   
0x00DA    e8 7800         CALL 0x155   
0x00DD    b0 ff           MOV AL, 0xff   
0x00DF    e6 64           OUT 0x64, AL   
0x00E1    e8 7100         CALL 0x155   
0x00E4    b8 00bb         MOV AX, 0xbb00   
0x00E7    cd 1a           INT 0x1a   
0x00E9    66 23c0         AND EAX, EAX   
0x00EC    75 3b           JNZ 0x129   
0x00EE    66 81fb 54435041CMP EBX, 0x41504354   
0x00F5    75 32           JNZ 0x129   
0x00F7    81f9 0201       CMP CX, 0x102   
0x00FB    72 2c           JB 0x129   
0x00FD    66 68 07bb0000  PUSH 0xbb07   
0x0103    66 68 00020000  PUSH 0x200   
0x0109    66 68 08000000  PUSH 0x8   
0x010F    66 53           PUSH EBX   
0x0111    66 53           PUSH EBX   
0x0113    66 55           PUSH EBP   
0x0115    66 68 00000000  PUSH 0x0   
0x011B    66 68 007c0000  PUSH 0x7c00   
0x0121    66 61           POPAD   
0x0123    68 0000         PUSH 0x0   
0x0126    07              POP ES   
0x0127    cd 1a           INT 0x1a   
0x0129    5a              POP DX   
0x012A    32f6            XOR DH, DH   
0x012C    ea 007c 0000    JMP FAR 0x0:0x7c00   
0x0131    cd 18           INT 0x18   
0x0133    a0 b707         MOV AL, [0x7b7]   
0x0136    eb 08           JMP 0x140   
0x0138    a0 b607         MOV AL, [0x7b6]   
0x013B    eb 03           JMP 0x140   
0x013D    a0 b507         MOV AL, [0x7b5]   
0x0140    32e4            XOR AH, AH   
0x0142    05 0007         ADD AX, 0x700   
0x0145    8bf0            MOV SI, AX   
0x0147    ac              LODSB   
0x0148    3c 00           CMP AL, 0x0   
0x014A    74 fc           JZ 0x148   
0x014C    bb 0700         MOV BX, 0x7   
0x014F    b4 0e           MOV AH, 0xe   
0x0151    cd 10           INT 0x10   
0x0153    eb f2           JMP 0x147   
0x0155    2bc9            SUB CX, CX   
0x0157    e4 64           IN AL, 0x64   
0x0159    eb 00           JMP 0x15b   
0x015B    24 02           AND AL, 0x2   
0x015D    e0 f8           LOOPNZ 0x157   
0x015F    24 02           AND AL, 0x2   
0x0161    c3              RET   
0x0162    49              DEC CX   
0x0163    6e              OUTSB   
0x0164    76 61           JBE 0x1c7   
0x0166    6c              INSB   
0x0167    6964 20 7061    IMUL SP, [SI+0x20], 0x6170   
0x016C    72 74           JB 0x1e2   
0x016E    6974 69 6f6e    IMUL SI, [SI+0x69], 0x6e6f   
0x0173    2074 61         AND [SI+0x61], DH   
0x0176    626c 65         BOUND BP, [SI+0x65]   
0x0179    0045 72         ADD [DI+0x72], AL   
0x017C    72 6f           JB 0x1ed   
0x017E    72 20           JB 0x1a0   
0x0180    6c              INSB   
0x0181    6f              OUTSW   
0x0182    61              POPA   
0x0183    64 696e 67 206f IMUL BP, FS:[BP+0x67], 0x6f20   
0x0189    70 65           JO 0x1f0   
0x018B    72 61           JB 0x1ee   
0x018D    74 69           JZ 0x1f8   
0x018F    6e              OUTSB   
0x0190    67 2073 79      AND [EBX+0x79], DH   
0x0194    73 74           JAE 0x20a   
0x0196    65 6d           INS WORD GS:[DI], DX   
0x0198    004d 69         ADD [DI+0x69], CL   
0x019B    73 73           JAE 0x210   
0x019D    696e 67 206f    IMUL BP, [BP+0x67], 0x6f20   
0x01A2    70 65           JO 0x209   
0x01A4    72 61           JB 0x207   
0x01A6    74 69           JZ 0x211   
0x01A8    6e              OUTSB   
0x01A9    67 2073 79      AND [EBX+0x79], DH   
0x01AD    73 74           JAE 0x223   
0x01AF    65 6d           INS WORD GS:[DI], DX   
0x01B1    0000            ADD [BX+SI], AL   
0x01B3    0000            ADD [BX+SI], AL   
0x01B5    627a 99         BOUND DI, [BP+SI-0x67]   
0x01B8    ec              IN AL, DX   
0x01B9    3e              DB 0x3e   
0x01B9    3e 95           XCHG BP, AX   
0x01BB    94              XCHG SP, AX   
0x01BC    0000            ADD [BX+SI], AL   
0x01BE    8020 21         AND BYTE [BX+SI], 0x21   
0x01C1    0007            ADD [BX], AL   
0x01C3    fe              DB 0xfe   
0x01C4    ff              DB 0xff   
0x01C5    ff00            INC WORD [BX+SI]   
0x01C7    0800            OR [BX+SI], AL   
0x01C9    0000            ADD [BX+SI], AL   
0x01CB    48              DEC AX   
0x01CC    1c 1d           SBB AL, 0x1d   
0x01CE    0000            ADD [BX+SI], AL   
0x01D0    0000            ADD [BX+SI], AL   
0x01D2    0000            ADD [BX+SI], AL   
0x01D4    0000            ADD [BX+SI], AL   
0x01D6    0000            ADD [BX+SI], AL   
0x01D8    0000            ADD [BX+SI], AL   
0x01DA    0000            ADD [BX+SI], AL   
0x01DC    0000            ADD [BX+SI], AL   
0x01DE    0000            ADD [BX+SI], AL   
0x01E0    0000            ADD [BX+SI], AL   
0x01E2    0000            ADD [BX+SI], AL   
0x01E4    0000            ADD [BX+SI], AL   
0x01E6    0000            ADD [BX+SI], AL   
0x01E8    0000            ADD [BX+SI], AL   
0x01EA    0000            ADD [BX+SI], AL   
0x01EC    0000            ADD [BX+SI], AL   
0x01EE    0000            ADD [BX+SI], AL   
0x01F0    0000            ADD [BX+SI], AL   
0x01F2    0000            ADD [BX+SI], AL   
0x01F4    0000            ADD [BX+SI], AL   
0x01F6    0000            ADD [BX+SI], AL   
0x01F8    0000            ADD [BX+SI], AL   
0x01FA    0000            ADD [BX+SI], AL   
0x01FC    0000            ADD [BX+SI], AL   
0x01FE    55              PUSH BP   
0x01FF    aa              STOSB

Naughty píše:......Jen poznámečka pod čarou, proč hovoříme o avastu, když v logu RSIT je vidět NOD/eset?

Protože už je pátek

Na svém PC i NB mám avasta, kolegyně tady má NODa.

Log z TDSSKiller:

15:23:56.0186 4176 TDSS rootkit removing tool 2.7.9.0 Feb 1 2012 09:28:49
15:23:56.0436 4176 ============================================================
15:23:56.0436 4176 Current date / time: 2012/02/03 15:23:56.0436
15:23:56.0436 4176 SystemInfo:
15:23:56.0436 4176
15:23:56.0436 4176 OS Version: 6.1.7601 ServicePack: 1.0
15:23:56.0436 4176 Product type: Workstation
15:23:56.0436 4176 ComputerName: NB-NB
15:23:56.0436 4176 UserName: Marta
15:23:56.0436 4176 Windows directory: C:\Windows
15:23:56.0436 4176 System windows directory: C:\Windows
15:23:56.0436 4176 Processor architecture: Intel x86
15:23:56.0436 4176 Number of processors: 2
15:23:56.0436 4176 Page size: 0x1000
15:23:56.0436 4176 Boot type: Normal boot
15:23:56.0436 4176 ============================================================
15:23:57.0949 4176 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
15:23:57.0980 4176 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:23:57.0980 4176 \Device\Harddisk0\DR0:
15:23:57.0980 4176 MBR used
15:23:57.0980 4176 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0xE8E2000
15:23:57.0980 4176 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xEBD0800, BlocksNum 0xE5F5000
15:23:57.0980 4176 \Device\Harddisk1\DR1:
15:23:57.0980 4176 MBR used
15:23:57.0980 4176 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
15:23:58.0121 4176 Initialize success
15:23:58.0121 4176 ============================================================
15:24:12.0083 2212 ============================================================
15:24:12.0083 2212 Scan started
15:24:12.0083 2212 Mode: Manual; SigCheck; TDLFS;
15:24:12.0083 2212 ============================================================
15:24:15.0967 2212 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
15:24:16.0108 2212 1394ohci - ok
15:24:16.0482 2212 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
15:24:16.0513 2212 ACPI - ok
15:24:17.0012 2212 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
15:24:17.0215 2212 AcpiPmi - ok
15:24:17.0808 2212 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
15:24:17.0948 2212 adp94xx - ok
15:24:18.0151 2212 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
15:24:18.0229 2212 adpahci - ok
15:24:18.0853 2212 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
15:24:18.0962 2212 adpu320 - ok
15:24:19.0087 2212 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
15:24:19.0165 2212 AFD - ok
15:24:19.0415 2212 AgereSoftModem (07758c2196a62f207f77556311e7459a) C:\Windows\system32\DRIVERS\AGRSM.sys
15:24:19.0618 2212 AgereSoftModem - ok
15:24:19.0992 2212 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
15:24:20.0023 2212 agp440 - ok
15:24:20.0429 2212 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
15:24:20.0491 2212 aic78xx - ok
15:24:20.0881 2212 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
15:24:20.0912 2212 aliide - ok
15:24:21.0209 2212 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
15:24:21.0256 2212 amdagp - ok
15:24:21.0505 2212 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
15:24:21.0583 2212 amdide - ok
15:24:22.0114 2212 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
15:24:22.0285 2212 AmdK8 - ok
15:24:22.0410 2212 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
15:24:22.0488 2212 AmdPPM - ok
15:24:23.0050 2212 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
15:24:23.0096 2212 amdsata - ok
15:24:23.0502 2212 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
15:24:23.0580 2212 amdsbs - ok
15:24:24.0017 2212 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
15:24:24.0064 2212 amdxata - ok
15:24:24.0376 2212 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
15:24:24.0859 2212 AppID - ok
15:24:25.0249 2212 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
15:24:25.0312 2212 arc - ok
15:24:25.0468 2212 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
15:24:25.0546 2212 arcsas - ok
15:24:25.0842 2212 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
15:24:26.0263 2212 AsyncMac - ok
15:24:26.0606 2212 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
15:24:26.0669 2212 atapi - ok
15:24:27.0308 2212 ATSwpWDF (53ff3096d5d9ae2a75c16703a9819965) C:\Windows\system32\Drivers\ATSwpWDF.sys
15:24:27.0527 2212 ATSwpWDF - ok
15:24:28.0057 2212 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
15:24:28.0307 2212 b06bdrv - ok
15:24:28.0744 2212 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
15:24:28.0837 2212 b57nd60x - ok
15:24:29.0196 2212 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
15:24:29.0321 2212 Beep - ok
15:24:29.0617 2212 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
15:24:29.0742 2212 blbdrive - ok
15:24:29.0929 2212 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
15:24:30.0038 2212 bowser - ok
15:24:30.0460 2212 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:24:30.0569 2212 BrFiltLo - ok
15:24:30.0787 2212 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:24:30.0865 2212 BrFiltUp - ok
15:24:31.0318 2212 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys
15:24:31.0458 2212 BridgeMP - ok
15:24:31.0676 2212 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
15:24:31.0864 2212 Brserid - ok
15:24:32.0113 2212 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
15:24:32.0191 2212 BrSerWdm - ok
15:24:32.0378 2212 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
15:24:32.0488 2212 BrUsbMdm - ok
15:24:32.0800 2212 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
15:24:32.0862 2212 BrUsbSer - ok
15:24:33.0127 2212 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
15:24:33.0221 2212 BTHMODEM - ok
15:24:33.0502 2212 catchme - ok
15:24:34.0001 2212 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
15:24:34.0204 2212 cdfs - ok
15:24:34.0360 2212 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
15:24:34.0453 2212 cdrom - ok
15:24:34.0734 2212 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
15:24:34.0828 2212 circlass - ok
15:24:35.0140 2212 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
15:24:35.0171 2212 CLFS - ok
15:24:35.0545 2212 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
15:24:35.0608 2212 CmBatt - ok
15:24:35.0686 2212 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
15:24:35.0732 2212 cmdide - ok
15:24:36.0138 2212 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
15:24:36.0263 2212 CNG - ok
15:24:36.0575 2212 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
15:24:36.0653 2212 Compbatt - ok
15:24:37.0074 2212 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
15:24:37.0168 2212 CompositeBus - ok
15:24:37.0433 2212 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
15:24:37.0464 2212 crcdisk - ok
15:24:37.0854 2212 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
15:24:38.0057 2212 CSC - ok
15:24:38.0291 2212 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
15:24:38.0400 2212 DfsC - ok
15:24:38.0774 2212 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
15:24:38.0852 2212 discache - ok
15:24:39.0414 2212 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
15:24:39.0461 2212 Disk - ok
15:24:39.0695 2212 Dot4 (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys
15:24:39.0804 2212 Dot4 - ok
15:24:40.0584 2212 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys
15:24:40.0678 2212 Dot4Print - ok
15:24:40.0849 2212 Dot4Scan (9f7de667c505ce6500becdd8e11644d7) C:\Windows\system32\DRIVERS\Dot4Scan.sys
15:24:40.0990 2212 Dot4Scan - ok
15:24:41.0536 2212 dot4usb (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys
15:24:41.0676 2212 dot4usb - ok
15:24:41.0801 2212 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
15:24:41.0926 2212 drmkaud - ok
15:24:42.0472 2212 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
15:24:42.0659 2212 DXGKrnl - ok
15:24:43.0376 2212 e1yexpress (8eef52ad831471e323ee7364a8656d35) C:\Windows\system32\DRIVERS\e1y6032.sys
15:24:43.0501 2212 e1yexpress - ok
15:24:43.0657 2212 eamonm (d78f1c5b7b01df050e011b4fffdb9048) C:\Windows\system32\DRIVERS\eamonm.sys
15:24:43.0720 2212 eamonm - ok
15:24:44.0484 2212 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
15:24:44.0812 2212 ebdrv - ok
15:24:45.0233 2212 ecnssndis (e922bc274fbd736b41020872c8aac390) C:\Windows\system32\Drivers\wwanuss.sys
15:24:45.0326 2212 ecnssndis - ok
15:24:45.0732 2212 ecnssndisfltr (15ca5cd73a30398c89247b3c5e933044) C:\Windows\system32\Drivers\wwanussf.sys
15:24:45.0748 2212 ecnssndisfltr - ok
15:24:46.0106 2212 ehdrv (3c747a0d8ce29720302972ac6ed09733) C:\Windows\system32\DRIVERS\ehdrv.sys
15:24:46.0169 2212 ehdrv - ok
15:24:46.0512 2212 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
15:24:46.0606 2212 elxstor - ok
15:24:47.0042 2212 epfwwfpr (abe850bebbed8d1454937756c2fa0a98) C:\Windows\system32\DRIVERS\epfwwfpr.sys
15:24:47.0136 2212 epfwwfpr - ok
15:24:47.0230 2212 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
15:24:47.0292 2212 ErrDev - ok
15:24:47.0635 2212 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
15:24:47.0760 2212 exfat - ok
15:24:48.0025 2212 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
15:24:48.0103 2212 fastfat - ok
15:24:48.0368 2212 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
15:24:48.0493 2212 fdc - ok
15:24:48.0805 2212 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
15:24:48.0868 2212 FileInfo - ok
15:24:48.0930 2212 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
15:24:49.0133 2212 Filetrace - ok
15:24:49.0273 2212 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
15:24:49.0351 2212 flpydisk - ok
15:24:49.0648 2212 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
15:24:49.0741 2212 FltMgr - ok
15:24:49.0819 2212 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
15:24:49.0897 2212 FsDepends - ok
15:24:50.0272 2212 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys
15:24:50.0334 2212 fssfltr - ok
15:24:50.0771 2212 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
15:24:50.0849 2212 Fs_Rec - ok
15:24:50.0974 2212 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
15:24:51.0020 2212 fvevol - ok
15:24:51.0176 2212 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
15:24:51.0239 2212 gagp30kx - ok
15:24:51.0660 2212 GemCCID (86d3d834d35ebe920d85ffedcef79faf) C:\Windows\system32\Drivers\GemCCID.sys
15:24:51.0832 2212 GemCCID - ok
15:24:52.0222 2212 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
15:24:52.0456 2212 hcw85cir - ok
15:24:52.0846 2212 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
15:24:52.0970 2212 HdAudAddService - ok
15:24:53.0189 2212 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
15:24:53.0236 2212 HDAudBus - ok
15:24:53.0438 2212 HECI (2df64415a28ce036ac6acec7645a996f) C:\Windows\system32\DRIVERS\HECI.sys
15:24:53.0563 2212 HECI - ok
15:24:53.0813 2212 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
15:24:53.0906 2212 HidBatt - ok
15:24:54.0421 2212 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
15:24:54.0499 2212 HidBth - ok
15:24:54.0608 2212 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
15:24:54.0686 2212 HidIr - ok
15:24:55.0076 2212 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
15:24:55.0139 2212 HidUsb - ok
15:24:55.0560 2212 HPFXBULK (9e3944a558ab84853ef985988e23a8a4) C:\Windows\system32\drivers\hpfxbulk.sys
15:24:55.0732 2212 HPFXBULK - ok
15:24:55.0919 2212 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
15:24:55.0981 2212 HpSAMD - ok
15:24:56.0215 2212 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
15:24:56.0262 2212 HTTP - ok
15:24:56.0512 2212 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
15:24:56.0590 2212 hwpolicy - ok
15:24:56.0714 2212 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
15:24:56.0792 2212 i8042prt - ok
15:24:57.0432 2212 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
15:24:57.0494 2212 iaStor - ok
15:24:57.0682 2212 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
15:24:57.0744 2212 iaStorV - ok
15:24:58.0633 2212 igfx (315aaaa2bc9bc778adc0454b3ca8dcce) C:\Windows\system32\DRIVERS\igdkmd32.sys
15:24:59.0101 2212 igfx - ok
15:24:59.0522 2212 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
15:24:59.0585 2212 iirsp - ok
15:24:59.0897 2212 IntcAzAudAddService (e4a2e810cb2607c9c159c0dfb0bd4c88) C:\Windows\system32\drivers\RTKVHDA.sys
15:25:00.0131 2212 IntcAzAudAddService - ok
15:25:00.0349 2212 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
15:25:00.0427 2212 intelide - ok
15:25:00.0614 2212 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
15:25:00.0677 2212 intelppm - ok
15:25:00.0864 2212 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:25:00.0973 2212 IpFilterDriver - ok
15:25:01.0160 2212 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
15:25:01.0270 2212 IPMIDRV - ok
15:25:01.0566 2212 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
15:25:01.0660 2212 IPNAT - ok
15:25:01.0925 2212 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
15:25:02.0143 2212 IRENUM - ok
15:25:02.0362 2212 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
15:25:02.0440 2212 isapnp - ok
15:25:02.0642 2212 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
15:25:02.0736 2212 iScsiPrt - ok
15:25:02.0970 2212 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
15:25:03.0079 2212 kbdclass - ok
15:25:03.0298 2212 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
15:25:03.0360 2212 kbdhid - ok
15:25:03.0438 2212 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
15:25:03.0469 2212 KSecDD - ok
15:25:03.0672 2212 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
15:25:03.0719 2212 KSecPkg - ok
15:25:03.0937 2212 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
15:25:04.0015 2212 lltdio - ok
15:25:04.0343 2212 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
15:25:04.0405 2212 LSI_FC - ok
15:25:04.0639 2212 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
15:25:04.0686 2212 LSI_SAS - ok
15:25:05.0138 2212 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:25:05.0201 2212 LSI_SAS2 - ok
15:25:05.0357 2212 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:25:05.0404 2212 LSI_SCSI - ok
15:25:05.0669 2212 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
15:25:05.0778 2212 luafv - ok
15:25:06.0137 2212 Mbm3CBus (1241acd31435748c2c0466c5f31a3b5c) C:\Windows\system32\DRIVERS\Mbm3CBus.sys
15:25:06.0184 2212 Mbm3CBus - ok
15:25:06.0527 2212 Mbm3DevMt (f03f62d9bf6fc75930a0597824557f7b) C:\Windows\system32\DRIVERS\Mbm3DevMt.sys
15:25:06.0574 2212 Mbm3DevMt - ok
15:25:07.0073 2212 Mbm3mdfl (ccf2afbaa38c4d9f20b9f5f8473071aa) C:\Windows\system32\DRIVERS\Mbm3mdfl.sys
15:25:07.0354 2212 Mbm3mdfl - ok
15:25:07.0993 2212 Mbm3Mdm (d15e93b9cae9f6baf44a47eda692fa57) C:\Windows\system32\DRIVERS\Mbm3Mdm.sys
15:25:08.0477 2212 Mbm3Mdm - ok
15:25:09.0132 2212 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
15:25:09.0304 2212 megasas - ok
15:25:09.0943 2212 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
15:25:10.0349 2212 MegaSR - ok
15:25:10.0879 2212 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
15:25:11.0269 2212 Modem - ok
15:25:11.0831 2212 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
15:25:11.0940 2212 monitor - ok
15:25:12.0564 2212 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
15:25:12.0611 2212 mouclass - ok
15:25:13.0266 2212 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
15:25:13.0406 2212 mouhid - ok
15:25:13.0937 2212 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
15:25:14.0030 2212 mountmgr - ok
15:25:14.0576 2212 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
15:25:14.0810 2212 mpio - ok
15:25:15.0325 2212 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
15:25:15.0606 2212 mpsdrv - ok
15:25:16.0136 2212 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
15:25:17.0821 2212 MRxDAV - ok
15:25:18.0305 2212 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:25:19.0069 2212 mrxsmb - ok
15:25:19.0646 2212 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:25:20.0052 2212 mrxsmb10 - ok
15:25:20.0614 2212 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:25:21.0019 2212 mrxsmb20 - ok
15:25:21.0596 2212 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
15:25:21.0830 2212 msahci - ok
15:25:22.0408 2212 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
15:25:22.0501 2212 msdsm - ok
15:25:23.0094 2212 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
15:25:23.0266 2212 Msfs - ok
15:25:23.0812 2212 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
15:25:24.0202 2212 mshidkmdf - ok
15:25:24.0748 2212 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
15:25:24.0826 2212 msisadrv - ok
15:25:25.0496 2212 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
15:25:25.0730 2212 MSKSSRV - ok
15:25:26.0401 2212 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
15:25:26.0542 2212 MSPCLOCK - ok
15:25:27.0103 2212 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
15:25:27.0259 2212 MSPQM - ok
15:25:27.0836 2212 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
15:25:28.0398 2212 MsRPC - ok
15:25:28.0928 2212 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
15:25:29.0053 2212 mssmbios - ok
15:25:29.0708 2212 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
15:25:29.0942 2212 MSTEE - ok
15:25:30.0379 2212 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
15:25:30.0551 2212 MTConfig - ok
15:25:31.0128 2212 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
15:25:31.0409 2212 Mup - ok
15:25:32.0267 2212 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
15:25:32.0766 2212 NativeWifiP - ok
15:25:33.0484 2212 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
15:25:34.0326 2212 NDIS - ok
15:25:35.0075 2212 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
15:25:35.0387 2212 NdisCap - ok
15:25:36.0011 2212 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
15:25:36.0339 2212 NdisTapi - ok
15:25:37.0025 2212 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
15:25:37.0321 2212 Ndisuio - ok
15:25:37.0899 2212 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
15:25:38.0148 2212 NdisWan - ok
15:25:38.0710 2212 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
15:25:38.0928 2212 NDProxy - ok
15:25:39.0677 2212 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
15:25:39.0989 2212 NetBIOS - ok
15:25:40.0597 2212 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
15:25:40.0707 2212 NetBT - ok
15:25:43.0749 2212 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\Windows\system32\DRIVERS\NETw5s32.sys
15:25:44.0700 2212 NETw5s32 - ok
15:25:46.0338 2212 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
15:25:46.0806 2212 netw5v32 - ok
15:25:47.0508 2212 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
15:25:47.0836 2212 nfrd960 - ok
15:25:48.0772 2212 nmwcdnsu (4f0de685a96dc843ccc8a861b3fac12d) C:\Windows\system32\drivers\nmwcdnsu.sys
15:25:49.0973 2212 nmwcdnsu - ok
15:25:50.0706 2212 nmwcdnsuc (578117c0c0cf10d99c8853e83c4bc63c) C:\Windows\system32\drivers\nmwcdnsuc.sys
15:25:50.0987 2212 nmwcdnsuc - ok
15:25:51.0517 2212 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
15:25:51.0861 2212 Npfs - ok
15:25:52.0500 2212 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
15:25:52.0734 2212 nsiproxy - ok
15:25:53.0779 2212 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
15:25:54.0201 2212 Ntfs - ok
15:25:54.0762 2212 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
15:25:54.0887 2212 Null - ok
15:25:55.0527 2212 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
15:25:55.0761 2212 nvraid - ok
15:25:56.0416 2212 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
15:25:56.0837 2212 nvstor - ok
15:25:57.0430 2212 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
15:25:57.0601 2212 nv_agp - ok
15:25:58.0303 2212 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
15:25:58.0600 2212 ohci1394 - ok
15:25:59.0271 2212 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
15:25:59.0832 2212 Parport - ok
15:26:00.0409 2212 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
15:26:00.0769 2212 partmgr - ok
15:26:01.0249 2212 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
15:26:01.0589 2212 Parvdm - ok
15:26:02.0439 2212 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
15:26:03.0558 2212 pccsmcfd - ok
15:26:04.0119 2212 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
15:26:04.0809 2212 pci - ok
15:26:05.0419 2212 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
15:26:05.0889 2212 pciide - ok
15:26:06.0491 2212 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
15:26:07.0005 2212 pcmcia - ok
15:26:07.0536 2212 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
15:26:07.0754 2212 pcw - ok
15:26:08.0472 2212 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
15:26:08.0831 2212 PEAUTH - ok
15:26:09.0579 2212 PersonalSecureDrive (b27f1df5abc5240480d4d2d9666867a5) C:\Windows\System32\drivers\psd.sys
15:26:09.0631 2212 PersonalSecureDrive - ok
15:26:10.0351 2212 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
15:26:10.0611 2212 PptpMiniport - ok
15:26:11.0231 2212 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
15:26:11.0551 2212 Processor - ok
15:26:12.0431 2212 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
15:26:12.0771 2212 Psched - ok
15:26:13.0421 2212 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
15:26:13.0521 2212 ql2300 - ok
15:26:13.0681 2212 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
15:26:13.0711 2212 ql40xx - ok
15:26:13.0781 2212 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
15:26:13.0881 2212 QWAVEdrv - ok
15:26:14.0021 2212 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
15:26:14.0076 2212 RasAcd - ok
15:26:14.0154 2212 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
15:26:14.0201 2212 RasAgileVpn - ok
15:26:14.0279 2212 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:26:14.0341 2212 Rasl2tp - ok
15:26:14.0482 2212 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
15:26:14.0544 2212 RasPppoe - ok
15:26:14.0653 2212 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
15:26:14.0731 2212 RasSstp - ok
15:26:14.0825 2212 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
15:26:14.0934 2212 rdbss - ok
15:26:15.0028 2212 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
15:26:15.0075 2212 rdpbus - ok
15:26:15.0168 2212 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:26:15.0215 2212 RDPCDD - ok
15:26:15.0324 2212 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
15:26:15.0418 2212 RDPDR - ok
15:26:15.0636 2212 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
15:26:15.0683 2212 RDPENCDD - ok
15:26:15.0730 2212 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
15:26:15.0745 2212 RDPREFMP - ok
15:26:15.0870 2212 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
15:26:15.0933 2212 RDPWD - ok
15:26:16.0073 2212 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
15:26:16.0104 2212 rdyboost - ok
15:26:16.0198 2212 rimmptsk (df672613fbbcd58c38bb0bc2694bcfb0) C:\Windows\system32\DRIVERS\rimmptsk.sys
15:26:16.0276 2212 rimmptsk - ok
15:26:16.0354 2212 rimsptsk (9bfb54d3559f2ff7301271d29d383564) C:\Windows\system32\DRIVERS\rimsptsk.sys
15:26:16.0401 2212 rimsptsk - ok
15:26:16.0447 2212 rismxdp (dcb87da83cc1010cbc9fc4dc9e395bbc) C:\Windows\system32\DRIVERS\rixdptsk.sys
15:26:16.0494 2212 rismxdp - ok
15:26:16.0603 2212 ROOTMODEM (564297827d213f52c7a3a2ff749568ca) C:\Windows\system32\Drivers\RootMdm.sys
15:26:16.0666 2212 ROOTMODEM - ok
15:26:16.0806 2212 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
15:26:16.0884 2212 rspndr - ok
15:26:16.0962 2212 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
15:26:17.0056 2212 s3cap - ok
15:26:17.0165 2212 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
15:26:17.0181 2212 sbp2port - ok
15:26:17.0305 2212 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
15:26:17.0352 2212 scfilter - ok
15:26:17.0461 2212 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
15:26:17.0524 2212 sdbus - ok
15:26:17.0633 2212 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
15:26:17.0695 2212 secdrv - ok
15:26:17.0820 2212 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
15:26:17.0851 2212 Serenum - ok
15:26:17.0883 2212 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
15:26:17.0945 2212 Serial - ok
15:26:17.0992 2212 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
15:26:18.0039 2212 sermouse - ok
15:26:18.0241 2212 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
15:26:18.0335 2212 sffdisk - ok
15:26:18.0444 2212 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
15:26:18.0491 2212 sffp_mmc - ok
15:26:18.0569 2212 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
15:26:18.0616 2212 sffp_sd - ok
15:26:18.0725 2212 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
15:26:18.0772 2212 sfloppy - ok
15:26:18.0959 2212 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
15:26:19.0021 2212 sisagp - ok
15:26:19.0084 2212 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:26:19.0131 2212 SiSRaid2 - ok
15:26:19.0209 2212 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
15:26:19.0271 2212 SiSRaid4 - ok
15:26:19.0333 2212 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
15:26:19.0380 2212 Smb - ok
15:26:19.0489 2212 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
15:26:19.0521 2212 spldr - ok
15:26:19.0599 2212 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
15:26:19.0677 2212 srv - ok
15:26:19.0755 2212 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
15:26:19.0817 2212 srv2 - ok
15:26:20.0129 2212 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
15:26:20.0254 2212 srvnet - ok
15:26:20.0862 2212 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
15:26:21.0034 2212 stexstor - ok
15:26:21.0646 2212 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
15:26:21.0856 2212 storflt - ok
15:26:22.0466 2212 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
15:26:22.0616 2212 storvsc - ok
15:26:23.0246 2212 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
15:26:23.0473 2212 swenum - ok
15:26:24.0097 2212 t36wgps (804e3f7f4ae25acb0c0e5d7c5e6076c7) C:\Windows\system32\DRIVERS\t36wgps.sys
15:26:24.0346 2212 t36wgps - ok
15:26:25.0360 2212 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
15:26:25.0906 2212 Tcpip - ok
15:26:26.0983 2212 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
15:26:27.0029 2212 TCPIP6 - ok
15:26:27.0563 2212 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
15:26:27.0783 2212 tcpipreg - ok
15:26:28.0343 2212 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
15:26:28.0493 2212 TDPIPE - ok
15:26:29.0083 2212 TDTCP (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys
15:26:29.0473 2212 TDTCP - ok
15:26:30.0053 2212 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
15:26:30.0343 2212 tdx - ok
15:26:30.0935 2212 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
15:26:31.0076 2212 TermDD - ok
15:26:31.0713 2212 Thpdrv (9528f2a39cb660a49f0592d57127f370) C:\Windows\system32\DRIVERS\thpdrv.sys
15:26:31.0833 2212 Thpdrv - ok
15:26:32.0403 2212 Thpevm (e17dcde74ff00ca802643b4a9a4a4a5c) C:\Windows\system32\DRIVERS\Thpevm.SYS
15:26:32.0533 2212 Thpevm - ok
15:26:33.0333 2212 tosporte (90afa1a4451bbbee87c9f18a665d8121) C:\Windows\system32\DRIVERS\tosporte.sys
15:26:33.0523 2212 tosporte - ok
15:26:34.0301 2212 tosrfbd (360f19e411f0b94bdcc59e670c979392) C:\Windows\system32\DRIVERS\tosrfbd.sys
15:26:34.0784 2212 tosrfbd - ok
15:26:35.0414 2212 tosrfbnp (74392bab3f0d4810da8436ec79d6955d) C:\Windows\system32\Drivers\tosrfbnp.sys
15:26:35.0664 2212 tosrfbnp - ok
15:26:36.0344 2212 Tosrfcom (1ad9eb1b5abd0aeee4084c8153476f1e) C:\Windows\system32\Drivers\tosrfcom.sys
15:26:36.0654 2212 Tosrfcom - ok
15:26:37.0414 2212 tosrfec (9ee240f7029771b21cc6200be6516d60) C:\Windows\system32\DRIVERS\tosrfec.sys
15:26:37.0664 2212 tosrfec - ok
15:26:38.0324 2212 Tosrfhid (a72a3473180f378cc07d342803ffd580) C:\Windows\system32\DRIVERS\Tosrfhid.sys
15:26:38.0444 2212 Tosrfhid - ok
15:26:39.0068 2212 tosrfnds (b2a1a6538245fd69578224bbf2fd4677) C:\Windows\system32\DRIVERS\tosrfnds.sys
15:26:39.0115 2212 tosrfnds - ok
15:26:39.0801 2212 TosRfSnd (a929f2310c11ee32e8b6c2e9162c5baa) C:\Windows\system32\drivers\tosrfsnd.sys
15:26:40.0161 2212 TosRfSnd - ok
15:26:40.0841 2212 Tosrfusb (1734a114593150a2d2c2876b99151b2c) C:\Windows\system32\DRIVERS\tosrfusb.sys
15:26:41.0031 2212 Tosrfusb - ok
15:26:41.0591 2212 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\Windows\system32\drivers\tpm.sys
15:26:41.0785 2212 TPM - ok
15:26:42.0487 2212 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:26:42.0627 2212 tssecsrv - ok
15:26:43.0376 2212 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
15:26:43.0945 2212 TsUsbFlt - ok
15:26:44.0945 2212 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
15:26:45.0375 2212 tunnel - ok
15:26:45.0975 2212 TVALZ (6e614df4e1110dcf61b335ee02a34954) C:\Windows\system32\DRIVERS\TVALZ.SYS
15:26:46.0225 2212 TVALZ - ok
15:26:46.0865 2212 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
15:26:47.0165 2212 uagp35 - ok
15:26:47.0755 2212 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
15:26:48.0065 2212 udfs - ok
15:26:48.0675 2212 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
15:26:49.0029 2212 uliagpkx - ok
15:26:49.0669 2212 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
15:26:49.0859 2212 umbus - ok
15:26:50.0669 2212 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
15:26:50.0839 2212 UmPass - ok
15:26:51.0494 2212 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
15:26:51.0665 2212 usbaudio - ok
15:26:52.0274 2212 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
15:26:52.0820 2212 usbccgp - ok
15:26:53.0581 2212 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
15:26:53.0921 2212 usbcir - ok
15:26:54.0481 2212 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\drivers\usbehci.sys
15:26:54.0611 2212 usbehci - ok
15:26:55.0351 2212 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
15:26:55.0651 2212 usbhub - ok
15:26:56.0241 2212 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
15:26:56.0591 2212 usbohci - ok
15:26:57.0161 2212 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
15:26:57.0521 2212 usbprint - ok
15:26:58.0251 2212 usbser (31181de6190b39fc8007dffd1a48ffd6) C:\Windows\system32\drivers\usbser.sys
15:26:58.0691 2212 usbser - ok
15:26:59.0315 2212 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:27:00.0126 2212 USBSTOR - ok
15:27:00.0719 2212 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
15:27:00.0922 2212 usbuhci - ok
15:27:01.0561 2212 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys
15:27:01.0998 2212 usbvideo - ok
15:27:02.0669 2212 UVCFTR (237c444fbd1c697a2e3fa60f02c61f22) C:\Windows\system32\Drivers\UVCFTR_S.SYS
15:27:02.0856 2212 UVCFTR - ok
15:27:03.0480 2212 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
15:27:03.0683 2212 vdrvroot - ok
15:27:04.0401 2212 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
15:27:04.0525 2212 vga - ok
15:27:05.0118 2212 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
15:27:05.0446 2212 VgaSave - ok
15:27:06.0054 2212 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
15:27:06.0397 2212 vhdmp - ok
15:27:06.0943 2212 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
15:27:07.0021 2212 viaagp - ok
15:27:07.0614 2212 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
15:27:08.0020 2212 ViaC7 - ok
15:27:08.0613 2212 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
15:27:08.0831 2212 viaide - ok
15:27:09.0471 2212 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
15:27:09.0673 2212 vmbus - ok
15:27:10.0282 2212 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
15:27:10.0687 2212 VMBusHID - ok
15:27:11.0358 2212 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
15:27:11.0686 2212 volmgr - ok
15:27:12.0294 2212 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
15:27:12.0372 2212 volmgrx - ok
15:27:12.0965 2212 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
15:27:13.0402 2212 volsnap - ok
15:27:14.0088 2212 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
15:27:14.0416 2212 vsmraid - ok
15:27:15.0009 2212 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
15:27:15.0227 2212 vwifibus - ok
15:27:15.0789 2212 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
15:27:16.0007 2212 vwififlt - ok
15:27:16.0709 2212 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\Windows\system32\DRIVERS\vwifimp.sys
15:27:16.0912 2212 vwifimp - ok
15:27:17.0489 2212 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
15:27:17.0832 2212 WacomPen - ok
15:27:18.0534 2212 WacomVTHid (d126f319f0631a5238e0c4861fb91860) C:\Windows\system32\DRIVERS\WacomVTHid.sys
15:27:18.0737 2212 WacomVTHid - ok
15:27:19.0408 2212 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
15:27:19.0673 2212 WANARP - ok
15:27:19.0751 2212 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
15:27:19.0798 2212 Wanarpv6 - ok
15:27:20.0453 2212 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
15:27:20.0718 2212 Wd - ok
15:27:21.0358 2212 Wdf01000 (73c5809c82828e34232f9811cb51490e) C:\Windows\system32\drivers\Wdf01000.sys
15:27:21.0732 2212 Suspicious file (Forged): C:\Windows\system32\drivers\Wdf01000.sys. Real md5: 73c5809c82828e34232f9811cb51490e, Fake md5: 9950e3d0f08141c7e89e64456ae7dc73
15:27:21.0732 2212 Wdf01000 ( Virus.Win32.Rloader.a ) - infected
15:27:21.0732 2212 Wdf01000 - detected Virus.Win32.Rloader.a (0)
15:27:22.0403 2212 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
15:27:22.0590 2212 WfpLwf - ok
15:27:23.0121 2212 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
15:27:23.0370 2212 WIMMount - ok
15:27:24.0618 2212 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
15:27:24.0852 2212 WinUsb - ok
15:27:25.0507 2212 wisdpen (b20f6f5d1148965dc38e26af277f5115) C:\Windows\system32\DRIVERS\wisdpen.sys
15:27:25.0944 2212 wisdpen - ok
15:27:27.0161 2212 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
15:27:27.0317 2212 WmiAcpi - ok
15:27:28.0003 2212 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
15:27:28.0159 2212 ws2ifsl - ok
15:27:28.0596 2212 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
15:27:28.0690 2212 WudfPf - ok
15:27:28.0861 2212 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:27:28.0971 2212 WUDFRd - ok
15:27:29.0283 2212 WwanUsbServ (e6c02906f3dc3fd3337a4b756fca90da) C:\Windows\system32\DRIVERS\WwanUsbMp.sys
15:27:29.0345 2212 WwanUsbServ - ok
15:27:29.0407 2212 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:27:30.0203 2212 \Device\Harddisk0\DR0 - ok
15:27:30.0219 2212 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
15:27:40.0874 2212 \Device\Harddisk1\DR1 - ok
15:27:40.0905 2212 Boot (0x1200) (61b555200223c95bbf5e1bba1fc9016d) \Device\Harddisk0\DR0\Partition0
15:27:40.0936 2212 \Device\Harddisk0\DR0\Partition0 - ok
15:27:40.0952 2212 Boot (0x1200) (1134880f48cc8dd65f633bb58ec4b80d) \Device\Harddisk0\DR0\Partition1
15:27:40.0983 2212 \Device\Harddisk0\DR0\Partition1 - ok
15:27:40.0983 2212 Boot (0x1200) (2987a15b4c9725d4ae32be51ed138398) \Device\Harddisk1\DR1\Partition0
15:27:40.0983 2212 \Device\Harddisk1\DR1\Partition0 - ok
15:27:40.0983 2212 ============================================================
15:27:40.0983 2212 Scan finished
15:27:40.0983 2212 ============================================================
15:27:40.0998 7688 Detected object count: 1
15:27:40.0998 7688 Actual detected object count: 1
15:28:07.0518 7688 Wdf01000 ( Virus.Win32.Rloader.a ) - skipped by user
15:28:07.0518 7688 Wdf01000 ( Virus.Win32.Rloader.a ) - User select action: Skip

Naughty píše:ještě otl.

Zatím šrotuje....

Před chvilkou to nahlásilo, že nejde uložit soubour c:\users\nb\desktop\cmd.bat a od té doby mě přijde že dole svítí, že skenuje pořád ten samý klíč v registru

Tak nevím jestli mám ještě čekat nebo to pustit znovu.

Zůstalo to viset pořád na tom stejném. Pustil jsem OTL znova "jako správce" a vypnul předtím rezidentní štíty NODu, zase to asi po 10ti minutách nahlásilo že nemůže uložit c:\users\nb\desktop\cmd.bat a dole píše Scanning HKEY_LOCAL_MACHINE\SW\MS\WIN\CurrentVersion\BITS\StateIndex... a dál nepokračuje

OTL log byl příliš dlouhý na vložení, v příloze posílám oba, vyhovuje to takto?

ComboFix 12-02-03.02 - Marta 03.02.2012 18:42:54.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.2937.1517 [GMT 1:00]
Spuštěný z: c:\users\NB\Desktop\abraka.com
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
F:\Autorun.inf
F:\setup.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-03 do 2012-02-03 )))))))))))))))))))))))))))))))
.
.
2012-02-03 17:50 . 2012-02-03 17:51 -------- d-----w- c:\users\NB\AppData\Local\temp
2012-02-03 17:50 . 2012-02-03 17:50 -------- d-----w- c:\users\Marta\AppData\Local\temp
2012-02-03 17:50 . 2012-02-03 17:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-03 08:07 . 2012-02-03 13:10 -------- d-----w- c:\program files\trend micro
2012-02-03 08:07 . 2012-02-03 08:07 -------- d-----w- C:\rsit
2012-02-03 06:31 . 2012-02-03 06:31 -------- d-----w- c:\program files\Common Files\Java
2012-02-02 21:04 . 2012-02-02 21:04 -------- d-----w- c:\users\NB\AppData\Local\GHISLER
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\UC.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\RAR.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\NOCLOSE.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\LHA.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\ARJ.PIF
2012-02-02 21:03 . 2012-02-02 21:03 -------- d-----w- C:\totalcmd
2012-02-02 21:03 . 2012-02-02 21:03 -------- d-----w- c:\users\NB\AppData\Roaming\GHISLER
2012-01-26 18:44 . 2012-01-26 18:44 -------- d-----w- c:\users\Marta\AppData\Local\Microsoft
2012-01-25 17:50 . 2011-11-17 05:41 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-01-25 17:50 . 2011-11-17 05:41 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-01-25 17:50 . 2011-11-17 05:39 369352 ----a-w- c:\windows\system32\drivers\cng.sys
2012-01-25 17:50 . 2011-11-17 05:35 314880 ----a-w- c:\windows\system32\webio.dll
2012-01-25 17:50 . 2011-11-17 05:34 224768 ----a-w- c:\windows\system32\schannel.dll
2012-01-25 17:50 . 2011-11-17 05:32 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2012-01-25 17:50 . 2011-11-17 05:29 22528 ----a-w- c:\windows\system32\lsass.exe
2012-01-25 17:50 . 2011-11-17 05:34 15872 ----a-w- c:\windows\system32\sspisrv.dll
2012-01-25 17:50 . 2011-11-17 05:34 100352 ----a-w- c:\windows\system32\sspicli.dll
2012-01-25 17:50 . 2011-11-17 05:34 22016 ----a-w- c:\windows\system32\secur32.dll
2012-01-20 14:03 . 2012-01-20 14:03 -------- d-----w- c:\users\NB\AppData\Roaming\Malwarebytes
2012-01-20 14:03 . 2012-01-20 14:03 -------- d-----w- c:\programdata\Malwarebytes
2012-01-20 14:02 . 2012-02-02 23:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-01-20 14:02 . 2011-12-10 14:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-20 12:22 . 2012-01-20 12:23 -------- d-sh--w- c:\users\NB\AppData\Roaming\Internet Security Guard
2012-01-20 12:22 . 2012-01-20 12:22 -------- d-sh--w- c:\programdata\ISJXDYHG
2012-01-20 12:21 . 2012-01-20 13:53 -------- d-sh--w- c:\programdata\f48c58
2012-01-15 14:16 . 2012-01-15 14:16 -------- d-----w- c:\program files\MSECache
2012-01-15 14:05 . 2012-01-15 14:05 -------- d-----w- c:\windows\cs
2012-01-15 14:04 . 2011-05-13 14:27 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2012-01-15 14:02 . 2012-01-15 14:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-01-15 14:00 . 2012-01-15 14:06 -------- d-----w- c:\program files\Windows Live
2012-01-15 13:58 . 2012-01-20 13:51 -------- d-----w- c:\program files\Microsoft
2012-01-15 13:58 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2012-01-15 13:58 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2012-01-15 13:58 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-01-15 13:58 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-01-15 13:57 . 2012-01-20 20:42 -------- d-----w- c:\program files\Microsoft Silverlight
2012-01-15 13:55 . 2012-02-03 09:01 -------- d-----w- c:\users\NB\AppData\Local\Windows Live
2012-01-15 13:55 . 2012-01-15 13:55 -------- d-----w- c:\program files\Common Files\Windows Live
2012-01-11 12:27 . 2011-11-17 05:38 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 12:27 . 2011-11-19 14:01 67072 ----a-w- c:\windows\system32\packager.dll
2012-01-11 12:27 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 12:27 . 2011-10-26 04:32 514560 ----a-w- c:\windows\system32\qdvd.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-26 23:21 . 2010-06-17 12:52 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-15 14:00 . 2011-03-28 17:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-11-24 04:25 . 2011-12-15 09:33 2342912 ----a-w- c:\windows\system32\win32k.sys
2011-11-22 07:57 . 2011-06-06 07:56 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-17 05:34 . 2012-01-25 17:50 224768 ----a-w- c:\windows\system32\schannel.dll
2011-11-10 04:54 . 2010-06-21 18:49 472808 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ATFPUOverlayIcon]
@="{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}"
[HKEY_CLASSES_ROOT\CLSID\{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}]
2009-09-15 16:36 147888 ----a-w- c:\program files\TOSHIBA\TFPU\TFPUOverlayIcon.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WirelessManager"="c:\program files\TOSHIBA\TOSHIBA Wireless Manager\WirelessManager.exe" [2010-05-11 190504]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-06-21 39408]
"YouSendIt.exe"="c:\program files\YouSendIt\Express\YouSendIt.exe" [2011-05-02 198144]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ThpSrv"="c:\windows\system32\thpsrv" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-02 151064]
"TFPUPWDBankService"="c:\program files\TOSHIBA\TFPU\TFPUPWDBank.exe" [2009-09-15 888752]
"TFPUService"="c:\program files\TOSHIBA\TFPU\TFPUTaskMonitor.exe" [2009-09-15 784304]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2009-07-22 83336]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-28 7625248]
"IFXSPMGT"="c:\program files\Infineon\Security Platform Software\ifxspmgt.exe" [2009-08-04 1107232]
"TOSDCR"="c:\program files\TOSHIBA\PasswordUtility\TOSDCR.exe" [2007-08-28 169296]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2009-11-05 480608]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2009-03-09 55160]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2009-08-13 521528]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2009-11-10 738616]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2009-07-27 424496]
"TOSHIBA_3G_UTY"="c:\program files\Toshiba\3GUty\TW3GCTRL.exe" [2010-05-27 1592264]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2145000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2010-2-24 2721120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
R3 GemCCID;GemCCID;c:\windows\system32\Drivers\GemCCID.sys [2009-08-10 89600]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2011-08-17 137472]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2011-08-17 8576]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-18 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys [2009-06-29 30272]
S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 13120]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\System32\drivers\psd.sys [2009-07-19 39712]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [2011-03-14 84520]
S2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\AtService.exe [2009-09-11 1811704]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [2009-08-10 185712]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-04-07 810120]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-04-07 96896]
S2 TTPDSrv;TOSHIBA Touch Pad Service;c:\windows\System32\TTPDSRV.exe [2007-11-07 73728]
S2 TW3GSVC;3G RF Power Control Utility;c:\program files\Toshiba\3GUty\tw3gsvc.exe [2009-12-18 127384]
S2 WMCoreService;Mobile Broadband Service;c:\program files\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode [x]
S2 WTouchService;WTouch Service;c:\program files\WTouch\WTouchService.exe [2008-08-01 95528]
S3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-09-14 659328]
S3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R);c:\windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
S3 ecnssndis;Service for enabling selective suspend to NDIS device;c:\windows\system32\Drivers\wwanuss.sys [2010-03-03 23592]
S3 ecnssndisfltr;SSNDIS filter service;c:\windows\system32\Drivers\wwanussf.sys [2010-03-03 26152]
S3 Mbm3CBus;TOSHIBA Mobile Broadband Device (WDM);c:\windows\system32\DRIVERS\Mbm3CBus.sys [2010-04-27 329160]
S3 Mbm3DevMt;TOSHIBA Mobile Broadband Device Management Driver (WDM);c:\windows\system32\DRIVERS\Mbm3DevMt.sys [2010-04-27 388552]
S3 Mbm3mdfl;TOSHIBA Mobile Broadband Modem Filter;c:\windows\system32\DRIVERS\Mbm3mdfl.sys [2010-04-27 14920]
S3 Mbm3Mdm;TOSHIBA Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\Mbm3Mdm.sys [2010-04-27 405320]
S3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 t36wgps;TOSHIBA Mobile Broadband GPS Port;c:\windows\system32\DRIVERS\t36wgps.sys [2010-01-25 82984]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 WacomVTHid;Virtual Touch Driver;c:\windows\system32\DRIVERS\WacomVTHid.sys [2008-07-09 13992]
S3 wisdpen;Wacom Penabled MiniDriver;c:\windows\system32\DRIVERS\wisdpen.sys [2008-03-27 30888]
S3 WwanUsbServ;Ericsson WWAN Wireless Module Device Driver;c:\windows\system32\DRIVERS\WwanUsbMp.sys [2010-04-22 229928]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 37746597
*NewlyCreated* - WS2IFSL
*Deregistered* - 37746597
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 18:38]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 18:38]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000Core.job
- c:\users\NB\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 15:08]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000UA.job
- c:\users\NB\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 15:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz
Trusted Zone: mojebanka.cz
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} - hxxps://www.mojedatovaschranka.cz/static/pages/ ... ?3,16,13,0
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(5476)
c:\program files\TOSHIBA\TFPU\TFPUOverlayIcon.dll
.
- - - - - - - > 'explorer.exe'(2572)
c:\program files\TOSHIBA\TFPU\TFPUOverlayIcon.dll
c:\program files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtExt.dll
.
Celkový čas: 2012-02-03 19:04:03
ComboFix-quarantined-files.txt 2012-02-03 18:04
.
Před spuštěním: Volných bajtů: 48 818 843 648
Po spuštění: Volných bajtů: 48 754 438 144
.
- - End Of File - - C815E14D4D479811A9670B7A73557D0E

Tady je log z TS.. combfix pouštím znovu.
19:10:54.0857 3008 TDSS rootkit removing tool 2.7.9.0 Feb 1 2012 09:28:49
19:10:55.0029 3008 ============================================================
19:10:55.0029 3008 Current date / time: 2012/02/03 19:10:55.0029
19:10:55.0029 3008 SystemInfo:
19:10:55.0029 3008
19:10:55.0029 3008 OS Version: 6.1.7601 ServicePack: 1.0
19:10:55.0029 3008 Product type: Workstation
19:10:55.0029 3008 ComputerName: NB-NB
19:10:55.0029 3008 UserName: Marta
19:10:55.0029 3008 Windows directory: C:\Windows
19:10:55.0029 3008 System windows directory: C:\Windows
19:10:55.0029 3008 Processor architecture: Intel x86
19:10:55.0029 3008 Number of processors: 2
19:10:55.0029 3008 Page size: 0x1000
19:10:55.0029 3008 Boot type: Normal boot
19:10:55.0029 3008 ============================================================
19:10:55.0778 3008 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:10:55.0793 3008 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:10:59.0412 3008 \Device\Harddisk0\DR0:
19:10:59.0428 3008 MBR used
19:10:59.0428 3008 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0xE8E2000
19:10:59.0428 3008 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xEBD0800, BlocksNum 0xE5F5000
19:10:59.0428 3008 \Device\Harddisk1\DR1:
19:10:59.0428 3008 MBR used
19:10:59.0428 3008 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
19:10:59.0615 3008 Initialize success
19:10:59.0615 3008 ============================================================
19:11:12.0173 7088 ============================================================
19:11:12.0173 7088 Scan started
19:11:12.0173 7088 Mode: Manual; SigCheck; TDLFS;
19:11:12.0173 7088 ============================================================
19:11:13.0234 7088 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
19:11:13.0343 7088 1394ohci - ok
19:11:13.0546 7088 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
19:11:13.0593 7088 ACPI - ok
19:11:13.0718 7088 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
19:11:13.0842 7088 AcpiPmi - ok
19:11:14.0076 7088 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
19:11:14.0154 7088 adp94xx - ok
19:11:14.0342 7088 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
19:11:14.0388 7088 adpahci - ok
19:11:14.0591 7088 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
19:11:14.0638 7088 adpu320 - ok
19:11:14.0810 7088 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
19:11:14.0903 7088 AFD - ok
19:11:15.0153 7088 AgereSoftModem (07758c2196a62f207f77556311e7459a) C:\Windows\system32\DRIVERS\AGRSM.sys
19:11:15.0262 7088 AgereSoftModem - ok
19:11:15.0402 7088 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
19:11:15.0449 7088 agp440 - ok
19:11:15.0621 7088 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
19:11:15.0668 7088 aic78xx - ok
19:11:15.0839 7088 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
19:11:15.0886 7088 aliide - ok
19:11:16.0011 7088 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
19:11:16.0058 7088 amdagp - ok
19:11:16.0198 7088 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
19:11:16.0260 7088 amdide - ok
19:11:16.0401 7088 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
19:11:16.0479 7088 AmdK8 - ok
19:11:16.0650 7088 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
19:11:16.0744 7088 AmdPPM - ok
19:11:16.0931 7088 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
19:11:16.0978 7088 amdsata - ok
19:11:17.0181 7088 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
19:11:17.0228 7088 amdsbs - ok
19:11:17.0384 7088 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
19:11:17.0446 7088 amdxata - ok
19:11:17.0602 7088 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
19:11:17.0727 7088 AppID - ok
19:11:17.0914 7088 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
19:11:17.0992 7088 arc - ok
19:11:18.0148 7088 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
19:11:18.0195 7088 arcsas - ok
19:11:18.0351 7088 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
19:11:18.0445 7088 AsyncMac - ok
19:11:18.0679 7088 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
19:11:18.0725 7088 atapi - ok
19:11:18.0944 7088 ATSwpWDF (53ff3096d5d9ae2a75c16703a9819965) C:\Windows\system32\Drivers\ATSwpWDF.sys
19:11:19.0006 7088 ATSwpWDF - ok
19:11:19.0225 7088 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
19:11:19.0303 7088 b06bdrv - ok
19:11:19.0505 7088 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
19:11:19.0583 7088 b57nd60x - ok
19:11:19.0724 7088 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
19:11:19.0817 7088 Beep - ok
19:11:20.0036 7088 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
19:11:20.0129 7088 blbdrive - ok
19:11:20.0363 7088 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
19:11:20.0441 7088 bowser - ok
19:11:20.0613 7088 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:11:20.0722 7088 BrFiltLo - ok
19:11:20.0941 7088 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:11:21.0003 7088 BrFiltUp - ok
19:11:21.0221 7088 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys
19:11:21.0362 7088 BridgeMP - ok
19:11:21.0611 7088 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
19:11:21.0736 7088 Brserid - ok
19:11:21.0877 7088 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
19:11:21.0955 7088 BrSerWdm - ok
19:11:22.0111 7088 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:11:22.0173 7088 BrUsbMdm - ok
19:11:22.0313 7088 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
19:11:22.0345 7088 BrUsbSer - ok
19:11:22.0423 7088 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
19:11:22.0485 7088 BTHMODEM - ok
19:11:22.0672 7088 catchme - ok
19:11:22.0859 7088 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
19:11:22.0922 7088 cdfs - ok
19:11:23.0047 7088 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
19:11:23.0078 7088 cdrom - ok
19:11:23.0234 7088 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
19:11:23.0312 7088 circlass - ok
19:11:23.0421 7088 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
19:11:23.0468 7088 CLFS - ok
19:11:23.0655 7088 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
19:11:23.0702 7088 CmBatt - ok
19:11:23.0749 7088 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
19:11:23.0780 7088 cmdide - ok
19:11:23.0889 7088 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
19:11:23.0936 7088 CNG - ok
19:11:23.0998 7088 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
19:11:24.0045 7088 Compbatt - ok
19:11:24.0154 7088 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
19:11:24.0217 7088 CompositeBus - ok
19:11:24.0357 7088 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
19:11:24.0404 7088 crcdisk - ok
19:11:24.0529 7088 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
19:11:24.0607 7088 CSC - ok
19:11:24.0716 7088 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
19:11:24.0794 7088 DfsC - ok
19:11:24.0919 7088 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
19:11:24.0981 7088 discache - ok
19:11:25.0121 7088 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
19:11:25.0153 7088 Disk - ok
19:11:25.0231 7088 Dot4 (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys
19:11:25.0262 7088 Dot4 - ok
19:11:25.0387 7088 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys
19:11:25.0496 7088 Dot4Print - ok
19:11:25.0621 7088 Dot4Scan (9f7de667c505ce6500becdd8e11644d7) C:\Windows\system32\DRIVERS\Dot4Scan.sys
19:11:25.0683 7088 Dot4Scan - ok
19:11:25.0761 7088 dot4usb (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys
19:11:25.0808 7088 dot4usb - ok
19:11:25.0917 7088 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
19:11:25.0979 7088 drmkaud - ok
19:11:26.0073 7088 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
19:11:26.0120 7088 DXGKrnl - ok
19:11:26.0245 7088 e1yexpress (8eef52ad831471e323ee7364a8656d35) C:\Windows\system32\DRIVERS\e1y6032.sys
19:11:26.0307 7088 e1yexpress - ok
19:11:26.0432 7088 eamonm (d78f1c5b7b01df050e011b4fffdb9048) C:\Windows\system32\DRIVERS\eamonm.sys
19:11:26.0494 7088 eamonm - ok
19:11:26.0635 7088 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
19:11:26.0728 7088 ebdrv - ok
19:11:26.0853 7088 ecnssndis (e922bc274fbd736b41020872c8aac390) C:\Windows\system32\Drivers\wwanuss.sys
19:11:26.0884 7088 ecnssndis - ok
19:11:26.0947 7088 ecnssndisfltr (15ca5cd73a30398c89247b3c5e933044) C:\Windows\system32\Drivers\wwanussf.sys
19:11:26.0978 7088 ecnssndisfltr - ok
19:11:27.0087 7088 ehdrv (3c747a0d8ce29720302972ac6ed09733) C:\Windows\system32\DRIVERS\ehdrv.sys
19:11:27.0149 7088 ehdrv - ok
19:11:27.0290 7088 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
19:11:27.0352 7088 elxstor - ok
19:11:27.0430 7088 epfwwfpr (abe850bebbed8d1454937756c2fa0a98) C:\Windows\system32\DRIVERS\epfwwfpr.sys
19:11:27.0461 7088 epfwwfpr - ok
19:11:27.0555 7088 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
19:11:27.0602 7088 ErrDev - ok
19:11:27.0695 7088 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
19:11:27.0789 7088 exfat - ok
19:11:27.0867 7088 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
19:11:27.0945 7088 fastfat - ok
19:11:28.0070 7088 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
19:11:28.0148 7088 fdc - ok
19:11:28.0210 7088 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
19:11:28.0226 7088 FileInfo - ok
19:11:28.0288 7088 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
19:11:28.0366 7088 Filetrace - ok
19:11:28.0444 7088 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
19:11:28.0522 7088 flpydisk - ok
19:11:28.0616 7088 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
19:11:28.0631 7088 FltMgr - ok
19:11:28.0678 7088 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
19:11:28.0709 7088 FsDepends - ok
19:11:28.0834 7088 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys
19:11:28.0897 7088 fssfltr - ok
19:11:29.0053 7088 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
19:11:29.0084 7088 Fs_Rec - ok
19:11:29.0224 7088 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
19:11:29.0318 7088 fvevol - ok
19:11:29.0365 7088 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:11:29.0411 7088 gagp30kx - ok
19:11:29.0521 7088 GemCCID (86d3d834d35ebe920d85ffedcef79faf) C:\Windows\system32\Drivers\GemCCID.sys
19:11:29.0567 7088 GemCCID - ok
19:11:29.0708 7088 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
19:11:29.0817 7088 hcw85cir - ok
19:11:29.0864 7088 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
19:11:29.0942 7088 HdAudAddService - ok
19:11:30.0067 7088 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
19:11:30.0129 7088 HDAudBus - ok
19:11:30.0269 7088 HECI (2df64415a28ce036ac6acec7645a996f) C:\Windows\system32\DRIVERS\HECI.sys
19:11:30.0332 7088 HECI - ok
19:11:30.0441 7088 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
19:11:30.0535 7088 HidBatt - ok
19:11:30.0597 7088 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
19:11:30.0675 7088 HidBth - ok
19:11:30.0753 7088 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
19:11:30.0831 7088 HidIr - ok
19:11:30.0956 7088 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
19:11:31.0034 7088 HidUsb - ok
19:11:31.0174 7088 HPFXBULK (9e3944a558ab84853ef985988e23a8a4) C:\Windows\system32\drivers\hpfxbulk.sys
19:11:31.0299 7088 HPFXBULK - ok
19:11:31.0439 7088 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
19:11:31.0502 7088 HpSAMD - ok
19:11:31.0580 7088 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
19:11:31.0627 7088 HTTP - ok
19:11:31.0720 7088 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
19:11:31.0767 7088 hwpolicy - ok
19:11:31.0814 7088 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
19:11:31.0876 7088 i8042prt - ok
19:11:32.0001 7088 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
19:11:32.0032 7088 iaStor - ok
19:11:32.0157 7088 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
19:11:32.0204 7088 iaStorV - ok
19:11:32.0485 7088 igfx (315aaaa2bc9bc778adc0454b3ca8dcce) C:\Windows\system32\DRIVERS\igdkmd32.sys
19:11:32.0703 7088 igfx - ok
19:11:32.0843 7088 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
19:11:32.0890 7088 iirsp - ok
19:11:33.0046 7088 IntcAzAudAddService (e4a2e810cb2607c9c159c0dfb0bd4c88) C:\Windows\system32\drivers\RTKVHDA.sys
19:11:33.0155 7088 IntcAzAudAddService - ok
19:11:33.0280 7088 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
19:11:33.0327 7088 intelide - ok
19:11:33.0467 7088 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
19:11:33.0545 7088 intelppm - ok
19:11:33.0670 7088 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:11:33.0717 7088 IpFilterDriver - ok
19:11:33.0748 7088 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
19:11:33.0826 7088 IPMIDRV - ok
19:11:33.0935 7088 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
19:11:33.0998 7088 IPNAT - ok
19:11:34.0123 7088 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
19:11:34.0232 7088 IRENUM - ok
19:11:34.0341 7088 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
19:11:34.0372 7088 isapnp - ok
19:11:34.0419 7088 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
19:11:34.0450 7088 iScsiPrt - ok
19:11:34.0559 7088 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
19:11:34.0591 7088 kbdclass - ok
19:11:34.0653 7088 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
19:11:34.0669 7088 kbdhid - ok
19:11:34.0778 7088 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
19:11:34.0809 7088 KSecDD - ok
19:11:34.0840 7088 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
19:11:34.0856 7088 KSecPkg - ok
19:11:34.0996 7088 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
19:11:35.0027 7088 lltdio - ok
19:11:35.0199 7088 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:11:35.0246 7088 LSI_FC - ok
19:11:35.0386 7088 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:11:35.0449 7088 LSI_SAS - ok
19:11:35.0527 7088 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:11:35.0589 7088 LSI_SAS2 - ok
19:11:35.0651 7088 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:11:35.0698 7088 LSI_SCSI - ok
19:11:35.0776 7088 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
19:11:35.0839 7088 luafv - ok
19:11:35.0948 7088 Mbm3CBus (1241acd31435748c2c0466c5f31a3b5c) C:\Windows\system32\DRIVERS\Mbm3CBus.sys
19:11:36.0026 7088 Mbm3CBus - ok
19:11:36.0182 7088 Mbm3DevMt (f03f62d9bf6fc75930a0597824557f7b) C:\Windows\system32\DRIVERS\Mbm3DevMt.sys
19:11:36.0213 7088 Mbm3DevMt - ok
19:11:36.0338 7088 Mbm3mdfl (ccf2afbaa38c4d9f20b9f5f8473071aa) C:\Windows\system32\DRIVERS\Mbm3mdfl.sys
19:11:36.0385 7088 Mbm3mdfl - ok
19:11:36.0463 7088 Mbm3Mdm (d15e93b9cae9f6baf44a47eda692fa57) C:\Windows\system32\DRIVERS\Mbm3Mdm.sys
19:11:36.0525 7088 Mbm3Mdm - ok
19:11:36.0619 7088 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
19:11:36.0681 7088 megasas - ok
19:11:36.0759 7088 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
19:11:36.0821 7088 MegaSR - ok
19:11:36.0884 7088 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
19:11:36.0977 7088 Modem - ok
19:11:37.0102 7088 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
19:11:37.0180 7088 monitor - ok
19:11:37.0321 7088 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
19:11:37.0352 7088 mouclass - ok
19:11:37.0492 7088 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
19:11:37.0539 7088 mouhid - ok
19:11:37.0679 7088 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
19:11:37.0711 7088 mountmgr - ok
19:11:37.0757 7088 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
19:11:37.0789 7088 mpio - ok
19:11:37.0867 7088 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
19:11:37.0945 7088 mpsdrv - ok
19:11:38.0023 7088 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
19:11:38.0069 7088 MRxDAV - ok
19:11:38.0163 7088 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:11:38.0210 7088 mrxsmb - ok
19:11:38.0272 7088 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:11:38.0303 7088 mrxsmb10 - ok
19:11:38.0397 7088 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:11:38.0444 7088 mrxsmb20 - ok
19:11:38.0537 7088 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
19:11:38.0584 7088 msahci - ok
19:11:38.0662 7088 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
19:11:38.0693 7088 msdsm - ok
19:11:38.0787 7088 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
19:11:38.0881 7088 Msfs - ok
19:11:38.0959 7088 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
19:11:39.0021 7088 mshidkmdf - ok
19:11:39.0099 7088 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
19:11:39.0161 7088 msisadrv - ok
19:11:39.0255 7088 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
19:11:39.0317 7088 MSKSSRV - ok
19:11:39.0380 7088 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
19:11:39.0473 7088 MSPCLOCK - ok
19:11:39.0583 7088 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
19:11:39.0645 7088 MSPQM - ok
19:11:39.0723 7088 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
19:11:39.0754 7088 MsRPC - ok
19:11:39.0832 7088 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
19:11:39.0879 7088 mssmbios - ok
19:11:39.0957 7088 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
19:11:40.0004 7088 MSTEE - ok
19:11:40.0082 7088 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
19:11:40.0160 7088 MTConfig - ok
19:11:40.0238 7088 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
19:11:40.0269 7088 Mup - ok
19:11:40.0378 7088 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
19:11:40.0409 7088 NativeWifiP - ok
19:11:40.0519 7088 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
19:11:40.0597 7088 NDIS - ok
19:11:40.0706 7088 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
19:11:40.0784 7088 NdisCap - ok
19:11:40.0924 7088 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
19:11:41.0002 7088 NdisTapi - ok
19:11:41.0143 7088 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
19:11:41.0205 7088 Ndisuio - ok
19:11:41.0252 7088 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
19:11:41.0299 7088 NdisWan - ok
19:11:41.0408 7088 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
19:11:41.0501 7088 NDProxy - ok
19:11:41.0626 7088 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
19:11:41.0689 7088 NetBIOS - ok
19:11:41.0813 7088 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
19:11:41.0891 7088 NetBT - ok
19:11:42.0188 7088 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\Windows\system32\DRIVERS\NETw5s32.sys
19:11:42.0328 7088 NETw5s32 - ok
19:11:42.0562 7088 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
19:11:42.0718 7088 netw5v32 - ok
19:11:42.0843 7088 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
19:11:42.0905 7088 nfrd960 - ok
19:11:43.0046 7088 nmwcdnsu (4f0de685a96dc843ccc8a861b3fac12d) C:\Windows\system32\drivers\nmwcdnsu.sys
19:11:43.0155 7088 nmwcdnsu - ok
19:11:43.0280 7088 nmwcdnsuc (578117c0c0cf10d99c8853e83c4bc63c) C:\Windows\system32\drivers\nmwcdnsuc.sys
19:11:43.0342 7088 nmwcdnsuc - ok
19:11:43.0467 7088 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
19:11:43.0545 7088 Npfs - ok
19:11:43.0576 7088 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
19:11:43.0639 7088 nsiproxy - ok
19:11:43.0795 7088 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
19:11:43.0857 7088 Ntfs - ok
19:11:43.0966 7088 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
19:11:44.0029 7088 Null - ok
19:11:44.0060 7088 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
19:11:44.0091 7088 nvraid - ok
19:11:44.0216 7088 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
19:11:44.0278 7088 nvstor - ok
19:11:44.0372 7088 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
19:11:44.0419 7088 nv_agp - ok
19:11:44.0528 7088 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
19:11:44.0575 7088 ohci1394 - ok
19:11:44.0699 7088 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
19:11:44.0746 7088 Parport - ok
19:11:44.0824 7088 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
19:11:44.0855 7088 partmgr - ok
19:11:44.0949 7088 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
19:11:44.0996 7088 Parvdm - ok
19:11:45.0089 7088 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
19:11:45.0152 7088 pccsmcfd - ok
19:11:45.0245 7088 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
19:11:45.0261 7088 pci - ok
19:11:45.0323 7088 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
19:11:45.0386 7088 pciide - ok
19:11:45.0479 7088 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
19:11:45.0511 7088 pcmcia - ok
19:11:45.0526 7088 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
19:11:45.0573 7088 pcw - ok
19:11:45.0667 7088 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
19:11:45.0776 7088 PEAUTH - ok
19:11:45.0916 7088 PersonalSecureDrive (b27f1df5abc5240480d4d2d9666867a5) C:\Windows\System32\drivers\psd.sys
19:11:45.0947 7088 PersonalSecureDrive - ok
19:11:46.0041 7088 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
19:11:46.0103 7088 PptpMiniport - ok
19:11:46.0213 7088 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
19:11:46.0275 7088 Processor - ok
19:11:46.0322 7088 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
19:11:46.0369 7088 Psched - ok
19:11:46.0509 7088 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
19:11:46.0571 7088 ql2300 - ok
19:11:46.0665 7088 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
19:11:46.0712 7088 ql40xx - ok
19:11:46.0727 7088 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
19:11:46.0743 7088 QWAVEdrv - ok
19:11:46.0774 7088 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
19:11:46.0805 7088 RasAcd - ok
19:11:46.0946 7088 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:11:46.0993 7088 RasAgileVpn - ok
19:11:47.0102 7088 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:11:47.0180 7088 Rasl2tp - ok
19:11:47.0289 7088 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
19:11:47.0414 7088 RasPppoe - ok
19:11:47.0570 7088 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
19:11:47.0663 7088 RasSstp - ok
19:11:47.0710 7088 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
19:11:47.0757 7088 rdbss - ok
19:11:47.0835 7088 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
19:11:47.0866 7088 rdpbus - ok
19:11:47.0913 7088 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:11:47.0929 7088 RDPCDD - ok
19:11:47.0975 7088 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
19:11:48.0053 7088 RDPDR - ok
19:11:48.0178 7088 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
19:11:48.0256 7088 RDPENCDD - ok
19:11:48.0365 7088 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
19:11:48.0459 7088 RDPREFMP - ok
19:11:48.0490 7088 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
19:11:48.0568 7088 RDPWD - ok
19:11:48.0709 7088 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
19:11:48.0740 7088 rdyboost - ok
19:11:48.0880 7088 rimmptsk (df672613fbbcd58c38bb0bc2694bcfb0) C:\Windows\system32\DRIVERS\rimmptsk.sys
19:11:48.0958 7088 rimmptsk - ok
19:11:49.0083 7088 rimsptsk (9bfb54d3559f2ff7301271d29d383564) C:\Windows\system32\DRIVERS\rimsptsk.sys
19:11:49.0161 7088 rimsptsk - ok
19:11:49.0286 7088 rismxdp (dcb87da83cc1010cbc9fc4dc9e395bbc) C:\Windows\system32\DRIVERS\rixdptsk.sys
19:11:49.0411 7088 rismxdp - ok
19:11:49.0535 7088 ROOTMODEM (564297827d213f52c7a3a2ff749568ca) C:\Windows\system32\Drivers\RootMdm.sys
19:11:49.0613 7088 ROOTMODEM - ok
19:11:49.0754 7088 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
19:11:49.0816 7088 rspndr - ok
19:11:49.0910 7088 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
19:11:49.0988 7088 s3cap - ok
19:11:50.0128 7088 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
19:11:50.0175 7088 sbp2port - ok
19:11:50.0300 7088 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
19:11:50.0347 7088 scfilter - ok
19:11:50.0487 7088 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
19:11:50.0534 7088 sdbus - ok
19:11:50.0674 7088 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
19:11:50.0768 7088 secdrv - ok
19:11:50.0908 7088 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
19:11:50.0986 7088 Serenum - ok
19:11:51.0049 7088 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
19:11:51.0111 7088 Serial - ok
19:11:51.0205 7088 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
19:11:51.0251 7088 sermouse - ok
19:11:51.0392 7088 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
19:11:51.0470 7088 sffdisk - ok
19:11:51.0563 7088 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
19:11:51.0610 7088 sffp_mmc - ok
19:11:51.0657 7088 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
19:11:51.0751 7088 sffp_sd - ok
19:11:51.0860 7088 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
19:11:51.0938 7088 sfloppy - ok
19:11:52.0078 7088 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
19:11:52.0125 7088 sisagp - ok
19:11:52.0203 7088 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:11:52.0250 7088 SiSRaid2 - ok
19:11:52.0328 7088 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
19:11:52.0390 7088 SiSRaid4 - ok
19:11:52.0437 7088 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
19:11:52.0484 7088 Smb - ok
19:11:52.0609 7088 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
19:11:52.0640 7088 spldr - ok
19:11:52.0718 7088 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
19:11:52.0765 7088 srv - ok
19:11:52.0874 7088 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
19:11:52.0952 7088 srv2 - ok
19:11:53.0061 7088 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
19:11:53.0155 7088 srvnet - ok
19:11:53.0295 7088 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
19:11:53.0342 7088 stexstor - ok
19:11:53.0482 7088 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
19:11:53.0529 7088 storflt - ok
19:11:53.0607 7088 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
19:11:53.0654 7088 storvsc - ok
19:11:53.0716 7088 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
19:11:53.0747 7088 swenum - ok
19:11:53.0872 7088 t36wgps (804e3f7f4ae25acb0c0e5d7c5e6076c7) C:\Windows\system32\DRIVERS\t36wgps.sys
19:11:53.0903 7088 t36wgps - ok
19:11:54.0028 7088 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
19:11:54.0075 7088 Tcpip - ok
19:11:54.0247 7088 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
19:11:54.0278 7088 TCPIP6 - ok
19:11:54.0418 7088 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
19:11:54.0496 7088 tcpipreg - ok
19:11:54.0605 7088 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
19:11:54.0699 7088 TDPIPE - ok
19:11:54.0777 7088 TDTCP (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys
19:11:54.0839 7088 TDTCP - ok
19:11:54.0917 7088 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
19:11:55.0011 7088 tdx - ok
19:11:55.0073 7088 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
19:11:55.0105 7088 TermDD - ok
19:11:55.0198 7088 Thpdrv (9528f2a39cb660a49f0592d57127f370) C:\Windows\system32\DRIVERS\thpdrv.sys
19:11:55.0292 7088 Thpdrv - ok
19:11:55.0354 7088 Thpevm (e17dcde74ff00ca802643b4a9a4a4a5c) C:\Windows\system32\DRIVERS\Thpevm.SYS
19:11:55.0370 7088 Thpevm - ok
19:11:55.0432 7088 tosporte (90afa1a4451bbbee87c9f18a665d8121) C:\Windows\system32\DRIVERS\tosporte.sys
19:11:55.0463 7088 tosporte - ok
19:11:55.0557 7088 tosrfbd (360f19e411f0b94bdcc59e670c979392) C:\Windows\system32\DRIVERS\tosrfbd.sys
19:11:55.0588 7088 tosrfbd - ok
19:11:55.0666 7088 tosrfbnp (74392bab3f0d4810da8436ec79d6955d) C:\Windows\system32\Drivers\tosrfbnp.sys
19:11:55.0729 7088 tosrfbnp - ok
19:11:55.0807 7088 Tosrfcom (1ad9eb1b5abd0aeee4084c8153476f1e) C:\Windows\system32\Drivers\tosrfcom.sys
19:11:55.0869 7088 Tosrfcom - ok
19:11:55.0947 7088 tosrfec (9ee240f7029771b21cc6200be6516d60) C:\Windows\system32\DRIVERS\tosrfec.sys
19:11:55.0978 7088 tosrfec - ok
19:11:56.0009 7088 Tosrfhid (a72a3473180f378cc07d342803ffd580) C:\Windows\system32\DRIVERS\Tosrfhid.sys
19:11:56.0041 7088 Tosrfhid - ok
19:11:56.0103 7088 tosrfnds (b2a1a6538245fd69578224bbf2fd4677) C:\Windows\system32\DRIVERS\tosrfnds.sys
19:11:56.0134 7088 tosrfnds - ok
19:11:56.0197 7088 TosRfSnd (a929f2310c11ee32e8b6c2e9162c5baa) C:\Windows\system32\drivers\tosrfsnd.sys
19:11:56.0275 7088 TosRfSnd - ok
19:11:56.0368 7088 Tosrfusb (1734a114593150a2d2c2876b99151b2c) C:\Windows\system32\DRIVERS\tosrfusb.sys
19:11:56.0415 7088 Tosrfusb - ok
19:11:56.0493 7088 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\Windows\system32\drivers\tpm.sys
19:11:56.0571 7088 TPM - ok
19:11:56.0665 7088 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:11:56.0758 7088 tssecsrv - ok
19:11:56.0899 7088 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
19:11:56.0945 7088 TsUsbFlt - ok
19:11:57.0133 7088 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
19:11:57.0226 7088 tunnel - ok
19:11:57.0320 7088 TVALZ (6e614df4e1110dcf61b335ee02a34954) C:\Windows\system32\DRIVERS\TVALZ.SYS
19:11:57.0367 7088 TVALZ - ok
19:11:57.0445 7088 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
19:11:57.0491 7088 uagp35 - ok
19:11:57.0585 7088 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
19:11:57.0663 7088 udfs - ok
19:11:57.0757 7088 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
19:11:57.0803 7088 uliagpkx - ok
19:11:57.0881 7088 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
19:11:57.0959 7088 umbus - ok
19:11:58.0069 7088 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
19:11:58.0115 7088 UmPass - ok
19:11:58.0256 7088 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
19:11:58.0303 7088 usbaudio - ok
19:11:58.0412 7088 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
19:11:58.0459 7088 usbccgp - ok
19:11:58.0505 7088 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
19:11:58.0568 7088 usbcir - ok
19:11:58.0661 7088 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\drivers\usbehci.sys
19:11:58.0739 7088 usbehci - ok
19:11:58.0880 7088 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
19:11:58.0927 7088 usbhub - ok
19:11:59.0051 7088 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
19:11:59.0129 7088 usbohci - ok
19:11:59.0254 7088 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
19:11:59.0332 7088 usbprint - ok
19:11:59.0488 7088 usbser (31181de6190b39fc8007dffd1a48ffd6) C:\Windows\system32\drivers\usbser.sys
19:11:59.0582 7088 usbser - ok
19:11:59.0675 7088 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:11:59.0769 7088 USBSTOR - ok
19:11:59.0878 7088 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
19:11:59.0925 7088 usbuhci - ok
19:11:59.0972 7088 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys
19:12:00.0003 7088 usbvideo - ok
19:12:00.0112 7088 UVCFTR (237c444fbd1c697a2e3fa60f02c61f22) C:\Windows\system32\Drivers\UVCFTR_S.SYS
19:12:00.0175 7088 UVCFTR - ok
19:12:00.0253 7088 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
19:12:00.0284 7088 vdrvroot - ok
19:12:00.0362 7088 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
19:12:00.0440 7088 vga - ok
19:12:00.0502 7088 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
19:12:00.0611 7088 VgaSave - ok
19:12:00.0674 7088 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
19:12:00.0721 7088 vhdmp - ok
19:12:00.0814 7088 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
19:12:00.0861 7088 viaagp - ok
19:12:00.0939 7088 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
19:12:01.0001 7088 ViaC7 - ok
19:12:01.0095 7088 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
19:12:01.0142 7088 viaide - ok
19:12:01.0220 7088 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
19:12:01.0251 7088 vmbus - ok
19:12:01.0313 7088 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
19:12:01.0376 7088 VMBusHID - ok
19:12:01.0423 7088 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
19:12:01.0438 7088 volmgr - ok
19:12:01.0532 7088 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
19:12:01.0547 7088 volmgrx - ok
19:12:01.0641 7088 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
19:12:01.0703 7088 volsnap - ok
19:12:01.0797 7088 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
19:12:01.0828 7088 vsmraid - ok
19:12:01.0891 7088 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
19:12:01.0953 7088 vwifibus - ok
19:12:01.0969 7088 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
19:12:02.0031 7088 vwififlt - ok
19:12:02.0140 7088 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\Windows\system32\DRIVERS\vwifimp.sys
19:12:02.0187 7088 vwifimp - ok
19:12:02.0249 7088 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
19:12:02.0327 7088 WacomPen - ok
19:12:02.0421 7088 WacomVTHid (d126f319f0631a5238e0c4861fb91860) C:\Windows\system32\DRIVERS\WacomVTHid.sys
19:12:02.0468 7088 WacomVTHid - ok
19:12:02.0561 7088 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:12:02.0608 7088 WANARP - ok
19:12:02.0608 7088 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:12:02.0639 7088 Wanarpv6 - ok
19:12:02.0733 7088 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
19:12:02.0795 7088 Wd - ok
19:12:02.0873 7088 Wdf01000 (73c5809c82828e34232f9811cb51490e) C:\Windows\system32\drivers\Wdf01000.sys
19:12:02.0889 7088 Suspicious file (Forged): C:\Windows\system32\drivers\Wdf01000.sys. Real md5: 73c5809c82828e34232f9811cb51490e, Fake md5: 9950e3d0f08141c7e89e64456ae7dc73
19:12:02.0889 7088 Wdf01000 ( Virus.Win32.Rloader.a ) - infected
19:12:02.0889 7088 Wdf01000 - detected Virus.Win32.Rloader.a (0)
19:12:02.0998 7088 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
19:12:03.0092 7088 WfpLwf - ok
19:12:03.0170 7088 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
19:12:03.0217 7088 WIMMount - ok
19:12:03.0357 7088 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
19:12:03.0404 7088 WinUsb - ok
19:12:03.0497 7088 wisdpen (b20f6f5d1148965dc38e26af277f5115) C:\Windows\system32\DRIVERS\wisdpen.sys
19:12:03.0560 7088 wisdpen - ok
19:12:03.0685 7088 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
19:12:03.0763 7088 WmiAcpi - ok
19:12:03.0919 7088 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
19:12:04.0012 7088 ws2ifsl - ok
19:12:04.0168 7088 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
19:12:04.0246 7088 WudfPf - ok
19:12:04.0371 7088 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:12:04.0418 7088 WUDFRd - ok
19:12:04.0621 7088 WwanUsbServ (e6c02906f3dc3fd3337a4b756fca90da) C:\Windows\system32\DRIVERS\WwanUsbMp.sys
19:12:04.0683 7088 WwanUsbServ - ok
19:12:04.0745 7088 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:12:04.0948 7088 \Device\Harddisk0\DR0 - ok
19:12:04.0948 7088 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
19:12:05.0416 7088 \Device\Harddisk1\DR1 - ok
19:12:05.0432 7088 Boot (0x1200) (61b555200223c95bbf5e1bba1fc9016d) \Device\Harddisk0\DR0\Partition0
19:12:05.0432 7088 \Device\Harddisk0\DR0\Partition0 - ok
19:12:05.0463 7088 Boot (0x1200) (1134880f48cc8dd65f633bb58ec4b80d) \Device\Harddisk0\DR0\Partition1
19:12:05.0463 7088 \Device\Harddisk0\DR0\Partition1 - ok
19:12:05.0494 7088 Boot (0x1200) (2987a15b4c9725d4ae32be51ed138398) \Device\Harddisk1\DR1\Partition0
19:12:05.0510 7088 \Device\Harddisk1\DR1\Partition0 - ok
19:12:05.0510 7088 ============================================================
19:12:05.0510 7088 Scan finished
19:12:05.0510 7088 ============================================================
19:12:05.0525 5824 Detected object count: 1
19:12:05.0525 5824 Actual detected object count: 1
19:15:12.0507 5824 C:\Windows\system32\drivers\Wdf01000.sys - copied to quarantine
19:15:20.0495 5824 Backup copy not found, trying to cure infected file..
19:15:20.0495 5824 Cure success, using it..
19:15:20.0651 5824 C:\Windows\system32\drivers\Wdf01000.sys - will be cured on reboot
19:15:20.0651 5824 Wdf01000 ( Virus.Win32.Rloader.a ) - User select action: Cure
19:15:25.0689 4372 Deinitialize success

Nový logo z combofixu. Nevím jestli to nějak souvisí, ale v průběhu scanu 2x vyskočilo okno že "pev.exe havaroval a bude ukončen".

ComboFix 12-02-03.02 - Marta 03.02.2012 19:22:36.3.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.2937.1606 [GMT 1:00]
Spuštěný z: c:\users\NB\Desktop\abraka.com
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-03 do 2012-02-03 )))))))))))))))))))))))))))))))
.
.
2012-02-03 18:28 . 2012-02-03 18:28 -------- d-----w- c:\users\Marta\AppData\Local\temp
2012-02-03 18:28 . 2012-02-03 18:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-03 14:39 . 2012-02-03 16:21 512 ----a-w- C:\PhysicalMBR.bin
2012-02-03 10:26 . 2012-01-06 04:19 6557240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A69557F6-45BB-4306-B7F2-CC2A76D97182}\mpengine.dll
2012-02-03 08:49 . 2012-02-03 08:49 -------- d-----w- c:\program files\CCleaner
2012-02-03 08:07 . 2012-02-03 13:10 -------- d-----w- c:\program files\trend micro
2012-02-03 08:07 . 2012-02-03 08:07 -------- d-----w- C:\rsit
2012-02-03 06:31 . 2012-02-03 06:31 -------- d-----w- c:\program files\Common Files\Java
2012-02-02 21:04 . 2012-02-02 21:04 -------- d-----w- c:\users\NB\AppData\Local\GHISLER
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\UC.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\RAR.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\NOCLOSE.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\LHA.PIF
2012-02-02 21:03 . 2010-12-17 06:56 545 ----a-w- c:\windows\ARJ.PIF
2012-02-02 21:03 . 2012-02-02 21:03 -------- d-----w- C:\totalcmd
2012-02-02 21:03 . 2012-02-02 21:03 -------- d-----w- c:\users\NB\AppData\Roaming\GHISLER
2012-01-26 18:44 . 2012-01-26 18:44 -------- d-----w- c:\users\Marta\AppData\Local\Microsoft
2012-01-25 17:50 . 2011-11-17 05:41 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-01-25 17:50 . 2011-11-17 05:41 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-01-25 17:50 . 2011-11-17 05:39 369352 ----a-w- c:\windows\system32\drivers\cng.sys
2012-01-25 17:50 . 2011-11-17 05:35 314880 ----a-w- c:\windows\system32\webio.dll
2012-01-25 17:50 . 2011-11-17 05:34 224768 ----a-w- c:\windows\system32\schannel.dll
2012-01-25 17:50 . 2011-11-17 05:32 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2012-01-25 17:50 . 2011-11-17 05:29 22528 ----a-w- c:\windows\system32\lsass.exe
2012-01-25 17:50 . 2011-11-17 05:34 15872 ----a-w- c:\windows\system32\sspisrv.dll
2012-01-25 17:50 . 2011-11-17 05:34 100352 ----a-w- c:\windows\system32\sspicli.dll
2012-01-25 17:50 . 2011-11-17 05:34 22016 ----a-w- c:\windows\system32\secur32.dll
2012-01-20 14:03 . 2012-01-20 14:03 -------- d-----w- c:\users\NB\AppData\Roaming\Malwarebytes
2012-01-20 14:03 . 2012-01-20 14:03 -------- d-----w- c:\programdata\Malwarebytes
2012-01-20 14:02 . 2012-02-02 23:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-01-20 14:02 . 2011-12-10 14:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-20 12:22 . 2012-01-20 12:23 -------- d-sh--w- c:\users\NB\AppData\Roaming\Internet Security Guard
2012-01-20 12:22 . 2012-01-20 12:22 -------- d-sh--w- c:\programdata\ISJXDYHG
2012-01-20 12:21 . 2012-01-20 13:53 -------- d-sh--w- c:\programdata\f48c58
2012-01-15 14:16 . 2012-01-15 14:16 -------- d-----w- c:\program files\MSECache
2012-01-15 14:05 . 2012-01-15 14:05 -------- d-----w- c:\windows\cs
2012-01-15 14:04 . 2011-05-13 14:27 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2012-01-15 14:02 . 2012-01-15 14:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-01-15 14:00 . 2012-01-15 14:06 -------- d-----w- c:\program files\Windows Live
2012-01-15 13:58 . 2012-01-20 13:51 -------- d-----w- c:\program files\Microsoft
2012-01-15 13:58 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2012-01-15 13:58 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2012-01-15 13:58 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-01-15 13:58 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-01-15 13:57 . 2012-01-20 20:42 -------- d-----w- c:\program files\Microsoft Silverlight
2012-01-15 13:55 . 2012-02-03 09:01 -------- d-----w- c:\users\NB\AppData\Local\Windows Live
2012-01-15 13:55 . 2012-01-15 13:55 -------- d-----w- c:\program files\Common Files\Windows Live
2012-01-11 12:27 . 2011-11-17 05:38 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 12:27 . 2011-11-19 14:01 67072 ----a-w- c:\windows\system32\packager.dll
2012-01-11 12:27 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 12:27 . 2011-10-26 04:32 514560 ----a-w- c:\windows\system32\qdvd.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-03 18:16 . 2009-07-13 23:11 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-01-26 23:21 . 2010-06-17 12:52 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-15 14:00 . 2011-03-28 17:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-11-24 04:25 . 2011-12-15 09:33 2342912 ----a-w- c:\windows\system32\win32k.sys
2011-11-22 07:57 . 2011-06-06 07:56 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-17 05:34 . 2012-01-25 17:50 224768 ----a-w- c:\windows\system32\schannel.dll
2011-11-10 04:54 . 2010-06-21 18:49 472808 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ATFPUOverlayIcon]
@="{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}"
[HKEY_CLASSES_ROOT\CLSID\{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}]
2009-09-15 16:36 147888 ----a-w- c:\program files\TOSHIBA\TFPU\TFPUOverlayIcon.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WirelessManager"="c:\program files\TOSHIBA\TOSHIBA Wireless Manager\WirelessManager.exe" [2010-05-11 190504]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-06-21 39408]
"YouSendIt.exe"="c:\program files\YouSendIt\Express\YouSendIt.exe" [2011-05-02 198144]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ThpSrv"="c:\windows\system32\thpsrv" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-02 151064]
"TFPUPWDBankService"="c:\program files\TOSHIBA\TFPU\TFPUPWDBank.exe" [2009-09-15 888752]
"TFPUService"="c:\program files\TOSHIBA\TFPU\TFPUTaskMonitor.exe" [2009-09-15 784304]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2009-07-22 83336]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-28 7625248]
"IFXSPMGT"="c:\program files\Infineon\Security Platform Software\ifxspmgt.exe" [2009-08-04 1107232]
"TOSDCR"="c:\program files\TOSHIBA\PasswordUtility\TOSDCR.exe" [2007-08-28 169296]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2009-11-05 480608]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2009-03-09 55160]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2009-08-13 521528]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2009-11-10 738616]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2009-07-27 424496]
"TOSHIBA_3G_UTY"="c:\program files\Toshiba\3GUty\TW3GCTRL.exe" [2010-05-27 1592264]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2145000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2010-2-24 2721120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
R3 GemCCID;GemCCID;c:\windows\system32\Drivers\GemCCID.sys [2009-08-10 89600]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 135664]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2011-08-17 137472]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2011-08-17 8576]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-18 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys [2009-06-29 30272]
S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 13120]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\System32\drivers\psd.sys [2009-07-19 39712]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [2011-03-14 84520]
S2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\AtService.exe [2009-09-11 1811704]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [2009-08-10 185712]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-04-07 810120]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-04-07 96896]
S2 TTPDSrv;TOSHIBA Touch Pad Service;c:\windows\System32\TTPDSRV.exe [2007-11-07 73728]
S2 TW3GSVC;3G RF Power Control Utility;c:\program files\Toshiba\3GUty\tw3gsvc.exe [2009-12-18 127384]
S2 WMCoreService;Mobile Broadband Service;c:\program files\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode [x]
S2 WTouchService;WTouch Service;c:\program files\WTouch\WTouchService.exe [2008-08-01 95528]
S3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-09-14 659328]
S3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R);c:\windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
S3 ecnssndis;Service for enabling selective suspend to NDIS device;c:\windows\system32\Drivers\wwanuss.sys [2010-03-03 23592]
S3 ecnssndisfltr;SSNDIS filter service;c:\windows\system32\Drivers\wwanussf.sys [2010-03-03 26152]
S3 Mbm3CBus;TOSHIBA Mobile Broadband Device (WDM);c:\windows\system32\DRIVERS\Mbm3CBus.sys [2010-04-27 329160]
S3 Mbm3DevMt;TOSHIBA Mobile Broadband Device Management Driver (WDM);c:\windows\system32\DRIVERS\Mbm3DevMt.sys [2010-04-27 388552]
S3 Mbm3mdfl;TOSHIBA Mobile Broadband Modem Filter;c:\windows\system32\DRIVERS\Mbm3mdfl.sys [2010-04-27 14920]
S3 Mbm3Mdm;TOSHIBA Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\Mbm3Mdm.sys [2010-04-27 405320]
S3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 t36wgps;TOSHIBA Mobile Broadband GPS Port;c:\windows\system32\DRIVERS\t36wgps.sys [2010-01-25 82984]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 WacomVTHid;Virtual Touch Driver;c:\windows\system32\DRIVERS\WacomVTHid.sys [2008-07-09 13992]
S3 wisdpen;Wacom Penabled MiniDriver;c:\windows\system32\DRIVERS\wisdpen.sys [2008-03-27 30888]
S3 WwanUsbServ;Ericsson WWAN Wireless Module Device Driver;c:\windows\system32\DRIVERS\WwanUsbMp.sys [2010-04-22 229928]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 51112971
*Deregistered* - 51112971
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 18:38]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-21 18:38]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000Core.job
- c:\users\NB\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 15:08]
.
2012-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4030067740-548642678-3443040610-1000UA.job
- c:\users\NB\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 15:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz
Trusted Zone: mojebanka.cz
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} - hxxps://www.mojedatovaschranka.cz/static/pages/ ... ?3,16,13,0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-51112971.sys
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(5288)
c:\program files\TOSHIBA\TFPU\TFPUOverlayIcon.dll
.
Celkový čas: 2012-02-03 19:29:55
ComboFix-quarantined-files.txt 2012-02-03 18:29
ComboFix2.txt 2012-02-03 18:04
.
Před spuštěním: Volných bajtů: 48 935 796 736
Po spuštění: Volných bajtů: 48 879 648 768
.
- - End Of File - - AABB6462A76B6D0A2C82137C75B1B414

Dávám log z TS... a přiložen je z OTL, zatím děkuji. Jestli bude vyskakovat něco dalšího z Avastu napíšu.

19:41:23.0902 7640 TDSS rootkit removing tool 2.7.9.0 Feb 1 2012 09:28:49
19:41:23.0995 7640 ============================================================
19:41:23.0995 7640 Current date / time: 2012/02/03 19:41:23.0995
19:41:23.0995 7640 SystemInfo:
19:41:23.0995 7640
19:41:23.0995 7640 OS Version: 6.1.7601 ServicePack: 1.0
19:41:23.0995 7640 Product type: Workstation
19:41:23.0995 7640 ComputerName: NB-NB
19:41:23.0995 7640 UserName: Marta
19:41:23.0995 7640 Windows directory: C:\Windows
19:41:23.0995 7640 System windows directory: C:\Windows
19:41:24.0011 7640 Processor architecture: Intel x86
19:41:24.0011 7640 Number of processors: 2
19:41:24.0011 7640 Page size: 0x1000
19:41:24.0011 7640 Boot type: Normal boot
19:41:24.0011 7640 ============================================================
19:41:24.0526 7640 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:41:24.0526 7640 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:41:24.0822 7640 \Device\Harddisk0\DR0:
19:41:24.0822 7640 MBR used
19:41:24.0822 7640 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0xE8E2000
19:41:24.0822 7640 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xEBD0800, BlocksNum 0xE5F5000
19:41:24.0822 7640 \Device\Harddisk1\DR1:
19:41:24.0822 7640 MBR used
19:41:24.0822 7640 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
19:41:24.0962 7640 Initialize success
19:41:24.0962 7640 ============================================================
19:41:28.0738 3680 ============================================================
19:41:28.0738 3680 Scan started
19:41:28.0738 3680 Mode: Manual; SigCheck; TDLFS;
19:41:28.0738 3680 ============================================================
19:41:29.0299 3680 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
19:41:29.0424 3680 1394ohci - ok
19:41:29.0596 3680 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
19:41:29.0611 3680 ACPI - ok
19:41:29.0674 3680 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
19:41:29.0689 3680 AcpiPmi - ok
19:41:29.0845 3680 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
19:41:29.0861 3680 adp94xx - ok
19:41:30.0001 3680 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
19:41:30.0032 3680 adpahci - ok
19:41:30.0095 3680 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
19:41:30.0110 3680 adpu320 - ok
19:41:30.0266 3680 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
19:41:30.0344 3680 AFD - ok
19:41:30.0516 3680 AgereSoftModem (07758c2196a62f207f77556311e7459a) C:\Windows\system32\DRIVERS\AGRSM.sys
19:41:30.0547 3680 AgereSoftModem - ok
19:41:30.0672 3680 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
19:41:30.0688 3680 agp440 - ok
19:41:30.0781 3680 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
19:41:30.0812 3680 aic78xx - ok
19:41:30.0937 3680 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
19:41:30.0953 3680 aliide - ok
19:41:31.0031 3680 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
19:41:31.0062 3680 amdagp - ok
19:41:31.0280 3680 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
19:41:31.0312 3680 amdide - ok
19:41:31.0452 3680 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
19:41:31.0514 3680 AmdK8 - ok
19:41:31.0639 3680 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
19:41:31.0686 3680 AmdPPM - ok
19:41:31.0826 3680 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
19:41:31.0858 3680 amdsata - ok
19:41:31.0982 3680 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
19:41:32.0014 3680 amdsbs - ok
19:41:32.0060 3680 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
19:41:32.0076 3680 amdxata - ok
19:41:32.0185 3680 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
19:41:32.0248 3680 AppID - ok
19:41:32.0388 3680 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
19:41:32.0419 3680 arc - ok
19:41:32.0450 3680 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
19:41:32.0466 3680 arcsas - ok
19:41:32.0575 3680 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
19:41:32.0653 3680 AsyncMac - ok
19:41:32.0700 3680 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
19:41:32.0731 3680 atapi - ok
19:41:32.0887 3680 ATSwpWDF (53ff3096d5d9ae2a75c16703a9819965) C:\Windows\system32\Drivers\ATSwpWDF.sys
19:41:32.0934 3680 ATSwpWDF - ok
19:41:33.0074 3680 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
19:41:33.0137 3680 b06bdrv - ok
19:41:33.0293 3680 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
19:41:33.0324 3680 b57nd60x - ok
19:41:33.0464 3680 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
19:41:33.0527 3680 Beep - ok
19:41:33.0667 3680 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
19:41:33.0714 3680 blbdrive - ok
19:41:33.0761 3680 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
19:41:33.0823 3680 bowser - ok
19:41:33.0948 3680 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:41:34.0010 3680 BrFiltLo - ok
19:41:34.0120 3680 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:41:34.0166 3680 BrFiltUp - ok
19:41:34.0322 3680 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys
19:41:34.0400 3680 BridgeMP - ok
19:41:34.0463 3680 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
19:41:34.0510 3680 Brserid - ok
19:41:34.0619 3680 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
19:41:34.0666 3680 BrSerWdm - ok
19:41:34.0681 3680 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:41:34.0744 3680 BrUsbMdm - ok
19:41:34.0884 3680 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
19:41:34.0931 3680 BrUsbSer - ok
19:41:35.0009 3680 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
19:41:35.0056 3680 BTHMODEM - ok
19:41:35.0196 3680 catchme - ok
19:41:35.0352 3680 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
19:41:35.0414 3680 cdfs - ok
19:41:35.0570 3680 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
19:41:35.0602 3680 cdrom - ok
19:41:35.0726 3680 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
19:41:35.0773 3680 circlass - ok
19:41:35.0836 3680 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
19:41:35.0882 3680 CLFS - ok
19:41:36.0038 3680 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
19:41:36.0070 3680 CmBatt - ok
19:41:36.0101 3680 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
19:41:36.0116 3680 cmdide - ok
19:41:36.0226 3680 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
19:41:36.0272 3680 CNG - ok
19:41:36.0428 3680 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
19:41:36.0444 3680 Compbatt - ok
19:41:36.0584 3680 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
19:41:36.0631 3680 CompositeBus - ok
19:41:36.0772 3680 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
19:41:36.0787 3680 crcdisk - ok
19:41:36.0943 3680 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
19:41:36.0990 3680 CSC - ok
19:41:37.0130 3680 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
19:41:37.0208 3680 DfsC - ok
19:41:37.0333 3680 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
19:41:37.0396 3680 discache - ok
19:41:37.0536 3680 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
19:41:37.0567 3680 Disk - ok
19:41:37.0614 3680 Dot4 (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys
19:41:37.0676 3680 Dot4 - ok
19:41:37.0786 3680 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys
19:41:37.0832 3680 Dot4Print - ok
19:41:37.0957 3680 Dot4Scan (9f7de667c505ce6500becdd8e11644d7) C:\Windows\system32\DRIVERS\Dot4Scan.sys
19:41:38.0004 3680 Dot4Scan - ok
19:41:38.0051 3680 dot4usb (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys
19:41:38.0082 3680 dot4usb - ok
19:41:38.0207 3680 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
19:41:38.0269 3680 drmkaud - ok
19:41:38.0332 3680 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
19:41:38.0363 3680 DXGKrnl - ok
19:41:38.0472 3680 e1yexpress (8eef52ad831471e323ee7364a8656d35) C:\Windows\system32\DRIVERS\e1y6032.sys
19:41:38.0519 3680 e1yexpress - ok
19:41:38.0659 3680 eamonm (d78f1c5b7b01df050e011b4fffdb9048) C:\Windows\system32\DRIVERS\eamonm.sys
19:41:38.0675 3680 eamonm - ok
19:41:38.0862 3680 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
19:41:38.0924 3680 ebdrv - ok
19:41:39.0065 3680 ecnssndis (e922bc274fbd736b41020872c8aac390) C:\Windows\system32\Drivers\wwanuss.sys
19:41:39.0080 3680 ecnssndis - ok
19:41:39.0112 3680 ecnssndisfltr (15ca5cd73a30398c89247b3c5e933044) C:\Windows\system32\Drivers\wwanussf.sys
19:41:39.0127 3680 ecnssndisfltr - ok
19:41:39.0252 3680 ehdrv (3c747a0d8ce29720302972ac6ed09733) C:\Windows\system32\DRIVERS\ehdrv.sys
19:41:39.0283 3680 ehdrv - ok
19:41:39.0424 3680 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
19:41:39.0455 3680 elxstor - ok
19:41:39.0502 3680 epfwwfpr (abe850bebbed8d1454937756c2fa0a98) C:\Windows\system32\DRIVERS\epfwwfpr.sys
19:41:39.0502 3680 epfwwfpr - ok
19:41:39.0611 3680 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
19:41:39.0658 3680 ErrDev - ok
19:41:39.0814 3680 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
19:41:39.0876 3680 exfat - ok
19:41:40.0001 3680 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
19:41:40.0063 3680 fastfat - ok
19:41:40.0188 3680 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
19:41:40.0219 3680 fdc - ok
19:41:40.0250 3680 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
19:41:40.0266 3680 FileInfo - ok
19:41:40.0375 3680 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
19:41:40.0453 3680 Filetrace - ok
19:41:40.0484 3680 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
19:41:40.0516 3680 flpydisk - ok
19:41:40.0640 3680 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
19:41:40.0672 3680 FltMgr - ok
19:41:40.0703 3680 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
19:41:40.0718 3680 FsDepends - ok
19:41:40.0859 3680 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys
19:41:40.0874 3680 fssfltr - ok
19:41:41.0030 3680 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
19:41:41.0046 3680 Fs_Rec - ok
19:41:41.0186 3680 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
19:41:41.0233 3680 fvevol - ok
19:41:41.0280 3680 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:41:41.0296 3680 gagp30kx - ok
19:41:41.0420 3680 GemCCID (86d3d834d35ebe920d85ffedcef79faf) C:\Windows\system32\Drivers\GemCCID.sys
19:41:41.0467 3680 GemCCID - ok
19:41:41.0623 3680 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
19:41:41.0670 3680 hcw85cir - ok
19:41:41.0732 3680 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
19:41:41.0779 3680 HdAudAddService - ok
19:41:41.0904 3680 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
19:41:41.0966 3680 HDAudBus - ok
19:41:42.0091 3680 HECI (2df64415a28ce036ac6acec7645a996f) C:\Windows\system32\DRIVERS\HECI.sys
19:41:42.0138 3680 HECI - ok
19:41:42.0185 3680 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
19:41:42.0232 3680 HidBatt - ok
19:41:42.0356 3680 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
19:41:42.0388 3680 HidBth - ok
19:41:42.0450 3680 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
19:41:42.0512 3680 HidIr - ok
19:41:42.0590 3680 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
19:41:42.0653 3680 HidUsb - ok
19:41:42.0731 3680 HPFXBULK (9e3944a558ab84853ef985988e23a8a4) C:\Windows\system32\drivers\hpfxbulk.sys
19:41:42.0793 3680 HPFXBULK - ok
19:41:42.0902 3680 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
19:41:42.0934 3680 HpSAMD - ok
19:41:43.0012 3680 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
19:41:43.0058 3680 HTTP - ok
19:41:43.0168 3680 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
19:41:43.0183 3680 hwpolicy - ok
19:41:43.0246 3680 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
19:41:43.0277 3680 i8042prt - ok
19:41:43.0417 3680 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
19:41:43.0448 3680 iaStor - ok
19:41:43.0558 3680 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
19:41:43.0589 3680 iaStorV - ok
19:41:43.0792 3680 igfx (315aaaa2bc9bc778adc0454b3ca8dcce) C:\Windows\system32\DRIVERS\igdkmd32.sys
19:41:43.0885 3680 igfx - ok
19:41:44.0072 3680 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
19:41:44.0104 3680 iirsp - ok
19:41:44.0260 3680 IntcAzAudAddService (e4a2e810cb2607c9c159c0dfb0bd4c88) C:\Windows\system32\drivers\RTKVHDA.sys
19:41:44.0338 3680 IntcAzAudAddService - ok
19:41:44.0431 3680 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
19:41:44.0462 3680 intelide - ok
19:41:44.0509 3680 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
19:41:44.0540 3680 intelppm - ok
19:41:44.0650 3680 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:41:44.0696 3680 IpFilterDriver - ok
19:41:44.0759 3680 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
19:41:44.0806 3680 IPMIDRV - ok
19:41:44.0930 3680 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
19:41:45.0008 3680 IPNAT - ok
19:41:45.0133 3680 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
19:41:45.0180 3680 IRENUM - ok
19:41:45.0336 3680 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
19:41:45.0367 3680 isapnp - ok
19:41:45.0430 3680 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
19:41:45.0461 3680 iScsiPrt - ok
19:41:45.0570 3680 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
19:41:45.0586 3680 kbdclass - ok
19:41:45.0648 3680 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
19:41:45.0679 3680 kbdhid - ok
19:41:45.0773 3680 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
19:41:45.0804 3680 KSecDD - ok
19:41:45.0851 3680 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
19:41:45.0882 3680 KSecPkg - ok
19:41:45.0991 3680 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
19:41:46.0038 3680 lltdio - ok
19:41:46.0100 3680 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:41:46.0132 3680 LSI_FC - ok
19:41:46.0241 3680 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:41:46.0272 3680 LSI_SAS - ok
19:41:46.0319 3680 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:41:46.0350 3680 LSI_SAS2 - ok
19:41:46.0444 3680 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:41:46.0459 3680 LSI_SCSI - ok
19:41:46.0522 3680 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
19:41:46.0600 3680 luafv - ok
19:41:46.0724 3680 Mbm3CBus (1241acd31435748c2c0466c5f31a3b5c) C:\Windows\system32\DRIVERS\Mbm3CBus.sys
19:41:46.0756 3680 Mbm3CBus - ok
19:41:46.0896 3680 Mbm3DevMt (f03f62d9bf6fc75930a0597824557f7b) C:\Windows\system32\DRIVERS\Mbm3DevMt.sys
19:41:46.0927 3680 Mbm3DevMt - ok
19:41:47.0052 3680 Mbm3mdfl (ccf2afbaa38c4d9f20b9f5f8473071aa) C:\Windows\system32\DRIVERS\Mbm3mdfl.sys
19:41:47.0068 3680 Mbm3mdfl - ok
19:41:47.0114 3680 Mbm3Mdm (d15e93b9cae9f6baf44a47eda692fa57) C:\Windows\system32\DRIVERS\Mbm3Mdm.sys
19:41:47.0130 3680 Mbm3Mdm - ok
19:41:47.0224 3680 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
19:41:47.0255 3680 megasas - ok
19:41:47.0302 3680 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
19:41:47.0333 3680 MegaSR - ok
19:41:47.0348 3680 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
19:41:47.0380 3680 Modem - ok
19:41:47.0489 3680 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
19:41:47.0536 3680 monitor - ok
19:41:47.0676 3680 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
19:41:47.0692 3680 mouclass - ok
19:41:47.0816 3680 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
19:41:47.0879 3680 mouhid - ok
19:41:48.0004 3680 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
19:41:48.0035 3680 mountmgr - ok
19:41:48.0097 3680 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
19:41:48.0113 3680 mpio - ok
19:41:48.0222 3680 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
19:41:48.0284 3680 mpsdrv - ok
19:41:48.0331 3680 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
19:41:48.0347 3680 MRxDAV - ok
19:41:48.0472 3680 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:41:48.0503 3680 mrxsmb - ok
19:41:48.0550 3680 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:41:48.0581 3680 mrxsmb10 - ok
19:41:48.0690 3680 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:41:48.0737 3680 mrxsmb20 - ok
19:41:48.0784 3680 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
19:41:48.0815 3680 msahci - ok
19:41:48.0924 3680 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
19:41:48.0955 3680 msdsm - ok
19:41:49.0096 3680 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
19:41:49.0142 3680 Msfs - ok
19:41:49.0220 3680 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
19:41:49.0283 3680 mshidkmdf - ok
19:41:49.0345 3680 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
19:41:49.0361 3680 msisadrv - ok
19:41:49.0454 3680 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
19:41:49.0517 3680 MSKSSRV - ok
19:41:49.0595 3680 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
19:41:49.0657 3680 MSPCLOCK - ok
19:41:49.0735 3680 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
19:41:49.0813 3680 MSPQM - ok
19:41:49.0876 3680 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
19:41:49.0907 3680 MsRPC - ok
19:41:50.0000 3680 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
19:41:50.0016 3680 mssmbios - ok
19:41:50.0110 3680 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
19:41:50.0172 3680 MSTEE - ok
19:41:50.0250 3680 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
19:41:50.0281 3680 MTConfig - ok
19:41:50.0359 3680 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
19:41:50.0375 3680 Mup - ok
19:41:50.0484 3680 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
19:41:50.0546 3680 NativeWifiP - ok
19:41:50.0671 3680 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
19:41:50.0702 3680 NDIS - ok
19:41:50.0812 3680 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
19:41:50.0890 3680 NdisCap - ok
19:41:51.0030 3680 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
19:41:51.0092 3680 NdisTapi - ok
19:41:51.0233 3680 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
19:41:51.0280 3680 Ndisuio - ok
19:41:51.0326 3680 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
19:41:51.0342 3680 NdisWan - ok
19:41:51.0482 3680 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
19:41:51.0545 3680 NDProxy - ok
19:41:51.0670 3680 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
19:41:51.0732 3680 NetBIOS - ok
19:41:51.0841 3680 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
19:41:51.0904 3680 NetBT - ok
19:41:52.0216 3680 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\Windows\system32\DRIVERS\NETw5s32.sys
19:41:52.0309 3680 NETw5s32 - ok
19:41:52.0543 3680 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
19:41:52.0606 3680 netw5v32 - ok
19:41:52.0746 3680 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
19:41:52.0762 3680 nfrd960 - ok
19:41:52.0902 3680 nmwcdnsu (4f0de685a96dc843ccc8a861b3fac12d) C:\Windows\system32\drivers\nmwcdnsu.sys
19:41:52.0949 3680 nmwcdnsu - ok
19:41:53.0074 3680 nmwcdnsuc (578117c0c0cf10d99c8853e83c4bc63c) C:\Windows\system32\drivers\nmwcdnsuc.sys
19:41:53.0136 3680 nmwcdnsuc - ok
19:41:53.0198 3680 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
19:41:53.0261 3680 Npfs - ok
19:41:53.0354 3680 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
19:41:53.0417 3680 nsiproxy - ok
19:41:53.0495 3680 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
19:41:53.0542 3680 Ntfs - ok
19:41:53.0635 3680 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
19:41:53.0713 3680 Null - ok
19:41:53.0822 3680 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
19:41:53.0854 3680 nvraid - ok
19:41:53.0978 3680 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
19:41:54.0010 3680 nvstor - ok
19:41:54.0056 3680 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
19:41:54.0056 3680 nv_agp - ok
19:41:54.0212 3680 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
19:41:54.0259 3680 ohci1394 - ok
19:41:54.0384 3680 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
19:41:54.0415 3680 Parport - ok
19:41:54.0462 3680 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
19:41:54.0478 3680 partmgr - ok
19:41:54.0509 3680 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
19:41:54.0524 3680 Parvdm - ok
19:41:54.0665 3680 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
19:41:54.0712 3680 pccsmcfd - ok
19:41:54.0821 3680 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
19:41:54.0852 3680 pci - ok
19:41:54.0930 3680 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
19:41:54.0946 3680 pciide - ok
19:41:55.0024 3680 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
19:41:55.0039 3680 pcmcia - ok
19:41:55.0117 3680 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
19:41:55.0148 3680 pcw - ok
19:41:55.0226 3680 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
19:41:55.0304 3680 PEAUTH - ok
19:41:55.0507 3680 PersonalSecureDrive (b27f1df5abc5240480d4d2d9666867a5) C:\Windows\System32\drivers\psd.sys
19:41:55.0523 3680 PersonalSecureDrive - ok
19:41:55.0663 3680 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
19:41:55.0741 3680 PptpMiniport - ok
19:41:55.0850 3680 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
19:41:55.0866 3680 Processor - ok
19:41:55.0913 3680 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
19:41:55.0960 3680 Psched - ok
19:41:56.0116 3680 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
19:41:56.0147 3680 ql2300 - ok
19:41:56.0272 3680 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
19:41:56.0303 3680 ql40xx - ok
19:41:56.0334 3680 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
19:41:56.0350 3680 QWAVEdrv - ok
19:41:56.0459 3680 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
19:41:56.0506 3680 RasAcd - ok
19:41:56.0646 3680 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:41:56.0677 3680 RasAgileVpn - ok
19:41:56.0755 3680 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:41:56.0833 3680 Rasl2tp - ok
19:41:56.0942 3680 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
19:41:57.0020 3680 RasPppoe - ok
19:41:57.0145 3680 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
19:41:57.0176 3680 RasSstp - ok
19:41:57.0223 3680 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
19:41:57.0301 3680 rdbss - ok
19:41:57.0410 3680 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
19:41:57.0426 3680 rdpbus - ok
19:41:57.0488 3680 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:41:57.0520 3680 RDPCDD - ok
19:41:57.0676 3680 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
19:41:57.0738 3680 RDPDR - ok
19:41:57.0894 3680 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
19:41:57.0972 3680 RDPENCDD - ok
19:41:58.0081 3680 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
19:41:58.0144 3680 RDPREFMP - ok
19:41:58.0190 3680 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
19:41:58.0237 3680 RDPWD - ok
19:41:58.0378 3680 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
19:41:58.0393 3680 rdyboost - ok
19:41:58.0440 3680 rimmptsk (df672613fbbcd58c38bb0bc2694bcfb0) C:\Windows\system32\DRIVERS\rimmptsk.sys
19:41:58.0487 3680 rimmptsk - ok
19:41:58.0596 3680 rimsptsk (9bfb54d3559f2ff7301271d29d383564) C:\Windows\system32\DRIVERS\rimsptsk.sys
19:41:58.0612 3680 rimsptsk - ok
19:41:58.0752 3680 rismxdp (dcb87da83cc1010cbc9fc4dc9e395bbc) C:\Windows\system32\DRIVERS\rixdptsk.sys
19:41:58.0768 3680 rismxdp - ok
19:41:58.0924 3680 ROOTMODEM (564297827d213f52c7a3a2ff749568ca) C:\Windows\system32\Drivers\RootMdm.sys
19:41:59.0002 3680 ROOTMODEM - ok
19:41:59.0142 3680 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
19:41:59.0204 3680 rspndr - ok
19:41:59.0314 3680 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
19:41:59.0360 3680 s3cap - ok
19:41:59.0485 3680 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
19:41:59.0516 3680 sbp2port - ok
19:41:59.0641 3680 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
19:41:59.0688 3680 scfilter - ok
19:41:59.0735 3680 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
19:41:59.0782 3680 sdbus - ok
19:41:59.0906 3680 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
19:41:59.0984 3680 secdrv - ok
19:42:00.0125 3680 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
19:42:00.0156 3680 Serenum - ok
19:42:00.0172 3680 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
19:42:00.0203 3680 Serial - ok
19:42:00.0343 3680 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
19:42:00.0374 3680 sermouse - ok
19:42:00.0499 3680 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
19:42:00.0577 3680 sffdisk - ok
19:42:00.0593 3680 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
19:42:00.0608 3680 sffp_mmc - ok
19:42:00.0655 3680 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
19:42:00.0686 3680 sffp_sd - ok
19:42:00.0827 3680 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
19:42:00.0874 3680 sfloppy - ok
19:42:00.0998 3680 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
19:42:01.0030 3680 sisagp - ok
19:42:01.0092 3680 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:42:01.0123 3680 SiSRaid2 - ok
19:42:01.0201 3680 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
19:42:01.0232 3680 SiSRaid4 - ok
19:42:01.0295 3680 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
19:42:01.0342 3680 Smb - ok
19:42:01.0482 3680 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
19:42:01.0513 3680 spldr - ok
19:42:01.0638 3680 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
19:42:01.0669 3680 srv - ok
19:42:01.0700 3680 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
19:42:01.0716 3680 srv2 - ok
19:42:01.0794 3680 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
19:42:01.0825 3680 srvnet - ok
19:42:01.0903 3680 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
19:42:01.0919 3680 stexstor - ok
19:42:01.0966 3680 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
19:42:01.0981 3680 storflt - ok
19:42:02.0075 3680 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
19:42:02.0106 3680 storvsc - ok
19:42:02.0153 3680 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
19:42:02.0168 3680 swenum - ok
19:42:02.0293 3680 t36wgps (804e3f7f4ae25acb0c0e5d7c5e6076c7) C:\Windows\system32\DRIVERS\t36wgps.sys
19:42:02.0309 3680 t36wgps - ok
19:42:02.0418 3680 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
19:42:02.0449 3680 Tcpip - ok
19:42:02.0605 3680 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
19:42:02.0636 3680 TCPIP6 - ok
19:42:02.0761 3680 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
19:42:02.0839 3680 tcpipreg - ok
19:42:02.0948 3680 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
19:42:03.0026 3680 TDPIPE - ok
19:42:03.0058 3680 TDTCP (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys
19:42:03.0089 3680 TDTCP - ok
19:42:03.0214 3680 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
19:42:03.0292 3680 tdx - ok
19:42:03.0323 3680 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
19:42:03.0338 3680 TermDD - ok
19:42:03.0463 3680 Thpdrv (9528f2a39cb660a49f0592d57127f370) C:\Windows\system32\DRIVERS\thpdrv.sys
19:42:03.0494 3680 Thpdrv - ok
19:42:03.0510 3680 Thpevm (e17dcde74ff00ca802643b4a9a4a4a5c) C:\Windows\system32\DRIVERS\Thpevm.SYS
19:42:03.0510 3680 Thpevm - ok
19:42:03.0572 3680 tosporte (90afa1a4451bbbee87c9f18a665d8121) C:\Windows\system32\DRIVERS\tosporte.sys
19:42:03.0588 3680 tosporte - ok
19:42:03.0713 3680 tosrfbd (360f19e411f0b94bdcc59e670c979392) C:\Windows\system32\DRIVERS\tosrfbd.sys
19:42:03.0728 3680 tosrfbd - ok
19:42:03.0775 3680 tosrfbnp (74392bab3f0d4810da8436ec79d6955d) C:\Windows\system32\Drivers\tosrfbnp.sys
19:42:03.0775 3680 tosrfbnp - ok
19:42:03.0900 3680 Tosrfcom (1ad9eb1b5abd0aeee4084c8153476f1e) C:\Windows\system32\Drivers\tosrfcom.sys
19:42:03.0916 3680 Tosrfcom - ok
19:42:03.0947 3680 tosrfec (9ee240f7029771b21cc6200be6516d60) C:\Windows\system32\DRIVERS\tosrfec.sys
19:42:03.0962 3680 tosrfec - ok
19:42:04.0072 3680 Tosrfhid (a72a3473180f378cc07d342803ffd580) C:\Windows\system32\DRIVERS\Tosrfhid.sys
19:42:04.0087 3680 Tosrfhid - ok
19:42:04.0118 3680 tosrfnds (b2a1a6538245fd69578224bbf2fd4677) C:\Windows\system32\DRIVERS\tosrfnds.sys
19:42:04.0134 3680 tosrfnds - ok
19:42:04.0150 3680 TosRfSnd (a929f2310c11ee32e8b6c2e9162c5baa) C:\Windows\system32\drivers\tosrfsnd.sys
19:42:04.0181 3680 TosRfSnd - ok
19:42:04.0306 3680 Tosrfusb (1734a114593150a2d2c2876b99151b2c) C:\Windows\system32\DRIVERS\tosrfusb.sys
19:42:04.0321 3680 Tosrfusb - ok
19:42:04.0384 3680 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\Windows\system32\drivers\tpm.sys
19:42:04.0415 3680 TPM - ok
19:42:04.0555 3680 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:42:04.0586 3680 tssecsrv - ok
19:42:04.0727 3680 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
19:42:04.0758 3680 TsUsbFlt - ok
19:42:04.0945 3680 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
19:42:05.0023 3680 tunnel - ok
19:42:05.0101 3680 TVALZ (6e614df4e1110dcf61b335ee02a34954) C:\Windows\system32\DRIVERS\TVALZ.SYS
19:42:05.0132 3680 TVALZ - ok
19:42:05.0226 3680 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
19:42:05.0257 3680 uagp35 - ok
19:42:05.0366 3680 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
19:42:05.0398 3680 udfs - ok
19:42:05.0507 3680 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
19:42:05.0538 3680 uliagpkx - ok
19:42:05.0663 3680 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
19:42:05.0725 3680 umbus - ok
19:42:05.0850 3680 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
19:42:05.0897 3680 UmPass - ok
19:42:06.0037 3680 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
19:42:06.0100 3680 usbaudio - ok
19:42:06.0209 3680 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
19:42:06.0240 3680 usbccgp - ok
19:42:06.0287 3680 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
19:42:06.0334 3680 usbcir - ok
19:42:06.0427 3680 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\drivers\usbehci.sys
19:42:06.0474 3680 usbehci - ok
19:42:06.0614 3680 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
19:42:06.0677 3680 usbhub - ok
19:42:06.0786 3680 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
19:42:06.0833 3680 usbohci - ok
19:42:06.0880 3680 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
19:42:06.0911 3680 usbprint - ok
19:42:07.0036 3680 usbser (31181de6190b39fc8007dffd1a48ffd6) C:\Windows\system32\drivers\usbser.sys
19:42:07.0082 3680 usbser - ok
19:42:07.0176 3680 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:42:07.0238 3680 USBSTOR - ok
19:42:07.0332 3680 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
19:42:07.0363 3680 usbuhci - ok
19:42:07.0394 3680 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys
19:42:07.0426 3680 usbvideo - ok
19:42:07.0535 3680 UVCFTR (237c444fbd1c697a2e3fa60f02c61f22) C:\Windows\system32\Drivers\UVCFTR_S.SYS
19:42:07.0566 3680 UVCFTR - ok
19:42:07.0613 3680 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
19:42:07.0628 3680 vdrvroot - ok
19:42:07.0738 3680 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
19:42:07.0800 3680 vga - ok
19:42:07.0847 3680 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
19:42:07.0894 3680 VgaSave - ok
19:42:07.0987 3680 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
19:42:08.0018 3680 vhdmp - ok
19:42:08.0143 3680 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
19:42:08.0174 3680 viaagp - ok
19:42:08.0221 3680 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
19:42:08.0268 3680 ViaC7 - ok
19:42:08.0362 3680 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
19:42:08.0393 3680 viaide - ok
19:42:08.0455 3680 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
19:42:08.0486 3680 vmbus - ok
19:42:08.0564 3680 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
19:42:08.0611 3680 VMBusHID - ok
19:42:08.0658 3680 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
19:42:08.0674 3680 volmgr - ok
19:42:08.0767 3680 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
19:42:08.0798 3680 volmgrx - ok
19:42:08.0830 3680 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
19:42:08.0845 3680 volsnap - ok
19:42:08.0954 3680 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
19:42:08.0986 3680 vsmraid - ok
19:42:09.0032 3680 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
19:42:09.0048 3680 vwifibus - ok
19:42:09.0157 3680 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
19:42:09.0204 3680 vwififlt - ok
19:42:09.0329 3680 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\Windows\system32\DRIVERS\vwifimp.sys
19:42:09.0376 3680 vwifimp - ok
19:42:09.0391 3680 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
19:42:09.0422 3680 WacomPen - ok
19:42:09.0563 3680 WacomVTHid (d126f319f0631a5238e0c4861fb91860) C:\Windows\system32\DRIVERS\WacomVTHid.sys
19:42:09.0578 3680 WacomVTHid - ok
19:42:09.0625 3680 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:42:09.0656 3680 WANARP - ok
19:42:09.0656 3680 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:42:09.0688 3680 Wanarpv6 - ok
19:42:09.0812 3680 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
19:42:09.0844 3680 Wd - ok
19:42:09.0890 3680 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
19:42:09.0906 3680 Wdf01000 - ok
19:42:10.0046 3680 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
19:42:10.0124 3680 WfpLwf - ok
19:42:10.0249 3680 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
19:42:10.0280 3680 WIMMount - ok
19:42:10.0436 3680 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
19:42:10.0483 3680 WinUsb - ok
19:42:10.0608 3680 wisdpen (b20f6f5d1148965dc38e26af277f5115) C:\Windows\system32\DRIVERS\wisdpen.sys
19:42:10.0639 3680 wisdpen - ok
19:42:10.0811 3680 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
19:42:10.0858 3680 WmiAcpi - ok
19:42:11.0014 3680 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
19:42:11.0076 3680 ws2ifsl - ok
19:42:11.0232 3680 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
19:42:11.0294 3680 WudfPf - ok
19:42:11.0419 3680 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:42:11.0497 3680 WUDFRd - ok
19:42:11.0653 3680 WwanUsbServ (e6c02906f3dc3fd3337a4b756fca90da) C:\Windows\system32\DRIVERS\WwanUsbMp.sys
19:42:11.0669 3680 WwanUsbServ - ok
19:42:11.0747 3680 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:42:11.0934 3680 \Device\Harddisk0\DR0 - ok
19:42:11.0950 3680 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
19:42:12.0402 3680 \Device\Harddisk1\DR1 - ok
19:42:12.0418 3680 Boot (0x1200) (61b555200223c95bbf5e1bba1fc9016d) \Device\Harddisk0\DR0\Partition0
19:42:12.0418 3680 \Device\Harddisk0\DR0\Partition0 - ok
19:42:12.0449 3680 Boot (0x1200) (1134880f48cc8dd65f633bb58ec4b80d) \Device\Harddisk0\DR0\Partition1
19:42:12.0449 3680 \Device\Harddisk0\DR0\Partition1 - ok
19:42:12.0449 3680 Boot (0x1200) (2987a15b4c9725d4ae32be51ed138398) \Device\Harddisk1\DR1\Partition0
19:42:12.0449 3680 \Device\Harddisk1\DR1\Partition0 - ok
19:42:12.0464 3680 ============================================================
19:42:12.0464 3680 Scan finished
19:42:12.0464 3680 ============================================================
19:42:12.0480 2604 Detected object count: 0
19:42:12.0480 2604 Actual detected object count: 0
19:42:22.0480 3264 Deinitialize success

Nod zatím taky nic nehlásí, tak snad to bude OK. Ty programy (OTL, TSkiller, combofix/abraka), můžu normálně smazat?
Děkuju.

VIRY.CZ

Avast hlasí viry a nemůže je smazat

Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat

Re: Avast hlasí viry a nemůže je smazat