VIRY.CZ

Poblémem je zamrzání win až na několik minut. V rámci jedné hodiny je toto zamrznutí třeba 4krát.
Předem děkuju za kontrolu.




Logfile of random's system information tool 1.09 (written by random/random)
Run by Melf at 2012-04-12 21:35:27
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 182 GB (62%) free of 291 GB
Total RAM: 3039 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:35:36, on 12.4.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Mv2Player\Mv2PlayerPlus.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Melf\Downloads\RSIT.exe
C:\Program Files\trend micro\Melf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.zcu.cz/wps/portal/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe

--
End of file - 3776 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 3080264]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-11-02 59240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-11-02 59240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
C:\Program Files\DAEMON Tools Pro\DTAgent.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2011-11-13 421736]

C:\Users\Melf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.3.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-04-12 21:34:35 ----D---- C:\rsit
2012-04-12 21:34:35 ----D---- C:\Program Files\trend micro
2012-04-12 12:19:30 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-04-12 12:11:27 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-04-12 12:11:26 ----A---- C:\Windows\system32\wmi.dll
2012-04-12 12:11:26 ----A---- C:\Windows\system32\wintrust.dll
2012-04-12 12:11:26 ----A---- C:\Windows\system32\imagehlp.dll
2012-04-12 12:11:00 ----A---- C:\Windows\system32\ntkrnlpa.exe
2012-04-12 12:10:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-04-12 00:57:57 ----A---- C:\Windows\system32\mshtml.dll
2012-04-12 00:56:31 ----A---- C:\Windows\system32\ieframe.dll
2012-04-12 00:56:29 ----A---- C:\Windows\system32\urlmon.dll
2012-04-12 00:56:29 ----A---- C:\Windows\system32\iertutil.dll
2012-04-12 00:56:27 ----A---- C:\Windows\system32\wininet.dll
2012-04-12 00:56:27 ----A---- C:\Windows\system32\msfeeds.dll
2012-04-12 00:56:27 ----A---- C:\Windows\system32\ieui.dll
2012-04-12 00:56:26 ----A---- C:\Windows\system32\mshtmled.dll
2012-04-12 00:56:26 ----A---- C:\Windows\system32\jsproxy.dll
2012-04-12 00:56:25 ----A---- C:\Windows\system32\url.dll
2012-04-11 15:39:54 ----D---- C:\Program Files\Mv2Player
2012-04-10 16:25:43 ----D---- C:\Users\Melf\AppData\Roaming\OpenOffice.org
2012-04-10 16:17:22 ----D---- C:\Program Files\OpenOffice.org 3
2012-04-04 00:39:34 ----A---- C:\Windows\system32\win32k.sys
2012-04-04 00:39:28 ----A---- C:\Windows\system32\DWrite.dll
2012-04-04 00:36:05 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-04-04 00:36:05 ----A---- C:\Windows\system32\rdpwsx.dll
2012-04-04 00:36:05 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-04-04 00:36:02 ----A---- C:\Windows\system32\rdpcorets.dll
2012-04-04 00:36:02 ----A---- C:\Windows\system32\rdpcore.dll
2012-04-04 00:36:01 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-04-04 00:36:01 ----A---- C:\Windows\system32\drivers\rdpwd.sys

======List of files/folders modified in the last 1 month======

2012-04-12 21:35:12 ----D---- C:\Windows\Prefetch
2012-04-12 21:34:35 ----RD---- C:\Program Files
2012-04-12 21:33:43 ----D---- C:\Windows\inf
2012-04-12 21:33:14 ----D---- C:\Program Files\PokerStars
2012-04-12 21:32:50 ----D---- C:\Windows\system32\DriverStore
2012-04-12 21:32:50 ----D---- C:\Windows\system32\drivers
2012-04-12 21:32:50 ----D---- C:\Windows\system32\catroot
2012-04-12 21:31:18 ----D---- C:\Windows\Temp
2012-04-12 21:31:18 ----D---- C:\Windows\Panther
2012-04-12 21:31:18 ----D---- C:\Windows\Minidump
2012-04-12 21:31:18 ----D---- C:\Windows\Logs
2012-04-12 21:31:18 ----D---- C:\Windows\debug
2012-04-12 21:31:18 ----D---- C:\Windows
2012-04-12 21:30:55 ----D---- C:\Program Files\CCleaner
2012-04-12 18:39:13 ----D---- C:\Windows\system32\config
2012-04-12 17:43:13 ----SHD---- C:\System Volume Information
2012-04-12 16:45:18 ----D---- C:\Windows\Microsoft.NET
2012-04-12 16:45:06 ----RSD---- C:\Windows\assembly
2012-04-12 16:35:44 ----D---- C:\Windows\winsxs
2012-04-12 16:34:31 ----D---- C:\Windows\System32
2012-04-12 16:34:30 ----D---- C:\Windows\system32\migration
2012-04-12 16:34:30 ----D---- C:\Program Files\Internet Explorer
2012-04-12 15:37:50 ----D---- C:\Windows\system32\NDF
2012-04-12 12:19:31 ----D---- C:\Windows\Tasks
2012-04-12 12:19:31 ----D---- C:\Windows\system32\Tasks
2012-04-12 12:13:37 ----SHD---- C:\Windows\Installer
2012-04-12 12:12:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-04-12 00:56:21 ----D---- C:\Windows\system32\catroot2
2012-04-10 18:05:56 ----D---- C:\Users\Melf\AppData\Roaming\SoftGrid Client
2012-04-10 16:17:43 ----RSD---- C:\Windows\Fonts
2012-04-09 16:15:46 ----D---- C:\Program Files\Counter-Strike 1.6
2012-04-04 03:03:04 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 163424]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 103112]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2007-08-03 9344]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 579944]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 194408]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 21864]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 19304]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2011-08-02 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-24 55144]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-22 974944]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [2012-04-06 624856]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 253600]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-11-13 821608]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-09 1343400]

-----------------EOF-----------------

Děkuju moc za odpověď.
Doufám, že jsem postup nikde nespletl ale v bodě kde mi měla vyskočit tabulka se "skip", mi neviskočila žádná.
Nicméně na "C" se opravdu log vytvořil .... viz níže.

Ještě jednou děkuju



14:38:31.0062 4556 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
14:38:31.0205 4556 ============================================================
14:38:31.0205 4556 Current date / time: 2012/04/15 14:38:31.0205
14:38:31.0205 4556 SystemInfo:
14:38:31.0205 4556
14:38:31.0205 4556 OS Version: 6.1.7601 ServicePack: 1.0
14:38:31.0205 4556 Product type: Workstation
14:38:31.0205 4556 ComputerName: 307MELC
14:38:31.0205 4556 UserName: Melf
14:38:31.0205 4556 Windows directory: C:\Windows
14:38:31.0205 4556 System windows directory: C:\Windows
14:38:31.0205 4556 Processor architecture: Intel x86
14:38:31.0205 4556 Number of processors: 2
14:38:31.0205 4556 Page size: 0x1000
14:38:31.0205 4556 Boot type: Normal boot
14:38:31.0205 4556 ============================================================
14:38:33.0547 4556 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:38:33.0549 4556 \Device\Harddisk0\DR0:
14:38:33.0549 4556 MBR used
14:38:33.0549 4556 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1B36800, BlocksNum 0x238F7AB0
14:38:33.0610 4556 Initialize success
14:38:33.0610 4556 ============================================================
14:44:22.0733 5444 ============================================================
14:44:22.0733 5444 Scan started
14:44:22.0733 5444 Mode: Manual; SigCheck; TDLFS;
14:44:22.0733 5444 ============================================================
14:44:23.0362 5444 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
14:44:23.0513 5444 1394ohci - ok
14:44:23.0696 5444 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
14:44:23.0712 5444 ACPI - ok
14:44:23.0773 5444 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
14:44:23.0853 5444 AcpiPmi - ok
14:44:23.0967 5444 AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:44:23.0977 5444 AdobeARMservice - ok
14:44:24.0119 5444 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:44:24.0133 5444 AdobeFlashPlayerUpdateSvc - ok
14:44:24.0234 5444 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
14:44:24.0256 5444 adp94xx - ok
14:44:24.0360 5444 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
14:44:24.0378 5444 adpahci - ok
14:44:24.0474 5444 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
14:44:24.0488 5444 adpu320 - ok
14:44:24.0598 5444 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
14:44:24.0671 5444 AeLookupSvc - ok
14:44:24.0757 5444 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
14:44:24.0830 5444 AFD - ok
14:44:24.0975 5444 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
14:44:24.0988 5444 agp440 - ok
14:44:25.0050 5444 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
14:44:25.0063 5444 aic78xx - ok
14:44:25.0207 5444 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
14:44:25.0287 5444 ALG - ok
14:44:25.0445 5444 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
14:44:25.0457 5444 aliide - ok
14:44:25.0495 5444 AMD External Events Utility (b19505648f033393e907e2e419fde8b3) C:\Windows\system32\atiesrxx.exe
14:44:25.0568 5444 AMD External Events Utility - ok
14:44:25.0721 5444 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
14:44:25.0735 5444 amdagp - ok
14:44:25.0758 5444 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
14:44:25.0770 5444 amdide - ok
14:44:25.0849 5444 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
14:44:25.0905 5444 AmdK8 - ok
14:44:26.0066 5444 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
14:44:26.0108 5444 AmdPPM - ok
14:44:26.0275 5444 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
14:44:26.0287 5444 amdsata - ok
14:44:26.0342 5444 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
14:44:26.0356 5444 amdsbs - ok
14:44:26.0488 5444 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
14:44:26.0499 5444 amdxata - ok
14:44:26.0558 5444 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
14:44:26.0688 5444 AppID - ok
14:44:26.0820 5444 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
14:44:26.0872 5444 AppIDSvc - ok
14:44:26.0917 5444 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
14:44:26.0961 5444 Appinfo - ok
14:44:27.0093 5444 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:44:27.0103 5444 Apple Mobile Device - ok
14:44:27.0242 5444 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll
14:44:27.0270 5444 AppMgmt - ok
14:44:27.0381 5444 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
14:44:27.0394 5444 arc - ok
14:44:27.0489 5444 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
14:44:27.0502 5444 arcsas - ok
14:44:27.0588 5444 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
14:44:27.0716 5444 AsyncMac - ok
14:44:27.0871 5444 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
14:44:27.0882 5444 atapi - ok
14:44:28.0038 5444 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
14:44:28.0179 5444 atikmdag - ok
14:44:28.0298 5444 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
14:44:28.0341 5444 AudioEndpointBuilder - ok
14:44:28.0350 5444 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
14:44:28.0377 5444 Audiosrv - ok
14:44:28.0439 5444 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
14:44:28.0525 5444 AxInstSV - ok
14:44:28.0684 5444 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
14:44:28.0754 5444 b06bdrv - ok
14:44:28.0914 5444 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
14:44:28.0929 5444 b57nd60x - ok
14:44:29.0079 5444 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
14:44:29.0152 5444 BDESVC - ok
14:44:29.0317 5444 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
14:44:29.0354 5444 Beep - ok
14:44:29.0415 5444 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
14:44:29.0470 5444 BFE - ok
14:44:29.0587 5444 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll
14:44:29.0634 5444 BITS - ok
14:44:29.0711 5444 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
14:44:29.0752 5444 blbdrive - ok
14:44:29.0870 5444 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
14:44:29.0883 5444 Bonjour Service - ok
14:44:30.0028 5444 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
14:44:30.0086 5444 bowser - ok
14:44:30.0254 5444 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:44:30.0334 5444 BrFiltLo - ok
14:44:30.0485 5444 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:44:30.0539 5444 BrFiltUp - ok
14:44:30.0669 5444 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
14:44:30.0720 5444 Browser - ok
14:44:30.0808 5444 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
14:44:30.0833 5444 Brserid - ok
14:44:30.0957 5444 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
14:44:30.0998 5444 BrSerWdm - ok
14:44:31.0081 5444 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
14:44:31.0122 5444 BrUsbMdm - ok
14:44:31.0235 5444 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
14:44:31.0283 5444 BrUsbSer - ok
14:44:31.0365 5444 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\drivers\BthEnum.sys
14:44:31.0431 5444 BthEnum - ok
14:44:31.0617 5444 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
14:44:31.0650 5444 BTHMODEM - ok
14:44:31.0782 5444 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
14:44:31.0817 5444 BthPan - ok
14:44:31.0882 5444 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\System32\Drivers\BTHport.sys
14:44:31.0921 5444 BTHPORT - ok
14:44:32.0078 5444 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
14:44:32.0115 5444 bthserv - ok
14:44:32.0169 5444 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\System32\Drivers\BTHUSB.sys
14:44:32.0203 5444 BTHUSB - ok
14:44:32.0336 5444 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
14:44:32.0382 5444 cdfs - ok
14:44:32.0557 5444 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
14:44:32.0599 5444 cdrom - ok
14:44:32.0719 5444 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
14:44:32.0770 5444 CertPropSvc - ok
14:44:32.0842 5444 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
14:44:32.0880 5444 circlass - ok
14:44:33.0031 5444 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
14:44:33.0047 5444 CLFS - ok
14:44:33.0154 5444 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:44:33.0166 5444 clr_optimization_v2.0.50727_32 - ok
14:44:33.0294 5444 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:44:33.0306 5444 clr_optimization_v4.0.30319_32 - ok
14:44:33.0444 5444 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
14:44:33.0479 5444 CmBatt - ok
14:44:33.0544 5444 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
14:44:33.0555 5444 cmdide - ok
14:44:33.0703 5444 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
14:44:33.0727 5444 CNG - ok
14:44:33.0813 5444 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
14:44:33.0824 5444 Compbatt - ok
14:44:33.0948 5444 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
14:44:33.0979 5444 CompositeBus - ok
14:44:34.0079 5444 COMSysApp - ok
14:44:34.0159 5444 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
14:44:34.0170 5444 crcdisk - ok
14:44:34.0291 5444 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll
14:44:34.0334 5444 CryptSvc - ok
14:44:34.0443 5444 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
14:44:34.0525 5444 CSC - ok
14:44:34.0639 5444 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll
14:44:34.0682 5444 CscService - ok
14:44:34.0827 5444 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
14:44:34.0849 5444 cvhsvc - ok
14:44:34.0973 5444 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
14:44:35.0022 5444 DcomLaunch - ok
14:44:35.0066 5444 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
14:44:35.0115 5444 defragsvc - ok
14:44:35.0578 5444 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
14:44:35.0624 5444 DfsC - ok
14:44:35.0772 5444 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
14:44:35.0830 5444 Dhcp - ok
14:44:35.0884 5444 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
14:44:35.0926 5444 discache - ok
14:44:36.0121 5444 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
14:44:36.0132 5444 Disk - ok
14:44:36.0159 5444 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
14:44:36.0201 5444 Dnscache - ok
14:44:36.0318 5444 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
14:44:36.0371 5444 dot3svc - ok
14:44:36.0429 5444 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
14:44:36.0480 5444 DPS - ok
14:44:36.0664 5444 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
14:44:36.0694 5444 drmkaud - ok
14:44:36.0742 5444 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
14:44:36.0764 5444 DXGKrnl - ok
14:44:36.0933 5444 eamonm (04238864710460c5682e260207d06192) C:\Windows\system32\DRIVERS\eamonm.sys
14:44:36.0957 5444 eamonm - ok
14:44:37.0009 5444 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
14:44:37.0057 5444 EapHost - ok
14:44:37.0300 5444 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
14:44:37.0387 5444 ebdrv - ok
14:44:37.0481 5444 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
14:44:37.0531 5444 EFS - ok
14:44:37.0619 5444 ehdrv (deff87f04ab5f6dd5edf2b80853bbe10) C:\Windows\system32\DRIVERS\ehdrv.sys
14:44:37.0628 5444 ehdrv - ok
14:44:37.0731 5444 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
14:44:37.0792 5444 ehRecvr - ok
14:44:37.0827 5444 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
14:44:37.0892 5444 ehSched - ok
14:44:38.0004 5444 ekrn (c7bb95cf9631aa401e4aded1648f6af7) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
14:44:38.0026 5444 ekrn - ok
14:44:38.0261 5444 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
14:44:38.0282 5444 elxstor - ok
14:44:38.0420 5444 epfwwfpr (f39c91795ebdb9ecbeb5a388ff2841fe) C:\Windows\system32\DRIVERS\epfwwfpr.sys
14:44:38.0429 5444 epfwwfpr - ok
14:44:38.0467 5444 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
14:44:38.0507 5444 ErrDev - ok
14:44:38.0624 5444 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
14:44:38.0667 5444 EventSystem - ok
14:44:38.0757 5444 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
14:44:38.0805 5444 exfat - ok
14:44:38.0917 5444 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
14:44:38.0968 5444 fastfat - ok
14:44:39.0024 5444 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
14:44:39.0111 5444 Fax - ok
14:44:39.0261 5444 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
14:44:39.0302 5444 fdc - ok
14:44:39.0343 5444 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
14:44:39.0398 5444 fdPHost - ok
14:44:39.0504 5444 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
14:44:39.0540 5444 FDResPub - ok
14:44:39.0612 5444 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
14:44:39.0623 5444 FileInfo - ok
14:44:39.0729 5444 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
14:44:39.0754 5444 Filetrace - ok
14:44:39.0771 5444 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
14:44:39.0808 5444 flpydisk - ok
14:44:39.0892 5444 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
14:44:39.0907 5444 FltMgr - ok
14:44:40.0086 5444 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
14:44:40.0148 5444 FontCache - ok
14:44:40.0326 5444 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:44:40.0335 5444 FontCache3.0.0.0 - ok
14:44:40.0456 5444 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
14:44:40.0468 5444 FsDepends - ok
14:44:40.0532 5444 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys
14:44:40.0542 5444 Fs_Rec - ok
14:44:40.0721 5444 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
14:44:40.0738 5444 fvevol - ok
14:44:40.0795 5444 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
14:44:40.0807 5444 gagp30kx - ok
14:44:40.0956 5444 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
14:44:40.0964 5444 GEARAspiWDM - ok
14:44:41.0013 5444 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
14:44:41.0064 5444 gpsvc - ok
14:44:41.0229 5444 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
14:44:41.0289 5444 hcw85cir - ok
14:44:41.0444 5444 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
14:44:41.0480 5444 HdAudAddService - ok
14:44:41.0544 5444 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
14:44:41.0586 5444 HDAudBus - ok
14:44:41.0746 5444 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
14:44:41.0780 5444 HidBatt - ok
14:44:41.0812 5444 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
14:44:41.0855 5444 HidBth - ok
14:44:42.0033 5444 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
14:44:42.0070 5444 HidIr - ok
14:44:42.0101 5444 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
14:44:42.0140 5444 hidserv - ok
14:44:42.0321 5444 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\drivers\hidusb.sys
14:44:42.0350 5444 HidUsb - ok
14:44:42.0385 5444 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
14:44:42.0431 5444 hkmsvc - ok
14:44:42.0566 5444 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
14:44:42.0644 5444 HomeGroupListener - ok
14:44:42.0684 5444 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
14:44:42.0727 5444 HomeGroupProvider - ok
14:44:42.0914 5444 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
14:44:42.0926 5444 HpSAMD - ok
14:44:42.0979 5444 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
14:44:43.0010 5444 HTTP - ok
14:44:43.0160 5444 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
14:44:43.0171 5444 hwpolicy - ok
14:44:43.0227 5444 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
14:44:43.0269 5444 i8042prt - ok
14:44:43.0477 5444 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
14:44:43.0495 5444 iaStorV - ok
14:44:43.0617 5444 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:44:43.0644 5444 idsvc - ok
14:44:43.0830 5444 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
14:44:43.0842 5444 iirsp - ok
14:44:43.0890 5444 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
14:44:43.0952 5444 IKEEXT - ok
14:44:44.0101 5444 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
14:44:44.0112 5444 intelide - ok
14:44:44.0170 5444 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
14:44:44.0181 5444 intelppm - ok
14:44:44.0297 5444 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
14:44:44.0337 5444 IPBusEnum - ok
14:44:44.0416 5444 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:44:44.0441 5444 IpFilterDriver - ok
14:44:44.0557 5444 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
14:44:44.0604 5444 iphlpsvc - ok
14:44:44.0663 5444 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
14:44:44.0692 5444 IPMIDRV - ok
14:44:44.0810 5444 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
14:44:44.0856 5444 IPNAT - ok
14:44:44.0924 5444 iPod Service (ca1972397b845b2f53f5dc63c22fd98a) C:\Program Files\iPod\bin\iPodService.exe
14:44:44.0950 5444 iPod Service - ok
14:44:45.0129 5444 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
14:44:45.0164 5444 IRENUM - ok
14:44:45.0216 5444 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
14:44:45.0228 5444 isapnp - ok
14:44:45.0364 5444 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
14:44:45.0380 5444 iScsiPrt - ok
14:44:45.0524 5444 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys
14:44:45.0535 5444 kbdclass - ok
14:44:45.0609 5444 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys
14:44:45.0652 5444 kbdhid - ok
14:44:45.0770 5444 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
14:44:45.0783 5444 KeyIso - ok
14:44:45.0832 5444 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
14:44:45.0844 5444 KSecDD - ok
14:44:45.0870 5444 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
14:44:45.0883 5444 KSecPkg - ok
14:44:45.0928 5444 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
14:44:45.0959 5444 KtmRm - ok
14:44:46.0087 5444 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll
14:44:46.0138 5444 LanmanServer - ok
14:44:46.0190 5444 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
14:44:46.0242 5444 LanmanWorkstation - ok
14:44:46.0436 5444 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
14:44:46.0491 5444 lltdio - ok
14:44:46.0538 5444 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
14:44:46.0566 5444 lltdsvc - ok
14:44:46.0671 5444 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
14:44:46.0715 5444 lmhosts - ok
14:44:46.0835 5444 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
14:44:46.0848 5444 LSI_FC - ok
14:44:46.0942 5444 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
14:44:46.0955 5444 LSI_SAS - ok
14:44:47.0054 5444 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:44:47.0066 5444 LSI_SAS2 - ok
14:44:47.0161 5444 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:44:47.0174 5444 LSI_SCSI - ok
14:44:47.0267 5444 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
14:44:47.0318 5444 luafv - ok
14:44:47.0454 5444 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
14:44:47.0468 5444 Mcx2Svc - ok
14:44:47.0574 5444 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
14:44:47.0585 5444 megasas - ok
14:44:47.0690 5444 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
14:44:47.0706 5444 MegaSR - ok
14:44:47.0752 5444 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
14:44:47.0804 5444 MMCSS - ok
14:44:47.0911 5444 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
14:44:47.0936 5444 Modem - ok
14:44:48.0004 5444 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
14:44:48.0038 5444 monitor - ok
14:44:48.0130 5444 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\drivers\mouclass.sys
14:44:48.0142 5444 mouclass - ok
14:44:48.0251 5444 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
14:44:48.0298 5444 mouhid - ok
14:44:48.0402 5444 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
14:44:48.0414 5444 mountmgr - ok
14:44:48.0495 5444 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
14:44:48.0509 5444 mpio - ok
14:44:48.0607 5444 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
14:44:48.0657 5444 mpsdrv - ok
14:44:48.0766 5444 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
14:44:48.0821 5444 MpsSvc - ok
14:44:48.0899 5444 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
14:44:48.0935 5444 MRxDAV - ok
14:44:49.0079 5444 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
14:44:49.0115 5444 mrxsmb - ok
14:44:49.0259 5444 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:44:49.0275 5444 mrxsmb10 - ok
14:44:49.0295 5444 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:44:49.0320 5444 mrxsmb20 - ok
14:44:49.0455 5444 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
14:44:49.0466 5444 msahci - ok
14:44:49.0501 5444 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
14:44:49.0515 5444 msdsm - ok
14:44:49.0561 5444 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
14:44:49.0598 5444 MSDTC - ok
14:44:49.0766 5444 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
14:44:49.0804 5444 Msfs - ok
14:44:49.0840 5444 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
14:44:49.0888 5444 mshidkmdf - ok
14:44:49.0987 5444 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
14:44:49.0998 5444 msisadrv - ok
14:44:50.0053 5444 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
14:44:50.0101 5444 MSiSCSI - ok
14:44:50.0192 5444 msiserver - ok
14:44:50.0283 5444 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
14:44:50.0331 5444 MSKSSRV - ok
14:44:50.0449 5444 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
14:44:50.0500 5444 MSPCLOCK - ok
14:44:50.0594 5444 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
14:44:50.0628 5444 MSPQM - ok
14:44:50.0734 5444 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
14:44:50.0748 5444 MsRPC - ok
14:44:50.0802 5444 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
14:44:50.0813 5444 mssmbios - ok
14:44:50.0875 5444 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
14:44:50.0900 5444 MSTEE - ok
14:44:50.0998 5444 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
14:44:51.0020 5444 MTConfig - ok
14:44:51.0050 5444 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
14:44:51.0061 5444 Mup - ok
14:44:51.0117 5444 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
14:44:51.0168 5444 napagent - ok
14:44:51.0381 5444 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
14:44:51.0400 5444 NativeWifiP - ok
14:44:51.0576 5444 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
14:44:51.0600 5444 NDIS - ok
14:44:51.0781 5444 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
14:44:51.0819 5444 NdisCap - ok
14:44:51.0998 5444 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
14:44:52.0042 5444 NdisTapi - ok
14:44:52.0212 5444 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
14:44:52.0235 5444 Ndisuio - ok
14:44:52.0269 5444 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
14:44:52.0294 5444 NdisWan - ok
14:44:52.0329 5444 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
14:44:52.0366 5444 NDProxy - ok
14:44:52.0565 5444 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
14:44:52.0589 5444 NetBIOS - ok
14:44:52.0618 5444 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
14:44:52.0665 5444 NetBT - ok
14:44:52.0760 5444 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
14:44:52.0772 5444 Netlogon - ok
14:44:52.0834 5444 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
14:44:52.0864 5444 Netman - ok
14:44:52.0891 5444 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
14:44:52.0949 5444 netprofm - ok
14:44:53.0118 5444 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:44:53.0129 5444 NetTcpPortSharing - ok
14:44:53.0391 5444 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
14:44:53.0549 5444 netw5v32 - ok
14:44:53.0750 5444 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
14:44:53.0762 5444 nfrd960 - ok
14:44:53.0801 5444 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
14:44:53.0857 5444 NlaSvc - ok
14:44:54.0027 5444 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
14:44:54.0077 5444 Npfs - ok
14:44:54.0138 5444 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
14:44:54.0164 5444 nsi - ok
14:44:54.0285 5444 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
14:44:54.0332 5444 nsiproxy - ok
14:44:54.0525 5444 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
14:44:54.0561 5444 Ntfs - ok
14:44:54.0720 5444 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
14:44:54.0770 5444 Null - ok
14:44:54.0942 5444 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
14:44:54.0956 5444 nvraid - ok
14:44:54.0986 5444 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
14:44:55.0001 5444 nvstor - ok
14:44:55.0049 5444 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
14:44:55.0062 5444 nv_agp - ok
14:44:55.0236 5444 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
14:44:55.0277 5444 ohci1394 - ok
14:44:55.0368 5444 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:44:55.0380 5444 ose - ok
14:44:55.0513 5444 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:44:55.0629 5444 osppsvc - ok
14:44:55.0750 5444 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
14:44:55.0804 5444 p2pimsvc - ok
14:44:55.0833 5444 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
14:44:55.0850 5444 p2psvc - ok
14:44:55.0969 5444 PanService (77cdc6c43d8c3e05d0e21b36eaabebae) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
14:44:55.0984 5444 PanService - ok
14:44:56.0139 5444 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
14:44:56.0152 5444 Parport - ok
14:44:56.0187 5444 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
14:44:56.0199 5444 partmgr - ok
14:44:56.0369 5444 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
14:44:56.0401 5444 Parvdm - ok
14:44:56.0442 5444 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
14:44:56.0460 5444 PcaSvc - ok
14:44:56.0615 5444 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
14:44:56.0629 5444 pci - ok
14:44:56.0646 5444 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
14:44:56.0657 5444 pciide - ok
14:44:56.0698 5444 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
14:44:56.0712 5444 pcmcia - ok
14:44:56.0859 5444 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
14:44:56.0871 5444 pcw - ok
14:44:56.0944 5444 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
14:44:56.0979 5444 PEAUTH - ok
14:44:57.0130 5444 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll
14:44:57.0173 5444 PeerDistSvc - ok
14:44:57.0313 5444 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
14:44:57.0363 5444 pla - ok
14:44:57.0483 5444 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
14:44:57.0510 5444 PlugPlay - ok
14:44:57.0553 5444 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
14:44:57.0566 5444 PNRPAutoReg - ok
14:44:57.0672 5444 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
14:44:57.0687 5444 PNRPsvc - ok
14:44:57.0728 5444 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
14:44:57.0777 5444 PolicyAgent - ok
14:44:57.0816 5444 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
14:44:57.0843 5444 Power - ok
14:44:58.0049 5444 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
14:44:58.0099 5444 PptpMiniport - ok
14:44:58.0147 5444 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
14:44:58.0190 5444 Processor - ok
14:44:58.0300 5444 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll
14:44:58.0327 5444 ProfSvc - ok
14:44:58.0350 5444 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
14:44:58.0362 5444 ProtectedStorage - ok
14:44:58.0455 5444 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
14:44:58.0506 5444 Psched - ok
14:44:58.0717 5444 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
14:44:58.0757 5444 ql2300 - ok
14:44:58.0933 5444 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
14:44:58.0947 5444 ql40xx - ok
14:44:58.0993 5444 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
14:44:59.0041 5444 QWAVE - ok
14:44:59.0216 5444 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
14:44:59.0230 5444 QWAVEdrv - ok
14:44:59.0247 5444 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
14:44:59.0272 5444 RasAcd - ok
14:44:59.0331 5444 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
14:44:59.0354 5444 RasAgileVpn - ok
14:44:59.0485 5444 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
14:44:59.0540 5444 RasAuto - ok
14:44:59.0664 5444 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
14:44:59.0704 5444 Rasl2tp - ok
14:44:59.0809 5444 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
14:44:59.0848 5444 RasMan - ok
14:44:59.0949 5444 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
14:44:59.0975 5444 RasPppoe - ok
14:45:00.0073 5444 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
14:45:00.0124 5444 RasSstp - ok
14:45:00.0195 5444 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
14:45:00.0253 5444 rdbss - ok
14:45:00.0440 5444 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
14:45:00.0474 5444 rdpbus - ok
14:45:00.0606 5444 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
14:45:00.0636 5444 RDPCDD - ok
14:45:00.0684 5444 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
14:45:00.0703 5444 RDPDR - ok
14:45:00.0888 5444 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
14:45:00.0935 5444 RDPENCDD - ok
14:45:01.0047 5444 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
14:45:01.0070 5444 RDPREFMP - ok
14:45:01.0146 5444 RdpVideoMiniport (68a0387f58e226deee23d9715955572a) C:\Windows\system32\drivers\rdpvideominiport.sys
14:45:01.0198 5444 RdpVideoMiniport - ok
14:45:01.0319 5444 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys
14:45:01.0377 5444 RDPWD - ok
14:45:01.0539 5444 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
14:45:01.0553 5444 rdyboost - ok
14:45:01.0593 5444 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
14:45:01.0643 5444 RemoteAccess - ok
14:45:01.0777 5444 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
14:45:01.0833 5444 RemoteRegistry - ok
14:45:01.0925 5444 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
14:45:01.0940 5444 RFCOMM - ok
14:45:02.0066 5444 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
14:45:02.0106 5444 RpcEptMapper - ok
14:45:02.0140 5444 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
14:45:02.0177 5444 RpcLocator - ok
14:45:02.0299 5444 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
14:45:02.0326 5444 RpcSs - ok
14:45:02.0432 5444 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
14:45:02.0476 5444 rspndr - ok
14:45:02.0595 5444 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
14:45:02.0662 5444 s3cap - ok
14:45:02.0694 5444 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
14:45:02.0707 5444 SamSs - ok
14:45:02.0873 5444 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
14:45:02.0886 5444 sbp2port - ok
14:45:02.0935 5444 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
14:45:02.0980 5444 SCardSvr - ok
14:45:03.0188 5444 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
14:45:03.0212 5444 scfilter - ok
14:45:03.0258 5444 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
14:45:03.0320 5444 Schedule - ok
14:45:03.0423 5444 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
14:45:03.0446 5444 SCPolicySvc - ok
14:45:03.0545 5444 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
14:45:03.0584 5444 sdbus - ok
14:45:03.0710 5444 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
14:45:03.0788 5444 SDRSVC - ok
14:45:03.0893 5444 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
14:45:03.0918 5444 secdrv - ok
14:45:04.0043 5444 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
14:45:04.0091 5444 seclogon - ok
14:45:04.0121 5444 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
14:45:04.0167 5444 SENS - ok
14:45:04.0208 5444 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
14:45:04.0236 5444 SensrSvc - ok
14:45:04.0392 5444 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
14:45:04.0404 5444 Serenum - ok
14:45:04.0449 5444 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
14:45:04.0486 5444 Serial - ok
14:45:04.0637 5444 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
14:45:04.0666 5444 sermouse - ok
14:45:04.0718 5444 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
14:45:04.0766 5444 SessionEnv - ok
14:45:04.0906 5444 SFEP (8b7c1768d2cde2e02e09a66563ddfd16) C:\Windows\system32\DRIVERS\SFEP.sys
14:45:04.0971 5444 SFEP - ok
14:45:05.0035 5444 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
14:45:05.0049 5444 sffdisk - ok
14:45:05.0151 5444 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
14:45:05.0182 5444 sffp_mmc - ok
14:45:05.0236 5444 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\DRIVERS\sffp_sd.sys
14:45:05.0270 5444 sffp_sd - ok
14:45:05.0424 5444 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
14:45:05.0455 5444 sfloppy - ok
14:45:05.0662 5444 Sftfs (d9b734638dd8dba9d59aad3189cd0fad) C:\Windows\system32\DRIVERS\Sftfslh.sys
14:45:05.0679 5444 Sftfs - ok
14:45:05.0766 5444 sftlist (cb73bc422c07fb611f194da18d1e7f36) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
14:45:05.0783 5444 sftlist - ok
14:45:05.0940 5444 Sftplay (2f61bd46c0bff4eb36e1e359ca17bfc5) C:\Windows\system32\DRIVERS\Sftplaylh.sys
14:45:05.0951 5444 Sftplay - ok
14:45:05.0985 5444 Sftredir (518bac0179f94304f422696b47c0ec12) C:\Windows\system32\DRIVERS\Sftredirlh.sys
14:45:05.0994 5444 Sftredir - ok
14:45:06.0113 5444 Sftvol (747325236d88b3f05ffd27ff9ec711c5) C:\Windows\system32\DRIVERS\Sftvollh.sys
14:45:06.0122 5444 Sftvol - ok
14:45:06.0200 5444 sftvsa (a5812f0281ca5081bf696626f9bf324d) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
14:45:06.0211 5444 sftvsa - ok
14:45:06.0330 5444 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
14:45:06.0361 5444 SharedAccess - ok
14:45:06.0398 5444 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
14:45:06.0457 5444 ShellHWDetection - ok
14:45:06.0637 5444 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
14:45:06.0650 5444 sisagp - ok
14:45:06.0709 5444 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:45:06.0721 5444 SiSRaid2 - ok
14:45:06.0876 5444 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
14:45:06.0902 5444 SiSRaid4 - ok
14:45:06.0951 5444 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
14:45:06.0977 5444 Smb - ok
14:45:07.0107 5444 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
14:45:07.0121 5444 SNMPTRAP - ok
14:45:07.0215 5444 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
14:45:07.0226 5444 spldr - ok
14:45:07.0340 5444 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
14:45:07.0387 5444 Spooler - ok
14:45:07.0490 5444 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
14:45:07.0594 5444 sppsvc - ok
14:45:07.0716 5444 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
14:45:07.0741 5444 sppuinotify - ok
14:45:07.0826 5444 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
14:45:07.0851 5444 srv - ok
14:45:08.0015 5444 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
14:45:08.0044 5444 srv2 - ok
14:45:08.0210 5444 SrvHsfHDA (e00fdfaff025e94f9821153750c35a6d) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
14:45:08.0245 5444 SrvHsfHDA - ok
14:45:08.0301 5444 SrvHsfV92 (ceb4e3b6890e1e42dca6694d9e59e1a0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS
14:45:08.0330 5444 SrvHsfV92 - ok
14:45:08.0509 5444 SrvHsfWinac (bc0c7ea89194c299f051c24119000e17) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
14:45:08.0532 5444 SrvHsfWinac - ok
14:45:08.0559 5444 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
14:45:08.0585 5444 srvnet - ok
14:45:08.0699 5444 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
14:45:08.0727 5444 SSDPSRV - ok
14:45:08.0745 5444 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
14:45:08.0771 5444 SstpSvc - ok
14:45:08.0861 5444 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
14:45:08.0873 5444 stexstor - ok
14:45:08.0973 5444 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
14:45:09.0017 5444 StiSvc - ok
14:45:09.0112 5444 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
14:45:09.0123 5444 storflt - ok
14:45:09.0237 5444 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
14:45:09.0248 5444 storvsc - ok
14:45:09.0299 5444 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
14:45:09.0310 5444 swenum - ok
14:45:09.0358 5444 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
14:45:09.0389 5444 swprv - ok
14:45:09.0505 5444 Synth3dVsc - ok
14:45:09.0595 5444 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
14:45:09.0631 5444 SysMain - ok
14:45:09.0732 5444 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
14:45:09.0765 5444 TabletInputService - ok
14:45:09.0826 5444 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
14:45:09.0854 5444 TapiSrv - ok
14:45:09.0918 5444 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
14:45:09.0945 5444 TBS - ok
14:45:10.0104 5444 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
14:45:10.0142 5444 Tcpip - ok
14:45:10.0349 5444 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
14:45:10.0377 5444 TCPIP6 - ok
14:45:10.0528 5444 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
14:45:10.0552 5444 tcpipreg - ok
14:45:10.0587 5444 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
14:45:10.0621 5444 TDPIPE - ok
14:45:10.0765 5444 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
14:45:10.0796 5444 TDTCP - ok
14:45:10.0833 5444 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
14:45:10.0878 5444 tdx - ok
14:45:11.0037 5444 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
14:45:11.0049 5444 TermDD - ok
14:45:11.0085 5444 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
14:45:11.0118 5444 TermService - ok
14:45:11.0237 5444 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
14:45:11.0268 5444 Themes - ok
14:45:11.0322 5444 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
14:45:11.0348 5444 THREADORDER - ok
14:45:11.0372 5444 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
14:45:11.0420 5444 TrkWks - ok
14:45:11.0512 5444 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
14:45:11.0566 5444 TrustedInstaller - ok
14:45:11.0674 5444 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
14:45:11.0697 5444 tssecsrv - ok
14:45:11.0766 5444 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
14:45:11.0786 5444 TsUsbFlt - ok
14:45:11.0816 5444 tsusbhub - ok
14:45:11.0931 5444 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
14:45:11.0955 5444 tunnel - ok
14:45:12.0036 5444 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
14:45:12.0049 5444 uagp35 - ok
14:45:12.0148 5444 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
14:45:12.0200 5444 udfs - ok
14:45:12.0280 5444 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
14:45:12.0314 5444 UI0Detect - ok
14:45:12.0453 5444 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
14:45:12.0465 5444 uliagpkx - ok
14:45:12.0539 5444 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\DRIVERS\umbus.sys
14:45:12.0576 5444 umbus - ok
14:45:12.0714 5444 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
14:45:12.0740 5444 UmPass - ok
14:45:12.0818 5444 UmRdpService (409994a8eaceee4e328749c0353527a0) C:\Windows\System32\umrdp.dll
14:45:12.0865 5444 UmRdpService - ok
14:45:12.0971 5444 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
14:45:13.0011 5444 upnphost - ok
14:45:13.0091 5444 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys
14:45:13.0153 5444 USBAAPL - ok
14:45:13.0234 5444 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
14:45:13.0256 5444 usbccgp - ok
14:45:13.0323 5444 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
14:45:13.0338 5444 usbcir - ok
14:45:13.0414 5444 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
14:45:13.0426 5444 usbehci - ok
14:45:13.0481 5444 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
14:45:13.0519 5444 usbhub - ok
14:45:13.0612 5444 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
14:45:13.0650 5444 usbohci - ok
14:45:13.0732 5444 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
14:45:13.0746 5444 usbprint - ok
14:45:13.0839 5444 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\drivers\USBSTOR.SYS
14:45:13.0900 5444 USBSTOR - ok
14:45:13.0953 5444 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys
14:45:13.0965 5444 usbuhci - ok
14:45:14.0111 5444 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys
14:45:14.0155 5444 usbvideo - ok
14:45:14.0224 5444 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
14:45:14.0262 5444 UxSms - ok
14:45:14.0340 5444 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
14:45:14.0352 5444 VaultSvc - ok
14:45:14.0409 5444 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
14:45:14.0420 5444 vdrvroot - ok
14:45:14.0456 5444 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
14:45:14.0488 5444 vds - ok
14:45:14.0570 5444 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
14:45:14.0605 5444 vga - ok
14:45:14.0658 5444 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
14:45:14.0683 5444 VgaSave - ok
14:45:14.0742 5444 VGPU - ok
14:45:14.0786 5444 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
14:45:14.0801 5444 vhdmp - ok
14:45:14.0878 5444 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
14:45:14.0892 5444 viaagp - ok
14:45:14.0981 5444 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
14:45:14.0994 5444 ViaC7 - ok
14:45:15.0054 5444 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
14:45:15.0065 5444 viaide - ok
14:45:15.0150 5444 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
14:45:15.0164 5444 vmbus - ok
14:45:15.0212 5444 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
14:45:15.0224 5444 VMBusHID - ok
14:45:15.0270 5444 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
14:45:15.0281 5444 volmgr - ok
14:45:15.0336 5444 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
14:45:15.0352 5444 volmgrx - ok
14:45:15.0413 5444 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
14:45:15.0429 5444 volsnap - ok
14:45:15.0566 5444 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
14:45:15.0580 5444 vsmraid - ok
14:45:15.0631 5444 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
14:45:15.0673 5444 VSS - ok
14:45:15.0822 5444 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
14:45:15.0857 5444 vwifibus - ok
14:45:15.0931 5444 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
14:45:15.0962 5444 W32Time - ok
14:45:16.0094 5444 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
14:45:16.0134 5444 WacomPen - ok
14:45:16.0302 5444 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
14:45:16.0326 5444 WANARP - ok
14:45:16.0330 5444 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
14:45:16.0352 5444 Wanarpv6 - ok
14:45:16.0429 5444 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\Windows\system32\Wat\WatAdminSvc.exe
14:45:16.0468 5444 WatAdminSvc - ok
14:45:16.0615 5444 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
14:45:16.0673 5444 wbengine - ok
14:45:16.0803 5444 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
14:45:16.0832 5444 WbioSrvc - ok
14:45:16.0867 5444 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
14:45:16.0916 5444 wcncsvc - ok
14:45:17.0027 5444 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
14:45:17.0082 5444 WcsPlugInService - ok
14:45:17.0189 5444 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
14:45:17.0201 5444 Wd - ok
14:45:17.0312 5444 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
14:45:17.0332 5444 Wdf01000 - ok
14:45:17.0392 5444 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
14:45:17.0459 5444 WdiServiceHost - ok
14:45:17.0462 5444 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
14:45:17.0478 5444 WdiSystemHost - ok
14:45:17.0594 5444 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
14:45:17.0614 5444 WebClient - ok
14:45:17.0652 5444 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
14:45:17.0680 5444 Wecsvc - ok
14:45:17.0696 5444 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
14:45:17.0742 5444 wercplsupport - ok
14:45:17.0873 5444 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
14:45:17.0900 5444 WerSvc - ok
14:45:18.0013 5444 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
14:45:18.0059 5444 WfpLwf - ok
14:45:18.0231 5444 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
14:45:18.0243 5444 WIMMount - ok
14:45:18.0342 5444 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
14:45:18.0388 5444 WinDefend - ok
14:45:18.0393 5444 WinHttpAutoProxySvc - ok
14:45:18.0553 5444 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
14:45:18.0605 5444 Winmgmt - ok
14:45:18.0680 5444 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
14:45:18.0749 5444 WinRM - ok
14:45:18.0925 5444 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
14:45:18.0963 5444 WinUsb - ok
14:45:19.0022 5444 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
14:45:19.0053 5444 Wlansvc - ok
14:45:19.0236 5444 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
14:45:19.0249 5444 WmiAcpi - ok
14:45:19.0335 5444 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
14:45:19.0350 5444 wmiApSrv - ok
14:45:19.0453 5444 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
14:45:19.0520 5444 WMPNetworkSvc - ok
14:45:19.0644 5444 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
14:45:19.0684 5444 WPCSvc - ok
14:45:19.0723 5444 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
14:45:19.0739 5444 WPDBusEnum - ok
14:45:19.0925 5444 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
14:45:19.0970 5444 ws2ifsl - ok
14:45:20.0106 5444 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
14:45:20.0137 5444 wscsvc - ok
14:45:20.0146 5444 WSearch - ok
14:45:20.0220 5444 wuauserv (3026418a50c5b4761befa632cedb7406) C:\Windows\system32\wuaueng.dll
14:45:20.0277 5444 wuauserv - ok
14:45:20.0446 5444 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
14:45:20.0493 5444 WudfPf - ok
14:45:20.0651 5444 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
14:45:20.0676 5444 WUDFRd - ok
14:45:20.0699 5444 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
14:45:20.0725 5444 wudfsvc - ok
14:45:20.0850 5444 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
14:45:20.0893 5444 WwanSvc - ok
14:45:21.0030 5444 yukonw7 (b07c5b7efdf936ff93d4f540938725be) C:\Windows\system32\DRIVERS\yk62x86.sys
14:45:21.0047 5444 yukonw7 - ok
14:45:21.0072 5444 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
14:45:21.0974 5444 \Device\Harddisk0\DR0 - ok
14:45:22.0009 5444 Boot (0x1200) (826af2a6d9635a0844af473d33321cbd) \Device\Harddisk0\DR0\Partition0
14:45:22.0010 5444 \Device\Harddisk0\DR0\Partition0 - ok
14:45:22.0010 5444 ============================================================
14:45:22.0010 5444 Scan finished
14:45:22.0010 5444 ============================================================
14:45:22.0020 5436 Detected object count: 0
14:45:22.0020 5436 Actual detected object count: 0

Snad vše podle návodu.


ComboFix 12-04-15.01 - Melf 15.04.2012 15:45:27.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3039.2126 [GMT 2:00]
Spuštěný z: c:\users\Melf\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\windows\iun6002.exe
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-15 do 2012-04-15 )))))))))))))))))))))))))))))))
.
.
2012-04-15 13:50 . 2012-04-15 13:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-13 07:35 . 2012-03-14 02:15 6582328 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6D324A04-F7BA-46B7-B317-93621F7F2FF5}\mpengine.dll
2012-04-12 19:34 . 2012-04-12 19:35 -------- d-----w- c:\program files\trend micro
2012-04-12 19:34 . 2012-04-12 19:34 -------- d-----w- C:\rsit
2012-04-12 12:42 . 2011-02-19 06:30 805376 ----a-w- c:\windows\system32\FntCache.dll
2012-04-12 12:42 . 2011-02-19 06:30 739840 ----a-w- c:\windows\system32\d2d1.dll
2012-04-12 10:19 . 2012-04-12 10:19 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-12 10:11 . 2012-03-01 05:46 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 10:11 . 2012-03-01 05:37 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 10:11 . 2012-03-01 05:33 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 10:11 . 2012-03-01 05:29 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 10:11 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-12 10:10 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-11 22:56 . 2012-02-28 05:34 860672 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-11 22:56 . 2012-02-28 05:38 981504 ----a-w- c:\windows\system32\wininet.dll
2012-04-11 22:56 . 2012-02-28 05:34 163328 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2012-04-11 22:56 . 2012-02-28 03:52 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2012-04-11 13:39 . 2012-04-11 13:39 -------- d-----w- c:\program files\Mv2Player
2012-04-10 14:25 . 2012-04-10 14:25 -------- d-----w- c:\users\Melf\AppData\Roaming\OpenOffice.org
2012-04-10 14:17 . 2012-04-10 14:17 -------- d-----w- c:\program files\OpenOffice.org 3
2012-04-03 22:39 . 2012-02-03 03:54 2343424 ----a-w- c:\windows\system32\win32k.sys
2012-04-03 22:39 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-04-03 22:36 . 2012-01-25 05:32 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-03 22:36 . 2012-01-25 05:32 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-03 22:36 . 2012-01-25 05:27 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-04-03 22:36 . 2012-02-17 05:34 919040 ----a-w- c:\windows\system32\rdpcorets.dll
2012-04-03 22:36 . 2012-02-17 05:34 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-04-03 22:36 . 2012-02-17 04:14 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-03 22:36 . 2012-02-17 04:13 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-12 10:19 . 2011-12-25 04:22 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-23 07:18 . 2011-12-09 18:56 237072 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 3080264]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
.
c:\users\Melf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-11-01 22:25 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-11-12 23:24 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 253600]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-09 1343400]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2011-08-09 163424]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-22 974944]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 103112]
S2 PanService;PandoraService;c:\program files\PANDORA.TV\PanService\PandoraService.exe [2012-04-06 624856]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2007-08-03 9344]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 579944]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 194408]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 21864]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 19304]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 17147298
*NewlyCreated* - 99270032
*Deregistered* - 17147298
*Deregistered* - 99270032
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 10:19]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://portal.zcu.cz/wps/portal/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-DAEMON Tools Pro Agent - c:\program files\DAEMON Tools Pro\DTAgent.exe
AddRemove-Cool's_Codec_pack_4.12 - c:\windows\iun6002.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.download\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariDownload"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.safariextz\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariExtension"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webarchive\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3834885269-2620063488-1367722412-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (S-1-5-21-3834885269-2620063488-1367722412-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-04-15 15:52:00
ComboFix-quarantined-files.txt 2012-04-15 13:52
.
Před spuštěním: Volných bajtů: 190 559 526 912
Po spuštění: Volných bajtů: 190 487 842 816
.
- - End Of File - - 201DD918D69ADAFE75CBCECF430CE2AD

Jdu na to, díky Ti! Kdyby problém trval, určitě napíšu.

Jsi má spása

Ahoj, tak zatím se to zamrznutí neprojevilo.

Kdyby jsem zjistil něco víc nebo čím to případně bylo, určitě napíšu.

Každopádně moc děkuju za pomoc!