VIRY.CZ

Zdravím, stává se mi, že mi programy, hry a vše možné padá do lišty. Cca minutku mi běží film a padne mi na lištu. Další nepříjemná věc je, že se mi jakoby samovolně vykliknou aktivní okna. To znamená, že z aktivního okna se stane neaktivní a musím na něj znova kliknout. Dokonce mi to samo vypíná WiFi. Musím se znova pojit apod..
Snažil jsem se inspirovat topicem http://forum.viry.cz/viewtopic.php?f=13&t=127201 ale když jsem projel PC prvním programem tak to nic nenašlo

Předem děkuji za každou radu.

Logy z RSIT předkládám viz níže.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Armyt at 2013-01-12 14:37:31
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 821 GB (88%) free of 937 GB
Total RAM: 8132 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:37:37, on 12.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\Keystatus.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Program Files\trend micro\Armyt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMDTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMDTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com?pc=CMDTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: uTorrentControl_v2 - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [HP KEYBOARDx] "C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE"
O4 - HKLM\..\Run: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [Z1] cmd /c "C:\Users\Armyt\Desktop\mbar\mbar.exe" /cleanup /s
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9661 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3776a2a1-5d3d-4d06-a61b-b39b476b4dc5 -SystemEventPortName:HostProcess-1768a1d8-ea5c-4de7-9810-e24291f52e9f -IoCancelEventPortName:HostProcess-2055448d-4582-43f1-96ef-024aff49bfe8 -NonStateChangingEventPortName:HostProcess-0b8f4d46-20a2-4762-bca9-0334ad265202 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fe8002b2-6349-491d-b446-fc5c3ea469b1 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
taskeng.exe {8F3AED42-64F5-4987-A146-857DA7C0FD9E}
C:\Windows\SysWOW64\rundll32.exe "C:\Program Files (x86)\Garena Plus\ggspawn.dll",rundll_entry -p 0
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\IDT\WDM\Beats64.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe" -nogui
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\Keystatus.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files (x86)\uTorrent\uTorrent.exe"
rundll32 "C:\Program Files (x86)\uTorrentControl_v2\tbuTor.dll" DllVerifyEnableExtension
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4316.e5a1000.2082161811 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 4316 "\\.\pipe\gecko-crash-server-pipe.4316" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe" --proxy-stub-channel=Flash1776.61BEEFD0.41 --host-broker-channel=Flash1776.61BEEFD0.18467 --host-pid=1776 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe" --channel=5528.003AF1EC.928846405 --proxy-stub-channel=Flash1776.61BEEFD0.41 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll" --host-npapi-version=27 --type=renderer
taskeng.exe {FB5A025B-6645-4DD8-B2EA-455317FCC62B}
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 3CFAF3E0-D7D6-251E-6F61-2505A6393193 -Reinvoke
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe19_ Global\UsGthrCtrlFltPipeMssGthrPipe19 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\Armyt\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\HPCeeScheduleForArmyt.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Armyt\AppData\Roaming\Mozilla\Firefox\Profiles\usv01ixp.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Armyt\AppData\Roaming\Mozilla\Firefox\Profiles\usv01ixp.default\extensions\
{7473b6bd-4691-4744-a82b-7854eb3d70b6}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BeatsOSDApp"=C:\Program Files\IDT\WDM\beats64.exe [2012-03-30 37888]
"HPSYSDRV"=C:\Program Files (x86)\Hewlett-Packard\HP Odometer\HPSYSDRV.EXE [2008-11-20 62768]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-04-24 1425408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-01-08 1354736]
"GarenaPlus"=C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [2012-12-17 9152968]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2011-12-05 291096]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-07 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"HP KEYBOARDx"=C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE [2010-02-11 710656]
"HP Remote Solution"=C:\Program Files\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe []
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2012-07-18 684064]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Z1"=cmd /c C:\Users\Armyt\Desktop\mbar\mbar.exe /cleanup /s []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-12 14:37:32 ----D---- C:\Program Files\trend micro
2013-01-12 14:37:31 ----D---- C:\rsit
2013-01-12 14:28:00 ----D---- C:\ProgramData\Malwarebytes
2013-01-12 13:43:27 ----D---- C:\Program Files (x86)\Conduit
2013-01-12 13:43:24 ----D---- C:\Program Files (x86)\uTorrentControl_v2
2013-01-12 13:43:03 ----D---- C:\Program Files (x86)\uTorrent
2013-01-12 13:42:26 ----D---- C:\Users\Armyt\AppData\Roaming\uTorrent
2013-01-11 21:50:12 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-01-11 21:22:40 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-01-11 21:22:40 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-01-11 21:22:40 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-01-11 21:22:37 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-01-11 21:22:37 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-01-11 21:22:36 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-01-11 21:22:30 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\wksprtPS.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\wksprt.exe
2013-01-11 21:22:30 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-01-11 21:22:30 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\tsgqec.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\rdpudd.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\rdpcorets.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\mstsc.exe
2013-01-11 21:22:30 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-01-11 21:22:30 ----A---- C:\Windows\system32\aaclient.dll
2013-01-11 21:22:29 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-01-11 21:22:29 ----A---- C:\Windows\system32\mstscax.dll
2013-01-11 21:22:04 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-01-11 21:22:04 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-01-11 21:22:04 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-01-11 21:22:04 ----A---- C:\Windows\system32\schannel.dll
2013-01-11 21:22:04 ----A---- C:\Windows\system32\lsasrv.dll
2013-01-11 21:22:04 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-01-11 21:22:04 ----A---- C:\Windows\system32\drivers\cng.sys
2013-01-11 21:22:02 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-01-11 21:22:02 ----A---- C:\Windows\system32\qdvd.dll
2013-01-11 21:19:49 ----A---- C:\Windows\system32\MRT.exe
2013-01-10 19:12:36 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-01-10 19:12:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-01-10 19:12:36 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-01-10 19:12:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-01-10 19:12:36 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-01-10 19:12:36 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-01-10 19:12:36 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-01-10 19:12:36 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-01-10 19:12:35 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-01-10 19:12:34 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-01-10 19:12:34 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-01-10 19:12:34 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-01-10 19:12:34 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-01-10 19:12:34 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-01-10 19:12:34 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-01-10 19:12:33 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-01-10 19:12:33 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-01-10 19:12:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-01-10 19:12:33 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-01-10 19:12:33 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-01-10 19:12:33 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-01-10 19:12:32 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-01-10 19:12:32 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-01-10 19:12:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-01-10 19:12:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-01-10 19:12:31 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-01-10 19:12:31 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-01-10 19:12:30 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-01-10 19:12:30 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-01-10 19:12:30 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-01-10 19:12:30 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-01-10 19:12:29 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-01-10 19:12:29 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-01-10 19:12:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-01-10 19:12:29 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-01-10 19:12:29 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-01-10 19:12:29 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-01-10 19:12:28 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-01-10 19:12:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-01-10 19:12:28 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-01-10 19:12:28 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-01-10 19:12:28 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-01-10 19:12:28 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-01-10 19:12:27 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-01-10 19:12:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-01-10 19:12:27 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-01-10 19:12:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-01-10 19:12:27 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-01-10 19:12:27 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-01-10 19:12:27 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-01-10 19:12:27 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-01-10 19:12:26 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-01-10 19:12:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-01-10 19:12:26 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-01-10 19:12:26 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-01-10 19:12:26 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-01-10 19:12:26 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-01-10 19:12:26 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-01-10 19:12:26 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-01-10 19:12:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-01-10 19:12:25 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-01-10 19:12:24 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-01-10 19:12:24 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-01-09 16:28:54 ----D---- C:\Users\Armyt\AppData\Roaming\Allstar
2013-01-09 13:03:48 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-01-09 13:03:48 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 13:03:26 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-01-09 13:03:26 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 13:03:26 ----A---- C:\Windows\system32\msxml3.dll
2013-01-09 13:03:25 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-01-09 13:03:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-01-09 13:03:21 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 13:03:18 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-01-09 13:03:18 ----A---- C:\Windows\system32\usp10.dll
2013-01-09 13:03:13 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-01-09 13:03:13 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-01-09 13:03:13 ----A---- C:\Windows\system32\Wpc.dll
2013-01-09 13:03:13 ----A---- C:\Windows\system32\gameux.dll
2013-01-09 13:02:36 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-01-09 13:02:36 ----A---- C:\Windows\system32\winsrv.dll
2013-01-09 13:02:36 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-09 13:02:36 ----A---- C:\Windows\system32\kernel32.dll
2013-01-09 13:02:36 ----A---- C:\Windows\system32\conhost.exe
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 13:02:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\user.exe
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-01-09 13:02:35 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-01-09 13:02:35 ----A---- C:\Windows\system32\wow64win.dll
2013-01-09 13:02:35 ----A---- C:\Windows\system32\wow64cpu.dll
2013-01-09 13:02:35 ----A---- C:\Windows\system32\wow64.dll
2013-01-09 13:02:35 ----A---- C:\Windows\system32\ntvdm64.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 13:02:34 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 13:02:10 ----A---- C:\Windows\system32\taskhost.exe
2013-01-09 13:02:09 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 12:10:37 ----D---- C:\Program Files (x86)\GamePark
2013-01-09 03:40:29 ----D---- C:\Windows\SYSWOW64\Wat
2013-01-09 03:40:29 ----D---- C:\Windows\system32\Wat
2013-01-09 03:17:25 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-01-09 03:17:24 ----A---- C:\Windows\system32\Wdfres.dll
2013-01-09 03:17:24 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-01-09 03:15:45 ----A---- C:\Windows\system32\browserchoice.exe
2013-01-09 03:09:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-01-09 03:09:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-01-09 03:09:27 ----A---- C:\Windows\system32\mshtmled.dll
2013-01-09 03:09:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-01-09 03:09:26 ----A---- C:\Windows\SYSWOW64\url.dll
2013-01-09 03:09:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-01-09 03:09:26 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-01-09 03:09:26 ----A---- C:\Windows\system32\urlmon.dll
2013-01-09 03:09:26 ----A---- C:\Windows\system32\url.dll
2013-01-09 03:09:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-01-09 03:09:26 ----A---- C:\Windows\system32\ieui.dll
2013-01-09 03:09:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-01-09 03:09:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-01-09 03:09:25 ----A---- C:\Windows\system32\wininet.dll
2013-01-09 03:09:25 ----A---- C:\Windows\system32\msfeeds.dll
2013-01-09 03:09:25 ----A---- C:\Windows\system32\jscript9.dll
2013-01-09 03:09:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-01-09 03:09:24 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-01-09 03:09:24 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-01-09 03:09:24 ----A---- C:\Windows\system32\vbscript.dll
2013-01-09 03:09:24 ----A---- C:\Windows\system32\jsproxy.dll
2013-01-09 03:09:24 ----A---- C:\Windows\system32\jscript.dll
2013-01-09 03:09:24 ----A---- C:\Windows\system32\iertutil.dll
2013-01-09 03:09:23 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-01-09 03:09:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-01-09 03:09:22 ----A---- C:\Windows\system32\mshtml.dll
2013-01-09 03:09:21 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-01-09 03:09:21 ----A---- C:\Windows\system32\ieframe.dll
2013-01-09 03:07:49 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-01-09 03:07:49 ----A---- C:\Windows\system32\atmlib.dll
2013-01-09 03:07:48 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-01-09 03:07:48 ----A---- C:\Windows\system32\atmfd.dll
2013-01-09 03:07:39 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-01-09 03:07:39 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-01-09 03:07:38 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-01-09 03:07:38 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-01-09 03:07:37 ----A---- C:\Windows\system32\WUDFx.dll
2013-01-09 03:07:37 ----A---- C:\Windows\system32\WUDFHost.exe
2013-01-09 03:07:37 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-01-08 23:07:58 ----A---- C:\Users\Armyt\AppData\Roaming\room_v3.dat
2013-01-08 20:54:08 ----D---- C:\Users\Armyt\AppData\Roaming\GarenaPlus
2013-01-08 20:53:21 ----D---- C:\Program Files (x86)\Garena Plus
2013-01-08 20:53:18 ----D---- C:\ProgramData\GarenaMessenger
2013-01-08 20:08:51 ----A---- C:\Windows\Codec Pack - All In 1 Setup Log.txt
2013-01-08 19:45:06 ----D---- C:\ProgramData\Adobe
2013-01-08 18:14:53 ----D---- C:\Program Files (x86)\Steam
2013-01-08 17:48:43 ----D---- C:\Users\Armyt\AppData\Roaming\TS3Client
2013-01-08 17:48:30 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-01-08 16:07:38 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-01-08 16:07:33 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-01-08 16:07:33 ----A---- C:\Windows\system32\poqexec.exe
2013-01-08 16:07:32 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-01-08 16:07:32 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-01-08 16:07:32 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-01-08 16:07:31 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-01-08 16:07:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-01-08 16:07:25 ----A---- C:\Windows\system32\tzres.dll
2013-01-08 16:07:19 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-01-08 16:07:19 ----A---- C:\Windows\system32\msxml3r.dll
2013-01-08 16:07:18 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-01-08 16:07:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-01-08 16:07:18 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-01-08 16:07:17 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-01-08 16:07:17 ----A---- C:\Windows\system32\XpsPrint.dll
2013-01-08 16:07:16 ----A---- C:\Windows\system32\shell32.dll
2013-01-08 16:07:15 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-01-08 16:07:14 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-01-08 16:07:14 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-01-08 16:07:14 ----A---- C:\Windows\system32\d3d10level9.dll
2013-01-08 16:07:13 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-01-08 16:07:12 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-01-08 16:07:09 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-01-08 16:07:09 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-01-08 16:07:09 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-01-08 16:07:09 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\nlasvc.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\nlaapi.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\netevent.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\netcorehc.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\ncsi.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-01-08 16:07:09 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-01-08 16:07:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-01-08 16:07:09 ----A---- C:\Windows\system32\drivers\netio.sys
2013-01-08 16:07:09 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-01-08 16:06:52 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-01-08 16:06:52 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-01-08 16:06:52 ----A---- C:\Windows\system32\wintrust.dll
2013-01-08 16:06:52 ----A---- C:\Windows\system32\dpnet.dll
2013-01-08 16:06:50 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-01-08 16:06:26 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-01-08 16:06:26 ----A---- C:\Windows\system32\kerberos.dll
2013-01-08 16:06:25 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-01-08 16:06:25 ----A---- C:\Windows\system32\synceng.dll
2013-01-08 16:06:20 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-01-08 16:06:20 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-01-08 16:06:20 ----A---- C:\Windows\system32\netapi32.dll
2013-01-08 16:06:20 ----A---- C:\Windows\system32\browser.dll
2013-01-08 16:06:20 ----A---- C:\Windows\system32\browcli.dll
2013-01-08 16:06:19 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-01-08 16:06:19 ----A---- C:\Windows\system32\srcore.dll
2013-01-08 16:06:09 ----A---- C:\Windows\system32\localspl.dll
2013-01-08 16:06:08 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-01-08 16:06:00 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-01-08 16:05:59 ----A---- C:\Windows\system32\cdosys.dll
2013-01-08 16:05:57 ----A---- C:\Windows\system32\spoolsv.exe
2013-01-08 16:05:57 ----A---- C:\Windows\splwow64.exe
2013-01-08 16:05:53 ----A---- C:\Windows\system32\crypt32.dll
2013-01-08 16:05:52 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-01-08 16:05:52 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-01-08 16:05:52 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-01-08 16:05:52 ----A---- C:\Windows\system32\cryptsvc.dll
2013-01-08 16:05:52 ----A---- C:\Windows\system32\cryptnet.dll
2013-01-08 16:00:46 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-01-08 16:00:46 ----A---- C:\Windows\system32\rdpcore.dll
2013-01-08 16:00:46 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-01-08 15:58:06 ----A---- C:\Windows\system32\wups2.dll
2013-01-08 15:58:06 ----A---- C:\Windows\system32\wuauclt.exe
2013-01-08 15:58:05 ----A---- C:\Windows\system32\wucltux.dll
2013-01-08 15:58:05 ----A---- C:\Windows\system32\wuaueng.dll
2013-01-08 15:57:56 ----A---- C:\Windows\system32\wups.dll
2013-01-08 15:57:56 ----A---- C:\Windows\system32\wudriver.dll
2013-01-08 15:57:56 ----A---- C:\Windows\system32\wuapi.dll
2013-01-08 15:57:47 ----A---- C:\Windows\system32\wuwebv.dll
2013-01-08 15:57:47 ----A---- C:\Windows\system32\wuapp.exe
2013-01-08 15:56:52 ----D---- C:\Users\Armyt\AppData\Roaming\TP-LINK
2013-01-08 15:56:35 ----D---- C:\Program Files (x86)\TP-LINK
2013-01-08 15:56:10 ----A---- C:\Windows\system32\rtl8192cu.sys
2013-01-08 15:56:10 ----A---- C:\Windows\system32\drivers\RTL8192cu.sys
2013-01-08 15:55:17 ----D---- C:\ProgramData\TP-LINK
2013-01-07 14:52:26 ----D---- C:\Users\Armyt\AppData\Roaming\CyberLink
2013-01-07 14:36:28 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-01-07 14:36:28 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-01-07 14:36:28 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-01-07 14:36:20 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-01-07 14:36:20 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-01-07 14:36:20 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-01-07 14:36:20 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2013-01-07 14:36:20 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2013-01-07 14:36:19 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-01-07 14:36:19 ----A---- C:\Windows\system32\aswBoot.exe
2013-01-07 14:36:14 ----A---- C:\Windows\system32\drivers\aswNdis.sys
2013-01-07 14:36:08 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2013-01-07 14:36:08 ----A---- C:\Windows\avastSS.scr
2013-01-07 14:36:00 ----D---- C:\ProgramData\AVAST Software
2013-01-07 14:36:00 ----D---- C:\Program Files\AVAST Software
2013-01-07 12:18:21 ----D---- C:\Users\Armyt\AppData\Roaming\Mozilla
2013-01-07 12:18:11 ----D---- C:\ProgramData\Mozilla
2013-01-07 12:18:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-01-07 12:05:00 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-01-07 12:04:59 ----D---- C:\Users\Armyt\AppData\Roaming\DAEMON Tools Lite
2013-01-07 12:04:58 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-01-07 12:04:07 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-01-06 17:34:59 ----D---- C:\Users\Armyt\AppData\Roaming\Adobe
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-01-04 16:19:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-01-04 16:19:10 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-01-04 16:19:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-01-04 16:19:09 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-01-04 16:19:08 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-01-04 16:19:08 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-01-04 16:19:08 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-01-04 16:19:08 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-01-04 16:19:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-01-04 16:19:08 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-01-04 16:19:08 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-01-04 16:19:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-01-04 16:19:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-01-04 16:19:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-01-04 16:19:07 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-01-04 16:19:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-01-04 16:19:07 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-01-04 16:19:07 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-01-04 16:19:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-01-04 16:19:07 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-01-04 16:19:07 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-01-04 16:19:07 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-01-04 16:19:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-01-04 16:19:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-01-04 16:13:48 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2013-01-04 14:40:51 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-01-04 14:40:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-01-04 14:40:51 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-01-04 14:40:51 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-01-04 14:40:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\xinput1_3.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-01-04 14:40:50 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-01-04 14:40:49 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-01-04 14:40:49 ----A---- C:\Windows\system32\d3dx10.dll
2013-01-04 14:40:48 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-01-04 14:40:48 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-01-04 14:40:48 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-01-04 14:40:48 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-01-04 14:40:48 ----A---- C:\Windows\system32\xinput1_2.dll
2013-01-04 14:40:48 ----A---- C:\Windows\system32\xinput1_1.dll
2013-01-04 14:40:48 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-01-04 14:40:48 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-01-04 14:40:46 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-01-04 14:40:46 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-01-04 14:40:45 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-01-04 14:40:45 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-01-04 14:40:45 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-01-04 14:40:45 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-01-04 14:40:45 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-01-04 14:40:45 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-01-04 14:40:45 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-01-04 14:40:45 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-01-04 14:40:44 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-01-04 14:40:44 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-01-04 14:40:44 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-01-04 14:40:44 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-01-04 14:40:44 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-01-04 14:40:44 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-01-04 14:40:44 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-01-04 14:40:44 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-01-04 14:37:36 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-01-04 14:37:35 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-01-04 14:37:30 ----A---- C:\Windows\game.ini
2013-01-04 14:26:14 ----D---- C:\Users\Armyt\AppData\Roaming\Macromedia
2013-01-04 14:24:50 ----D---- C:\Hry
2013-01-04 13:14:04 ----D---- C:\Users\Armyt\AppData\Roaming\ATI
2013-01-04 13:12:46 ----D---- C:\Users\Armyt\AppData\Roaming\Identities
2013-01-04 13:12:26 ----D---- C:\Users\Armyt\AppData\Roaming\Hewlett-Packard
2013-01-04 13:10:09 ----A---- C:\Windows\SYSWOW64\log.txt
2013-01-04 13:08:34 ----ASH---- C:\hiberfil.sys
2013-01-04 13:08:28 ----SD---- C:\Users\Armyt\AppData\Roaming\Microsoft
2013-01-04 13:08:28 ----D---- C:\Users\Armyt\AppData\Roaming\Media Center Programs
2013-01-04 13:07:15 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 month======

2013-01-12 14:37:36 ----D---- C:\Windows\Temp
2013-01-12 14:37:32 ----RD---- C:\Program Files
2013-01-12 14:32:31 ----D---- C:\Windows\system32\drivers
2013-01-12 14:30:48 ----SHD---- C:\System Volume Information
2013-01-12 14:28:00 ----HD---- C:\ProgramData
2013-01-12 14:24:28 ----D---- C:\Windows\system32\config
2013-01-12 13:43:27 ----RD---- C:\Program Files (x86)
2013-01-12 13:31:38 ----D---- C:\Windows\System32
2013-01-12 13:31:38 ----D---- C:\Windows\inf
2013-01-12 13:31:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-12 13:27:08 ----D---- C:\Windows\Tasks
2013-01-12 13:27:08 ----D---- C:\Windows\system32\Tasks
2013-01-12 13:25:53 ----D---- C:\ProgramData\PDFC
2013-01-12 13:20:56 ----D---- C:\Windows\SysWOW64
2013-01-11 22:03:33 ----D---- C:\ProgramData\Norton
2013-01-11 22:02:48 ----D---- C:\Program Files\Common Files
2013-01-11 21:34:50 ----SD---- C:\ProgramData\Microsoft
2013-01-11 21:30:02 ----D---- C:\Windows
2013-01-11 21:30:01 ----D---- C:\Windows\winsxs
2013-01-11 21:29:04 ----D---- C:\Windows\SYSWOW64\wbem
2013-01-11 21:29:04 ----D---- C:\Windows\SYSWOW64\en-US
2013-01-11 21:29:04 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-01-11 21:29:04 ----D---- C:\Windows\system32\wbem
2013-01-11 21:29:04 ----D---- C:\Windows\system32\en-US
2013-01-11 21:29:04 ----D---- C:\Windows\system32\drivers\en-US
2013-01-11 21:29:04 ----D---- C:\Windows\system32\cs-CZ
2013-01-11 21:29:04 ----D---- C:\Windows\PolicyDefinitions
2013-01-11 21:29:03 ----D---- C:\Windows\system32\DriverStore
2013-01-11 21:23:49 ----D---- C:\Windows\system32\catroot
2013-01-11 21:23:33 ----D---- C:\ProgramData\SonicFocus
2013-01-11 21:23:32 ----D---- C:\Program Files\IDT
2013-01-11 21:22:55 ----D---- C:\Windows\system32\catroot2
2013-01-11 21:19:51 ----D---- C:\Windows\debug
2013-01-10 19:12:04 ----RSD---- C:\Windows\assembly
2013-01-09 18:18:11 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-09 18:17:36 ----SHD---- C:\Windows\Installer
2013-01-09 17:13:55 ----D---- C:\Windows\Microsoft.NET
2013-01-09 16:46:45 ----D---- C:\Windows\Prefetch
2013-01-09 16:43:38 ----D---- C:\Windows\AppPatch
2013-01-09 16:41:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-01-09 12:04:08 ----D---- C:\Windows\system32\NDF
2013-01-09 04:42:31 ----D---- C:\Windows\rescache
2013-01-09 03:40:30 ----D---- C:\Program Files\Common Files\System
2013-01-09 03:40:29 ----D---- C:\Windows\SYSWOW64\migration
2013-01-09 03:40:29 ----D---- C:\Windows\system32\migration
2013-01-09 03:40:29 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-01-09 03:40:28 ----RSD---- C:\Windows\Fonts
2013-01-09 03:40:28 ----D---- C:\Program Files\Internet Explorer
2013-01-09 03:40:28 ----D---- C:\Program Files (x86)\Internet Explorer
2013-01-09 03:40:27 ----D---- C:\Program Files\Windows Journal
2013-01-08 20:35:35 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-01-08 20:03:40 ----D---- C:\Windows\system32\LogFiles
2013-01-08 18:14:55 ----D---- C:\Program Files (x86)\Common Files
2013-01-08 16:00:35 ----D---- C:\Windows\Logs
2013-01-07 14:28:10 ----D---- C:\Windows\system32\wdi
2013-01-07 14:26:14 ----D---- C:\Windows\SYSWOW64\winrm
2013-01-07 14:26:14 ----D---- C:\Windows\SYSWOW64\slmgr
2013-01-07 14:26:14 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-01-07 14:26:14 ----D---- C:\Windows\SYSWOW64\migwiz
2013-01-07 14:26:14 ----D---- C:\Windows\SYSWOW64\en
2013-01-07 14:26:14 ----D---- C:\Windows\servicing
2013-01-07 14:26:14 ----D---- C:\Windows\ehome
2013-01-07 14:26:14 ----D---- C:\Program Files\Windows Sidebar
2013-01-07 14:26:14 ----D---- C:\Program Files\Windows Photo Viewer
2013-01-07 14:26:14 ----D---- C:\Program Files\Windows Media Player
2013-01-07 14:26:14 ----D---- C:\Program Files\Windows Mail
2013-01-07 14:26:14 ----D---- C:\Program Files\Windows Defender
2013-01-07 14:26:14 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-01-07 14:26:14 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-01-07 14:26:14 ----D---- C:\Program Files (x86)\Windows Media Player
2013-01-07 14:26:14 ----D---- C:\Program Files (x86)\Windows Mail
2013-01-07 14:26:14 ----D---- C:\Program Files (x86)\Windows Defender
2013-01-07 14:26:13 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2013-01-07 14:26:13 ----D---- C:\Windows\SYSWOW64\drivers
2013-01-07 14:26:12 ----D---- C:\Windows\SYSWOW64\WCN
2013-01-07 14:26:12 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-01-07 14:26:12 ----D---- C:\Windows\SYSWOW64\DriverStore
2013-01-07 14:26:12 ----D---- C:\Windows\SYSWOW64\Dism
2013-01-07 14:26:12 ----D---- C:\Windows\en-US
2013-01-07 14:26:11 ----D---- C:\Windows\system32\winrm
2013-01-07 14:26:11 ----D---- C:\Windows\system32\sysprep
2013-01-07 14:26:11 ----D---- C:\Windows\system32\slmgr
2013-01-07 14:26:11 ----D---- C:\Windows\system32\sk-SK
2013-01-07 14:26:11 ----D---- C:\Windows\system32\oobe
2013-01-07 14:26:11 ----D---- C:\Windows\system32\migwiz
2013-01-07 14:26:11 ----D---- C:\Windows\system32\en
2013-01-07 14:26:11 ----D---- C:\Windows\system32\Boot
2013-01-07 14:26:09 ----D---- C:\Windows\system32\WCN
2013-01-07 14:26:09 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2013-01-07 14:26:09 ----D---- C:\Windows\system32\Dism
2013-01-07 14:26:06 ----D---- C:\Program Files\DVD Maker
2013-01-07 14:26:04 ----D---- C:\Windows\Speech
2013-01-07 14:12:57 ----D---- C:\Windows\system32\restore
2013-01-07 12:11:02 ----D---- C:\ProgramData\WinZip
2013-01-04 13:12:41 ----SHD---- C:\$RECYCLE.BIN
2013-01-04 13:12:36 ----D---- C:\SWSETUP
2013-01-04 13:12:31 ----RHD---- C:\SYSTEM.SAV
2013-01-04 13:08:46 ----RD---- C:\Program Files\Online Services
2013-01-04 13:08:46 ----RD---- C:\Program Files (x86)\Online Services
2013-01-04 13:08:38 ----D---- C:\ProgramData\Hewlett-Packard
2013-01-04 13:08:28 ----RD---- C:\Users
2013-01-04 13:08:26 ----D---- C:\Windows\Panther

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2012-09-21 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2012-10-30 262656]
R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2012-04-10 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\drivers\iusb3hcs.sys [2011-12-05 16152]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2012-10-30 132864]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-30 21136]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-07 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-06-08 11172864]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-06-08 339456]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-24 95760]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\drivers\iusb3hub.sys [2011-12-05 355096]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\drivers\iusb3xhc.sys [2011-12-05 785688]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-10-14 108656]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 RTL8192cu;TP-LINK 150Mbps Wireless N Nano USB Adapter; C:\Windows\system32\DRIVERS\RTL8192cu.sys [2012-03-14 926824]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-04-24 536576]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys []
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-06-08 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2012-10-30 133912]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-10 86072]
R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-29 94264]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-04-11 277784]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2012-07-18 1134624]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-01-09 76888]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-04-24 318464]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-01-08 541760]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-29 799800]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-11 115760]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-09 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Akorád ten poslední bod jsem nějak nepochopil

Jen dodám, že PC je doma cca týden. Je komplet nový.

Co přesně z té stránky mám sem dát?

https://www.virustotal.com/file/27b1ef3 ... 358000103/ - Dump_Hdd0_DR0.mbr
https://www.virustotal.com/file/0f8bd6e ... 358000207/ - Dump_Hdd0_DR0.old

Napsal: Nebyla nalezena žádná rizika

Chceš sem třeba protokol či tak něco?

PC je sestava. Tak jak je, tak jsem jí koupil.

U TDSSKillera se mi žádné okno neobjevilo.
Přikládám log.
15:49:16.0880 4776 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
15:49:17.0326 4776 ============================================================
15:49:17.0326 4776 Current date / time: 2013/01/12 15:49:17.0326
15:49:17.0326 4776 SystemInfo:
15:49:17.0326 4776
15:49:17.0326 4776 OS Version: 6.1.7601 ServicePack: 1.0
15:49:17.0326 4776 Product type: Workstation
15:49:17.0327 4776 ComputerName: ARMYT-PC
15:49:17.0327 4776 UserName: Armyt
15:49:17.0327 4776 Windows directory: C:\Windows
15:49:17.0327 4776 System windows directory: C:\Windows
15:49:17.0327 4776 Running under WOW64
15:49:17.0327 4776 Processor architecture: Intel x64
15:49:17.0327 4776 Number of processors: 4
15:49:17.0327 4776 Page size: 0x1000
15:49:17.0327 4776 Boot type: Normal boot
15:49:17.0327 4776 ============================================================
15:49:17.0560 4776 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:49:17.0577 4776 ============================================================
15:49:17.0577 4776 \Device\Harddisk0\DR0:
15:49:17.0577 4776 MBR partitions:
15:49:17.0577 4776 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:49:17.0577 4776 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x725E8800
15:49:17.0577 4776 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x7261B000, BlocksNum 0x20B9000
15:49:17.0577 4776 ============================================================
15:49:17.0641 4776 C: <-> \Device\Harddisk0\DR0\Partition2
15:49:17.0675 4776 D: <-> \Device\Harddisk0\DR0\Partition3
15:49:17.0675 4776 ============================================================
15:49:17.0675 4776 Initialize success
15:49:17.0675 4776 ============================================================
15:49:35.0582 3904 ============================================================
15:49:35.0582 3904 Scan started
15:49:35.0582 3904 Mode: Manual; SigCheck; TDLFS;
15:49:35.0582 3904 ============================================================
15:49:35.0756 3904 ================ Scan system memory ========================
15:49:35.0756 3904 System memory - ok
15:49:35.0756 3904 ================ Scan services =============================
15:49:35.0843 3904 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
15:49:35.0899 3904 1394ohci - ok
15:49:35.0920 3904 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:49:35.0930 3904 ACPI - ok
15:49:35.0947 3904 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
15:49:35.0957 3904 AcpiPmi - ok
15:49:36.0005 3904 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:49:36.0023 3904 AdobeFlashPlayerUpdateSvc - ok
15:49:36.0050 3904 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
15:49:36.0060 3904 adp94xx - ok
15:49:36.0077 3904 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
15:49:36.0087 3904 adpahci - ok
15:49:36.0103 3904 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
15:49:36.0111 3904 adpu320 - ok
15:49:36.0132 3904 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:49:36.0154 3904 AeLookupSvc - ok
15:49:36.0179 3904 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
15:49:36.0190 3904 AFD - ok
15:49:36.0212 3904 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
15:49:36.0219 3904 agp440 - ok
15:49:36.0222 3904 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
15:49:36.0231 3904 ALG - ok
15:49:36.0247 3904 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
15:49:36.0254 3904 aliide - ok
15:49:36.0271 3904 [ D7C896249AB4B8C0490D59BB93D2285E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:49:36.0283 3904 AMD External Events Utility - ok
15:49:36.0295 3904 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
15:49:36.0302 3904 amdide - ok
15:49:36.0313 3904 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
15:49:36.0322 3904 AmdK8 - ok
15:49:36.0461 3904 [ CFE8D738DED1F00F4DB3D847DF58EC54 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:49:36.0534 3904 amdkmdag - ok
15:49:36.0554 3904 [ A9FBCDA80D72CFEE4471FA1F79C70BE1 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
15:49:36.0566 3904 amdkmdap - ok
15:49:36.0574 3904 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
15:49:36.0583 3904 AmdPPM - ok
15:49:36.0592 3904 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:49:36.0599 3904 amdsata - ok
15:49:36.0613 3904 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
15:49:36.0621 3904 amdsbs - ok
15:49:36.0633 3904 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:49:36.0640 3904 amdxata - ok
15:49:36.0651 3904 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
15:49:36.0671 3904 AppID - ok
15:49:36.0691 3904 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:49:36.0712 3904 AppIDSvc - ok
15:49:36.0715 3904 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
15:49:36.0735 3904 Appinfo - ok
15:49:36.0738 3904 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
15:49:36.0783 3904 AppMgmt - ok
15:49:36.0785 3904 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
15:49:36.0793 3904 arc - ok
15:49:36.0795 3904 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
15:49:36.0803 3904 arcsas - ok
15:49:36.0889 3904 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:49:36.0898 3904 aspnet_state - ok
15:49:36.0916 3904 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
15:49:36.0930 3904 aswFsBlk - ok
15:49:36.0974 3904 [ 9FFC732E12FF53E05FE9E02C8C00CE87 ] aswFW C:\Windows\system32\drivers\aswFW.sys
15:49:36.0990 3904 aswFW - ok
15:49:37.0011 3904 [ 6B91E6D483AADB3FC4E13E2355200611 ] aswKbd C:\Windows\system32\drivers\aswKbd.sys
15:49:37.0021 3904 aswKbd - ok
15:49:37.0040 3904 [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
15:49:37.0050 3904 aswMonFlt - ok
15:49:37.0062 3904 [ 518B8D447A1975AB46DA093A2E743256 ] aswNdis C:\Windows\system32\DRIVERS\aswNdis.sys
15:49:37.0071 3904 aswNdis - ok
15:49:37.0079 3904 [ 5A832BBB1B563B6B3FDA46239B630037 ] aswNdis2 C:\Windows\system32\drivers\aswNdis2.sys
15:49:37.0092 3904 aswNdis2 - ok
15:49:37.0126 3904 [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
15:49:37.0136 3904 aswRdr - ok
15:49:37.0153 3904 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
15:49:37.0174 3904 aswSnx - ok
15:49:37.0188 3904 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP C:\Windows\system32\drivers\aswSP.sys
15:49:37.0197 3904 aswSP - ok
15:49:37.0205 3904 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
15:49:37.0212 3904 aswTdi - ok
15:49:37.0218 3904 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:49:37.0238 3904 AsyncMac - ok
15:49:37.0240 3904 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
15:49:37.0247 3904 atapi - ok
15:49:37.0260 3904 [ 24464B908E143D2561E9E452FEE97309 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:49:37.0266 3904 AtiHDAudioService - ok
15:49:37.0278 3904 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:49:37.0301 3904 AudioEndpointBuilder - ok
15:49:37.0311 3904 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
15:49:37.0334 3904 AudioSrv - ok
15:49:37.0375 3904 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
15:49:37.0382 3904 avast! Antivirus - ok
15:49:37.0400 3904 [ BC0E07A768A0A14C48E3CE1875F2C377 ] avast! Firewall C:\Program Files\AVAST Software\Avast\afwServ.exe
15:49:37.0408 3904 avast! Firewall - ok
15:49:37.0420 3904 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:49:37.0432 3904 AxInstSV - ok
15:49:37.0450 3904 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
15:49:37.0461 3904 b06bdrv - ok
15:49:37.0484 3904 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
15:49:37.0494 3904 b57nd60a - ok
15:49:37.0504 3904 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
15:49:37.0512 3904 BDESVC - ok
15:49:37.0518 3904 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
15:49:37.0538 3904 Beep - ok
15:49:37.0546 3904 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
15:49:37.0570 3904 BFE - ok
15:49:37.0594 3904 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
15:49:37.0620 3904 BITS - ok
15:49:37.0630 3904 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
15:49:37.0639 3904 blbdrive - ok
15:49:37.0656 3904 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:49:37.0664 3904 bowser - ok
15:49:37.0666 3904 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
15:49:37.0676 3904 BrFiltLo - ok
15:49:37.0689 3904 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
15:49:37.0699 3904 BrFiltUp - ok
15:49:37.0718 3904 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
15:49:37.0727 3904 Browser - ok
15:49:37.0737 3904 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
15:49:37.0747 3904 Brserid - ok
15:49:37.0754 3904 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
15:49:37.0764 3904 BrSerWdm - ok
15:49:37.0783 3904 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
15:49:37.0792 3904 BrUsbMdm - ok
15:49:37.0794 3904 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
15:49:37.0803 3904 BrUsbSer - ok
15:49:37.0814 3904 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
15:49:37.0824 3904 BTHMODEM - ok
15:49:37.0827 3904 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
15:49:37.0848 3904 bthserv - ok
15:49:37.0863 3904 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:49:37.0884 3904 cdfs - ok
15:49:37.0894 3904 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
15:49:37.0903 3904 cdrom - ok
15:49:37.0909 3904 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
15:49:37.0929 3904 CertPropSvc - ok
15:49:37.0940 3904 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
15:49:37.0950 3904 circlass - ok
15:49:37.0966 3904 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
15:49:37.0976 3904 CLFS - ok
15:49:38.0014 3904 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:49:38.0028 3904 clr_optimization_v2.0.50727_32 - ok
15:49:38.0045 3904 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:49:38.0054 3904 clr_optimization_v2.0.50727_64 - ok
15:49:38.0074 3904 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:49:38.0086 3904 clr_optimization_v4.0.30319_32 - ok
15:49:38.0109 3904 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:49:38.0120 3904 clr_optimization_v4.0.30319_64 - ok
15:49:38.0134 3904 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
15:49:38.0147 3904 CmBatt - ok
15:49:38.0180 3904 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
15:49:38.0191 3904 cmdide - ok
15:49:38.0239 3904 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
15:49:38.0266 3904 CNG - ok
15:49:38.0276 3904 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
15:49:38.0286 3904 Compbatt - ok
15:49:38.0288 3904 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
15:49:38.0297 3904 CompositeBus - ok
15:49:38.0299 3904 COMSysApp - ok
15:49:38.0305 3904 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
15:49:38.0312 3904 crcdisk - ok
15:49:38.0330 3904 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:49:38.0339 3904 CryptSvc - ok
15:49:38.0352 3904 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
15:49:38.0363 3904 CSC - ok
15:49:38.0384 3904 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
15:49:38.0396 3904 CscService - ok
15:49:38.0419 3904 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
15:49:38.0443 3904 DcomLaunch - ok
15:49:38.0461 3904 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
15:49:38.0484 3904 defragsvc - ok
15:49:38.0486 3904 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
15:49:38.0507 3904 DfsC - ok
15:49:38.0511 3904 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
15:49:38.0521 3904 Dhcp - ok
15:49:38.0523 3904 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
15:49:38.0544 3904 discache - ok
15:49:38.0551 3904 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
15:49:38.0559 3904 Disk - ok
15:49:38.0570 3904 [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
15:49:38.0579 3904 dmvsc - ok
15:49:38.0595 3904 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:49:38.0605 3904 Dnscache - ok
15:49:38.0619 3904 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
15:49:38.0641 3904 dot3svc - ok
15:49:38.0644 3904 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
15:49:38.0665 3904 DPS - ok
15:49:38.0676 3904 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:49:38.0685 3904 drmkaud - ok
15:49:38.0706 3904 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:49:38.0715 3904 dtsoftbus01 - ok
15:49:38.0722 3904 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:49:38.0736 3904 DXGKrnl - ok
15:49:38.0744 3904 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
15:49:38.0767 3904 EapHost - ok
15:49:38.0802 3904 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
15:49:38.0829 3904 ebdrv - ok
15:49:38.0847 3904 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
15:49:38.0856 3904 EFS - ok
15:49:38.0895 3904 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
15:49:38.0917 3904 ehRecvr - ok
15:49:38.0927 3904 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
15:49:38.0936 3904 ehSched - ok
15:49:38.0948 3904 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
15:49:38.0959 3904 elxstor - ok
15:49:38.0968 3904 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
15:49:38.0976 3904 ErrDev - ok
15:49:39.0001 3904 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
15:49:39.0025 3904 EventSystem - ok
15:49:39.0041 3904 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
15:49:39.0063 3904 exfat - ok
15:49:39.0066 3904 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:49:39.0088 3904 fastfat - ok
15:49:39.0101 3904 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
15:49:39.0113 3904 Fax - ok
15:49:39.0132 3904 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
15:49:39.0140 3904 fdc - ok
15:49:39.0151 3904 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
15:49:39.0173 3904 fdPHost - ok
15:49:39.0175 3904 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
15:49:39.0196 3904 FDResPub - ok
15:49:39.0207 3904 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:49:39.0214 3904 FileInfo - ok
15:49:39.0216 3904 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:49:39.0237 3904 Filetrace - ok
15:49:39.0247 3904 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
15:49:39.0255 3904 flpydisk - ok
15:49:39.0263 3904 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:49:39.0272 3904 FltMgr - ok
15:49:39.0296 3904 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
15:49:39.0310 3904 FontCache - ok
15:49:39.0342 3904 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:49:39.0348 3904 FontCache3.0.0.0 - ok
15:49:39.0350 3904 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:49:39.0358 3904 FsDepends - ok
15:49:39.0363 3904 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:49:39.0370 3904 Fs_Rec - ok
15:49:39.0373 3904 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:49:39.0383 3904 fvevol - ok
15:49:39.0391 3904 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
15:49:39.0398 3904 gagp30kx - ok
15:49:39.0436 3904 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
15:49:39.0443 3904 GamesAppService - ok
15:49:39.0481 3904 GGSAFERDriver - ok
15:49:39.0496 3904 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
15:49:39.0536 3904 gpsvc - ok
15:49:39.0545 3904 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
15:49:39.0553 3904 hcw85cir - ok
15:49:39.0564 3904 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:49:39.0576 3904 HdAudAddService - ok
15:49:39.0589 3904 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
15:49:39.0600 3904 HDAudBus - ok
15:49:39.0612 3904 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
15:49:39.0620 3904 HidBatt - ok
15:49:39.0631 3904 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
15:49:39.0641 3904 HidBth - ok
15:49:39.0652 3904 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
15:49:39.0662 3904 HidIr - ok
15:49:39.0664 3904 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
15:49:39.0685 3904 hidserv - ok
15:49:39.0687 3904 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
15:49:39.0695 3904 HidUsb - ok
15:49:39.0701 3904 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:49:39.0722 3904 hkmsvc - ok
15:49:39.0730 3904 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:49:39.0740 3904 HomeGroupListener - ok
15:49:39.0757 3904 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:49:39.0767 3904 HomeGroupProvider - ok
15:49:39.0805 3904 [ 13BB1114451C63BFB41BA7DAA4D70A29 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
15:49:39.0812 3904 HP Support Assistant Service - ok
15:49:39.0832 3904 [ 7B8C1B09C11E8DB7C4480ABD7D17E821 ] HPAuto C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
15:49:39.0843 3904 HPAuto - ok
15:49:39.0867 3904 [ BCC4A8B2E2E902F52E7F2E7D8E125765 ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
15:49:39.0874 3904 HPDrvMntSvc.exe - ok
15:49:39.0891 3904 [ EC9739A46F1F83C6E52A7A4697F44A65 ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
15:49:39.0902 3904 hpqwmiex - ok
15:49:39.0913 3904 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:49:39.0920 3904 HpSAMD - ok
15:49:39.0926 3904 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:49:39.0950 3904 HTTP - ok
15:49:39.0952 3904 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:49:39.0959 3904 hwpolicy - ok
15:49:39.0978 3904 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
15:49:39.0987 3904 i8042prt - ok
15:49:40.0000 3904 [ C224331A54571C8C9162F7714400BBBD ] iaStor C:\Windows\system32\drivers\iaStor.sys
15:49:40.0011 3904 iaStor - ok
15:49:40.0022 3904 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:49:40.0032 3904 iaStorV - ok
15:49:40.0060 3904 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:49:40.0073 3904 idsvc - ok
15:49:40.0147 3904 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
15:49:40.0191 3904 igfx - ok
15:49:40.0204 3904 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
15:49:40.0211 3904 iirsp - ok
15:49:40.0230 3904 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
15:49:40.0255 3904 IKEEXT - ok
15:49:40.0268 3904 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
15:49:40.0276 3904 intelide - ok
15:49:40.0291 3904 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
15:49:40.0300 3904 intelppm - ok
15:49:40.0302 3904 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
15:49:40.0323 3904 IPBusEnum - ok
15:49:40.0339 3904 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:49:40.0360 3904 IpFilterDriver - ok
15:49:40.0377 3904 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:49:40.0389 3904 iphlpsvc - ok
15:49:40.0396 3904 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
15:49:40.0404 3904 IPMIDRV - ok
15:49:40.0407 3904 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:49:40.0428 3904 IPNAT - ok
15:49:40.0430 3904 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:49:40.0441 3904 IRENUM - ok
15:49:40.0451 3904 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:49:40.0457 3904 isapnp - ok
15:49:40.0464 3904 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
15:49:40.0472 3904 iScsiPrt - ok
15:49:40.0482 3904 [ DC0DBA5164F657DE2AE94B9D1FF75DA4 ] iusb3hcs C:\Windows\system32\drivers\iusb3hcs.sys
15:49:40.0488 3904 iusb3hcs - ok
15:49:40.0500 3904 [ BA4F3A70F03584E5B907DA815677727D ] iusb3hub C:\Windows\system32\drivers\iusb3hub.sys
15:49:40.0508 3904 iusb3hub - ok
15:49:40.0523 3904 [ E6130F70D61867C7EFC13A2F808EDC58 ] iusb3xhc C:\Windows\system32\drivers\iusb3xhc.sys
15:49:40.0535 3904 iusb3xhc - ok
15:49:40.0553 3904 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
15:49:40.0560 3904 kbdclass - ok
15:49:40.0579 3904 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
15:49:40.0587 3904 kbdhid - ok
15:49:40.0596 3904 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
15:49:40.0605 3904 KeyIso - ok
15:49:40.0612 3904 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:49:40.0620 3904 KSecDD - ok
15:49:40.0659 3904 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:49:40.0676 3904 KSecPkg - ok
15:49:40.0680 3904 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
15:49:40.0705 3904 ksthunk - ok
15:49:40.0728 3904 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
15:49:40.0752 3904 KtmRm - ok
15:49:40.0790 3904 [ 320F16CA30BC0B8FF59F6C9E1ACD8516 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
15:49:40.0798 3904 L1C - ok
15:49:40.0808 3904 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
15:49:40.0831 3904 LanmanServer - ok
15:49:40.0844 3904 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:49:40.0866 3904 LanmanWorkstation - ok
15:49:40.0869 3904 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:49:40.0890 3904 lltdio - ok
15:49:40.0904 3904 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:49:40.0926 3904 lltdsvc - ok
15:49:40.0938 3904 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
15:49:40.0960 3904 lmhosts - ok
15:49:40.0980 3904 [ BF22ACF4CF3734D61357E67F0521BC03 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
15:49:40.0988 3904 LMS - ok
15:49:41.0000 3904 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
15:49:41.0007 3904 LSI_FC - ok
15:49:41.0016 3904 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
15:49:41.0024 3904 LSI_SAS - ok
15:49:41.0030 3904 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
15:49:41.0037 3904 LSI_SAS2 - ok
15:49:41.0047 3904 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
15:49:41.0055 3904 LSI_SCSI - ok
15:49:41.0068 3904 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
15:49:41.0089 3904 luafv - ok
15:49:41.0097 3904 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
15:49:41.0106 3904 Mcx2Svc - ok
15:49:41.0116 3904 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
15:49:41.0123 3904 megasas - ok
15:49:41.0134 3904 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
15:49:41.0143 3904 MegaSR - ok
15:49:41.0178 3904 [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
15:49:41.0184 3904 MEIx64 - ok
15:49:41.0190 3904 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
15:49:41.0213 3904 MMCSS - ok
15:49:41.0224 3904 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
15:49:41.0245 3904 Modem - ok
15:49:41.0255 3904 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
15:49:41.0266 3904 monitor - ok
15:49:41.0267 3904 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
15:49:41.0275 3904 mouclass - ok
15:49:41.0283 3904 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
15:49:41.0292 3904 mouhid - ok
15:49:41.0298 3904 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:49:41.0305 3904 mountmgr - ok
15:49:41.0338 3904 [ 730A519505621DF46BCBF9CDAC9FB6AD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:49:41.0346 3904 MozillaMaintenance - ok
15:49:41.0359 3904 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
15:49:41.0367 3904 mpio - ok
15:49:41.0369 3904 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:49:41.0390 3904 mpsdrv - ok
15:49:41.0403 3904 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:49:41.0429 3904 MpsSvc - ok
15:49:41.0432 3904 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:49:41.0443 3904 MRxDAV - ok
15:49:41.0461 3904 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:49:41.0470 3904 mrxsmb - ok
15:49:41.0473 3904 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:49:41.0483 3904 mrxsmb10 - ok
15:49:41.0490 3904 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:49:41.0499 3904 mrxsmb20 - ok
15:49:41.0506 3904 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
15:49:41.0513 3904 msahci - ok
15:49:41.0521 3904 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
15:49:41.0529 3904 msdsm - ok
15:49:41.0537 3904 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
15:49:41.0548 3904 MSDTC - ok
15:49:41.0551 3904 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:49:41.0572 3904 Msfs - ok
15:49:41.0574 3904 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:49:41.0595 3904 mshidkmdf - ok
15:49:41.0597 3904 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:49:41.0604 3904 msisadrv - ok
15:49:41.0616 3904 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:49:41.0638 3904 MSiSCSI - ok
15:49:41.0640 3904 msiserver - ok
15:49:41.0651 3904 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:49:41.0671 3904 MSKSSRV - ok
15:49:41.0677 3904 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:49:41.0698 3904 MSPCLOCK - ok
15:49:41.0700 3904 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:49:41.0720 3904 MSPQM - ok
15:49:41.0724 3904 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:49:41.0733 3904 MsRPC - ok
15:49:41.0752 3904 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
15:49:41.0759 3904 mssmbios - ok
15:49:41.0761 3904 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:49:41.0782 3904 MSTEE - ok
15:49:41.0793 3904 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
15:49:41.0801 3904 MTConfig - ok
15:49:41.0803 3904 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
15:49:41.0810 3904 Mup - ok
15:49:41.0830 3904 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
15:49:41.0853 3904 napagent - ok
15:49:41.0877 3904 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:49:41.0897 3904 NativeWifiP - ok
15:49:41.0932 3904 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
15:49:41.0958 3904 NDIS - ok
15:49:41.0967 3904 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:49:41.0991 3904 NdisCap - ok
15:49:42.0003 3904 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:49:42.0024 3904 NdisTapi - ok
15:49:42.0026 3904 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:49:42.0047 3904 Ndisuio - ok
15:49:42.0049 3904 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:49:42.0070 3904 NdisWan - ok
15:49:42.0072 3904 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:49:42.0092 3904 NDProxy - ok
15:49:42.0094 3904 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:49:42.0115 3904 NetBIOS - ok
15:49:42.0127 3904 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:49:42.0148 3904 NetBT - ok
15:49:42.0164 3904 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
15:49:42.0173 3904 Netlogon - ok
15:49:42.0184 3904 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
15:49:42.0207 3904 Netman - ok
15:49:42.0230 3904 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:49:42.0237 3904 NetMsmqActivator - ok
15:49:42.0239 3904 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:49:42.0246 3904 NetPipeActivator - ok
15:49:42.0251 3904 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
15:49:42.0275 3904 netprofm - ok
15:49:42.0277 3904 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:49:42.0284 3904 NetTcpActivator - ok
15:49:42.0286 3904 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:49:42.0293 3904 NetTcpPortSharing - ok
15:49:42.0310 3904 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
15:49:42.0317 3904 nfrd960 - ok
15:49:42.0333 3904 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
15:49:42.0343 3904 NlaSvc - ok
15:49:42.0345 3904 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
15:49:42.0366 3904 Npfs - ok
15:49:42.0384 3904 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
15:49:42.0406 3904 nsi - ok
15:49:42.0408 3904 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
15:49:42.0429 3904 nsiproxy - ok
15:49:42.0462 3904 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
15:49:42.0481 3904 Ntfs - ok
15:49:42.0483 3904 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
15:49:42.0504 3904 Null - ok
15:49:42.0513 3904 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
15:49:42.0522 3904 nvraid - ok
15:49:42.0534 3904 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
15:49:42.0542 3904 nvstor - ok
15:49:42.0554 3904 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
15:49:42.0562 3904 nv_agp - ok
15:49:42.0570 3904 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
15:49:42.0578 3904 ohci1394 - ok
15:49:42.0591 3904 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
15:49:42.0602 3904 p2pimsvc - ok
15:49:42.0616 3904 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
15:49:42.0627 3904 p2psvc - ok
15:49:42.0647 3904 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
15:49:42.0655 3904 Parport - ok
15:49:42.0676 3904 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
15:49:42.0683 3904 partmgr - ok
15:49:42.0686 3904 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
15:49:42.0699 3904 PcaSvc - ok
15:49:42.0710 3904 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
15:49:42.0718 3904 pci - ok
15:49:42.0726 3904 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
15:49:42.0733 3904 pciide - ok
15:49:42.0744 3904 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
15:49:42.0752 3904 pcmcia - ok
15:49:42.0755 3904 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
15:49:42.0762 3904 pcw - ok
15:49:42.0785 3904 pdfcDispatcher - ok
15:49:42.0791 3904 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
15:49:42.0816 3904 PEAUTH - ok
15:49:42.0835 3904 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
15:49:42.0853 3904 PeerDistSvc - ok
15:49:42.0901 3904 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
15:49:42.0911 3904 PerfHost - ok
15:49:42.0931 3904 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
15:49:42.0965 3904 pla - ok
15:49:42.0983 3904 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
15:49:42.0994 3904 PlugPlay - ok
15:49:43.0000 3904 PnkBstrA - ok
15:49:43.0005 3904 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
15:49:43.0014 3904 PNRPAutoReg - ok
15:49:43.0017 3904 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
15:49:43.0029 3904 PNRPsvc - ok
15:49:43.0040 3904 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
15:49:43.0063 3904 PolicyAgent - ok
15:49:43.0071 3904 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
15:49:43.0094 3904 Power - ok
15:49:43.0097 3904 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
15:49:43.0117 3904 PptpMiniport - ok
15:49:43.0131 3904 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
15:49:43.0140 3904 Processor - ok
15:49:43.0148 3904 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
15:49:43.0158 3904 ProfSvc - ok
15:49:43.0164 3904 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:49:43.0173 3904 ProtectedStorage - ok
15:49:43.0175 3904 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
15:49:43.0196 3904 Psched - ok
15:49:43.0216 3904 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
15:49:43.0234 3904 ql2300 - ok
15:49:43.0247 3904 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
15:49:43.0255 3904 ql40xx - ok
15:49:43.0270 3904 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
15:49:43.0284 3904 QWAVE - ok
15:49:43.0286 3904 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
15:49:43.0297 3904 QWAVEdrv - ok
15:49:43.0308 3904 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
15:49:43.0329 3904 RasAcd - ok
15:49:43.0358 3904 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
15:49:43.0399 3904 RasAgileVpn - ok
15:49:43.0407 3904 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
15:49:43.0431 3904 RasAuto - ok
15:49:43.0434 3904 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
15:49:43.0454 3904 Rasl2tp - ok
15:49:43.0458 3904 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
15:49:43.0481 3904 RasMan - ok
15:49:43.0487 3904 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
15:49:43.0509 3904 RasPppoe - ok
15:49:43.0520 3904 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
15:49:43.0540 3904 RasSstp - ok
15:49:43.0544 3904 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
15:49:43.0565 3904 rdbss - ok
15:49:43.0573 3904 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
15:49:43.0583 3904 rdpbus - ok
15:49:43.0584 3904 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
15:49:43.0604 3904 RDPCDD - ok
15:49:43.0620 3904 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
15:49:43.0628 3904 RDPDR - ok
15:49:43.0630 3904 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
15:49:43.0650 3904 RDPENCDD - ok
15:49:43.0653 3904 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
15:49:43.0673 3904 RDPREFMP - ok
15:49:43.0704 3904 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:49:43.0712 3904 RdpVideoMiniport - ok
15:49:43.0730 3904 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
15:49:43.0739 3904 RDPWD - ok
15:49:43.0748 3904 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
15:49:43.0756 3904 rdyboost - ok
15:49:43.0764 3904 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
15:49:43.0787 3904 RemoteAccess - ok
15:49:43.0792 3904 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
15:49:43.0815 3904 RemoteRegistry - ok
15:49:43.0822 3904 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
15:49:43.0845 3904 RpcEptMapper - ok
15:49:43.0872 3904 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
15:49:43.0881 3904 RpcLocator - ok
15:49:43.0902 3904 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
15:49:43.0926 3904 RpcSs - ok
15:49:43.0939 3904 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
15:49:43.0960 3904 rspndr - ok
15:49:43.0991 3904 [ 7461D3DA1AABB5F703504E958455A900 ] RTL8192cu C:\Windows\system32\DRIVERS\RTL8192cu.sys
15:49:44.0005 3904 RTL8192cu - ok
15:49:44.0020 3904 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
15:49:44.0027 3904 s3cap - ok
15:49:44.0029 3904 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
15:49:44.0038 3904 SamSs - ok
15:49:44.0058 3904 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
15:49:44.0065 3904 sbp2port - ok
15:49:44.0068 3904 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
15:49:44.0091 3904 SCardSvr - ok
15:49:44.0121 3904 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
15:49:44.0142 3904 scfilter - ok
15:49:44.0158 3904 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
15:49:44.0185 3904 Schedule - ok
15:49:44.0201 3904 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
15:49:44.0221 3904 SCPolicySvc - ok
15:49:44.0229 3904 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
15:49:44.0238 3904 SDRSVC - ok
15:49:44.0240 3904 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
15:49:44.0261 3904 secdrv - ok
15:49:44.0263 3904 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
15:49:44.0283 3904 seclogon - ok
15:49:44.0288 3904 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
15:49:44.0322 3904 SENS - ok
15:49:44.0324 3904 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
15:49:44.0333 3904 SensrSvc - ok
15:49:44.0335 3904 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
15:49:44.0343 3904 Serenum - ok
15:49:44.0362 3904 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
15:49:44.0371 3904 Serial - ok
15:49:44.0393 3904 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
15:49:44.0401 3904 sermouse - ok
15:49:44.0406 3904 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
15:49:44.0439 3904 SessionEnv - ok
15:49:44.0449 3904 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
15:49:44.0459 3904 sffdisk - ok
15:49:44.0472 3904 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
15:49:44.0481 3904 sffp_mmc - ok
15:49:44.0501 3904 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
15:49:44.0511 3904 sffp_sd - ok
15:49:44.0520 3904 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
15:49:44.0528 3904 sfloppy - ok
15:49:44.0545 3904 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
15:49:44.0569 3904 SharedAccess - ok
15:49:44.0581 3904 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:49:44.0604 3904 ShellHWDetection - ok
15:49:44.0624 3904 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
15:49:44.0631 3904 SiSRaid2 - ok
15:49:44.0649 3904 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
15:49:44.0656 3904 SiSRaid4 - ok
15:49:44.0666 3904 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
15:49:44.0687 3904 Smb - ok
15:49:44.0713 3904 [ D48F87803F3965EE04D9BCB318791AAB ] SMR311 C:\Windows\system32\drivers\SMR311.SYS
15:49:44.0720 3904 SMR311 - ok
15:49:44.0723 3904 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
15:49:44.0733 3904 SNMPTRAP - ok
15:49:44.0735 3904 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
15:49:44.0742 3904 spldr - ok
15:49:44.0758 3904 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
15:49:44.0770 3904 Spooler - ok
15:49:44.0829 3904 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
15:49:44.0880 3904 sppsvc - ok
15:49:44.0882 3904 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
15:49:44.0905 3904 sppuinotify - ok
15:49:44.0927 3904 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
15:49:44.0938 3904 srv - ok
15:49:44.0949 3904 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
15:49:44.0958 3904 srv2 - ok
15:49:44.0961 3904 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
15:49:44.0969 3904 srvnet - ok
15:49:44.0984 3904 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
15:49:45.0007 3904 SSDPSRV - ok
15:49:45.0009 3904 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
15:49:45.0032 3904 SstpSvc - ok
15:49:45.0129 3904 [ 605ECCCE95ACF7AF12CBCCDAB55B8DD0 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe
15:49:45.0150 3904 STacSV - ok
15:49:45.0171 3904 Steam Client Service - ok
15:49:45.0177 3904 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
15:49:45.0184 3904 stexstor - ok
15:49:45.0213 3904 [ 5709F6AEECC9C43AD9D550FB1D882209 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys
15:49:45.0236 3904 STHDA - ok
15:49:45.0267 3904 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
15:49:45.0283 3904 stisvc - ok
15:49:45.0300 3904 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
15:49:45.0307 3904 storflt - ok
15:49:45.0309 3904 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
15:49:45.0318 3904 StorSvc - ok
15:49:45.0329 3904 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
15:49:45.0336 3904 storvsc - ok
15:49:45.0348 3904 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
15:49:45.0354 3904 swenum - ok
15:49:45.0370 3904 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
15:49:45.0395 3904 swprv - ok
15:49:45.0415 3904 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
15:49:45.0437 3904 SysMain - ok
15:49:45.0440 3904 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:49:45.0453 3904 TabletInputService - ok
15:49:45.0456 3904 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
15:49:45.0492 3904 TapiSrv - ok
15:49:45.0503 3904 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
15:49:45.0526 3904 TBS - ok
15:49:45.0560 3904 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
15:49:45.0582 3904 Tcpip - ok
15:49:45.0602 3904 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
15:49:45.0624 3904 TCPIP6 - ok
15:49:45.0632 3904 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
15:49:45.0640 3904 tcpipreg - ok
15:49:45.0651 3904 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
15:49:45.0659 3904 TDPIPE - ok
15:49:45.0669 3904 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
15:49:45.0678 3904 TDTCP - ok
15:49:45.0691 3904 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
15:49:45.0712 3904 tdx - ok
15:49:45.0716 3904 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
15:49:45.0724 3904 TermDD - ok
15:49:45.0733 3904 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
15:49:45.0758 3904 TermService - ok
15:49:45.0762 3904 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
15:49:45.0774 3904 Themes - ok
15:49:45.0783 3904 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
15:49:45.0804 3904 THREADORDER - ok
15:49:45.0812 3904 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
15:49:45.0835 3904 TrkWks - ok
15:49:45.0874 3904 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:49:45.0910 3904 TrustedInstaller - ok
15:49:45.0918 3904 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
15:49:45.0938 3904 tssecsrv - ok
15:49:45.0943 3904 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:49:45.0952 3904 TsUsbFlt - ok
15:49:45.0983 3904 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
15:49:45.0991 3904 TsUsbGD - ok
15:49:45.0993 3904 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:49:46.0014 3904 tunnel - ok
15:49:46.0029 3904 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
15:49:46.0036 3904 uagp35 - ok
15:49:46.0046 3904 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:49:46.0067 3904 udfs - ok
15:49:46.0082 3904 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:49:46.0093 3904 UI0Detect - ok
15:49:46.0105 3904 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:49:46.0113 3904 uliagpkx - ok
15:49:46.0124 3904 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
15:49:46.0133 3904 umbus - ok
15:49:46.0147 3904 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
15:49:46.0155 3904 UmPass - ok
15:49:46.0163 3904 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
15:49:46.0174 3904 UmRdpService - ok
15:49:46.0179 3904 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
15:49:46.0203 3904 upnphost - ok
15:49:46.0211 3904 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
15:49:46.0220 3904 usbccgp - ok
15:49:46.0228 3904 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
15:49:46.0238 3904 usbcir - ok
15:49:46.0240 3904 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
15:49:46.0248 3904 usbehci - ok
15:49:46.0263 3904 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\drivers\usbhub.sys
15:49:46.0273 3904 usbhub - ok
15:49:46.0284 3904 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
15:49:46.0292 3904 usbohci - ok
15:49:46.0298 3904 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
15:49:46.0308 3904 usbprint - ok
15:49:46.0325 3904 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:49:46.0334 3904 USBSTOR - ok
15:49:46.0345 3904 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
15:49:46.0353 3904 usbuhci - ok
15:49:46.0364 3904 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
15:49:46.0386 3904 UxSms - ok
15:49:46.0397 3904 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
15:49:46.0405 3904 VaultSvc - ok
15:49:46.0411 3904 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:49:46.0418 3904 vdrvroot - ok
15:49:46.0435 3904 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
15:49:46.0458 3904 vds - ok
15:49:46.0465 3904 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
15:49:46.0475 3904 vga - ok
15:49:46.0484 3904 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
15:49:46.0504 3904 VgaSave - ok
15:49:46.0517 3904 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
15:49:46.0526 3904 vhdmp - ok
15:49:46.0543 3904 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
15:49:46.0550 3904 viaide - ok
15:49:46.0560 3904 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
15:49:46.0568 3904 vmbus - ok
15:49:46.0587 3904 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
15:49:46.0595 3904 VMBusHID - ok
15:49:46.0607 3904 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:49:46.0615 3904 volmgr - ok
15:49:46.0625 3904 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:49:46.0635 3904 volmgrx - ok
15:49:46.0652 3904 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:49:46.0661 3904 volsnap - ok
15:49:46.0670 3904 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
15:49:46.0678 3904 vsmraid - ok
15:49:46.0698 3904 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
15:49:46.0729 3904 VSS - ok
15:49:46.0731 3904 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
15:49:46.0741 3904 vwifibus - ok
15:49:46.0743 3904 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
15:49:46.0754 3904 vwififlt - ok
15:49:46.0758 3904 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
15:49:46.0782 3904 W32Time - ok
15:49:46.0785 3904 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
15:49:46.0793 3904 WacomPen - ok
15:49:46.0795 3904 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
15:49:46.0815 3904 WANARP - ok
15:49:46.0817 3904 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:49:46.0837 3904 Wanarpv6 - ok
15:49:46.0863 3904 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
15:49:46.0880 3904 WatAdminSvc - ok
15:49:46.0904 3904 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
15:49:46.0921 3904 wbengine - ok
15:49:46.0924 3904 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:49:46.0938 3904 WbioSrvc - ok
15:49:46.0942 3904 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:49:46.0966 3904 wcncsvc - ok
15:49:46.0968 3904 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:49:46.0985 3904 WcsPlugInService - ok
15:49:46.0995 3904 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
15:49:47.0002 3904 Wd - ok
15:49:47.0024 3904 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:49:47.0037 3904 Wdf01000 - ok
15:49:47.0040 3904 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:49:47.0053 3904 WdiServiceHost - ok
15:49:47.0061 3904 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:49:47.0074 3904 WdiSystemHost - ok
15:49:47.0077 3904 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
15:49:47.0105 3904 WebClient - ok
15:49:47.0108 3904 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:49:47.0132 3904 Wecsvc - ok
15:49:47.0134 3904 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:49:47.0156 3904 wercplsupport - ok
15:49:47.0159 3904 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
15:49:47.0181 3904 WerSvc - ok
15:49:47.0183 3904 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
15:49:47.0203 3904 WfpLwf - ok
15:49:47.0212 3904 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:49:47.0219 3904 WIMMount - ok
15:49:47.0234 3904 WinDefend - ok
15:49:47.0237 3904 WinHttpAutoProxySvc - ok
15:49:47.0269 3904 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:49:47.0291 3904 Winmgmt - ok
15:49:47.0318 3904 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
15:49:47.0368 3904 WinRM - ok
15:49:47.0387 3904 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
15:49:47.0404 3904 Wlansvc - ok
15:49:47.0428 3904 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
15:49:47.0436 3904 WmiAcpi - ok
15:49:47.0450 3904 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:49:47.0460 3904 wmiApSrv - ok
15:49:47.0466 3904 WMPNetworkSvc - ok
15:49:47.0472 3904 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:49:47.0482 3904 WPCSvc - ok
15:49:47.0484 3904 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:49:47.0496 3904 WPDBusEnum - ok
15:49:47.0498 3904 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:49:47.0518 3904 ws2ifsl - ok
15:49:47.0529 3904 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
15:49:47.0542 3904 wscsvc - ok
15:49:47.0543 3904 WSearch - ok
15:49:47.0579 3904 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
15:49:47.0607 3904 wuauserv - ok
15:49:47.0613 3904 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:49:47.0621 3904 WudfPf - ok
15:49:47.0629 3904 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
15:49:47.0638 3904 WUDFRd - ok
15:49:47.0646 3904 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:49:47.0656 3904 wudfsvc - ok
15:49:47.0665 3904 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
15:49:47.0678 3904 WwanSvc - ok
15:49:47.0681 3904 ================ Scan global ===============================
15:49:47.0710 3904 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
15:49:47.0748 3904 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
15:49:47.0757 3904 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
15:49:47.0771 3904 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
15:49:47.0789 3904 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
15:49:47.0793 3904 [Global] - ok
15:49:47.0793 3904 ================ Scan MBR ==================================
15:49:47.0817 3904 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:49:48.0388 3904 \Device\Harddisk0\DR0 - ok
15:49:48.0389 3904 ================ Scan VBR ==================================
15:49:48.0391 3904 [ CA77314E3EA7394C9AB40C23F17AC9A2 ] \Device\Harddisk0\DR0\Partition1
15:49:48.0393 3904 \Device\Harddisk0\DR0\Partition1 - ok
15:49:48.0420 3904 [ 13DD72CE79036974120D49C39DBB4AB5 ] \Device\Harddisk0\DR0\Partition2
15:49:48.0422 3904 \Device\Harddisk0\DR0\Partition2 - ok
15:49:48.0447 3904 [ 45FD649F0677C92A33FF31B811C8C62A ] \Device\Harddisk0\DR0\Partition3
15:49:48.0448 3904 \Device\Harddisk0\DR0\Partition3 - ok
15:49:48.0448 3904 ============================================================
15:49:48.0448 3904 Scan finished
15:49:48.0448 3904 ============================================================
15:49:48.0458 3432 Detected object count: 0
15:49:48.0458 3432 Actual detected object count: 0

Nyní jdu tedy na ComboFix

Předem se omlouvám za další odpověď, ale do jedné se to nevlezlo

ComboFix:

ComboFix 13-01-12.01 - Armyt 12.01.2013 15:58:15.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.8132.6119 [GMT 1:00]
Spuštěný z: c:\users\Armyt\Desktop\ComboFix.exe
AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-12 do 2013-01-12 )))))))))))))))))))))))))))))))
.
.
2013-01-12 15:01 . 2013-01-12 15:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-12 14:40 . 2013-01-12 14:40 95392 ----a-w- c:\windows\system32\drivers\SMR311.SYS
2013-01-12 13:37 . 2013-01-12 13:37 -------- d-----w- c:\program files\trend micro
2013-01-12 13:37 . 2013-01-12 13:37 -------- d-----w- C:\rsit
2013-01-12 13:28 . 2013-01-12 13:28 -------- d-----w- c:\programdata\Malwarebytes
2013-01-12 12:43 . 2013-01-12 12:43 -------- d-----w- c:\program files (x86)\Conduit
2013-01-12 12:43 . 2013-01-12 12:43 -------- d-----w- c:\program files (x86)\uTorrent
2013-01-11 20:19 . 2012-12-16 16:31 67599240 ----a-w- c:\windows\system32\MRT.exe
2013-01-09 16:28 . 2013-01-11 21:55 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-01-09 12:02 . 2012-11-30 05:45 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-09 11:10 . 2013-01-09 11:10 -------- d-----w- c:\program files (x86)\GamePark
2013-01-09 02:40 . 2013-01-09 02:40 -------- d-----w- c:\windows\SysWow64\Wat
2013-01-09 02:40 . 2013-01-09 02:40 -------- d-----w- c:\windows\system32\Wat
2013-01-09 02:17 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-01-09 02:17 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-01-09 02:17 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-01-09 02:17 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-01-09 02:15 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-01-09 02:07 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-01-09 02:07 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-01-09 02:07 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-01-09 02:07 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-01-09 02:07 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-01-09 02:07 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-01-09 02:07 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-01-09 02:07 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-01-09 02:07 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-01-09 02:07 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-01-09 02:07 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-01-08 21:05 . 2013-01-08 21:05 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin
2013-01-08 19:53 . 2013-01-08 19:53 -------- d-----w- c:\program files (x86)\Garena Plus
2013-01-08 19:53 . 2013-01-12 14:46 -------- d-----w- c:\programdata\GarenaMessenger
2013-01-08 17:14 . 2013-01-08 19:28 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-01-08 17:14 . 2013-01-12 14:43 -------- d-----w- c:\program files (x86)\Steam
2013-01-08 16:48 . 2013-01-08 16:48 -------- d-----w- c:\program files\TeamSpeak 3 Client
2013-01-08 15:06 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll
2013-01-08 15:05 . 2012-06-06 06:05 61440 ----a-w- c:\program files\Common Files\System\ado\msador15.dll
2013-01-08 15:00 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-01-08 15:00 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-01-08 15:00 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-01-08 14:58 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-01-08 14:58 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-01-08 14:58 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-01-08 14:58 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-01-08 14:57 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-01-08 14:57 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-01-08 14:57 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-01-08 14:57 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-01-08 14:57 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-01-08 14:56 . 2013-01-08 14:56 -------- d-----w- c:\program files (x86)\TP-LINK
2013-01-08 14:56 . 2012-03-14 08:04 926824 ----a-w- c:\windows\system32\rtl8192cu.sys
2013-01-08 14:56 . 2012-03-14 08:04 926824 ----a-w- c:\windows\system32\drivers\RTL8192cu.sys
2013-01-08 14:55 . 2013-01-08 14:56 -------- d-----w- c:\programdata\TP-LINK
2013-01-07 13:01 . 2013-01-11 21:02 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2013-01-07 11:18 . 2013-01-12 12:25 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2013-01-07 11:05 . 2013-01-07 11:05 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-01-07 11:04 . 2013-01-07 11:05 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-01-07 11:04 . 2013-01-07 11:06 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-01-06 16:35 . 2013-01-07 11:08 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2013-01-04 15:13 . 2013-01-09 11:20 840264 ----a-w- c:\windows\SysWow64\pbsvc.exe
2013-01-04 13:37 . 2013-01-11 21:55 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-01-04 13:37 . 2013-01-11 21:53 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-01-04 13:37 . 2013-01-09 11:21 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-01-04 13:24 . 2013-01-11 21:05 -------- d-----w- C:\Hry
2013-01-04 12:08 . 2013-01-12 12:27 -------- d-----w- c:\users\Armyt
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-08 19:35 . 2012-11-20 03:53 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-08 19:35 . 2012-11-20 03:53 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-11-30 04:45 . 2013-01-09 12:02 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-20 03:40 . 2012-11-20 03:40 296320 ----a-w- c:\windows\system32\drivers\volsnap.sys
2012-11-20 03:40 . 2012-11-20 03:40 96768 ----a-w- c:\windows\system32\fsutil.exe
2012-11-20 03:40 . 2012-11-20 03:40 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2012-11-20 03:40 . 2012-11-20 03:40 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2012-11-20 03:40 . 2012-11-20 03:40 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2012-11-20 03:40 . 2012-11-20 03:40 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2012-11-20 03:40 . 2012-11-20 03:40 2565632 ----a-w- c:\windows\system32\esent.dll
2012-11-20 03:40 . 2012-11-20 03:40 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2012-11-20 03:40 . 2012-11-20 03:40 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2012-11-20 03:40 . 2012-11-20 03:40 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2012-11-20 03:40 . 2012-11-20 03:40 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2012-11-20 03:40 . 2012-11-20 03:40 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2012-11-20 03:39 . 2012-11-20 03:39 209920 ----a-w- c:\windows\system32\profsvc.dll
2012-11-20 03:39 . 2012-11-20 03:39 3216384 ----a-w- c:\windows\system32\msi.dll
2012-11-20 03:39 . 2012-11-20 03:39 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2012-11-20 03:39 . 2012-11-20 03:39 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-11-20 03:38 . 2012-11-20 03:38 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-11-20 03:38 . 2012-11-20 03:38 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-11-20 03:38 . 2012-11-20 03:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-11-20 03:38 . 2012-11-20 03:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-11-20 03:38 . 2012-11-20 03:38 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-11-20 03:38 . 2012-11-20 03:38 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-11-20 03:37 . 2012-11-20 03:37 1544704 ----a-w- c:\windows\system32\DWrite.dll
2012-11-20 03:37 . 2012-11-20 03:37 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-11-20 03:37 . 2012-11-20 03:37 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-11-20 03:37 . 2012-11-20 03:37 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-11-20 03:37 . 2012-11-20 03:37 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-11-20 03:37 . 2012-11-20 03:37 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-11-20 03:37 . 2012-11-20 03:37 5120 ----a-w- c:\windows\system32\wmi.dll
2012-11-20 03:37 . 2012-11-20 03:37 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-11-20 03:37 . 2012-11-20 03:37 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-11-20 03:37 . 2012-11-20 03:37 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-11-20 03:37 . 2012-11-20 03:37 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-11-20 03:37 . 2012-11-20 03:37 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-11-20 03:37 . 2012-11-20 03:37 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-11-20 03:37 . 2012-11-20 03:37 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-11-20 03:36 . 2012-11-20 03:36 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-11-20 03:36 . 2012-11-20 03:36 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-11-20 03:36 . 2012-11-20 03:36 43520 ----a-w- c:\windows\system32\csrsrv.dll
2012-11-20 03:36 . 2012-11-20 03:36 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-11-20 03:36 . 2012-11-20 03:36 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-11-20 03:36 . 2012-11-20 03:36 395776 ----a-w- c:\windows\system32\webio.dll
2012-11-20 03:36 . 2012-11-20 03:36 314880 ----a-w- c:\windows\SysWow64\webio.dll
2012-11-20 03:36 . 2012-11-20 03:36 31232 ----a-w- c:\windows\system32\lsass.exe
2012-11-20 03:36 . 2012-11-20 03:36 29184 ----a-w- c:\windows\system32\sspisrv.dll
2012-11-20 03:36 . 2012-11-20 03:36 28160 ----a-w- c:\windows\system32\secur32.dll
2012-11-20 03:36 . 2012-11-20 03:36 136192 ----a-w- c:\windows\system32\sspicli.dll
2012-11-20 03:36 . 2012-11-20 03:36 77312 ----a-w- c:\windows\system32\packager.dll
2012-11-20 03:36 . 2012-11-20 03:36 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-11-20 03:35 . 2012-11-20 03:35 75776 ----a-w- c:\windows\SysWow64\psisrndr.ax
2012-11-20 03:35 . 2012-11-20 03:35 613888 ----a-w- c:\windows\system32\psisdecd.dll
2012-11-20 03:35 . 2012-11-20 03:35 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll
2012-11-20 03:35 . 2012-11-20 03:35 108032 ----a-w- c:\windows\system32\psisrndr.ax
2012-11-20 03:35 . 2012-11-20 03:35 861696 ----a-w- c:\windows\system32\oleaut32.dll
2012-11-20 03:35 . 2012-11-20 03:35 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2012-11-20 03:35 . 2012-11-20 03:35 331776 ----a-w- c:\windows\system32\oleacc.dll
2012-11-20 03:35 . 2012-11-20 03:35 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2012-11-20 03:35 . 2012-11-20 03:35 199680 ----a-w- c:\windows\system32\xmllite.dll
2012-11-20 03:35 . 2012-11-20 03:35 86016 ----a-w- c:\windows\SysWow64\odbccu32.dll
2012-11-20 03:35 . 2012-11-20 03:35 81920 ----a-w- c:\windows\SysWow64\odbccr32.dll
2012-11-20 03:35 . 2012-11-20 03:35 319488 ----a-w- c:\windows\SysWow64\odbcjt32.dll
2012-11-20 03:35 . 2012-11-20 03:35 212992 ----a-w- c:\windows\system32\odbctrac.dll
2012-11-20 03:35 . 2012-11-20 03:35 163840 ----a-w- c:\windows\SysWow64\odbctrac.dll
2012-11-20 03:35 . 2012-11-20 03:35 163840 ----a-w- c:\windows\system32\odbccp32.dll
2012-11-20 03:35 . 2012-11-20 03:35 122880 ----a-w- c:\windows\SysWow64\odbccp32.dll
2012-11-20 03:35 . 2012-11-20 03:35 106496 ----a-w- c:\windows\system32\odbccu32.dll
2012-11-20 03:35 . 2012-11-20 03:35 106496 ----a-w- c:\windows\system32\odbccr32.dll
2012-11-20 03:35 . 2012-11-20 03:35 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2012-11-20 03:35 . 2012-11-20 03:35 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2012-11-20 03:35 . 2012-11-20 03:35 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2012-11-20 03:35 . 2012-11-20 03:35 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2012-11-20 03:35 . 2012-11-20 03:35 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2012-11-20 03:35 . 2012-11-20 03:35 86528 ----a-w- c:\windows\SysWow64\SearchFilterHost.exe
2012-11-20 03:35 . 2012-11-20 03:35 778752 ----a-w- c:\windows\system32\mssvp.dll
2012-11-20 03:35 . 2012-11-20 03:35 75264 ----a-w- c:\windows\system32\msscntrs.dll
2012-11-20 03:35 . 2012-11-20 03:35 666624 ----a-w- c:\windows\SysWow64\mssvp.dll
2012-11-20 03:35 . 2012-11-20 03:35 59392 ----a-w- c:\windows\SysWow64\msscntrs.dll
2012-11-20 03:35 . 2012-11-20 03:35 591872 ----a-w- c:\windows\system32\SearchIndexer.exe
2012-11-20 03:35 . 2012-11-20 03:35 491520 ----a-w- c:\windows\system32\mssph.dll
2012-11-20 03:35 . 2012-11-20 03:35 427520 ----a-w- c:\windows\SysWow64\SearchIndexer.exe
2012-11-20 03:35 . 2012-11-20 03:35 337408 ----a-w- c:\windows\SysWow64\mssph.dll
2012-11-20 03:35 . 2012-11-20 03:35 288256 ----a-w- c:\windows\system32\mssphtb.dll
2012-11-20 03:35 . 2012-11-20 03:35 249856 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2012-11-20 03:35 . 2012-11-20 03:35 2315776 ----a-w- c:\windows\system32\tquery.dll
2012-11-20 03:35 . 2012-11-20 03:35 2223616 ----a-w- c:\windows\system32\mssrch.dll
2012-11-20 03:35 . 2012-11-20 03:35 197120 ----a-w- c:\windows\SysWow64\mssphtb.dll
2012-11-20 03:35 . 2012-11-20 03:35 164352 ----a-w- c:\windows\SysWow64\SearchProtocolHost.exe
2012-11-20 03:35 . 2012-11-20 03:35 1549312 ----a-w- c:\windows\SysWow64\tquery.dll
2012-11-20 03:35 . 2012-11-20 03:35 1401344 ----a-w- c:\windows\SysWow64\mssrch.dll
2012-11-20 03:35 . 2012-11-20 03:35 113664 ----a-w- c:\windows\system32\SearchFilterHost.exe
2012-11-20 03:34 . 2012-11-20 03:34 976896 ----a-w- c:\windows\system32\inetcomm.dll
2012-11-20 03:34 . 2012-11-20 03:34 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2012-11-20 03:34 . 2012-11-20 03:34 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2012-11-20 03:34 . 2012-11-20 03:34 288768 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-11-20 03:34 . 2012-11-20 03:34 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2012-11-20 03:34 . 2012-11-20 03:34 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2012-11-20 03:34 . 2012-11-20 03:34 467456 ----a-w- c:\windows\system32\drivers\srv.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{7473b6bd-4691-4744-a82b-7854eb3d70b6}"= "c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{7473b6bd-4691-4744-a82b-7854eb3d70b6}"= "c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-01-08 1354736]
"GarenaPlus"="c:\program files (x86)\Garena Plus\GarenaMessenger.exe" [2012-12-17 9152968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2011-12-05 291096]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-07 641704]
"HP KEYBOARDx"="c:\program files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE" [2010-02-11 710656]
"HP Remote Solution"="c:\program files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe" [2009-08-25 656896]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2012-07-18 684064]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
TP-LINK Wireless Configuration Utility.lnk - c:\program files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe [2013-1-8 841216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-01-09 1255736]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [2012-09-21 12368]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys [2011-12-05 16152]
S0 SMR311;Symantec SMR Utility Service 3.1.1;c:\windows\System32\drivers\SMR311.SYS [2013-01-12 95392]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-07 283200]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-06-08 236544]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2012-10-30 133912]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-10 86072]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-29 94264]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2012-07-18 1134624]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-24 95760]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys [2011-12-05 355096]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys [2011-12-05 785688]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2011-10-14 108656]
S3 RTL8192cu;TP-LINK 150Mbps Wireless N Nano USB Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys [2012-03-14 926824]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 93004723
*Deregistered* - 93004723
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-20 19:35]
.
2013-01-12 c:\windows\Tasks\HPCeeScheduleForArmyt.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 12:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BeatsOSDApp"="c:\program files\IDT\WDM\beats64.exe" [2012-03-30 37888]
"HPSYSDRV"="c:\program files (x86)\Hewlett-Packard\HP Odometer\HPSYSDRV.EXE" [2008-11-20 62768]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-04-24 1425408]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.bing.com?pc=CMDTDFJS
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://www.bing.com?pc=CMDTDFJS
mStart Page = hxxp://www.bing.com?pc=CMDTDFJS
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Armyt\AppData\Roaming\Mozilla\Firefox\Profiles\usv01ixp.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-01-07 12:18; {ea614400-e918-4741-9a97-7a972ff7c30b}; c:\users\Armyt\AppData\Roaming\Mozilla\Firefox\Profiles\usv01ixp.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - ExtSQL: 2013-01-07 14:36; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
FF - ExtSQL: 2013-01-12 13:43; {7473b6bd-4691-4744-a82b-7854eb3d70b6}; c:\users\Armyt\AppData\Roaming\Mozilla\Firefox\Profiles\usv01ixp.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{438363A8-F486-4C37-834C-4955773CB3D3} - msiexec
WebBrowser-{7473B6BD-4691-4744-A82B-7854EB3D70B6} - (no file)
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{6F44AF95-3CDE-4513-AD3F-6D45F17BF324} - c:\program files (x86)\InstallShield Installation Information\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-12 16:02:59
ComboFix-quarantined-files.txt 2013-01-12 15:02
.
Před spuštěním: Volných bajtů: 859 934 924 800
Po spuštění: Volných bajtů: 860 154 032 128
.
- - End Of File - - CA0DFE26AB43C6D32619B9DC9DF875E5

https://www.virustotal.com/file/cd15e5a ... 358004171/ - ----A---- C:\Windows\system32\poqexec.exe
https://www.virustotal.com/file/cd15e5a ... 358004228/ - ----A---- C:\Windows\SYSWOW64\poqexec.exe
----A---- C:\Windows\system32\drivers\ntfs.sys nejde nikde najít Ani když dám skrýté soubory, ani pomocí vyhledat resp. Když do složky najedu přez průzkumníka tak to tam mám Ale když to chci nahrát na VT tak to tam nemám

Bohužel jsem nucen jít do práce. Tak ti to sem hodím zítra kolem 2 odpolední

Ok tady to máš Snad jsem to nejak nezblbnul.

Bohužel musím zase napsat další odpověď. Je tu omezení na 1 soubor.

Pardon

Radši se zeptám
Mám se proklikat tím Mbrscan.exe nebo PowerTool ?

Naughty píše:V klidu, jeste se proklikavej sektorama a najdi sektor kde bude napsano navrvchu hlavicky NTFS, tem mi dumpni + 6 nasledujicich po nem sektoru, nekam je zas upni.

A ta hlavicka, tim se mysli co?

No tak to vypadá, že ti to sem hodím zítra V 5 jdu ještě na poslední noční.

Jinak jsem už u 1600 sektoru a pořád nic Takže to trochu dýl potrvá

Došel jsem až na 15000 a pořád nic Jdu se pomalu chystat do práce. Takže to dodělám zítra

Akorad nainstaloval par her, par patchu na multak a stahl Team Speak 64bit. Na noťasu jsem používal 32bit a vše bylo ok

a akorad jsem zapojil sluchatka dozadu bedny driv byly vpredu