VIRY.CZ

Zdravím, nejsem si jist, kam tento příspěvek zařadit, hledal jsem všude, ale žádné řešení, nebo postup mi nepomohly..Asi před 14 dny jsem zapnul PC a zjistil jsem, že 80% CPU vytěžuje jakýsi Hljijm.exe. Pomocí Combofixu jsem ho úspěšně odstranil, Pc šlapalo jako hodinky. Po několika hodinách práce, jsem zapnul youtube "na odpočinek" a zarazilo mě, že se seká video i zvuk, jako by to "něco" vytěžovalo natolik, že není možné plynulé přehrávání, i když v procesech, nebo sledování systému nic vytěžujícího není. Samožřejmě to dělá i v kvalitě 240p windowed, i když předtím jsem přehrával full HD 1080p ve fullscreenu dokonale plynule. Problém přetrvává nejen u youtube, ale i u "nevidejních" stránek typu bandzone nebo soundcloud. Ještě musím upozornit, že změna prohlížeče, nebo nainstalování straší verze flash player problém vůbec neřeší...pokud je video stáhlé na HDD, neseká se a hraje pěkně, stejně tak i audio a dokonce i CPUžrout FL Studio 10. Už jsem zkoušel opravdu vše, co mě napadlo, myslím že jediná možnost, jak to vyřešit bude přeinstalování systému"nanovo", čemuž se chci vyhnout a pokud někdo poradí jiné řešení, budu moc rád.

Windows 7 Ultimate 32bit
ASUS P5LD2
Pentium 4 511J 2,8GHz
3,0 GB RAM DDR2 800MHz
AMD Radeon HD6450 IGI-OC 1 GB
Realtek HDA Audio integrated
WD 1200JS 120 GB
Optiarc DVDRW
400W Zdroj

Optické připojení k internetu (stahování cca 7MB/s)

NIKDY nepoužívejte ComboFix na vlastní pěst! Pro běžného uživatele je to příliš mocný nástroj, se kterým se dá napáchat mnoho škody!

Rád bych viděl log z ComboFixu, najdete jej na systémovém disku (nejčastěji C:\ComboFix.txt).

http://leteckaposta.cz/510506169

tady je. bohužel ten virus, jak jsem psal nešel odstranit ani antivirovým skenerem, ani např programem antimalewarebytes atd..známy mi poradil combofix a zda se ze ten jediny pomohl, i kdyz nevim, jestli napachal skody jinde ://

ComboFix 12-04-17.01 - PiP 18.04.2012 10:10:22.2.1 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1033.18.3071.2415 [GMT 2:00]
Spuštěný z: c:\users\PiP\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-18 do 2012-04-18 )))))))))))))))))))))))))))))))
.
.
2012-04-18 08:19 . 2012-04-18 08:19 -------- dc----w- c:\users\Default\AppData\Local\temp
2012-04-18 08:03 . 2012-04-18 08:03 -------- dc----w- c:\users\PiP\AppData\Local\Mozilla
2012-04-17 19:39 . 2006-10-26 17:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2012-04-17 19:39 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2012-04-17 19:37 . 2012-04-17 19:37 -------- dc----w- c:\program files\Microsoft Works
2012-04-17 19:35 . 2012-04-17 19:35 -------- dc----w- c:\windows\PCHEALTH
2012-04-17 19:33 . 2012-04-17 19:33 -------- dc----w- c:\program files\Microsoft Visual Studio 8
2012-04-17 19:29 . 2012-04-17 19:29 -------- dc----r- C:\MSOCache
2012-04-17 18:33 . 2012-04-17 18:36 -------- dc----w- c:\program files\Chessmaster 10th Edition
2012-04-17 18:26 . 2012-04-17 18:26 -------- dc----w- c:\program files\NewFolder Software
2012-04-17 18:24 . 2012-04-17 18:24 -------- dc----w- c:\program files\TLKGAMES
2012-04-16 18:43 . 2010-08-05 15:52 47208 ----a-w- c:\windows\system32\drivers\bcd3000.sys
2012-04-16 18:43 . 2010-08-05 15:52 27240 ----a-w- c:\windows\system32\drivers\bcd3000wdm.sys
2012-04-16 18:43 . 2012-04-16 18:43 -------- dc----w- c:\program files\Behringer
2012-04-13 09:13 . 2012-04-13 09:13 -------- dc----w- c:\users\PiP\AppData\Local\Microsoft Help
2012-04-13 09:13 . 2012-04-17 19:41 -------- dc----w- c:\programdata\Microsoft Help
2012-04-11 08:12 . 2012-04-11 08:14 -------- dc----w- c:\users\PiP\AppData\Roaming\AVG
2012-04-09 17:26 . 2012-04-18 08:19 -------- dc----w- c:\users\PiP\AppData\Local\temp
2012-04-09 16:50 . 2012-04-09 16:53 -------- dc----w- C:\UsbFix
2012-04-09 09:10 . 2012-04-09 09:10 -------- dc-h--w- c:\programdata\Common Files
2012-04-09 09:10 . 2012-04-18 07:04 -------- d-----w- c:\windows\system32\drivers\AVG
2012-04-09 09:10 . 2012-04-09 17:28 -------- dc----w- c:\programdata\AVG2012
2012-04-09 09:10 . 2012-04-09 09:10 -------- dc----w- C:\$AVG
2012-04-09 09:09 . 2012-04-11 08:12 -------- dc----w- c:\program files\AVG
2012-04-09 09:05 . 2012-04-17 15:54 -------- dc----w- c:\programdata\MFAData
2012-04-08 17:11 . 2012-04-08 17:32 -------- dc----w- c:\users\PiP\AppData\Roaming\gtk-2.0
2012-04-08 16:34 . 2012-04-16 17:49 -------- dc----w- c:\users\PiP\AppData\Local\CrashDumps
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\users\PiP\AppData\Roaming\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\users\PiP\AppData\Local\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\programdata\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\program files\Zoner
2012-04-08 12:42 . 2012-04-08 12:42 -------- dc----w- c:\users\PiP\.thumbnails
2012-04-08 12:05 . 2012-04-08 17:33 -------- dc----w- c:\users\PiP\.gimp-2.6
2012-04-08 12:05 . 2012-04-08 12:05 -------- dc----w- c:\program files\GIMP-2.0
2012-04-08 11:35 . 2012-04-08 11:35 -------- dc----w- c:\program files\SpeedBit Video Accelerator
2012-04-08 11:35 . 2012-04-08 11:35 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2012-04-08 11:30 . 2012-04-08 11:30 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-08 11:30 . 2012-04-08 11:30 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-08 11:30 . 2012-04-08 11:30 -------- d-----w- c:\windows\system32\Macromed
2012-04-03 10:41 . 2012-04-03 10:41 -------- dc----w- C:\$WINDOWS.~BT
2012-04-03 10:13 . 2012-04-03 10:14 -------- dc----w- c:\program files\Google
2012-04-03 07:18 . 2012-04-03 07:18 -------- dc----w- c:\users\PiP\AppData\Roaming\Auslogics
2012-04-03 07:18 . 2012-04-03 07:18 -------- dc----w- c:\program files\Auslogics
2012-03-31 16:38 . 2012-03-31 16:38 -------- dc----w- c:\users\PiP\AppData\Local\Opera
2012-03-31 16:38 . 2012-03-31 16:38 -------- dc----w- c:\program files\Opera
2012-03-31 16:04 . 2012-03-31 16:04 -------- dc----w- c:\programdata\ATI
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\AMD AVT
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\AMD APP
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\Common Files\ATI Technologies
2012-03-31 16:01 . 2012-03-31 16:01 -------- dc----w- c:\program files\ATI
2012-03-31 15:59 . 2012-03-31 15:59 -------- dc----w- C:\AMD
2012-03-31 15:00 . 2012-03-31 15:33 -------- dc----w- c:\program files\SpeedFan
2012-03-31 08:43 . 2012-03-31 08:43 -------- dc----w- c:\programdata\PC Suite
2012-03-31 08:41 . 2012-03-31 10:33 -------- dc----w- c:\windows\system32\DRVSTORE
2012-03-31 08:41 . 2007-05-02 14:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
2012-03-31 08:40 . 2012-03-31 08:40 -------- dc----w- c:\programdata\Installations
2012-03-31 08:27 . 2012-03-31 10:36 -------- d-----w- c:\windows\system32\Samsung_USB_Drivers
2012-03-31 08:27 . 2006-07-24 14:05 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2012-03-29 18:16 . 2012-04-06 12:58 -------- dc----w- c:\program files\MSECache
2012-03-28 15:28 . 2012-04-16 18:39 -------- dc----w- c:\program files\VirtualDJ
2012-03-27 17:22 . 2012-04-17 08:06 -------- dc----w- c:\users\PiP\AppData\Local\Mirillis
2012-03-27 17:22 . 2012-03-27 17:22 -------- dc----w- c:\users\PiP\AppData\Roaming\Mirillis
2012-03-27 17:22 . 2012-03-27 17:22 -------- dc----w- c:\programdata\Mirillis
2012-03-27 17:21 . 2012-03-27 17:21 -------- dc----w- c:\program files\Mirillis
2012-03-27 10:42 . 2012-03-27 10:43 -------- dc----w- c:\program files\Scorpions WinCheater
2012-03-23 08:05 . 2012-03-14 02:15 6582328 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C25C5CDB-18AB-4F4A-9CD7-F0408EF13852}\mpengine.dll
2012-03-22 08:17 . 2012-03-22 08:17 -------- dc----w- c:\programdata\Casino
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-09 06:26 . 2012-03-09 06:26 9183232 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-03-09 05:16 . 2012-03-09 05:16 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-03-09 05:16 . 2012-03-09 05:16 791552 ----a-w- c:\windows\system32\aticfx32.dll
2012-03-09 05:11 . 2012-03-09 05:11 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-03-09 05:10 . 2012-03-09 05:10 405504 ----a-w- c:\windows\system32\atieclxx.exe
2012-03-09 05:10 . 2012-03-09 05:10 163328 ----a-w- c:\windows\system32\atiesrxx.exe
2012-03-09 05:08 . 2012-03-09 05:08 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2012-03-09 05:07 . 2012-03-09 05:07 20992 ----a-w- c:\windows\system32\atimuixx.dll
2012-03-09 05:07 . 2012-03-09 05:07 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2012-03-09 05:04 . 2012-03-09 05:04 6200320 ----a-w- c:\windows\system32\atidxx32.dll
2012-03-09 04:39 . 2012-03-09 04:39 19739136 ----a-w- c:\windows\system32\atioglxx.dll
2012-03-09 04:36 . 2012-03-09 04:36 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2012-03-09 04:23 . 2012-03-09 04:23 5062656 ----a-w- c:\windows\system32\atiumdva.dll
2012-03-09 04:23 . 2012-03-09 04:23 5954048 ----a-w- c:\windows\system32\atiumdag.dll
2012-03-09 04:18 . 2012-03-09 04:18 46080 ----a-w- c:\windows\system32\aticalrt.dll
2012-03-09 04:18 . 2012-03-09 04:18 44032 ----a-w- c:\windows\system32\aticalcl.dll
2012-03-09 04:12 . 2012-03-09 04:12 13715968 ----a-w- c:\windows\system32\aticaldd.dll
2012-03-09 04:05 . 2012-03-09 04:05 53760 ----a-w- c:\windows\system32\atimpc32.dll
2012-03-09 04:05 . 2012-03-09 04:05 53760 ----a-w- c:\windows\system32\amdpcom32.dll
2012-03-09 03:58 . 2012-03-09 03:58 356352 ----a-w- c:\windows\system32\atiadlxx.dll
2012-03-09 03:58 . 2012-03-09 03:58 14336 ----a-w- c:\windows\system32\atiglpxx.dll
2012-03-09 03:58 . 2012-03-09 03:58 33280 ----a-w- c:\windows\system32\atigktxx.dll
2012-03-09 03:57 . 2012-03-09 03:57 265216 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-03-09 03:56 . 2011-04-20 00:21 33280 ----a-w- c:\windows\system32\atiuxpag.dll
2012-03-09 03:56 . 2012-03-09 03:56 30208 ----a-w- c:\windows\system32\atiu9pag.dll
2012-03-09 03:55 . 2012-03-09 03:55 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-03-09 03:47 . 2011-04-20 00:27 51200 ----a-w- c:\windows\system32\coinst.dll
2012-03-08 23:26 . 2012-03-08 23:26 54784 ----a-w- c:\windows\system32\OVDecode.dll
2012-03-03 02:01 . 2012-03-03 02:01 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-03 02:01 . 2012-03-03 02:01 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-03 02:01 . 2012-03-03 02:01 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-03 02:01 . 2012-03-03 02:01 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-03 02:01 . 2012-03-03 02:01 161792 ----a-w- c:\windows\system32\msls31.dll
2012-03-03 02:01 . 2012-03-03 02:01 1127424 ----a-w- c:\windows\system32\wininet.dll
2012-03-03 02:01 . 2012-03-03 02:01 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-03 02:01 . 2012-03-03 02:01 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-03-03 02:01 . 2012-03-03 02:01 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-03-03 02:01 . 2012-03-03 02:01 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-03-03 02:01 . 2012-03-03 02:01 367104 ----a-w- c:\windows\system32\html.iec
2012-03-03 02:01 . 2012-03-03 02:01 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-03-03 02:01 . 2012-03-03 02:01 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-03-03 02:01 . 2012-03-03 02:01 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-03 02:01 . 2012-03-03 02:01 1798656 ----a-w- c:\windows\system32\jscript9.dll
2012-03-03 02:01 . 2012-03-03 02:01 152064 ----a-w- c:\windows\system32\wextract.exe
2012-03-03 02:01 . 2012-03-03 02:01 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-03-03 02:01 . 2012-03-03 02:01 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-03 02:01 . 2012-03-03 02:01 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2012-03-03 02:01 . 2012-03-03 02:01 11776 ----a-w- c:\windows\system32\mshta.exe
2012-03-03 02:01 . 2012-03-03 02:01 101888 ----a-w- c:\windows\system32\admparse.dll
2012-02-26 22:34 . 2012-02-26 22:34 271360 ----a-w- c:\windows\system32\drivers\atksgt.sys
2012-02-26 22:34 . 2012-02-26 22:34 18048 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2012-02-26 21:03 . 2012-02-26 21:03 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-02-26 15:21 . 2012-02-26 15:21 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-02-26 15:21 . 2012-02-26 15:21 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-02-26 15:21 . 2012-02-26 15:21 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tsusbflt.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 9728 ----a-w- c:\windows\system32\drivers\cs-CZ\BrSerIb.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 6656 ----a-w- c:\windows\system32\drivers\cs-CZ\rdvgkmd.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\UAGP35.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:30 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\cs-CZ\LXKPTPRC.DLL.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\pscr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 33792 ----a-w- c:\windows\system32\drivers\cs-CZ\yk62x86.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\MTConfig.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 11264 ----a-w- c:\windows\system32\drivers\cs-CZ\e1q6032.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 27136 ----a-w- c:\windows\system32\drivers\cs-CZ\bfe.dll.mui
2012-02-26 00:34 . 2012-02-26 00:30 5120 ----a-w- c:\windows\system32\drivers\cs-CZ\rdbss.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\ndisuio.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\pnpmem.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 9728 ----a-w- c:\windows\system32\drivers\cs-CZ\BrSerId.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\bthpan.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\wacompen.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\hdaudbus.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\HdAudio.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\hidbth.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\Dot4usb.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2048 ----a-w- c:\windows\system32\drivers\cs-CZ\disk.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\atikmdag.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 11776 ----a-w- c:\windows\system32\drivers\cs-CZ\usbhub.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 5632 ----a-w- c:\windows\system32\drivers\cs-CZ\bcm4sbxp.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 17920 ----a-w- c:\windows\system32\drivers\cs-CZ\E1G60I32.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\modem.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 15872 ----a-w- c:\windows\system32\drivers\cs-CZ\nwifi.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\mountmgr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 8704 ----a-w- c:\windows\system32\drivers\cs-CZ\pci.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\vdrvroot.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\isapnp.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\mssmbios.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\VIAAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\ULIAGPKX.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\SISAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\NV_AGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\AMDAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\AGP440.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\viac7.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\processr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\intelppm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\amdppm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\amdk8.sys.mui
2012-03-13 04:38 . 2012-04-18 08:03 97208 -c--a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2012-02-26 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll
[7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
.
((((((((((((((((((((((((((((( SnapShot@2012-04-09_17.22.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-04-17 19:40 . 2012-04-17 19:40 49152 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80KOR.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 49152 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80JPN.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ITA.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 45056 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80CHT.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 40960 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80CHS.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80FRA.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ESP.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 57344 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ENU.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 65536 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80DEU.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 57344 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfcm80u.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 69632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfcm80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 95744 c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.42_none_dc990e4797f81af1\ATL80.dll
+ 2010-11-20 21:20 . 2012-04-18 05:48 35540 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2012-04-18 05:48 50858 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-02-26 00:09 . 2012-04-18 05:48 12352 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-528348223-278861638-1870145213-1000_UserData.bin
+ 2012-04-13 09:26 . 2010-03-29 18:26 54656 c:\windows\System32\spool\drivers\w32x86\SendToOneNoteUI.dll
+ 2012-04-13 09:26 . 2010-03-29 18:26 94088 c:\windows\System32\spool\drivers\w32x86\SendToOneNoteFilter.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 67408 c:\windows\System32\spool\drivers\w32x86\msonpui.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 67408 c:\windows\System32\spool\drivers\w32x86\3\msonpui.dll
+ 2010-02-20 15:20 . 2010-02-20 15:20 31616 c:\windows\System32\FM20ENU.DLL
- 2009-07-14 04:50 . 2012-03-31 16:02 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2012-04-16 18:43 . 2010-08-05 15:52 27240 c:\windows\System32\DriverStore\FileRepository\bcd3000wdm.inf_x86_neutral_24d1241ed5f7c474\bcd3000wdm.sys
+ 2012-04-16 18:43 . 2010-08-05 15:52 47208 c:\windows\System32\DriverStore\FileRepository\bcd3000.inf_x86_neutral_5e8ee2adadc11a0f\bcd3000.sys
+ 2010-11-20 21:29 . 2010-11-20 21:29 80768 c:\windows\System32\drivers\USBAUDIO.sys
+ 2012-04-17 19:40 . 2012-04-17 19:40 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2012-04-13 09:42 . 2012-04-13 09:42 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\17b4308b0e6d35c1230135ed25fffbfe\stdole.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft-Windows-H#\170715f77ec52e0b449794a04640814b\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiActivScp\7f3e122ca1f73a8e82e6da27289c4465\ehiActivScp.ni.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39624 c:\windows\assembly\GAC_MSIL\System.AddIn\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 72472 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.DesignTime\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39704 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39712 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 60200 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39728 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Vsta.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 43840 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\microsoft.office.infopath.formcontrol.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 16384 c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 11544 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12080 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Publisher.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12632 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12616 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12616 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 64288 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 20280 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 35648 c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 17208 c:\windows\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 88896 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 80696 c:\windows\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 16712 c:\windows\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Permission.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 31560 c:\windows\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\IPDMCTRL.DLL
+ 2012-04-17 19:37 . 2012-04-17 19:37 82784 c:\windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 65536 c:\windows\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
+ 2012-02-27 02:21 . 2012-04-16 20:18 3434 c:\windows\System32\wdi\ERCQueuedResolutions.dat
+ 2012-04-18 05:46 . 2012-04-18 05:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-09 09:38 . 2012-04-09 09:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-04-18 05:46 . 2012-04-18 05:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-04-09 09:38 . 2012-04-09 09:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-17 19:37 . 2012-04-17 19:37 4096 c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 626688 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcr80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 548864 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcp80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcm80.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 930816 c:\windows\System32\spool\drivers\w32x86\XpsSvcs.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 762368 c:\windows\System32\spool\drivers\w32x86\unires.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 747520 c:\windows\System32\spool\drivers\w32x86\unidrvui.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 375296 c:\windows\System32\spool\drivers\w32x86\unidrv.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 781824 c:\windows\System32\spool\drivers\w32x86\mxdwdrv.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 864080 c:\windows\System32\spool\drivers\w32x86\msonpdrv.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 864080 c:\windows\System32\spool\drivers\w32x86\3\msonpdrv.dll
- 2009-07-14 02:05 . 2012-04-09 16:41 651938 c:\windows\System32\perfh009.dat
+ 2009-07-14 02:05 . 2012-04-18 05:50 651938 c:\windows\System32\perfh009.dat
- 2012-02-26 00:56 . 2012-04-09 16:41 666216 c:\windows\System32\perfh005.dat
+ 2012-02-26 00:56 . 2012-04-18 05:50 666216 c:\windows\System32\perfh005.dat
+ 2009-07-14 02:05 . 2012-04-18 05:50 120870 c:\windows\System32\perfc009.dat
- 2009-07-14 02:05 . 2012-04-09 16:41 120870 c:\windows\System32\perfc009.dat
- 2012-02-26 00:56 . 2012-04-09 16:41 139898 c:\windows\System32\perfc005.dat
+ 2012-02-26 00:56 . 2012-04-18 05:50 139898 c:\windows\System32\perfc005.dat
+ 2009-07-14 04:33 . 2012-04-18 05:46 420400 c:\windows\System32\FNTCACHE.DAT
- 2009-07-14 04:50 . 2012-03-31 16:02 143360 c:\windows\System32\DriverStore\infstrng.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 143360 c:\windows\System32\DriverStore\infstrng.dat
- 2009-07-14 04:50 . 2012-03-31 16:02 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:34 . 2012-04-18 06:16 100424 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 04:47 . 2012-04-17 20:40 393888 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\6834f.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\6833b.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 507904 c:\windows\Installer\68336.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 518144 c:\windows\Installer\68330.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 514048 c:\windows\Installer\6832a.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\68320.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 502272 c:\windows\Installer\68307.msi
+ 2012-04-17 19:31 . 2012-04-17 19:31 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2012-04-13 09:44 . 2012-04-13 09:44 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\cdd04b14b9dd6ced2e2572a044c3c57e\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\fbec5a519a2c5005d43b04b6386406b2\ehiVidCtl.ni.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 330520 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Blueprints\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Blueprints.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 105248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 211736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 609104 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 367400 c:\windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.InteropAdapter.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 118112 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 416544 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2012-04-17 19:37 . 2012-04-17 19:37 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
+ 2012-04-17 19:36 . 2012-04-17 19:36 371496 c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 781104 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 232248 c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 248632 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 920376 c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 146232 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 404296 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.SemiTrust.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 150320 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 110592 c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 1079808 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfc80u.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 1093632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfc80.dll
+ 2012-02-26 00:59 . 2012-04-17 19:40 9677316 c:\windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin
+ 2010-02-20 15:20 . 2010-02-20 15:20 1207144 c:\windows\System32\FM20.DLL
+ 2009-08-21 04:08 . 2012-04-18 05:46 5743117 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-08-21 04:08 . 2012-04-02 13:50 5743117 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2012-02-26 16:07 . 2012-04-10 19:42 2370976 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-528348223-278861638-1870145213-1000-8192.dat
+ 2012-04-11 07:56 . 2012-04-11 07:56 5138944 c:\windows\Installer\6d470.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1642496 c:\windows\Installer\68354.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1654272 c:\windows\Installer\6834a.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1654272 c:\windows\Installer\68345.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1653760 c:\windows\Installer\68340.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 2320896 c:\windows\Installer\68325.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1648640 c:\windows\Installer\6831b.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1642496 c:\windows\Installer\68316.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 2024448 c:\windows\Installer\68311.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 1714176 c:\windows\Installer\6830c.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 2398720 c:\windows\Installer\68302.msi
+ 2012-04-17 19:40 . 2012-04-17 19:40 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2012-04-13 09:44 . 2012-04-13 09:44 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\c971d1782b4893d60666d91509ee0398\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 1276720 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 1612592 c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 1215328 c:\windows\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\IACore.dll
+ 2012-03-03 03:43 . 2012-04-17 19:23 19567724 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-528348223-278861638-1870145213-1000-12288.dat
+ 2012-04-17 19:31 . 2012-04-17 19:31 18183680 c:\windows\Installer\6835b.msi
+ 2011-06-13 06:22 . 2011-06-13 06:22 32766520 c:\windows\Installer\2b0d86.msi
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-02-26 740216]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-02-16 2575712]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BCD3000 Control Panel.lnk - c:\program files\Behringer\BCD3000\Drivers\bcd3kcpan.exe [2012-4-16 548864]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableStartupSound"= 1 (0x1)
"DisableStatusMessages"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
backup=c:\windows\pss\AML Device Install.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Run Google Web Accelerator.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Run Google Web Accelerator.lnk
backup=c:\windows\pss\Run Google Web Accelerator.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
start AMD Accelerated Video Transcoding device initialization [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 -c--a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-02-13 08:06 3481408 -c--a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-02-26 00:22 136176 -c--atw- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
2011-12-13 15:58 11487848 -c----w- c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2010-11-20 21:29 1174016 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedBitVideoAccelerator]
2012-04-08 11:35 1494216 -c--a-w- c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2012-03-09 00:30 636032 -c--a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2012-02-26 12:54 740216 -c--a-w- c:\program files\uTorrent\uTorrent.exe
.
R1 oypmzmjv;oypmzmjv;c:\windows\system32\drivers\oypmzmjv.sys [x]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [2012-02-14 5104992]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 bcd3000;bcd3000;c:\windows\system32\DRIVERS\bcd3000.sys [2010-08-05 47208]
R3 bcd3000wdm;bcd3000wdm;c:\windows\system32\DRIVERS\bcd3000wdm.sys [2010-08-05 27240]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 RTCore32;RTCore32;c:\program files\RMClock\RTCore32.sys [x]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\DRIVERS\sbfwim.sys [2011-02-08 69208]
R3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [2011-04-05 94040]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-20 25600]
R3 TsUsbFlt;TsUsbFlt; [x]
R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 253600]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-03-09 163328]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 116648]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 116648]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\avgidsehx.sys [2011-12-23 22992]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2012-02-22 299472]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-02-26 242240]
S1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2011-04-05 221784]
S1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2011-04-05 78936]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-03-09 9183232]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-03-09 265216]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-12-05 86032]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]
S3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\DRIVERS\SBFWIM.sys [2011-02-08 69208]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 11:30]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 10:13]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 10:13]
.
2012-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-528348223-278861638-1870145213-1000Core.job
- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-26 00:22]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-528348223-278861638-1870145213-1000UA.job
- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-26 00:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://easy-google-search.blogspot.com
IE: E&xport to Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\Microsoft Office\Office14\ONBttnIE.dll/105
LSP: c:\program files\SpeedBit Video Accelerator\SBLSP.dll
TCP: DhcpNameServer = 10.112.1.1 10.112.2.1
FF - ProfilePath - c:\users\PiP\AppData\Roaming\Mozilla\Firefox\Profiles\ulqjuwfl.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-528348223-278861638-1870145213-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:72,ad,2f,86,69,d3,6a,ed,5c,90,a4,f1,2a,dd,dd,cd,f3,e2,11,44,2d,25,33,
82,c7,73,41,01,80,2c,0b,38,21,3f,c0,e3,c3,52,76,d1,56,17,b9,68,30,ae,a5,4d,\
"??"=hex:d8,56,3a,64,96,66,73,c5,90,57,3b,d9,52,5d,8a,09
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-04-18 10:23:58
ComboFix-quarantined-files.txt 2012-04-18 08:23
ComboFix2.txt 2012-04-09 17:26
.
Před spuštěním: Volných bajtů: 17 661 370 368
Po spuštění: Volných bajtů: 17 407 717 376
.
- - End Of File - - D8126FB4B7A887DD8F2D52F949FFD320

Než to přelouskám, udělejte zatím sken TDSSKillerem a MBAMem:

Stahnete si TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe

• Kliknete na volbu Change parametrs
• V obou oknech (Objects to scan i Additional Option) zakliknete vsechny moznosti - ve vsech ctvereccich musi mit fajecka
• Kliknete na OK
• Utilite prikazte, at skenuje - klik na Start Scan
• Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip
• Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip
• Pokud mate vsude Skip, kliknete na Continue
• Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte

Stáhněte MBAM a vložte sem jeho log podle návodu zde, při výběru skenu zvolte Úplný sken.

11:40:12.0872 3748 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
11:40:13.0059 3748 ============================================================
11:40:13.0059 3748 Current date / time: 2012/04/18 11:40:13.0059
11:40:13.0059 3748 SystemInfo:
11:40:13.0059 3748
11:40:13.0059 3748 OS Version: 6.1.7601 ServicePack: 1.0
11:40:13.0059 3748 Product type: Workstation
11:40:13.0059 3748 ComputerName: PIP-PC
11:40:13.0059 3748 UserName: PiP
11:40:13.0059 3748 Windows directory: C:\Windows
11:40:13.0059 3748 System windows directory: C:\Windows
11:40:13.0059 3748 Processor architecture: Intel x86
11:40:13.0059 3748 Number of processors: 1
11:40:13.0059 3748 Page size: 0x1000
11:40:13.0059 3748 Boot type: Normal boot
11:40:13.0059 3748 ============================================================
11:40:14.0184 3748 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0xD72C, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000050
11:40:14.0200 3748 \Device\Harddisk0\DR0:
11:40:14.0200 3748 MBR used
11:40:14.0200 3748 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
11:40:14.0200 3748 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xDF61800
11:40:14.0215 3748 Initialize success
11:40:14.0215 3748 ============================================================
11:40:43.0536 2340 ============================================================
11:40:43.0536 2340 Scan started
11:40:43.0536 2340 Mode: Manual; SigCheck; TDLFS;
11:40:43.0536 2340 ============================================================
11:40:44.0192 2340 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
11:40:44.0348 2340 1394ohci - ok
11:40:44.0395 2340 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
11:40:44.0426 2340 ACPI - ok
11:40:44.0489 2340 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
11:40:44.0551 2340 AcpiPmi - ok
11:40:44.0629 2340 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
11:40:44.0645 2340 AdobeARMservice - ok
11:40:44.0739 2340 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:40:44.0770 2340 AdobeFlashPlayerUpdateSvc - ok
11:40:44.0864 2340 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\drivers\adp94xx.sys
11:40:44.0911 2340 adp94xx - ok
11:40:44.0958 2340 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\drivers\adpahci.sys
11:40:44.0989 2340 adpahci - ok
11:40:45.0036 2340 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\drivers\adpu320.sys
11:40:45.0051 2340 adpu320 - ok
11:40:45.0114 2340 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
11:40:45.0239 2340 AeLookupSvc - ok
11:40:45.0286 2340 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
11:40:45.0333 2340 AFD - ok
11:40:45.0388 2340 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
11:40:45.0413 2340 agp440 - ok
11:40:45.0452 2340 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\drivers\djsvs.sys
11:40:45.0477 2340 aic78xx - ok
11:40:45.0512 2340 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
11:40:45.0555 2340 ALG - ok
11:40:45.0607 2340 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
11:40:45.0633 2340 aliide - ok
11:40:45.0687 2340 AMD External Events Utility (4b9298fd6707980ab8e3a8f0e642ec9a) C:\Windows\system32\atiesrxx.exe
11:40:45.0762 2340 AMD External Events Utility - ok
11:40:45.0822 2340 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
11:40:45.0842 2340 amdagp - ok
11:40:45.0883 2340 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
11:40:45.0904 2340 amdide - ok
11:40:45.0941 2340 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\drivers\amdk8.sys
11:40:45.0981 2340 AmdK8 - ok
11:40:46.0410 2340 amdkmdag (5c297f25a4a09d14bfe2cab5de2f1457) C:\Windows\system32\DRIVERS\atikmdag.sys
11:40:46.0862 2340 amdkmdag - ok
11:40:46.0956 2340 amdkmdap (ff2e35d9bd35f36a0126a0ca7556e43d) C:\Windows\system32\DRIVERS\atikmpag.sys
11:40:47.0002 2340 amdkmdap - ok
11:40:47.0049 2340 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\drivers\amdppm.sys
11:40:47.0096 2340 AmdPPM - ok
11:40:47.0143 2340 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
11:40:47.0159 2340 amdsata - ok
11:40:47.0206 2340 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\drivers\amdsbs.sys
11:40:47.0221 2340 amdsbs - ok
11:40:47.0252 2340 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
11:40:47.0284 2340 amdxata - ok
11:40:47.0315 2340 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
11:40:47.0377 2340 AppID - ok
11:40:47.0424 2340 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
11:40:47.0456 2340 AppIDSvc - ok
11:40:47.0487 2340 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
11:40:47.0549 2340 Appinfo - ok
11:40:47.0596 2340 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll
11:40:47.0643 2340 AppMgmt - ok
11:40:47.0674 2340 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\drivers\arc.sys
11:40:47.0690 2340 arc - ok
11:40:47.0721 2340 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\drivers\arcsas.sys
11:40:47.0752 2340 arcsas - ok
11:40:47.0846 2340 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
11:40:47.0862 2340 aspnet_state - ok
11:40:47.0956 2340 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
11:40:48.0065 2340 AsyncMac - ok
11:40:48.0096 2340 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
11:40:48.0112 2340 atapi - ok
11:40:48.0206 2340 AtiHDAudioService (4d201d8b576be4473405b2a86a2d28b3) C:\Windows\system32\drivers\AtihdW73.sys
11:40:48.0237 2340 AtiHDAudioService - ok
11:40:48.0299 2340 ATITool (0e4bb35c5305099ac82053ac992e3e0e) C:\Windows\system32\DRIVERS\ATITool.sys
11:40:48.0409 2340 ATITool ( UnsignedFile.Multi.Generic ) - warning
11:40:48.0409 2340 ATITool - detected UnsignedFile.Multi.Generic (1)
11:40:48.0471 2340 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\Windows\system32\DRIVERS\atksgt.sys
11:40:48.0502 2340 atksgt ( UnsignedFile.Multi.Generic ) - warning
11:40:48.0502 2340 atksgt - detected UnsignedFile.Multi.Generic (1)
11:40:48.0549 2340 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
11:40:48.0581 2340 AudioEndpointBuilder - ok
11:40:48.0612 2340 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
11:40:48.0659 2340 Audiosrv - ok
11:40:48.0893 2340 AVGIDSAgent (f5689fba4360be50839999882e0a9d99) C:\Program Files\AVG\AVG2012\avgidsagent.exe
11:40:49.0034 2340 AVGIDSAgent - ok
11:40:49.0127 2340 AVGIDSDriver (1074f787080068c71303b61fae7e7ca4) C:\Windows\system32\DRIVERS\avgidsdriverx.sys
11:40:49.0143 2340 AVGIDSDriver - ok
11:40:49.0174 2340 AVGIDSEH (f4050c31e6a83cf1e4cdc80d165f7f08) C:\Windows\system32\DRIVERS\avgidsehx.sys
11:40:49.0190 2340 AVGIDSEH - ok
11:40:49.0237 2340 AVGIDSFilter (61a7e0b02f82cff3db2445bbe50b3589) C:\Windows\system32\DRIVERS\avgidsfilterx.sys
11:40:49.0252 2340 AVGIDSFilter - ok
11:40:49.0284 2340 AVGIDSShim (baf975b72062f53d327788e99d64197e) C:\Windows\system32\DRIVERS\avgidsshimx.sys
11:40:49.0299 2340 AVGIDSShim - ok
11:40:49.0346 2340 Avgldx86 (dda6a2a18841e4c9172bb85958b8d948) C:\Windows\system32\DRIVERS\avgldx86.sys
11:40:49.0377 2340 Avgldx86 - ok
11:40:49.0409 2340 Avgmfx86 (ccdd61545aaea265977e4b1efdc74e8c) C:\Windows\system32\DRIVERS\avgmfx86.sys
11:40:49.0424 2340 Avgmfx86 - ok
11:40:49.0502 2340 Avgrkx86 (1fd90b28d2c3100bf4500199c8ad6358) C:\Windows\system32\DRIVERS\avgrkx86.sys
11:40:49.0518 2340 Avgrkx86 - ok
11:40:49.0565 2340 Avgtdix (b2fc9d4de6a2e57a4dfb5a11440c5b85) C:\Windows\system32\DRIVERS\avgtdix.sys
11:40:49.0581 2340 Avgtdix - ok
11:40:49.0690 2340 avgwd (ea1145debcd508fd25bd1e95c4346929) C:\Program Files\AVG\AVG2012\avgwdsvc.exe
11:40:49.0706 2340 avgwd - ok
11:40:49.0752 2340 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
11:40:49.0799 2340 AxInstSV - ok
11:40:49.0846 2340 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\drivers\bxvbdx.sys
11:40:49.0909 2340 b06bdrv - ok
11:40:50.0002 2340 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
11:40:50.0049 2340 b57nd60x - ok
11:40:50.0112 2340 bcd3000 (2375639d877151f93a7bf8497efde84d) C:\Windows\system32\DRIVERS\bcd3000.sys
11:40:50.0143 2340 bcd3000 - ok
11:40:50.0174 2340 bcd3000wdm (03169c677349e78618ce5a16b6c6ce54) C:\Windows\system32\DRIVERS\bcd3000wdm.sys
11:40:50.0206 2340 bcd3000wdm - ok
11:40:50.0237 2340 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
11:40:50.0284 2340 BDESVC - ok
11:40:50.0331 2340 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
11:40:50.0377 2340 Beep - ok
11:40:50.0424 2340 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
11:40:50.0502 2340 BFE - ok
11:40:50.0565 2340 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\system32\qmgr.dll
11:40:50.0627 2340 BITS - ok
11:40:50.0674 2340 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
11:40:50.0706 2340 blbdrive - ok
11:40:50.0752 2340 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
11:40:50.0815 2340 bowser - ok
11:40:50.0893 2340 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\BrFiltLo.sys
11:40:50.0940 2340 BrFiltLo - ok
11:40:50.0971 2340 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\BrFiltUp.sys
11:40:51.0018 2340 BrFiltUp - ok
11:40:51.0081 2340 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys
11:40:51.0143 2340 BridgeMP - ok
11:40:51.0190 2340 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
11:40:51.0252 2340 Browser - ok
11:40:51.0284 2340 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
11:40:51.0331 2340 Brserid - ok
11:40:51.0377 2340 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
11:40:51.0409 2340 BrSerWdm - ok
11:40:51.0456 2340 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
11:40:51.0487 2340 BrUsbMdm - ok
11:40:51.0518 2340 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
11:40:51.0549 2340 BrUsbSer - ok
11:40:51.0581 2340 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\drivers\bthmodem.sys
11:40:51.0612 2340 BTHMODEM - ok
11:40:51.0643 2340 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
11:40:51.0690 2340 bthserv - ok
11:40:51.0784 2340 catchme - ok
11:40:51.0862 2340 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
11:40:51.0924 2340 cdfs - ok
11:40:51.0956 2340 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
11:40:52.0002 2340 cdrom - ok
11:40:52.0065 2340 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
11:40:52.0112 2340 CertPropSvc - ok
11:40:52.0143 2340 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\drivers\circlass.sys
11:40:52.0174 2340 circlass - ok
11:40:52.0206 2340 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
11:40:52.0237 2340 CLFS - ok
11:40:52.0299 2340 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:40:52.0315 2340 clr_optimization_v2.0.50727_32 - ok
11:40:52.0377 2340 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:40:52.0409 2340 clr_optimization_v4.0.30319_32 - ok
11:40:52.0440 2340 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\drivers\CmBatt.sys
11:40:52.0471 2340 CmBatt - ok
11:40:52.0502 2340 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
11:40:52.0534 2340 cmdide - ok
11:40:52.0565 2340 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
11:40:52.0596 2340 CNG - ok
11:40:52.0674 2340 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\drivers\compbatt.sys
11:40:52.0706 2340 Compbatt - ok
11:40:52.0737 2340 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\DRIVERS\CompositeBus.sys
11:40:52.0784 2340 CompositeBus - ok
11:40:52.0799 2340 COMSysApp - ok
11:40:52.0831 2340 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\drivers\crcdisk.sys
11:40:52.0846 2340 crcdisk - ok
11:40:52.0893 2340 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll
11:40:52.0956 2340 CryptSvc - ok
11:40:53.0002 2340 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
11:40:53.0081 2340 CSC - ok
11:40:53.0112 2340 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll
11:40:53.0159 2340 CscService - ok
11:40:53.0221 2340 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
11:40:53.0284 2340 DcomLaunch - ok
11:40:53.0346 2340 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
11:40:53.0377 2340 defragsvc - ok
11:40:53.0424 2340 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
11:40:53.0471 2340 DfsC - ok
11:40:53.0549 2340 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
11:40:53.0581 2340 Dhcp - ok
11:40:53.0643 2340 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
11:40:53.0690 2340 discache - ok
11:40:53.0721 2340 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\drivers\disk.sys
11:40:53.0752 2340 Disk - ok
11:40:53.0799 2340 dmvsc (2a958ef85db1b61ffca65044fa4bce9e) C:\Windows\system32\drivers\dmvsc.sys
11:40:53.0831 2340 dmvsc - ok
11:40:53.0877 2340 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
11:40:53.0924 2340 Dnscache - ok
11:40:53.0956 2340 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
11:40:54.0002 2340 dot3svc - ok
11:40:54.0049 2340 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
11:40:54.0112 2340 DPS - ok
11:40:54.0159 2340 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
11:40:54.0206 2340 drmkaud - ok
11:40:54.0252 2340 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
11:40:54.0284 2340 dtsoftbus01 - ok
11:40:54.0362 2340 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
11:40:54.0393 2340 DXGKrnl - ok
11:40:54.0440 2340 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
11:40:54.0502 2340 EapHost - ok
11:40:54.0659 2340 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\drivers\evbdx.sys
11:40:54.0815 2340 ebdrv - ok
11:40:54.0846 2340 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
11:40:54.0877 2340 EFS - ok
11:40:54.0956 2340 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
11:40:54.0987 2340 ehRecvr - ok
11:40:55.0018 2340 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
11:40:55.0049 2340 ehSched - ok
11:40:55.0096 2340 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\drivers\elxstor.sys
11:40:55.0127 2340 elxstor - ok
11:40:55.0174 2340 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
11:40:55.0221 2340 ErrDev - ok
11:40:55.0315 2340 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
11:40:55.0377 2340 EventSystem - ok
11:40:55.0440 2340 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
11:40:55.0471 2340 exfat - ok
11:40:55.0502 2340 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
11:40:55.0565 2340 fastfat - ok
11:40:55.0612 2340 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
11:40:55.0674 2340 Fax - ok
11:40:55.0706 2340 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
11:40:55.0752 2340 fdc - ok
11:40:55.0784 2340 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
11:40:55.0846 2340 fdPHost - ok
11:40:55.0877 2340 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
11:40:55.0924 2340 FDResPub - ok
11:40:55.0940 2340 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
11:40:55.0971 2340 FileInfo - ok
11:40:56.0002 2340 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
11:40:56.0049 2340 Filetrace - ok
11:40:56.0096 2340 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
11:40:56.0143 2340 flpydisk - ok
11:40:56.0190 2340 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
11:40:56.0206 2340 FltMgr - ok
11:40:56.0409 2340 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
11:40:56.0456 2340 FontCache - ok
11:40:56.0565 2340 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
11:40:56.0581 2340 FontCache3.0.0.0 - ok
11:40:56.0659 2340 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
11:40:56.0674 2340 FsDepends - ok
11:40:56.0706 2340 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
11:40:56.0737 2340 Fs_Rec - ok
11:40:56.0752 2340 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
11:40:56.0784 2340 fvevol - ok
11:40:56.0815 2340 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\drivers\gagp30kx.sys
11:40:56.0846 2340 gagp30kx - ok
11:40:56.0909 2340 giveio (77ebf3e9386daa51551af429052d88d0) C:\Windows\system32\giveio.sys
11:40:56.0940 2340 giveio ( UnsignedFile.Multi.Generic ) - warning
11:40:56.0940 2340 giveio - detected UnsignedFile.Multi.Generic (1)
11:40:57.0002 2340 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
11:40:57.0065 2340 gpsvc - ok
11:40:57.0159 2340 gupdate (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files\Google\Update\GoogleUpdate.exe
11:40:57.0174 2340 gupdate - ok
11:40:57.0190 2340 gupdatem (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files\Google\Update\GoogleUpdate.exe
11:40:57.0221 2340 gupdatem - ok
11:40:57.0268 2340 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
11:40:57.0315 2340 hcw85cir - ok
11:40:57.0409 2340 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
11:40:57.0471 2340 HdAudAddService - ok
11:40:57.0521 2340 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\DRIVERS\HDAudBus.sys
11:40:57.0568 2340 HDAudBus - ok
11:40:57.0609 2340 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\drivers\HidBatt.sys
11:40:57.0636 2340 HidBatt - ok
11:40:57.0676 2340 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\drivers\hidbth.sys
11:40:57.0721 2340 HidBth - ok
11:40:57.0759 2340 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\drivers\hidir.sys
11:40:57.0808 2340 HidIr - ok
11:40:57.0849 2340 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\System32\hidserv.dll
11:40:57.0897 2340 hidserv - ok
11:40:57.0939 2340 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
11:40:57.0991 2340 HidUsb - ok
11:40:58.0038 2340 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
11:40:58.0098 2340 hkmsvc - ok
11:40:58.0141 2340 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
11:40:58.0185 2340 HomeGroupListener - ok
11:40:58.0260 2340 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
11:40:58.0308 2340 HomeGroupProvider - ok
11:40:58.0377 2340 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
11:40:58.0397 2340 HpSAMD - ok
11:40:58.0444 2340 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
11:40:58.0490 2340 HTTP - ok
11:40:58.0517 2340 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
11:40:58.0538 2340 hwpolicy - ok
11:40:58.0590 2340 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
11:40:58.0631 2340 i8042prt - ok
11:40:58.0696 2340 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
11:40:58.0731 2340 iaStorV - ok
11:40:58.0834 2340 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:40:58.0886 2340 idsvc - ok
11:40:58.0925 2340 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\drivers\iirsp.sys
11:40:58.0947 2340 iirsp - ok
11:40:59.0012 2340 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
11:40:59.0101 2340 IKEEXT - ok
11:40:59.0308 2340 IntcAzAudAddService (0dbef9cd5a2cd71240dd5afcee56d073) C:\Windows\system32\drivers\RTKVHDA.sys
11:40:59.0391 2340 IntcAzAudAddService - ok
11:40:59.0425 2340 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
11:40:59.0445 2340 intelide - ok
11:40:59.0476 2340 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
11:40:59.0504 2340 intelppm - ok
11:40:59.0536 2340 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
11:40:59.0583 2340 IPBusEnum - ok
11:40:59.0625 2340 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:40:59.0680 2340 IpFilterDriver - ok
11:40:59.0730 2340 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
11:40:59.0778 2340 iphlpsvc - ok
11:40:59.0811 2340 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
11:40:59.0843 2340 IPMIDRV - ok
11:40:59.0877 2340 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
11:40:59.0922 2340 IPNAT - ok
11:40:59.0957 2340 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
11:41:00.0007 2340 IRENUM - ok
11:41:00.0041 2340 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
11:41:00.0062 2340 isapnp - ok
11:41:00.0100 2340 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
11:41:00.0136 2340 iScsiPrt - ok
11:41:00.0184 2340 iteatapi (6944a9ddabb124bde6ba3ca5430b0398) C:\Windows\system32\DRIVERS\iteatapi.sys
11:41:00.0199 2340 iteatapi - ok
11:41:00.0240 2340 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
11:41:00.0260 2340 kbdclass - ok
11:41:00.0298 2340 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
11:41:00.0338 2340 kbdhid - ok
11:41:00.0378 2340 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
11:41:00.0407 2340 KeyIso - ok
11:41:00.0488 2340 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
11:41:00.0519 2340 KSecDD - ok
11:41:00.0550 2340 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
11:41:00.0566 2340 KSecPkg - ok
11:41:00.0628 2340 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
11:41:00.0691 2340 KtmRm - ok
11:41:00.0738 2340 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\System32\srvsvc.dll
11:41:00.0800 2340 LanmanServer - ok
11:41:00.0847 2340 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
11:41:00.0910 2340 LanmanWorkstation - ok
11:41:00.0957 2340 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\Windows\system32\DRIVERS\lirsgt.sys
11:41:00.0988 2340 lirsgt ( UnsignedFile.Multi.Generic ) - warning
11:41:00.0988 2340 lirsgt - detected UnsignedFile.Multi.Generic (1)
11:41:01.0019 2340 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
11:41:01.0082 2340 lltdio - ok
11:41:01.0128 2340 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
11:41:01.0207 2340 lltdsvc - ok
11:41:01.0269 2340 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
11:41:01.0332 2340 lmhosts - ok
11:41:01.0410 2340 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\drivers\lsi_fc.sys
11:41:01.0441 2340 LSI_FC - ok
11:41:01.0472 2340 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\drivers\lsi_sas.sys
11:41:01.0488 2340 LSI_SAS - ok
11:41:01.0535 2340 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\drivers\lsi_sas2.sys
11:41:01.0550 2340 LSI_SAS2 - ok
11:41:01.0597 2340 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\drivers\lsi_scsi.sys
11:41:01.0613 2340 LSI_SCSI - ok
11:41:01.0660 2340 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
11:41:01.0722 2340 luafv - ok
11:41:01.0769 2340 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
11:41:01.0800 2340 Mcx2Svc - ok
11:41:01.0832 2340 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\drivers\megasas.sys
11:41:01.0847 2340 megasas - ok
11:41:01.0894 2340 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\drivers\MegaSR.sys
11:41:01.0925 2340 MegaSR - ok
11:41:02.0097 2340 Microsoft Office Groove Audit Service (fafe367d032ed82e9332b4c741a20216) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
11:41:02.0113 2340 Microsoft Office Groove Audit Service - ok
11:41:02.0207 2340 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
11:41:02.0238 2340 MMCSS - ok
11:41:02.0300 2340 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
11:41:02.0347 2340 Modem - ok
11:41:02.0378 2340 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
11:41:02.0425 2340 monitor - ok
11:41:02.0472 2340 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
11:41:02.0488 2340 mouclass - ok
11:41:02.0519 2340 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
11:41:02.0582 2340 mouhid - ok
11:41:02.0613 2340 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
11:41:02.0628 2340 mountmgr - ok
11:41:02.0675 2340 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
11:41:02.0707 2340 mpio - ok
11:41:02.0785 2340 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
11:41:03.0347 2340 mpsdrv - ok
11:41:03.0394 2340 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
11:41:03.0472 2340 MpsSvc - ok
11:41:03.0503 2340 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
11:41:03.0550 2340 MRxDAV - ok
11:41:03.0597 2340 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
11:41:03.0660 2340 mrxsmb - ok
11:41:03.0691 2340 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:41:03.0722 2340 mrxsmb10 - ok
11:41:03.0753 2340 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:41:03.0785 2340 mrxsmb20 - ok
11:41:03.0816 2340 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
11:41:03.0832 2340 msahci - ok
11:41:03.0910 2340 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
11:41:03.0925 2340 msdsm - ok
11:41:03.0988 2340 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
11:41:04.0035 2340 MSDTC - ok
11:41:04.0097 2340 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
11:41:04.0144 2340 Msfs - ok
11:41:04.0175 2340 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
11:41:04.0222 2340 mshidkmdf - ok
11:41:04.0253 2340 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
11:41:04.0269 2340 msisadrv - ok
11:41:04.0316 2340 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
11:41:04.0378 2340 MSiSCSI - ok
11:41:04.0394 2340 msiserver - ok
11:41:04.0441 2340 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
11:41:04.0503 2340 MSKSSRV - ok
11:41:04.0535 2340 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
11:41:04.0597 2340 MSPCLOCK - ok
11:41:04.0644 2340 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
11:41:04.0707 2340 MSPQM - ok
11:41:04.0738 2340 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
11:41:04.0769 2340 MsRPC - ok
11:41:04.0800 2340 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
11:41:04.0816 2340 mssmbios - ok
11:41:04.0863 2340 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
11:41:04.0894 2340 MSTEE - ok
11:41:04.0941 2340 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\drivers\MTConfig.sys
11:41:04.0988 2340 MTConfig - ok
11:41:05.0035 2340 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\Windows\system32\DRIVERS\ASACPI.sys
11:41:05.0066 2340 MTsensor - ok
11:41:05.0128 2340 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
11:41:05.0160 2340 Mup - ok
11:41:05.0222 2340 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
11:41:05.0285 2340 napagent - ok
11:41:05.0347 2340 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
11:41:05.0378 2340 NativeWifiP - ok
11:41:05.0441 2340 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
11:41:05.0457 2340 NDIS - ok
11:41:05.0503 2340 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
11:41:05.0566 2340 NdisCap - ok
11:41:05.0597 2340 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
11:41:05.0644 2340 NdisTapi - ok
11:41:05.0675 2340 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
11:41:05.0738 2340 Ndisuio - ok
11:41:05.0785 2340 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
11:41:05.0832 2340 NdisWan - ok
11:41:05.0878 2340 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
11:41:05.0925 2340 NDProxy - ok
11:41:05.0957 2340 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
11:41:06.0003 2340 NetBIOS - ok
11:41:06.0050 2340 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
11:41:06.0097 2340 NetBT - ok
11:41:06.0175 2340 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
11:41:06.0207 2340 Netlogon - ok
11:41:06.0253 2340 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
11:41:06.0300 2340 Netman - ok
11:41:06.0394 2340 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:41:06.0410 2340 NetMsmqActivator - ok
11:41:06.0441 2340 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:41:06.0457 2340 NetPipeActivator - ok
11:41:06.0550 2340 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
11:41:06.0613 2340 netprofm - ok
11:41:06.0628 2340 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:41:06.0660 2340 NetTcpActivator - ok
11:41:06.0675 2340 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:41:06.0691 2340 NetTcpPortSharing - ok
11:41:06.0753 2340 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\drivers\nfrd960.sys
11:41:06.0785 2340 nfrd960 - ok
11:41:06.0832 2340 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
11:41:06.0894 2340 NlaSvc - ok
11:41:06.0910 2340 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
11:41:06.0972 2340 Npfs - ok
11:41:07.0019 2340 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
11:41:07.0050 2340 nsi - ok
11:41:07.0097 2340 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
11:41:07.0160 2340 nsiproxy - ok
11:41:07.0222 2340 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
11:41:07.0269 2340 Ntfs - ok
11:41:07.0332 2340 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
11:41:07.0378 2340 Null - ok
11:41:07.0425 2340 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
11:41:07.0441 2340 nvraid - ok
11:41:07.0503 2340 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
11:41:07.0535 2340 nvstor - ok
11:41:07.0566 2340 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
11:41:07.0597 2340 nv_agp - ok
11:41:07.0722 2340 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
11:41:07.0769 2340 odserv - ok
11:41:07.0816 2340 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
11:41:07.0863 2340 ohci1394 - ok
11:41:07.0925 2340 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:41:07.0941 2340 ose - ok
11:41:07.0988 2340 oypmzmjv - ok
11:41:08.0035 2340 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
11:41:08.0082 2340 p2pimsvc - ok
11:41:08.0128 2340 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
11:41:08.0175 2340 p2psvc - ok
11:41:08.0253 2340 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
11:41:08.0285 2340 Parport - ok
11:41:08.0316 2340 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
11:41:08.0332 2340 partmgr - ok
11:41:08.0378 2340 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
11:41:08.0472 2340 Parvdm - ok
11:41:08.0503 2340 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
11:41:08.0550 2340 PcaSvc - ok
11:41:08.0582 2340 pccsmcfd - ok
11:41:08.0597 2340 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
11:41:08.0628 2340 pci - ok
11:41:08.0660 2340 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
11:41:08.0675 2340 pciide - ok
11:41:08.0722 2340 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\drivers\pcmcia.sys
11:41:08.0753 2340 pcmcia - ok
11:41:08.0800 2340 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
11:41:08.0816 2340 pcw - ok
11:41:08.0863 2340 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
11:41:08.0941 2340 PEAUTH - ok
11:41:09.0003 2340 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll
11:41:09.0066 2340 PeerDistSvc - ok
11:41:09.0175 2340 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
11:41:09.0269 2340 pla - ok
11:41:09.0332 2340 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
11:41:09.0363 2340 PlugPlay - ok
11:41:09.0425 2340 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
11:41:09.0472 2340 PNRPAutoReg - ok
11:41:09.0503 2340 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
11:41:09.0550 2340 PNRPsvc - ok
11:41:09.0597 2340 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
11:41:09.0675 2340 PolicyAgent - ok
11:41:09.0738 2340 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
11:41:09.0800 2340 Power - ok
11:41:09.0832 2340 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
11:41:09.0910 2340 PptpMiniport - ok
11:41:09.0941 2340 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\drivers\processr.sys
11:41:09.0988 2340 Processor - ok
11:41:10.0035 2340 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll
11:41:10.0082 2340 ProfSvc - ok
11:41:10.0113 2340 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
11:41:10.0144 2340 ProtectedStorage - ok
11:41:10.0175 2340 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
11:41:10.0238 2340 Psched - ok
11:41:10.0285 2340 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\drivers\ql2300.sys
11:41:10.0363 2340 ql2300 - ok
11:41:10.0441 2340 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\drivers\ql40xx.sys
11:41:10.0472 2340 ql40xx - ok
11:41:10.0535 2340 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
11:41:10.0566 2340 QWAVE - ok
11:41:10.0597 2340 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
11:41:10.0628 2340 QWAVEdrv - ok
11:41:10.0675 2340 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
11:41:10.0722 2340 RasAcd - ok
11:41:10.0769 2340 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
11:41:10.0816 2340 RasAgileVpn - ok
11:41:10.0832 2340 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
11:41:10.0910 2340 RasAuto - ok
11:41:10.0972 2340 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
11:41:11.0035 2340 Rasl2tp - ok
11:41:11.0082 2340 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
11:41:11.0144 2340 RasMan - ok
11:41:11.0175 2340 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
11:41:11.0222 2340 RasPppoe - ok
11:41:11.0253 2340 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
11:41:11.0316 2340 RasSstp - ok
11:41:11.0347 2340 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
11:41:11.0425 2340 rdbss - ok
11:41:11.0457 2340 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
11:41:11.0488 2340 rdpbus - ok
11:41:11.0550 2340 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
11:41:11.0613 2340 RDPCDD - ok
11:41:11.0707 2340 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
11:41:11.0738 2340 RDPDR - ok
11:41:11.0769 2340 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
11:41:11.0832 2340 RDPENCDD - ok
11:41:11.0878 2340 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
11:41:11.0925 2340 RDPREFMP - ok
11:41:11.0972 2340 RdpVideoMiniport (68a0387f58e226deee23d9715955572a) C:\Windows\system32\drivers\rdpvideominiport.sys
11:41:12.0019 2340 RdpVideoMiniport - ok
11:41:12.0066 2340 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys
11:41:12.0113 2340 RDPWD - ok
11:41:12.0175 2340 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
11:41:12.0207 2340 rdyboost - ok
11:41:12.0253 2340 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
11:41:12.0300 2340 RemoteAccess - ok
11:41:12.0347 2340 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
11:41:12.0394 2340 RemoteRegistry - ok
11:41:12.0425 2340 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
11:41:12.0488 2340 RpcEptMapper - ok
11:41:12.0535 2340 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
11:41:12.0582 2340 RpcLocator - ok
11:41:12.0660 2340 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
11:41:12.0707 2340 RpcSs - ok
11:41:12.0753 2340 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
11:41:12.0800 2340 rspndr - ok
11:41:12.0847 2340 RTCore32 - ok
11:41:12.0894 2340 RTL8023xp (4a9f49d1b7e67f7ab9595b61126e81fd) C:\Windows\system32\DRIVERS\Rtnicxp.sys
11:41:12.0925 2340 RTL8023xp - ok
11:41:12.0972 2340 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
11:41:13.0003 2340 s3cap - ok
11:41:13.0050 2340 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
11:41:13.0082 2340 SamSs - ok
11:41:13.0144 2340 SbFw (9c9bcc79aef0aa97f16766c498002d36) C:\Windows\system32\drivers\SbFw.sys
11:41:13.0160 2340 SbFw - ok
11:41:13.0207 2340 SBFWIMCL (f27b38d70b7621378161d6f48be04d2c) C:\Windows\system32\DRIVERS\sbfwim.sys
11:41:13.0238 2340 SBFWIMCL - ok
11:41:13.0253 2340 SBFWIMCLMP (f27b38d70b7621378161d6f48be04d2c) C:\Windows\system32\DRIVERS\SBFWIM.sys
11:41:13.0285 2340 SBFWIMCLMP - ok
11:41:13.0316 2340 sbhips (53e5e7dc26bb920b97f258bbd52abfdc) C:\Windows\system32\drivers\sbhips.sys
11:41:13.0347 2340 sbhips - ok
11:41:13.0394 2340 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
11:41:13.0425 2340 sbp2port - ok
11:41:13.0488 2340 SBRE - ok
11:41:13.0503 2340 SbTis (6468e2973e04525decc105947ddd0d34) C:\Windows\system32\drivers\sbtis.sys
11:41:13.0535 2340 SbTis - ok
11:41:13.0566 2340 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
11:41:13.0628 2340 SCardSvr - ok
11:41:13.0675 2340 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
11:41:13.0722 2340 scfilter - ok
11:41:13.0785 2340 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
11:41:13.0847 2340 Schedule - ok
11:41:13.0894 2340 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
11:41:13.0941 2340 SCPolicySvc - ok
11:41:13.0972 2340 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
11:41:14.0035 2340 SDRSVC - ok
11:41:14.0066 2340 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
11:41:14.0128 2340 secdrv - ok
11:41:14.0160 2340 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
11:41:14.0222 2340 seclogon - ok
11:41:14.0269 2340 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\system32\sens.dll
11:41:14.0316 2340 SENS - ok
11:41:14.0347 2340 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
11:41:14.0394 2340 SensrSvc - ok
11:41:14.0441 2340 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
11:41:14.0488 2340 Serenum - ok
11:41:14.0535 2340 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
11:41:14.0582 2340 Serial - ok
11:41:14.0628 2340 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\drivers\sermouse.sys
11:41:14.0660 2340 sermouse - ok
11:41:14.0769 2340 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
11:41:14.0816 2340 SessionEnv - ok
11:41:14.0863 2340 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
11:41:14.0910 2340 sffdisk - ok
11:41:14.0941 2340 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
11:41:14.0988 2340 sffp_mmc - ok
11:41:15.0019 2340 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
11:41:15.0066 2340 sffp_sd - ok
11:41:15.0097 2340 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\drivers\sfloppy.sys
11:41:15.0128 2340 sfloppy - ok
11:41:15.0207 2340 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
11:41:15.0269 2340 SharedAccess - ok
11:41:15.0332 2340 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
11:41:15.0394 2340 ShellHWDetection - ok
11:41:15.0441 2340 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
11:41:15.0457 2340 sisagp - ok
11:41:15.0503 2340 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\drivers\SiSRaid2.sys
11:41:15.0519 2340 SiSRaid2 - ok
11:41:15.0597 2340 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\drivers\sisraid4.sys
11:41:15.0613 2340 SiSRaid4 - ok
11:41:15.0660 2340 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
11:41:15.0707 2340 Smb - ok
11:41:15.0753 2340 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
11:41:15.0785 2340 SNMPTRAP - ok
11:41:15.0847 2340 speedfan (3fa2e254bfbce52b3c6f1bf23aab6911) C:\Windows\system32\speedfan.sys
11:41:15.0878 2340 speedfan - ok
11:41:15.0910 2340 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
11:41:15.0925 2340 spldr - ok
11:41:15.0972 2340 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
11:41:16.0019 2340 Spooler - ok
11:41:16.0128 2340 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
11:41:16.0222 2340 sppsvc - ok
11:41:16.0269 2340 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
11:41:16.0332 2340 sppuinotify - ok
11:41:16.0378 2340 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
11:41:16.0441 2340 srv - ok
11:41:16.0503 2340 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
11:41:16.0535 2340 srv2 - ok
11:41:16.0566 2340 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
11:41:16.0613 2340 srvnet - ok
11:41:16.0691 2340 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
11:41:16.0738 2340 SSDPSRV - ok
11:41:16.0785 2340 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
11:41:16.0863 2340 SstpSvc - ok
11:41:16.0925 2340 StarOpen (306521935042fc0a6988d528643619b3) C:\Windows\system32\drivers\StarOpen.sys
11:41:16.0972 2340 StarOpen ( UnsignedFile.Multi.Generic ) - warning
11:41:16.0972 2340 StarOpen - detected UnsignedFile.Multi.Generic (1)
11:41:17.0003 2340 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\drivers\stexstor.sys
11:41:17.0035 2340 stexstor - ok
11:41:17.0097 2340 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
11:41:17.0144 2340 StiSvc - ok
11:41:17.0175 2340 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
11:41:17.0207 2340 storflt - ok
11:41:17.0238 2340 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
11:41:17.0269 2340 storvsc - ok
11:41:17.0316 2340 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
11:41:17.0332 2340 swenum - ok
11:41:17.0378 2340 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
11:41:17.0441 2340 swprv - ok
11:41:17.0519 2340 Synth3dVsc (f2ad8960812fd111e20e84659ef19d43) C:\Windows\system32\drivers\synth3dvsc.sys
11:41:17.0535 2340 Synth3dVsc - ok
11:41:17.0613 2340 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
11:41:17.0660 2340 SysMain - ok
11:41:17.0738 2340 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
11:41:17.0785 2340 TabletInputService - ok
11:41:17.0832 2340 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
11:41:17.0878 2340 TapiSrv - ok
11:41:17.0925 2340 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
11:41:17.0972 2340 TBS - ok
11:41:18.0050 2340 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
11:41:18.0082 2340 Tcpip - ok
11:41:18.0160 2340 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
11:41:18.0191 2340 TCPIP6 - ok
11:41:18.0378 2340 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
11:41:18.0457 2340 tcpipreg - ok
11:41:18.0488 2340 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
11:41:18.0519 2340 TDPIPE - ok
11:41:18.0566 2340 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
11:41:18.0613 2340 TDTCP - ok
11:41:18.0660 2340 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
11:41:18.0722 2340 tdx - ok
11:41:18.0753 2340 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\DRIVERS\termdd.sys
11:41:18.0785 2340 TermDD - ok
11:41:18.0832 2340 terminpt (052306fd76793d5d5ab5d9891fd1adbb) C:\Windows\system32\drivers\terminpt.sys
11:41:18.0878 2340 terminpt - ok
11:41:18.0972 2340 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
11:41:19.0019 2340 TermService - ok
11:41:19.0050 2340 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
11:41:19.0097 2340 Themes - ok
11:41:19.0144 2340 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
11:41:19.0191 2340 THREADORDER - ok
11:41:19.0238 2340 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
11:41:19.0300 2340 TrkWks - ok
11:41:19.0347 2340 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
11:41:19.0394 2340 TrustedInstaller - ok
11:41:19.0457 2340 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
11:41:19.0503 2340 tssecsrv - ok
11:41:19.0550 2340 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
11:41:19.0582 2340 TsUsbFlt - ok
11:41:19.0613 2340 TsUsbGD (01246f0baad7b68ec0f472aa41e33282) C:\Windows\system32\drivers\TsUsbGD.sys
11:41:19.0660 2340 TsUsbGD - ok
11:41:19.0691 2340 tsusbhub (045acb987c650d8186c6b4a692223860) C:\Windows\system32\drivers\tsusbhub.sys
11:41:19.0738 2340 tsusbhub - ok
11:41:19.0785 2340 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
11:41:19.0847 2340 tunnel - ok
11:41:19.0878 2340 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\drivers\uagp35.sys
11:41:19.0925 2340 uagp35 - ok
11:41:19.0988 2340 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
11:41:20.0050 2340 udfs - ok
11:41:20.0128 2340 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
11:41:20.0191 2340 UI0Detect - ok
11:41:20.0222 2340 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
11:41:20.0238 2340 uliagpkx - ok
11:41:20.0285 2340 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\DRIVERS\umbus.sys
11:41:20.0332 2340 umbus - ok
11:41:20.0363 2340 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\drivers\umpass.sys
11:41:20.0410 2340 UmPass - ok
11:41:20.0457 2340 UmRdpService (409994a8eaceee4e328749c0353527a0) C:\Windows\System32\umrdp.dll
11:41:20.0519 2340 UmRdpService - ok
11:41:20.0566 2340 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
11:41:20.0628 2340 upnphost - ok
11:41:20.0675 2340 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
11:41:20.0738 2340 usbaudio - ok
11:41:20.0785 2340 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
11:41:20.0816 2340 usbccgp - ok
11:41:20.0878 2340 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
11:41:20.0910 2340 usbcir - ok
11:41:20.0957 2340 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
11:41:20.0988 2340 usbehci - ok
11:41:21.0066 2340 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
11:41:21.0113 2340 usbhub - ok
11:41:21.0144 2340 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
11:41:21.0191 2340 usbohci - ok
11:41:21.0222 2340 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
11:41:21.0253 2340 usbprint - ok
11:41:21.0300 2340 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
11:41:21.0347 2340 usbscan - ok
11:41:21.0394 2340 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:41:21.0457 2340 USBSTOR - ok
11:41:21.0488 2340 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys
11:41:21.0519 2340 usbuhci - ok
11:41:21.0566 2340 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
11:41:21.0613 2340 UxSms - ok
11:41:21.0644 2340 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
11:41:21.0675 2340 VaultSvc - ok
11:41:21.0707 2340 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
11:41:21.0738 2340 vdrvroot - ok
11:41:21.0785 2340 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
11:41:21.0847 2340 vds - ok
11:41:21.0894 2340 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
11:41:21.0941 2340 vga - ok
11:41:21.0988 2340 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
11:41:22.0050 2340 VgaSave - ok
11:41:22.0066 2340 VGPU - ok
11:41:22.0113 2340 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
11:41:22.0128 2340 vhdmp - ok
11:41:22.0191 2340 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
11:41:22.0222 2340 viaagp - ok
11:41:22.0269 2340 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\drivers\viac7.sys
11:41:22.0316 2340 ViaC7 - ok
11:41:22.0363 2340 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
11:41:22.0394 2340 viaide - ok
11:41:22.0441 2340 VideoAcceleratorService - ok
11:41:22.0488 2340 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
11:41:22.0519 2340 vmbus - ok
11:41:22.0566 2340 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
11:41:22.0613 2340 VMBusHID - ok
11:41:22.0628 2340 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
11:41:22.0660 2340 volmgr - ok
11:41:22.0707 2340 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
11:41:22.0738 2340 volmgrx - ok
11:41:22.0769 2340 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
11:41:22.0800 2340 volsnap - ok
11:41:22.0881 2340 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\drivers\vsmraid.sys
11:41:22.0904 2340 vsmraid - ok
11:41:22.0991 2340 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
11:41:23.0061 2340 VSS - ok
11:41:23.0099 2340 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
11:41:23.0149 2340 vwifibus - ok
11:41:23.0190 2340 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
11:41:23.0260 2340 W32Time - ok
11:41:23.0324 2340 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\drivers\wacompen.sys
11:41:23.0375 2340 WacomPen - ok
11:41:23.0471 2340 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
11:41:23.0521 2340 WANARP - ok
11:41:23.0534 2340 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
11:41:23.0579 2340 Wanarpv6 - ok
11:41:23.0648 2340 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
11:41:23.0711 2340 wbengine - ok
11:41:23.0754 2340 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
11:41:23.0793 2340 WbioSrvc - ok
11:41:23.0830 2340 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
11:41:23.0883 2340 wcncsvc - ok
11:41:23.0924 2340 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
11:41:23.0976 2340 WcsPlugInService - ok
11:41:24.0015 2340 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\drivers\wd.sys
11:41:24.0035 2340 Wd - ok
11:41:24.0089 2340 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
11:41:24.0116 2340 Wdf01000 - ok
11:41:24.0172 2340 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
11:41:24.0223 2340 WdiServiceHost - ok
11:41:24.0238 2340 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
11:41:24.0276 2340 WdiSystemHost - ok
11:41:24.0317 2340 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
11:41:24.0370 2340 WebClient - ok
11:41:24.0413 2340 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
11:41:24.0459 2340 Wecsvc - ok
11:41:24.0491 2340 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
11:41:24.0538 2340 wercplsupport - ok
11:41:24.0569 2340 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
11:41:24.0616 2340 WerSvc - ok
11:41:24.0694 2340 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
11:41:24.0756 2340 WfpLwf - ok
11:41:24.0772 2340 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
11:41:24.0803 2340 WIMMount - ok
11:41:24.0866 2340 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
11:41:24.0975 2340 WinDefend - ok
11:41:25.0006 2340 WinHttpAutoProxySvc - ok
11:41:25.0053 2340 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
11:41:25.0100 2340 Winmgmt - ok
11:41:25.0178 2340 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
11:41:25.0256 2340 WinRM - ok
11:41:25.0334 2340 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
11:41:25.0381 2340 WinUsb - ok
11:41:25.0491 2340 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
11:41:25.0553 2340 Wlansvc - ok
11:41:25.0616 2340 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
11:41:25.0647 2340 WmiAcpi - ok
11:41:25.0694 2340 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
11:41:25.0725 2340 wmiApSrv - ok
11:41:25.0819 2340 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
11:41:25.0866 2340 WMPNetworkSvc - ok
11:41:25.0913 2340 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
11:41:26.0006 2340 WPCSvc - ok
11:41:26.0272 2340 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
11:41:26.0319 2340 WPDBusEnum - ok
11:41:26.0350 2340 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
11:41:26.0413 2340 ws2ifsl - ok
11:41:26.0459 2340 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\system32\wscsvc.dll
11:41:26.0491 2340 wscsvc - ok
11:41:26.0506 2340 WSearch - ok
11:41:26.0584 2340 wuauserv (3026418a50c5b4761befa632cedb7406) C:\Windows\system32\wuaueng.dll
11:41:26.0663 2340 wuauserv - ok
11:41:26.0694 2340 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
11:41:26.0756 2340 WudfPf - ok
11:41:26.0803 2340 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
11:41:26.0850 2340 WUDFRd - ok
11:41:26.0913 2340 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
11:41:27.0006 2340 wudfsvc - ok
11:41:27.0069 2340 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
11:41:27.0100 2340 WwanSvc - ok
11:41:27.0178 2340 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\Windows\system32\DRIVERS\yk62x86.sys
11:41:27.0256 2340 yukonw7 - ok
11:41:27.0303 2340 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
11:41:27.0428 2340 \Device\Harddisk0\DR0 - ok
11:41:27.0444 2340 Boot (0x1200) (d4186b6e626ef4f7f714d28067f86c6f) \Device\Harddisk0\DR0\Partition0
11:41:27.0444 2340 \Device\Harddisk0\DR0\Partition0 - ok
11:41:27.0475 2340 Boot (0x1200) (ff793c0bbb5fb16998ae61194b892655) \Device\Harddisk0\DR0\Partition1
11:41:27.0491 2340 \Device\Harddisk0\DR0\Partition1 - ok
11:41:27.0491 2340 ============================================================
11:41:27.0491 2340 Scan finished
11:41:27.0491 2340 ============================================================
11:41:27.0506 1416 Detected object count: 5
11:41:27.0506 1416 Actual detected object count: 5
11:41:45.0250 1416 ATITool ( UnsignedFile.Multi.Generic ) - skipped by user
11:41:45.0250 1416 ATITool ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:41:45.0256 1416 atksgt ( UnsignedFile.Multi.Generic ) - skipped by user
11:41:45.0256 1416 atksgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:41:45.0260 1416 giveio ( UnsignedFile.Multi.Generic ) - skipped by user
11:41:45.0260 1416 giveio ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:41:45.0264 1416 lirsgt ( UnsignedFile.Multi.Generic ) - skipped by user
11:41:45.0264 1416 lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:41:45.0269 1416 StarOpen ( UnsignedFile.Multi.Generic ) - skipped by user
11:41:45.0269 1416 StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Skip

Pošlete ještě druhý log z ComboFixu : C:\ComboFix2.tct

takže mám dát sken znovu? pořád se mi dělá sken mbam

Jen mi pošlete obsah souboru C:\ComboFix2.txt, mbam může během toho normálně pokračovat.

Na chvilku se odmlčím, budu tu na skok kolem druhé a pak večer.

ComboFix 12-04-17.01 - PiP 18.04.2012 10:10:22.2.1 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1033.18.3071.2415 [GMT 2:00]
Spuštěný z: c:\users\PiP\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-18 do 2012-04-18 )))))))))))))))))))))))))))))))
.
.
2012-04-18 08:19 . 2012-04-18 08:19 -------- dc----w- c:\users\Default\AppData\Local\temp
2012-04-18 08:03 . 2012-04-18 08:03 -------- dc----w- c:\users\PiP\AppData\Local\Mozilla
2012-04-17 19:39 . 2006-10-26 17:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2012-04-17 19:39 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2012-04-17 19:37 . 2012-04-17 19:37 -------- dc----w- c:\program files\Microsoft Works
2012-04-17 19:35 . 2012-04-17 19:35 -------- dc----w- c:\windows\PCHEALTH
2012-04-17 19:33 . 2012-04-17 19:33 -------- dc----w- c:\program files\Microsoft Visual Studio 8
2012-04-17 19:29 . 2012-04-17 19:29 -------- dc----r- C:\MSOCache
2012-04-17 18:33 . 2012-04-17 18:36 -------- dc----w- c:\program files\Chessmaster 10th Edition
2012-04-17 18:26 . 2012-04-17 18:26 -------- dc----w- c:\program files\NewFolder Software
2012-04-17 18:24 . 2012-04-17 18:24 -------- dc----w- c:\program files\TLKGAMES
2012-04-16 18:43 . 2010-08-05 15:52 47208 ----a-w- c:\windows\system32\drivers\bcd3000.sys
2012-04-16 18:43 . 2010-08-05 15:52 27240 ----a-w- c:\windows\system32\drivers\bcd3000wdm.sys
2012-04-16 18:43 . 2012-04-16 18:43 -------- dc----w- c:\program files\Behringer
2012-04-13 09:13 . 2012-04-13 09:13 -------- dc----w- c:\users\PiP\AppData\Local\Microsoft Help
2012-04-13 09:13 . 2012-04-17 19:41 -------- dc----w- c:\programdata\Microsoft Help
2012-04-11 08:12 . 2012-04-11 08:14 -------- dc----w- c:\users\PiP\AppData\Roaming\AVG
2012-04-09 17:26 . 2012-04-18 08:19 -------- dc----w- c:\users\PiP\AppData\Local\temp
2012-04-09 16:50 . 2012-04-09 16:53 -------- dc----w- C:\UsbFix
2012-04-09 09:10 . 2012-04-09 09:10 -------- dc-h--w- c:\programdata\Common Files
2012-04-09 09:10 . 2012-04-18 07:04 -------- d-----w- c:\windows\system32\drivers\AVG
2012-04-09 09:10 . 2012-04-09 17:28 -------- dc----w- c:\programdata\AVG2012
2012-04-09 09:10 . 2012-04-09 09:10 -------- dc----w- C:\$AVG
2012-04-09 09:09 . 2012-04-11 08:12 -------- dc----w- c:\program files\AVG
2012-04-09 09:05 . 2012-04-17 15:54 -------- dc----w- c:\programdata\MFAData
2012-04-08 17:11 . 2012-04-08 17:32 -------- dc----w- c:\users\PiP\AppData\Roaming\gtk-2.0
2012-04-08 16:34 . 2012-04-16 17:49 -------- dc----w- c:\users\PiP\AppData\Local\CrashDumps
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\users\PiP\AppData\Roaming\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\users\PiP\AppData\Local\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\programdata\Zoner
2012-04-08 12:54 . 2012-04-08 12:54 -------- dc----w- c:\program files\Zoner
2012-04-08 12:42 . 2012-04-08 12:42 -------- dc----w- c:\users\PiP\.thumbnails
2012-04-08 12:05 . 2012-04-08 17:33 -------- dc----w- c:\users\PiP\.gimp-2.6
2012-04-08 12:05 . 2012-04-08 12:05 -------- dc----w- c:\program files\GIMP-2.0
2012-04-08 11:35 . 2012-04-08 11:35 -------- dc----w- c:\program files\SpeedBit Video Accelerator
2012-04-08 11:35 . 2012-04-08 11:35 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2012-04-08 11:30 . 2012-04-08 11:30 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-08 11:30 . 2012-04-08 11:30 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-08 11:30 . 2012-04-08 11:30 -------- d-----w- c:\windows\system32\Macromed
2012-04-03 10:41 . 2012-04-03 10:41 -------- dc----w- C:\$WINDOWS.~BT
2012-04-03 10:13 . 2012-04-03 10:14 -------- dc----w- c:\program files\Google
2012-04-03 07:18 . 2012-04-03 07:18 -------- dc----w- c:\users\PiP\AppData\Roaming\Auslogics
2012-04-03 07:18 . 2012-04-03 07:18 -------- dc----w- c:\program files\Auslogics
2012-03-31 16:38 . 2012-03-31 16:38 -------- dc----w- c:\users\PiP\AppData\Local\Opera
2012-03-31 16:38 . 2012-03-31 16:38 -------- dc----w- c:\program files\Opera
2012-03-31 16:04 . 2012-03-31 16:04 -------- dc----w- c:\programdata\ATI
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\AMD AVT
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\AMD APP
2012-03-31 16:03 . 2012-03-31 16:03 -------- dc----w- c:\program files\Common Files\ATI Technologies
2012-03-31 16:01 . 2012-03-31 16:01 -------- dc----w- c:\program files\ATI
2012-03-31 15:59 . 2012-03-31 15:59 -------- dc----w- C:\AMD
2012-03-31 15:00 . 2012-03-31 15:33 -------- dc----w- c:\program files\SpeedFan
2012-03-31 08:43 . 2012-03-31 08:43 -------- dc----w- c:\programdata\PC Suite
2012-03-31 08:41 . 2012-03-31 10:33 -------- dc----w- c:\windows\system32\DRVSTORE
2012-03-31 08:41 . 2007-05-02 14:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
2012-03-31 08:40 . 2012-03-31 08:40 -------- dc----w- c:\programdata\Installations
2012-03-31 08:27 . 2012-03-31 10:36 -------- d-----w- c:\windows\system32\Samsung_USB_Drivers
2012-03-31 08:27 . 2006-07-24 14:05 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2012-03-29 18:16 . 2012-04-06 12:58 -------- dc----w- c:\program files\MSECache
2012-03-28 15:28 . 2012-04-16 18:39 -------- dc----w- c:\program files\VirtualDJ
2012-03-27 17:22 . 2012-04-17 08:06 -------- dc----w- c:\users\PiP\AppData\Local\Mirillis
2012-03-27 17:22 . 2012-03-27 17:22 -------- dc----w- c:\users\PiP\AppData\Roaming\Mirillis
2012-03-27 17:22 . 2012-03-27 17:22 -------- dc----w- c:\programdata\Mirillis
2012-03-27 17:21 . 2012-03-27 17:21 -------- dc----w- c:\program files\Mirillis
2012-03-27 10:42 . 2012-03-27 10:43 -------- dc----w- c:\program files\Scorpions WinCheater
2012-03-23 08:05 . 2012-03-14 02:15 6582328 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C25C5CDB-18AB-4F4A-9CD7-F0408EF13852}\mpengine.dll
2012-03-22 08:17 . 2012-03-22 08:17 -------- dc----w- c:\programdata\Casino
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-09 06:26 . 2012-03-09 06:26 9183232 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-03-09 05:16 . 2012-03-09 05:16 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-03-09 05:16 . 2012-03-09 05:16 791552 ----a-w- c:\windows\system32\aticfx32.dll
2012-03-09 05:11 . 2012-03-09 05:11 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-03-09 05:10 . 2012-03-09 05:10 405504 ----a-w- c:\windows\system32\atieclxx.exe
2012-03-09 05:10 . 2012-03-09 05:10 163328 ----a-w- c:\windows\system32\atiesrxx.exe
2012-03-09 05:08 . 2012-03-09 05:08 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2012-03-09 05:07 . 2012-03-09 05:07 20992 ----a-w- c:\windows\system32\atimuixx.dll
2012-03-09 05:07 . 2012-03-09 05:07 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2012-03-09 05:04 . 2012-03-09 05:04 6200320 ----a-w- c:\windows\system32\atidxx32.dll
2012-03-09 04:39 . 2012-03-09 04:39 19739136 ----a-w- c:\windows\system32\atioglxx.dll
2012-03-09 04:36 . 2012-03-09 04:36 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2012-03-09 04:23 . 2012-03-09 04:23 5062656 ----a-w- c:\windows\system32\atiumdva.dll
2012-03-09 04:23 . 2012-03-09 04:23 5954048 ----a-w- c:\windows\system32\atiumdag.dll
2012-03-09 04:18 . 2012-03-09 04:18 46080 ----a-w- c:\windows\system32\aticalrt.dll
2012-03-09 04:18 . 2012-03-09 04:18 44032 ----a-w- c:\windows\system32\aticalcl.dll
2012-03-09 04:12 . 2012-03-09 04:12 13715968 ----a-w- c:\windows\system32\aticaldd.dll
2012-03-09 04:05 . 2012-03-09 04:05 53760 ----a-w- c:\windows\system32\atimpc32.dll
2012-03-09 04:05 . 2012-03-09 04:05 53760 ----a-w- c:\windows\system32\amdpcom32.dll
2012-03-09 03:58 . 2012-03-09 03:58 356352 ----a-w- c:\windows\system32\atiadlxx.dll
2012-03-09 03:58 . 2012-03-09 03:58 14336 ----a-w- c:\windows\system32\atiglpxx.dll
2012-03-09 03:58 . 2012-03-09 03:58 33280 ----a-w- c:\windows\system32\atigktxx.dll
2012-03-09 03:57 . 2012-03-09 03:57 265216 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-03-09 03:56 . 2011-04-20 00:21 33280 ----a-w- c:\windows\system32\atiuxpag.dll
2012-03-09 03:56 . 2012-03-09 03:56 30208 ----a-w- c:\windows\system32\atiu9pag.dll
2012-03-09 03:55 . 2012-03-09 03:55 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-03-09 03:47 . 2011-04-20 00:27 51200 ----a-w- c:\windows\system32\coinst.dll
2012-03-08 23:26 . 2012-03-08 23:26 54784 ----a-w- c:\windows\system32\OVDecode.dll
2012-03-03 02:01 . 2012-03-03 02:01 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-03 02:01 . 2012-03-03 02:01 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-03 02:01 . 2012-03-03 02:01 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-03 02:01 . 2012-03-03 02:01 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-03 02:01 . 2012-03-03 02:01 161792 ----a-w- c:\windows\system32\msls31.dll
2012-03-03 02:01 . 2012-03-03 02:01 1127424 ----a-w- c:\windows\system32\wininet.dll
2012-03-03 02:01 . 2012-03-03 02:01 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-03 02:01 . 2012-03-03 02:01 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-03-03 02:01 . 2012-03-03 02:01 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-03-03 02:01 . 2012-03-03 02:01 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-03-03 02:01 . 2012-03-03 02:01 367104 ----a-w- c:\windows\system32\html.iec
2012-03-03 02:01 . 2012-03-03 02:01 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-03-03 02:01 . 2012-03-03 02:01 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-03-03 02:01 . 2012-03-03 02:01 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-03 02:01 . 2012-03-03 02:01 1798656 ----a-w- c:\windows\system32\jscript9.dll
2012-03-03 02:01 . 2012-03-03 02:01 152064 ----a-w- c:\windows\system32\wextract.exe
2012-03-03 02:01 . 2012-03-03 02:01 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-03-03 02:01 . 2012-03-03 02:01 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-03 02:01 . 2012-03-03 02:01 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2012-03-03 02:01 . 2012-03-03 02:01 11776 ----a-w- c:\windows\system32\mshta.exe
2012-03-03 02:01 . 2012-03-03 02:01 101888 ----a-w- c:\windows\system32\admparse.dll
2012-02-26 22:34 . 2012-02-26 22:34 271360 ----a-w- c:\windows\system32\drivers\atksgt.sys
2012-02-26 22:34 . 2012-02-26 22:34 18048 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2012-02-26 21:03 . 2012-02-26 21:03 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-02-26 15:21 . 2012-02-26 15:21 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-02-26 15:21 . 2012-02-26 15:21 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-02-26 15:21 . 2012-02-26 15:21 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tsusbflt.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 9728 ----a-w- c:\windows\system32\drivers\cs-CZ\BrSerIb.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 6656 ----a-w- c:\windows\system32\drivers\cs-CZ\rdvgkmd.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\UAGP35.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:30 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\cs-CZ\LXKPTPRC.DLL.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\pscr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 33792 ----a-w- c:\windows\system32\drivers\cs-CZ\yk62x86.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\MTConfig.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 11264 ----a-w- c:\windows\system32\drivers\cs-CZ\e1q6032.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 27136 ----a-w- c:\windows\system32\drivers\cs-CZ\bfe.dll.mui
2012-02-26 00:34 . 2012-02-26 00:30 5120 ----a-w- c:\windows\system32\drivers\cs-CZ\rdbss.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\ndisuio.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\pnpmem.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 9728 ----a-w- c:\windows\system32\drivers\cs-CZ\BrSerId.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\bthpan.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\wacompen.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\hdaudbus.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\HdAudio.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\hidbth.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\Dot4usb.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2048 ----a-w- c:\windows\system32\drivers\cs-CZ\disk.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\atikmdag.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 11776 ----a-w- c:\windows\system32\drivers\cs-CZ\usbhub.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 5632 ----a-w- c:\windows\system32\drivers\cs-CZ\bcm4sbxp.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 17920 ----a-w- c:\windows\system32\drivers\cs-CZ\E1G60I32.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\modem.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 15872 ----a-w- c:\windows\system32\drivers\cs-CZ\nwifi.sys.mui
2012-02-26 00:34 . 2012-02-26 00:30 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\mountmgr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 8704 ----a-w- c:\windows\system32\drivers\cs-CZ\pci.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 4096 ----a-w- c:\windows\system32\drivers\cs-CZ\vdrvroot.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\isapnp.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\mssmbios.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\VIAAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\ULIAGPKX.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\SISAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\NV_AGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\AMDAGP.SYS.mui
2012-02-26 00:34 . 2012-02-26 00:29 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\AGP440.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\viac7.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\processr.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\intelppm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\amdppm.sys.mui
2012-02-26 00:34 . 2012-02-26 00:29 20992 ----a-w- c:\windows\system32\drivers\cs-CZ\amdk8.sys.mui
2012-03-13 04:38 . 2012-04-18 08:03 97208 -c--a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2012-02-26 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll
[7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
.
((((((((((((((((((((((((((((( SnapShot@2012-04-09_17.22.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-04-17 19:40 . 2012-04-17 19:40 49152 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80KOR.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 49152 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80JPN.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ITA.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 45056 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80CHT.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 40960 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80CHS.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80FRA.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 61440 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ESP.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 57344 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80ENU.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 65536 c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6\mfc80DEU.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 57344 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfcm80u.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 69632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfcm80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 95744 c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.42_none_dc990e4797f81af1\ATL80.dll
+ 2010-11-20 21:20 . 2012-04-18 05:48 35540 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2012-04-18 05:48 50858 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-02-26 00:09 . 2012-04-18 05:48 12352 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-528348223-278861638-1870145213-1000_UserData.bin
+ 2012-04-13 09:26 . 2010-03-29 18:26 54656 c:\windows\System32\spool\drivers\w32x86\SendToOneNoteUI.dll
+ 2012-04-13 09:26 . 2010-03-29 18:26 94088 c:\windows\System32\spool\drivers\w32x86\SendToOneNoteFilter.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 67408 c:\windows\System32\spool\drivers\w32x86\msonpui.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 67408 c:\windows\System32\spool\drivers\w32x86\3\msonpui.dll
+ 2010-02-20 15:20 . 2010-02-20 15:20 31616 c:\windows\System32\FM20ENU.DLL
- 2009-07-14 04:50 . 2012-03-31 16:02 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2012-04-16 18:43 . 2010-08-05 15:52 27240 c:\windows\System32\DriverStore\FileRepository\bcd3000wdm.inf_x86_neutral_24d1241ed5f7c474\bcd3000wdm.sys
+ 2012-04-16 18:43 . 2010-08-05 15:52 47208 c:\windows\System32\DriverStore\FileRepository\bcd3000.inf_x86_neutral_5e8ee2adadc11a0f\bcd3000.sys
+ 2010-11-20 21:29 . 2010-11-20 21:29 80768 c:\windows\System32\drivers\USBAUDIO.sys
+ 2012-04-17 19:40 . 2012-04-17 19:40 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2012-04-13 09:42 . 2012-04-13 09:42 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\17b4308b0e6d35c1230135ed25fffbfe\stdole.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft-Windows-H#\170715f77ec52e0b449794a04640814b\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiActivScp\7f3e122ca1f73a8e82e6da27289c4465\ehiActivScp.ni.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39624 c:\windows\assembly\GAC_MSIL\System.AddIn\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 72472 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.DesignTime\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39704 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39712 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 60200 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 39728 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Vsta.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 43840 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\microsoft.office.infopath.formcontrol.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 16384 c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 11544 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12080 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Publisher.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12632 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12616 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 12616 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 12096 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 12104 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 64288 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 20280 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 35648 c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 17208 c:\windows\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 88896 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2012-04-17 19:35 . 2012-04-17 19:35 80696 c:\windows\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 16712 c:\windows\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Permission.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 31560 c:\windows\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\IPDMCTRL.DLL
+ 2012-04-17 19:37 . 2012-04-17 19:37 82784 c:\windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 65536 c:\windows\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
+ 2012-02-27 02:21 . 2012-04-16 20:18 3434 c:\windows\System32\wdi\ERCQueuedResolutions.dat
+ 2012-04-18 05:46 . 2012-04-18 05:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-09 09:38 . 2012-04-09 09:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-04-18 05:46 . 2012-04-18 05:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-04-09 09:38 . 2012-04-09 09:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-17 19:37 . 2012-04-17 19:37 4096 c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 626688 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcr80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 548864 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcp80.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcm80.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 930816 c:\windows\System32\spool\drivers\w32x86\XpsSvcs.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 762368 c:\windows\System32\spool\drivers\w32x86\unires.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 747520 c:\windows\System32\spool\drivers\w32x86\unidrvui.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 375296 c:\windows\System32\spool\drivers\w32x86\unidrv.dll
+ 2012-04-13 09:25 . 2010-11-20 21:29 781824 c:\windows\System32\spool\drivers\w32x86\mxdwdrv.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 864080 c:\windows\System32\spool\drivers\w32x86\msonpdrv.dll
+ 2012-04-17 19:39 . 2006-10-26 17:56 864080 c:\windows\System32\spool\drivers\w32x86\3\msonpdrv.dll
- 2009-07-14 02:05 . 2012-04-09 16:41 651938 c:\windows\System32\perfh009.dat
+ 2009-07-14 02:05 . 2012-04-18 05:50 651938 c:\windows\System32\perfh009.dat
- 2012-02-26 00:56 . 2012-04-09 16:41 666216 c:\windows\System32\perfh005.dat
+ 2012-02-26 00:56 . 2012-04-18 05:50 666216 c:\windows\System32\perfh005.dat
+ 2009-07-14 02:05 . 2012-04-18 05:50 120870 c:\windows\System32\perfc009.dat
- 2009-07-14 02:05 . 2012-04-09 16:41 120870 c:\windows\System32\perfc009.dat
- 2012-02-26 00:56 . 2012-04-09 16:41 139898 c:\windows\System32\perfc005.dat
+ 2012-02-26 00:56 . 2012-04-18 05:50 139898 c:\windows\System32\perfc005.dat
+ 2009-07-14 04:33 . 2012-04-18 05:46 420400 c:\windows\System32\FNTCACHE.DAT
- 2009-07-14 04:50 . 2012-03-31 16:02 143360 c:\windows\System32\DriverStore\infstrng.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 143360 c:\windows\System32\DriverStore\infstrng.dat
- 2009-07-14 04:50 . 2012-03-31 16:02 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:50 . 2012-04-16 18:44 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:34 . 2012-04-18 06:16 100424 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 04:47 . 2012-04-17 20:40 393888 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\6834f.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\6833b.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 507904 c:\windows\Installer\68336.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 518144 c:\windows\Installer\68330.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 514048 c:\windows\Installer\6832a.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 502272 c:\windows\Installer\68320.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 502272 c:\windows\Installer\68307.msi
+ 2012-04-17 19:31 . 2012-04-17 19:31 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2012-04-13 09:44 . 2012-04-13 09:44 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\cdd04b14b9dd6ced2e2572a044c3c57e\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-04-13 09:42 . 2012-04-13 09:42 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\fbec5a519a2c5005d43b04b6386406b2\ehiVidCtl.ni.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 330520 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Blueprints\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Blueprints.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 105248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 211736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 609104 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 367400 c:\windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.InteropAdapter.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 118112 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 416544 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2012-04-17 19:37 . 2012-04-17 19:37 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
+ 2012-04-17 19:36 . 2012-04-17 19:36 371496 c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 781104 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 232248 c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 248632 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 920376 c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 146232 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 404296 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.SemiTrust.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 150320 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 110592 c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 1079808 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfc80u.dll
+ 2012-04-17 19:40 . 2012-04-17 19:40 1093632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfc80.dll
+ 2012-02-26 00:59 . 2012-04-17 19:40 9677316 c:\windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin
+ 2010-02-20 15:20 . 2010-02-20 15:20 1207144 c:\windows\System32\FM20.DLL
+ 2009-08-21 04:08 . 2012-04-18 05:46 5743117 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-08-21 04:08 . 2012-04-02 13:50 5743117 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2012-02-26 16:07 . 2012-04-10 19:42 2370976 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-528348223-278861638-1870145213-1000-8192.dat
+ 2012-04-11 07:56 . 2012-04-11 07:56 5138944 c:\windows\Installer\6d470.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1642496 c:\windows\Installer\68354.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1654272 c:\windows\Installer\6834a.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1654272 c:\windows\Installer\68345.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1653760 c:\windows\Installer\68340.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 2320896 c:\windows\Installer\68325.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1648640 c:\windows\Installer\6831b.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 1642496 c:\windows\Installer\68316.msi
+ 2012-04-17 19:30 . 2012-04-17 19:30 2024448 c:\windows\Installer\68311.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 1714176 c:\windows\Installer\6830c.msi
+ 2012-04-17 19:29 . 2012-04-17 19:29 2398720 c:\windows\Installer\68302.msi
+ 2012-04-17 19:40 . 2012-04-17 19:40 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2012-04-17 19:40 . 2012-04-17 19:40 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2012-04-13 09:44 . 2012-04-13 09:44 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\c971d1782b4893d60666d91509ee0398\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 1276720 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2012-04-17 19:36 . 2012-04-17 19:36 1612592 c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
+ 2012-04-17 19:37 . 2012-04-17 19:37 1215328 c:\windows\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\IACore.dll
+ 2012-03-03 03:43 . 2012-04-17 19:23 19567724 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-528348223-278861638-1870145213-1000-12288.dat
+ 2012-04-17 19:31 . 2012-04-17 19:31 18183680 c:\windows\Installer\6835b.msi
+ 2011-06-13 06:22 . 2011-06-13 06:22 32766520 c:\windows\Installer\2b0d86.msi
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-02-26 740216]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-02-16 2575712]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BCD3000 Control Panel.lnk - c:\program files\Behringer\BCD3000\Drivers\bcd3kcpan.exe [2012-4-16 548864]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableStartupSound"= 1 (0x1)
"DisableStatusMessages"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
backup=c:\windows\pss\AML Device Install.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Run Google Web Accelerator.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Run Google Web Accelerator.lnk
backup=c:\windows\pss\Run Google Web Accelerator.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
start AMD Accelerated Video Transcoding device initialization [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 -c--a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-02-13 08:06 3481408 -c--a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-02-26 00:22 136176 -c--atw- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
2011-12-13 15:58 11487848 -c----w- c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2010-11-20 21:29 1174016 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedBitVideoAccelerator]
2012-04-08 11:35 1494216 -c--a-w- c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2012-03-09 00:30 636032 -c--a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2012-02-26 12:54 740216 -c--a-w- c:\program files\uTorrent\uTorrent.exe
.
R1 oypmzmjv;oypmzmjv;c:\windows\system32\drivers\oypmzmjv.sys [x]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [2012-02-14 5104992]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 bcd3000;bcd3000;c:\windows\system32\DRIVERS\bcd3000.sys [2010-08-05 47208]
R3 bcd3000wdm;bcd3000wdm;c:\windows\system32\DRIVERS\bcd3000wdm.sys [2010-08-05 27240]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 RTCore32;RTCore32;c:\program files\RMClock\RTCore32.sys [x]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\DRIVERS\sbfwim.sys [2011-02-08 69208]
R3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [2011-04-05 94040]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-20 25600]
R3 TsUsbFlt;TsUsbFlt; [x]
R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 253600]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-03-09 163328]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 116648]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 116648]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\avgidsehx.sys [2011-12-23 22992]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2012-02-22 299472]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-02-26 242240]
S1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2011-04-05 221784]
S1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2011-04-05 78936]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-03-09 9183232]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-03-09 265216]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-12-05 86032]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]
S3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\DRIVERS\SBFWIM.sys [2011-02-08 69208]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 11:30]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 10:13]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-03 10:13]
.
2012-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-528348223-278861638-1870145213-1000Core.job
- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-26 00:22]
.
2012-04-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-528348223-278861638-1870145213-1000UA.job
- c:\users\PiP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-26 00:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://easy-google-search.blogspot.com
IE: E&xport to Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\Microsoft Office\Office14\ONBttnIE.dll/105
LSP: c:\program files\SpeedBit Video Accelerator\SBLSP.dll
TCP: DhcpNameServer = 10.112.1.1 10.112.2.1
FF - ProfilePath - c:\users\PiP\AppData\Roaming\Mozilla\Firefox\Profiles\ulqjuwfl.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-528348223-278861638-1870145213-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:72,ad,2f,86,69,d3,6a,ed,5c,90,a4,f1,2a,dd,dd,cd,f3,e2,11,44,2d,25,33,
82,c7,73,41,01,80,2c,0b,38,21,3f,c0,e3,c3,52,76,d1,56,17,b9,68,30,ae,a5,4d,\
"??"=hex:d8,56,3a,64,96,66,73,c5,90,57,3b,d9,52,5d,8a,09
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-04-18 10:23:58
ComboFix-quarantined-files.txt 2012-04-18 08:23
ComboFix2.txt 2012-04-09 17:26
.
Před spuštěním: Volných bajtů: 17 661 370 368
Po spuštění: Volných bajtů: 17 407 717 376
.
- - End Of File - - D8126FB4B7A887DD8F2D52F949FFD320

To je zase ten samý, pošlete ten druhý. A MBAM už doběhl?

http://leteckaposta.cz/826021938 tady je log z combofixu, log se sem nevejde

a tady je z mbam


Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.04.18.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
PiP :: PIP-PC [administrátor]

Ochrana: Povolena

18.4.2012 13:04:31
mbam-log-2012-04-18 (14-57-19).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 383565
Uplynulý čas: 1 hodin, 33 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Qoobox\Quarantine\C\Users\PiP\AppData\Roaming\Hljijp.exe.vir (Worm.Dorkbot) -> Žádná instrukce nebyla provedena.
C:\Users\PiP\Desktop\h\Windows 7 Ultimate Keygen-SPR4T3KK.exe (Trojan.Dropper) -> Žádná instrukce nebyla provedena.

(konec)

Co ten keygen?

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-nahoře stiskněte tlačítko Nekontrolovat
-do bílého okna dole zkopírujte tento skript: -stiskněte tlačítko Prohledat
-po chvilce se otevře log (asi dost velký), ten sem vložte

Spusťte prosím OTL ještě jednou podle předchozího postupu, tentokrát se skriptem
Omlouvám se za trochu zdlouhavou diagnózu, ale potřebuju vědět, co všechno ComboFix odmazal.