VIRY.CZ

Dobrý večer,
poslední dobou mi notebook pracoval trochu pomaleji, ale dnes se mi zapnul až asi po 20 minutách, a veškeré aplikace (třeba prohlížeč) se mi ani nepodařilo spustit...takže teď mám PC spuštěné v nouzovém režimu. Posílám rovnou log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Michal at 2013-03-12 23:00:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 282 GB (47%) free of 600 GB
Total RAM: 3955 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:00:46, on 12.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Safe mode with network support

Running processes:
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\totalcmd\TOTALCMD.EXE
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Michal.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchnu.com/406
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [TRCMan] C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KORG USB-MIDI Driver] C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Michal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Ochrana HDD TOSHIBA (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing)
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9831 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\Explorer.EXE
ctfmon.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/17/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_34/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="1812.2.464626474\1133533869" /prefetch:3
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/17/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_34/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="1812.3.895208434\380141693" /prefetch:3
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" --lang=cs --channel="1812.6.799249370\163078509" /prefetch:4
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\totalcmd\TOTALCMD.EXE"
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/17/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_34/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1812.8.205518726\727233643" /prefetch:3
"C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/17/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndDynamic/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_34/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --disable-webgl --disable-pepper-3d --disable-gl-multisampling --disable-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-video-decode --channel="1812.10.44840870\1140058224" /prefetch:3
"C:\Users\Michal\Downloads\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3068241414-3554310210-4154796672-1002Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3068241414-3554310210-4154796672-1002UA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3068241414-3554310210-4154796672-1002Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3068241414-3554310210-4154796672-1002UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default

prefs.js - "keyword.URL" - "http://dts.search-results.com/sr?src=ff ... PN10645&q="
prefs.js - "browser.startup.homepage" - "http://www.searchnu.com/406"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
Search_Results.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\searchplugins\
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2010-05-05 17412200]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-22 10134560]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-03-22 896032]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-10 2052392]
"ThpSrv"=C:\windows\system32\thpsrv /logon []
"SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080]
"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]
"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [2010-04-19 136136]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\Michal\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-20 138096]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17420464]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-29 116648]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2010-02-22 352256]
"KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2009-12-25 34160]
"TRCMan"=C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe [2009-07-21 701752]
"TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-02-24 2454840]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"KORG USB-MIDI Driver"=C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [2011-03-30 393616]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-07-31 38872]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-11 919008]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux3"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux4"=wdmaud.drv
"midi9"=KORGUM64.DRV
"wave9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-03-12 23:00:39 ----D---- C:\rsit
2013-03-12 23:00:39 ----D---- C:\Program Files\trend micro
2013-03-12 22:14:35 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe
2013-03-12 21:12:32 ----A---- C:\windows\ntbtlog.txt
2013-03-11 22:35:54 ----D---- C:\Program Files (x86)\PANDORA.TV
2013-02-27 09:54:38 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 09:54:34 ----D---- C:\windows\system32\Macromed
2013-02-14 10:34:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-02-14 10:34:01 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-02-14 10:34:01 ----A---- C:\windows\system32\mshtmled.dll
2013-02-14 10:34:00 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-02-14 10:33:59 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-02-14 10:33:59 ----A---- C:\windows\system32\ieUnatt.exe
2013-02-14 10:33:59 ----A---- C:\windows\system32\ieui.dll
2013-02-14 10:33:57 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-02-14 10:33:57 ----A---- C:\windows\SYSWOW64\url.dll
2013-02-14 10:33:57 ----A---- C:\windows\system32\urlmon.dll
2013-02-14 10:33:57 ----A---- C:\windows\system32\url.dll
2013-02-14 10:33:56 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-02-14 10:33:56 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-02-14 10:33:56 ----A---- C:\windows\system32\msfeeds.dll
2013-02-14 10:33:56 ----A---- C:\windows\system32\jscript9.dll
2013-02-14 10:33:55 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-02-14 10:33:55 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-02-14 10:33:55 ----A---- C:\windows\system32\wininet.dll
2013-02-14 10:33:55 ----A---- C:\windows\system32\vbscript.dll
2013-02-14 10:33:55 ----A---- C:\windows\system32\jsproxy.dll
2013-02-14 10:33:55 ----A---- C:\windows\system32\jscript.dll
2013-02-14 10:33:54 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-02-14 10:33:54 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-02-14 10:33:54 ----A---- C:\windows\system32\iertutil.dll
2013-02-14 10:33:53 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-02-14 10:33:51 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-02-14 10:33:51 ----A---- C:\windows\system32\mshtml.dll
2013-02-14 10:33:51 ----A---- C:\windows\system32\ieframe.dll
2013-02-14 00:59:51 ----A---- C:\windows\system32\ntoskrnl.exe
2013-02-14 00:59:49 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-02-14 00:59:49 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-02-14 00:59:42 ----A---- C:\windows\system32\win32k.sys
2013-02-14 00:59:40 ----A---- C:\windows\system32\winsrv.dll
2013-02-14 00:59:39 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-02-14 00:59:39 ----A---- C:\windows\SYSWOW64\user.exe
2013-02-14 00:59:39 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-02-14 00:59:39 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-02-14 00:59:39 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-02-14 00:59:36 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-02-14 00:59:36 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS

======List of files/folders modified in the last 1 month======

2013-03-12 23:00:41 ----D---- C:\windows\Temp
2013-03-12 23:00:39 ----RD---- C:\Program Files
2013-03-12 22:42:01 ----D---- C:\Program Files (x86)\totalcmd
2013-03-12 22:14:35 ----D---- C:\windows\SysWOW64
2013-03-12 22:10:53 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2013-03-12 22:08:35 ----A---- C:\windows\SYSWOW64\log.txt
2013-03-12 22:05:45 ----SHD---- C:\windows\Installer
2013-03-12 22:04:53 ----D---- C:\ProgramData
2013-03-12 22:04:45 ----D---- C:\windows\system32\catroot
2013-03-12 22:04:44 ----D---- C:\windows\system32\DriverStore
2013-03-12 22:04:44 ----D---- C:\windows\inf
2013-03-12 22:04:43 ----D---- C:\windows\system32\drivers
2013-03-12 21:58:00 ----D---- C:\windows\system32\config
2013-03-12 21:12:32 ----AD---- C:\Windows
2013-03-11 22:35:58 ----D---- C:\windows\Prefetch
2013-03-11 22:35:54 ----RD---- C:\Program Files (x86)
2013-03-11 22:35:40 ----D---- C:\Program Files (x86)\The KMPlayer
2013-03-10 15:22:48 ----AD---- C:\windows\System32
2013-03-10 15:22:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-03-09 18:47:11 ----SHD---- C:\System Volume Information
2013-03-05 13:21:24 ----D---- C:\windows\system32\catroot2
2013-03-05 00:07:30 ----D---- C:\Users\Michal\AppData\Roaming\Audacity
2013-02-27 09:56:47 ----D---- C:\ProgramData\Adobe
2013-02-27 09:54:41 ----D---- C:\ProgramData\McAfee
2013-02-27 09:54:39 ----D---- C:\windows\Tasks
2013-02-27 09:54:39 ----D---- C:\windows\system32\Tasks
2013-02-20 21:36:52 ----D---- C:\windows\Microsoft.NET
2013-02-20 21:36:32 ----RSD---- C:\windows\assembly
2013-02-19 10:41:22 ----D---- C:\windows\winsxs
2013-02-19 10:37:00 ----D---- C:\windows\SYSWOW64\migration
2013-02-19 10:37:00 ----D---- C:\windows\AppPatch
2013-02-19 10:37:00 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-19 10:36:59 ----D---- C:\windows\system32\migration
2013-02-19 10:36:59 ----D---- C:\Program Files\Internet Explorer
2013-02-19 10:33:48 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2013-02-19 10:33:47 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2013-02-16 14:54:34 ----A---- C:\windows\SYSWOW64\msvcsv60.dll
2013-02-14 10:43:46 ----D---- C:\ProgramData\Microsoft Help
2013-02-14 10:40:58 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-01-15 538136]
R0 LPCFilter;LPC Lower Filter Driver; C:\windows\system32\DRIVERS\LPCFilter.sys [2009-07-30 44912]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\windows\system32\DRIVERS\thpdrv.sys [2009-06-29 34880]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]
R0 Tpkd;Tpkd; C:\windows\system32\drivers\Tpkd.sys [2009-12-23 105592]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-07-29 3058168]
R3 enecir;ENE CIR Receiver; C:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656]
R3 enecirhid;ENE CIR HID Receiver; C:\windows\system32\DRIVERS\enecirhid.sys [2009-05-19 14848]
R3 enecirhidma;ENE CIR HIDmini Filter; C:\windows\system32\DRIVERS\enecirhidma.sys [2008-04-24 6656]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-04-09 330856]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-03-10 316464]
R3 tosrfec;Bluetooth ACPI; C:\windows\system32\DRIVERS\tosrfec.sys [2009-07-13 19824]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2011-07-07 834544]
S1 ASPI32;ASPI32; C:\windows\system32\drivers\ASPI32.sys []
S1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2012-02-23 28504]
S1 Tosrfcom;Bluetooth RFCOMM; C:\windows\System32\Drivers\tosrfcom.sys [2009-07-28 81768]
S2 cpuz135;cpuz135; \??\C:\windows\system32\drivers\cpuz135_x64.sys [2011-09-21 21992]
S3 acpials;Filtr zařízení ALS Sensor; C:\windows\system32\DRIVERS\acpials.sys [2009-07-14 9728]
S3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Users\Michal\AppData\Local\Temp\EverestDriver.sys [2005-08-17 9728]
S3 ffusb2audio;Focusrite USB 2.0 Audio Driver; C:\windows\system32\DRIVERS\ffusb2audio.sys [2012-07-27 125816]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 GENERICDRV;GENERICDRV; \??\C:\Program Files (x86)\UEFI WinFlash\amifldrv64.sys [2009-12-08 15400]
S3 Impcd;Impcd; C:\windows\system32\DRIVERS\Impcd.sys [2010-02-10 158720]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-03-22 2298400]
S3 IT9135BDA;IT9135 BDA Devices; C:\windows\System32\Drivers\IT9135BDA.sys [2010-02-03 113280]
S3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2010-05-26 164464]
S3 johci;JMicron 1394 Filter Driver; C:\windows\system32\DRIVERS\johci.sys [2011-02-09 26712]
S3 KORGUMDS;KORG USB-MIDI Driver for Windows; C:\windows\System32\Drivers\KORGUM64.SYS [2011-03-30 33656]
S3 NPF;NetGroup Packet Filter Driver; C:\windows\system32\drivers\npf.sys [2010-06-25 35344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2010-01-28 86120]
S3 PGEffect;Pangu effect driver; C:\windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]
S3 Saffire;Saffire; C:\windows\System32\Drivers\Saffire.sys [2012-03-30 222064]
S3 SaffireAudio;Saffire Audio; C:\windows\system32\drivers\SaffireAudio.sys [2012-03-30 40176]
S3 SaffireMidi;Saffire MIDI; C:\windows\system32\drivers\SaffireMidi.sys [2012-03-30 50800]
S3 sdbus;sdbus; C:\windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 tosporte;Bluetooth COM Port; C:\windows\system32\DRIVERS\tosporte.sys [2009-06-17 54664]
S3 tosrfbd;Bluetooth RFBUS; C:\windows\system32\DRIVERS\tosrfbd.sys [2009-09-24 212072]
S3 tosrfbnp;Bluetooth RFBNEP; C:\windows\System32\Drivers\tosrfbnp.sys [2009-06-19 50664]
S3 Tosrfhid;Bluetooth RFHID; C:\windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 94336]
S3 tosrfnds;Bluetooth Personal Area Network; C:\windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 26472]
S3 TosRfSnd;Bluetooth Audio; C:\windows\system32\drivers\tosrfsnd.sys [2009-08-05 63856]
S3 Tosrfusb;Bluetooth USB Controller; C:\windows\system32\DRIVERS\tosrfusb.sys [2010-02-03 60408]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2009-07-14 19968]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824]
S2 NIHardwareService;NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2010-09-16 5018624]
S2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2010-05-05 393320]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-05-05 1604200]
S2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 Thpsrv;Ochrana HDD TOSHIBA; C:\windows\system32\ThpSrv.exe [2009-10-21 531520]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12 253656]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-14 113120]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2010-02-25 196464]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-12-07 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

ahoj,
1. vloz log z TDSSKiller
2. vycisti PC s ADWCleanerom - volba delete
3. skus bootnut do normal modu a vloz log RSIT

tak se mi podařilo získat log z TDSSkiller, poté jsem vyčistil PC tím ADWCleanerem a chtělo to po mně restartovat PC, což jsem udělal, ale Windows se mi podařilo poté načíst až po 45 minutách a opět pouze v nouzovém režimu. Už jde horko těžko provádět jakékoliv úkony...Zkusil jsem spustit RSIT a běželo mi to asi 30 minut a poté se to přerušilo a vyskočila mi hláška "Line 7154 (File "C:/.../downloads/RSITx64.exe"): Error: Subscript used with non-Array variable. Pomalu si začínám myslet, že přeinstalování windows bude jediné východisko.

kdyžtak zde jsou logy, zkusím ještě získat to RSIT, ale to bude při troše štěstí nejdřív tak za hodinu:

TDSSkiller:
15:17:29.0773 1436 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:17:29.0880 1436 ============================================================
15:17:29.0880 1436 Current date / time: 2013/03/13 15:17:29.0880
15:17:29.0880 1436 SystemInfo:
15:17:29.0880 1436
15:17:29.0880 1436 OS Version: 6.1.7601 ServicePack: 1.0
15:17:29.0880 1436 Product type: Workstation
15:17:29.0880 1436 ComputerName: MICHAL-TOSHIBA
15:17:29.0880 1436 UserName: Michal
15:17:29.0880 1436 Windows directory: C:\windows
15:17:29.0880 1436 System windows directory: C:\windows
15:17:29.0880 1436 Running under WOW64
15:17:29.0880 1436 Processor architecture: Intel x64
15:17:29.0880 1436 Number of processors: 4
15:17:29.0880 1436 Page size: 0x1000
15:17:29.0880 1436 Boot type: Safe boot with network
15:17:29.0880 1436 ============================================================
15:18:36.0868 1436 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:18:36.0868 1436 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:18:37.0180 1436 ============================================================
15:18:37.0180 1436 \Device\Harddisk0\DR0:
15:18:37.0227 1436 MBR partitions:
15:18:37.0227 1436 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x4947B800
15:18:37.0227 1436 \Device\Harddisk1\DR1:
15:18:37.0227 1436 MBR partitions:
15:18:37.0227 1436 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x40, BlocksNum 0x74705980
15:18:37.0227 1436 ============================================================
15:18:37.0320 1436 C: <-> \Device\Harddisk0\DR0\Partition1
15:18:37.0414 1436 E: <-> \Device\Harddisk1\DR1\Partition1
15:18:37.0414 1436 ============================================================
15:18:37.0414 1436 Initialize success
15:18:37.0414 1436 ============================================================
15:21:37.0806 1480 ============================================================
15:21:37.0806 1480 Scan started
15:21:37.0806 1480 Mode: Manual;
15:21:37.0806 1480 ============================================================
15:21:37.0915 1480 ================ Scan system memory ========================
15:21:37.0915 1480 System memory - ok
15:21:37.0915 1480 ================ Scan services =============================
15:21:38.0134 1480 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\DRIVERS\1394ohci.sys
15:21:38.0134 1480 1394ohci - ok
15:21:38.0181 1480 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
15:21:38.0181 1480 ACPI - ok
15:21:38.0227 1480 [ 12C5274CD87449A2A37A607CDB321922 ] acpials C:\windows\system32\DRIVERS\acpials.sys
15:21:38.0227 1480 acpials - ok
15:21:38.0321 1480 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
15:21:38.0321 1480 AcpiPmi - ok
15:21:38.0664 1480 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:21:38.0664 1480 AdobeFlashPlayerUpdateSvc - ok
15:21:38.0773 1480 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\DRIVERS\adp94xx.sys
15:21:38.0789 1480 adp94xx - ok
15:21:38.0805 1480 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\DRIVERS\adpahci.sys
15:21:38.0805 1480 adpahci - ok
15:21:38.0851 1480 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\DRIVERS\adpu320.sys
15:21:38.0851 1480 adpu320 - ok
15:21:38.0898 1480 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
15:21:38.0929 1480 AeLookupSvc - ok
15:21:39.0007 1480 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
15:21:39.0007 1480 AFD - ok
15:21:39.0070 1480 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
15:21:39.0070 1480 agp440 - ok
15:21:39.0117 1480 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
15:21:39.0117 1480 ALG - ok
15:21:39.0179 1480 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
15:21:39.0179 1480 aliide - ok
15:21:39.0179 1480 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
15:21:39.0179 1480 amdide - ok
15:21:39.0241 1480 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\DRIVERS\amdk8.sys
15:21:39.0241 1480 AmdK8 - ok
15:21:39.0257 1480 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\DRIVERS\amdppm.sys
15:21:39.0257 1480 AmdPPM - ok
15:21:39.0351 1480 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
15:21:39.0351 1480 amdsata - ok
15:21:39.0397 1480 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\DRIVERS\amdsbs.sys
15:21:39.0397 1480 amdsbs - ok
15:21:39.0491 1480 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
15:21:39.0491 1480 amdxata - ok
15:21:39.0585 1480 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
15:21:39.0585 1480 AppID - ok
15:21:39.0616 1480 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
15:21:39.0616 1480 AppIDSvc - ok
15:21:39.0663 1480 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll
15:21:39.0663 1480 Appinfo - ok
15:21:39.0787 1480 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\DRIVERS\arc.sys
15:21:39.0787 1480 arc - ok
15:21:39.0819 1480 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\DRIVERS\arcsas.sys
15:21:39.0834 1480 arcsas - ok
15:21:39.0897 1480 ASPI32 - ok
15:21:39.0990 1480 [ 29EC2FB2D3A5D2177EF6BA600E0305AE ] aswKbd C:\windows\system32\drivers\aswKbd.sys
15:21:39.0990 1480 aswKbd - ok
15:21:40.0021 1480 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
15:21:40.0021 1480 AsyncMac - ok
15:21:40.0099 1480 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
15:21:40.0099 1480 atapi - ok
15:21:40.0162 1480 [ E857EEE6B92AAA473EBB3465ADD8F7E7 ] athr C:\windows\system32\DRIVERS\athrx.sys
15:21:40.0162 1480 athr - ok
15:21:40.0255 1480 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
15:21:40.0255 1480 AudioEndpointBuilder - ok
15:21:40.0271 1480 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
15:21:40.0271 1480 AudioSrv - ok
15:21:40.0365 1480 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
15:21:40.0365 1480 AxInstSV - ok
15:21:40.0474 1480 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\DRIVERS\bxvbda.sys
15:21:40.0474 1480 b06bdrv - ok
15:21:40.0505 1480 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
15:21:40.0505 1480 b57nd60a - ok
15:21:40.0614 1480 [ 5B5C36B2EC500462A715DB6BCBAF5DA7 ] BCM43XX C:\windows\system32\DRIVERS\bcmwl664.sys
15:21:40.0630 1480 BCM43XX - ok
15:21:40.0661 1480 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
15:21:40.0661 1480 BDESVC - ok
15:21:40.0708 1480 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
15:21:40.0708 1480 Beep - ok
15:21:40.0801 1480 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
15:21:40.0801 1480 BFE - ok
15:21:40.0833 1480 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\system32\qmgr.dll
15:21:40.0879 1480 BITS - ok
15:21:40.0942 1480 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
15:21:40.0942 1480 blbdrive - ok
15:21:41.0020 1480 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
15:21:41.0020 1480 bowser - ok
15:21:41.0035 1480 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\DRIVERS\BrFiltLo.sys
15:21:41.0035 1480 BrFiltLo - ok
15:21:41.0098 1480 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\DRIVERS\BrFiltUp.sys
15:21:41.0098 1480 BrFiltUp - ok
15:21:41.0145 1480 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
15:21:41.0145 1480 Browser - ok
15:21:41.0176 1480 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
15:21:41.0176 1480 Brserid - ok
15:21:41.0223 1480 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
15:21:41.0223 1480 BrSerWdm - ok
15:21:41.0238 1480 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
15:21:41.0238 1480 BrUsbMdm - ok
15:21:41.0269 1480 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
15:21:41.0269 1480 BrUsbSer - ok
15:21:41.0285 1480 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys
15:21:41.0285 1480 BTHMODEM - ok
15:21:41.0332 1480 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
15:21:41.0332 1480 bthserv - ok
15:21:41.0394 1480 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
15:21:41.0394 1480 cdfs - ok
15:21:41.0472 1480 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
15:21:41.0472 1480 cdrom - ok
15:21:41.0535 1480 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
15:21:41.0535 1480 CertPropSvc - ok
15:21:41.0597 1480 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\DRIVERS\circlass.sys
15:21:41.0597 1480 circlass - ok
15:21:41.0628 1480 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
15:21:41.0628 1480 CLFS - ok
15:21:41.0706 1480 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:21:41.0706 1480 clr_optimization_v2.0.50727_32 - ok
15:21:41.0753 1480 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:21:41.0769 1480 clr_optimization_v2.0.50727_64 - ok
15:21:41.0831 1480 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:21:41.0925 1480 clr_optimization_v4.0.30319_32 - ok
15:21:41.0956 1480 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:21:41.0956 1480 clr_optimization_v4.0.30319_64 - ok
15:21:42.0034 1480 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
15:21:42.0034 1480 CmBatt - ok
15:21:42.0096 1480 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
15:21:42.0096 1480 cmdide - ok
15:21:42.0221 1480 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\windows\system32\Drivers\cng.sys
15:21:42.0237 1480 CNG - ok
15:21:42.0283 1480 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\DRIVERS\compbatt.sys
15:21:42.0283 1480 Compbatt - ok
15:21:42.0346 1480 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\drivers\CompositeBus.sys
15:21:42.0346 1480 CompositeBus - ok
15:21:42.0361 1480 COMSysApp - ok
15:21:42.0424 1480 [ C08063F052308B6F5882482615387F30 ] cpuz135 C:\windows\system32\drivers\cpuz135_x64.sys
15:21:42.0424 1480 cpuz135 - ok
15:21:42.0455 1480 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\DRIVERS\crcdisk.sys
15:21:42.0455 1480 crcdisk - ok
15:21:42.0549 1480 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll
15:21:42.0564 1480 CryptSvc - ok
15:21:42.0611 1480 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
15:21:42.0627 1480 DcomLaunch - ok
15:21:42.0689 1480 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
15:21:42.0689 1480 defragsvc - ok
15:21:42.0783 1480 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
15:21:42.0798 1480 DfsC - ok
15:21:42.0861 1480 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
15:21:42.0861 1480 Dhcp - ok
15:21:42.0892 1480 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
15:21:42.0892 1480 discache - ok
15:21:43.0079 1480 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\DRIVERS\disk.sys
15:21:43.0079 1480 Disk - ok
15:21:43.0157 1480 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
15:21:43.0157 1480 Dnscache - ok
15:21:43.0251 1480 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
15:21:43.0251 1480 dot3svc - ok
15:21:43.0297 1480 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
15:21:43.0297 1480 DPS - ok
15:21:43.0375 1480 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
15:21:43.0375 1480 drmkaud - ok
15:21:43.0438 1480 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
15:21:43.0438 1480 DXGKrnl - ok
15:21:43.0500 1480 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
15:21:43.0500 1480 EapHost - ok
15:21:43.0578 1480 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\DRIVERS\evbda.sys
15:21:43.0672 1480 ebdrv - ok
15:21:43.0734 1480 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
15:21:43.0734 1480 EFS - ok
15:21:43.0828 1480 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
15:21:43.0843 1480 ehRecvr - ok
15:21:43.0875 1480 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
15:21:43.0875 1480 ehSched - ok
15:21:43.0937 1480 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\DRIVERS\elxstor.sys
15:21:43.0937 1480 elxstor - ok
15:21:43.0968 1480 [ 524C79054636D2E5751169005006460B ] enecir C:\windows\system32\DRIVERS\enecir.sys
15:21:43.0984 1480 enecir - ok
15:21:43.0984 1480 [ E17EB95358F396E27D573A1B20F891F8 ] enecirhid C:\windows\system32\DRIVERS\enecirhid.sys
15:21:43.0984 1480 enecirhid - ok
15:21:43.0999 1480 [ 8492D808C79BD6FE439F77BE84956CDF ] enecirhidma C:\windows\system32\DRIVERS\enecirhidma.sys
15:21:43.0999 1480 enecirhidma - ok
15:21:44.0031 1480 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
15:21:44.0031 1480 ErrDev - ok
15:21:44.0093 1480 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
15:21:44.0093 1480 EventSystem - ok
15:21:44.0311 1480 [ 24589081B827989B52D954DCD88035D0 ] EverestDriver C:\Users\Michal\AppData\Local\Temp\EverestDriver.sys
15:21:49.0491 1480 EverestDriver - ok
15:21:49.0506 1480 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
15:21:49.0506 1480 exfat - ok
15:21:49.0538 1480 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
15:21:49.0538 1480 fastfat - ok
15:21:49.0600 1480 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
15:21:49.0600 1480 Fax - ok
15:21:49.0631 1480 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\DRIVERS\fdc.sys
15:21:49.0631 1480 fdc - ok
15:21:49.0662 1480 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
15:21:49.0662 1480 fdPHost - ok
15:21:49.0678 1480 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
15:21:49.0678 1480 FDResPub - ok
15:21:49.0772 1480 [ C82DB25C5CF827B396C0520787B90D69 ] ffusb2audio C:\windows\system32\DRIVERS\ffusb2audio.sys
15:21:49.0772 1480 ffusb2audio - ok
15:21:49.0787 1480 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
15:21:49.0787 1480 FileInfo - ok
15:21:49.0803 1480 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
15:21:49.0803 1480 Filetrace - ok
15:21:49.0818 1480 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\DRIVERS\flpydisk.sys
15:21:49.0818 1480 flpydisk - ok
15:21:49.0896 1480 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
15:21:49.0896 1480 FltMgr - ok
15:21:49.0959 1480 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll
15:21:49.0974 1480 FontCache - ok
15:21:50.0068 1480 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:21:50.0068 1480 FontCache3.0.0.0 - ok
15:21:50.0099 1480 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
15:21:50.0099 1480 FsDepends - ok
15:21:50.0146 1480 [ 6C06701BF1DB05405804D7EB610991CE ] fssfltr C:\windows\system32\DRIVERS\fssfltr.sys
15:21:50.0162 1480 fssfltr - ok
15:21:50.0271 1480 [ 4CE9DAC1518FF7E77BD213E6394B9D77 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
15:21:50.0318 1480 fsssvc - ok
15:21:50.0411 1480 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
15:21:50.0411 1480 Fs_Rec - ok
15:21:50.0474 1480 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
15:21:50.0474 1480 fvevol - ok
15:21:50.0520 1480 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\DRIVERS\gagp30kx.sys
15:21:50.0520 1480 gagp30kx - ok
15:21:50.0692 1480 [ 7331720A5522D5CD972623326CF87A3F ] GENERICDRV C:\Program Files (x86)\UEFI WinFlash\amifldrv64.sys
15:21:50.0692 1480 GENERICDRV - ok
15:21:50.0754 1480 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
15:21:50.0754 1480 gpsvc - ok
15:21:50.0801 1480 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
15:21:50.0801 1480 hcw85cir - ok
15:21:50.0895 1480 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
15:21:50.0895 1480 HdAudAddService - ok
15:21:50.0926 1480 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\drivers\HDAudBus.sys
15:21:50.0926 1480 HDAudBus - ok
15:21:50.0988 1480 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\windows\system32\DRIVERS\HECIx64.sys
15:21:50.0988 1480 HECIx64 - ok
15:21:51.0004 1480 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\DRIVERS\HidBatt.sys
15:21:51.0004 1480 HidBatt - ok
15:21:51.0020 1480 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\DRIVERS\hidbth.sys
15:21:51.0020 1480 HidBth - ok
15:21:51.0051 1480 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\DRIVERS\hidir.sys
15:21:51.0051 1480 HidIr - ok
15:21:51.0082 1480 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll
15:21:51.0082 1480 hidserv - ok
15:21:51.0176 1480 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
15:21:51.0176 1480 HidUsb - ok
15:21:51.0222 1480 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
15:21:51.0238 1480 hkmsvc - ok
15:21:51.0285 1480 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
15:21:51.0285 1480 HomeGroupListener - ok
15:21:51.0347 1480 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
15:21:51.0347 1480 HomeGroupProvider - ok
15:21:51.0425 1480 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
15:21:51.0425 1480 HpSAMD - ok
15:21:51.0503 1480 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
15:21:51.0519 1480 HTTP - ok
15:21:51.0550 1480 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
15:21:51.0566 1480 hwpolicy - ok
15:21:51.0644 1480 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\drivers\i8042prt.sys
15:21:51.0659 1480 i8042prt - ok
15:21:51.0690 1480 [ 85977CD13FC16069CE0AF7943A811775 ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
15:21:51.0690 1480 iaStor - ok
15:21:51.0800 1480 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
15:21:51.0800 1480 iaStorV - ok
15:21:51.0878 1480 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:21:51.0878 1480 idsvc - ok
15:21:51.0956 1480 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\DRIVERS\iirsp.sys
15:21:51.0956 1480 iirsp - ok
15:21:52.0002 1480 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
15:21:52.0018 1480 IKEEXT - ok
15:21:52.0080 1480 [ 4B6363CD4610BB848531BB260B15DFCC ] Impcd C:\windows\system32\DRIVERS\Impcd.sys
15:21:52.0080 1480 Impcd - ok
15:21:52.0158 1480 [ 490947A9AFF7CA31EF2E08F5776105EB ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
15:21:52.0190 1480 IntcAzAudAddService - ok
15:21:52.0205 1480 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
15:21:52.0205 1480 intelide - ok
15:21:52.0252 1480 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
15:21:52.0252 1480 intelppm - ok
15:21:52.0268 1480 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
15:21:52.0268 1480 IPBusEnum - ok
15:21:52.0314 1480 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
15:21:52.0314 1480 IpFilterDriver - ok
15:21:52.0377 1480 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
15:21:52.0392 1480 iphlpsvc - ok
15:21:52.0470 1480 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
15:21:52.0470 1480 IPMIDRV - ok
15:21:52.0486 1480 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
15:21:52.0486 1480 IPNAT - ok
15:21:52.0517 1480 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
15:21:52.0517 1480 IRENUM - ok
15:21:52.0548 1480 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
15:21:52.0548 1480 isapnp - ok
15:21:52.0642 1480 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
15:21:52.0642 1480 iScsiPrt - ok
15:21:52.0751 1480 [ 0C6635413077E415CA31AD2F4E648FC1 ] IT9135BDA C:\windows\system32\Drivers\IT9135BDA.sys
15:21:52.0767 1480 IT9135BDA - ok
15:21:52.0814 1480 [ 2ED74BC1002793A6CBFE3EB4578BD866 ] JMCR C:\windows\system32\DRIVERS\jmcr.sys
15:21:52.0814 1480 JMCR - ok
15:21:52.0892 1480 [ C6A3593D397B111C1DBBC1BE6384B548 ] johci C:\windows\system32\DRIVERS\johci.sys
15:21:52.0892 1480 johci - ok
15:21:52.0923 1480 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
15:21:52.0923 1480 kbdclass - ok
15:21:53.0001 1480 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
15:21:53.0016 1480 kbdhid - ok
15:21:53.0032 1480 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
15:21:53.0032 1480 KeyIso - ok
15:21:53.0094 1480 [ B3F33EAD5E5AD0704C4AE8D9CB2D4A2E ] KORGUMDS C:\windows\system32\Drivers\KORGUM64.SYS
15:21:53.0094 1480 KORGUMDS - ok
15:21:53.0157 1480 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
15:21:53.0157 1480 KSecDD - ok
15:21:53.0219 1480 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
15:21:53.0219 1480 KSecPkg - ok
15:21:53.0266 1480 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
15:21:53.0266 1480 ksthunk - ok
15:21:53.0313 1480 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
15:21:53.0313 1480 KtmRm - ok
15:21:53.0391 1480 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll
15:21:53.0391 1480 LanmanServer - ok
15:21:53.0453 1480 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
15:21:53.0469 1480 LanmanWorkstation - ok
15:21:53.0500 1480 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
15:21:53.0500 1480 lltdio - ok
15:21:53.0531 1480 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
15:21:53.0531 1480 lltdsvc - ok
15:21:53.0547 1480 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
15:21:53.0547 1480 lmhosts - ok
15:21:53.0609 1480 [ 23DE5B62B0445A6F874BE633C95B483E ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
15:21:53.0672 1480 LMS - ok
15:21:53.0703 1480 [ 41E122F6D1448C94CC05196BC41D6BFB ] LPCFilter C:\windows\system32\DRIVERS\LPCFilter.sys
15:21:53.0703 1480 LPCFilter - ok
15:21:53.0734 1480 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\DRIVERS\lsi_fc.sys
15:21:53.0734 1480 LSI_FC - ok
15:21:53.0765 1480 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\DRIVERS\lsi_sas.sys
15:21:53.0765 1480 LSI_SAS - ok
15:21:53.0781 1480 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\DRIVERS\lsi_sas2.sys
15:21:53.0781 1480 LSI_SAS2 - ok
15:21:53.0796 1480 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\DRIVERS\lsi_scsi.sys
15:21:53.0796 1480 LSI_SCSI - ok
15:21:53.0843 1480 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
15:21:53.0843 1480 luafv - ok
15:21:53.0906 1480 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
15:21:53.0906 1480 Mcx2Svc - ok
15:21:53.0937 1480 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\DRIVERS\megasas.sys
15:21:53.0937 1480 megasas - ok
15:21:53.0952 1480 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\DRIVERS\MegaSR.sys
15:21:53.0952 1480 MegaSR - ok
15:21:54.0046 1480 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
15:21:54.0046 1480 Microsoft Office Groove Audit Service - ok
15:21:54.0077 1480 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
15:21:54.0077 1480 MMCSS - ok
15:21:54.0093 1480 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
15:21:54.0093 1480 Modem - ok
15:21:54.0140 1480 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
15:21:54.0140 1480 monitor - ok
15:21:54.0249 1480 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
15:21:54.0249 1480 mouclass - ok
15:21:54.0296 1480 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
15:21:54.0296 1480 mouhid - ok
15:21:54.0342 1480 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
15:21:54.0342 1480 mountmgr - ok
15:21:54.0452 1480 [ 15D5398EED42C2504BB3D4FC875C15D1 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:21:54.0452 1480 MozillaMaintenance - ok
15:21:54.0467 1480 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
15:21:54.0467 1480 mpio - ok
15:21:54.0498 1480 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
15:21:54.0498 1480 mpsdrv - ok
15:21:54.0561 1480 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
15:21:54.0576 1480 MpsSvc - ok
15:21:54.0623 1480 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
15:21:54.0623 1480 MRxDAV - ok
15:21:54.0670 1480 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
15:21:54.0670 1480 mrxsmb - ok
15:21:54.0732 1480 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
15:21:54.0732 1480 mrxsmb10 - ok
15:21:54.0764 1480 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
15:21:54.0764 1480 mrxsmb20 - ok
15:21:54.0857 1480 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
15:21:54.0857 1480 msahci - ok
15:21:54.0904 1480 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
15:21:54.0904 1480 msdsm - ok
15:21:54.0920 1480 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
15:21:54.0920 1480 MSDTC - ok
15:21:54.0966 1480 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
15:21:54.0966 1480 Msfs - ok
15:21:54.0966 1480 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
15:21:54.0966 1480 mshidkmdf - ok
15:21:55.0044 1480 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
15:21:55.0044 1480 msisadrv - ok
15:21:55.0107 1480 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
15:21:55.0107 1480 MSiSCSI - ok
15:21:55.0107 1480 msiserver - ok
15:21:55.0138 1480 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
15:21:55.0138 1480 MSKSSRV - ok
15:21:55.0154 1480 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
15:21:55.0154 1480 MSPCLOCK - ok
15:21:55.0169 1480 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
15:21:55.0169 1480 MSPQM - ok
15:21:55.0232 1480 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
15:21:55.0232 1480 MsRPC - ok
15:21:55.0325 1480 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\drivers\mssmbios.sys
15:21:55.0325 1480 mssmbios - ok
15:21:55.0372 1480 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
15:21:55.0372 1480 MSTEE - ok
15:21:55.0388 1480 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\DRIVERS\MTConfig.sys
15:21:55.0388 1480 MTConfig - ok
15:21:55.0419 1480 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
15:21:55.0419 1480 Mup - ok
15:21:55.0466 1480 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
15:21:55.0481 1480 napagent - ok
15:21:55.0512 1480 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
15:21:55.0512 1480 NativeWifiP - ok
15:21:55.0590 1480 [ 89844C3D3A7AAE8999E229C88E452633 ] NBService C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
15:21:55.0653 1480 NBService - ok
15:21:55.0731 1480 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
15:21:55.0731 1480 NDIS - ok
15:21:55.0793 1480 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
15:21:55.0793 1480 NdisCap - ok
15:21:55.0824 1480 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
15:21:55.0824 1480 NdisTapi - ok
15:21:55.0887 1480 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
15:21:55.0887 1480 Ndisuio - ok
15:21:55.0949 1480 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
15:21:55.0949 1480 NdisWan - ok
15:21:56.0012 1480 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
15:21:56.0012 1480 NDProxy - ok
15:21:56.0043 1480 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
15:21:56.0043 1480 NetBIOS - ok
15:21:56.0105 1480 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
15:21:56.0105 1480 NetBT - ok
15:21:56.0121 1480 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
15:21:56.0121 1480 Netlogon - ok
15:21:56.0152 1480 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
15:21:56.0152 1480 Netman - ok
15:21:56.0183 1480 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
15:21:56.0183 1480 netprofm - ok
15:21:56.0214 1480 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:21:56.0214 1480 NetTcpPortSharing - ok
15:21:56.0230 1480 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\DRIVERS\nfrd960.sys
15:21:56.0230 1480 nfrd960 - ok
15:21:56.0526 1480 [ 5E7A420DD03071F0555E6FF2E4932D6C ] NIHardwareService C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
15:21:56.0714 1480 NIHardwareService - ok
15:21:56.0792 1480 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll
15:21:56.0792 1480 NlaSvc - ok
15:21:56.0870 1480 [ 433049770B810D7C83C5C94CDB3E09D2 ] NMIndexingService C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
15:21:56.0885 1480 NMIndexingService - ok
15:21:56.0979 1480 [ 351533ACC2A069B94E80BBFC177E8FDF ] NPF C:\windows\system32\drivers\npf.sys
15:21:56.0979 1480 NPF - ok
15:21:56.0994 1480 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
15:21:57.0010 1480 Npfs - ok
15:21:57.0041 1480 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
15:21:57.0041 1480 nsi - ok
15:21:57.0057 1480 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
15:21:57.0057 1480 nsiproxy - ok
15:21:57.0135 1480 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
15:21:57.0150 1480 Ntfs - ok
15:21:57.0182 1480 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
15:21:57.0182 1480 Null - ok
15:21:57.0244 1480 [ CDDD4478757288DF4BB1494BFD084259 ] NVHDA C:\windows\system32\drivers\nvhda64v.sys
15:21:57.0244 1480 NVHDA - ok
15:21:57.0462 1480 [ 56743D7B668A19BD83BCDFB1F2136738 ] nvlddmkm C:\windows\system32\DRIVERS\nvlddmkm.sys
15:21:57.0665 1480 nvlddmkm - ok
15:21:57.0681 1480 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
15:21:57.0681 1480 nvraid - ok
15:21:57.0774 1480 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
15:21:57.0774 1480 nvstor - ok
15:21:57.0852 1480 [ 1D462154C746161683EBB7D95D0C0AF1 ] nvsvc C:\windows\system32\nvvsvc.exe
15:21:57.0852 1480 nvsvc - ok
15:21:57.0899 1480 [ 18F1906BFE993EAD51200E3195B3D6E2 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
15:21:57.0962 1480 nvUpdatusService - ok
15:21:58.0071 1480 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
15:21:58.0071 1480 nv_agp - ok
15:21:58.0164 1480 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
15:21:58.0164 1480 odserv - ok
15:21:58.0227 1480 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\DRIVERS\ohci1394.sys
15:21:58.0227 1480 ohci1394 - ok
15:21:58.0352 1480 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:21:58.0352 1480 ose - ok
15:21:58.0383 1480 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
15:21:58.0398 1480 p2pimsvc - ok
15:21:58.0414 1480 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
15:21:58.0430 1480 p2psvc - ok
15:21:58.0539 1480 [ 1011C779C9FCD01AFA96490C86A50421 ] PanService C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
15:21:58.0539 1480 PanService - ok
15:21:58.0617 1480 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\DRIVERS\parport.sys
15:21:58.0617 1480 Parport - ok
15:21:58.0695 1480 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
15:21:58.0695 1480 partmgr - ok
15:21:58.0742 1480 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
15:21:58.0742 1480 PcaSvc - ok
15:21:58.0851 1480 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
15:21:58.0851 1480 pci - ok
15:21:58.0866 1480 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
15:21:58.0866 1480 pciide - ok
15:21:58.0882 1480 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\DRIVERS\pcmcia.sys
15:21:58.0882 1480 pcmcia - ok
15:21:58.0898 1480 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
15:21:58.0898 1480 pcw - ok
15:21:58.0913 1480 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
15:21:58.0929 1480 PEAUTH - ok
15:21:58.0991 1480 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
15:21:59.0069 1480 PerfHost - ok
15:21:59.0116 1480 [ 663962900E7FEA522126BA287715BB4A ] PGEffect C:\windows\system32\DRIVERS\pgeffect.sys
15:21:59.0116 1480 PGEffect - ok
15:21:59.0194 1480 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
15:21:59.0194 1480 pla - ok
15:21:59.0272 1480 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
15:21:59.0272 1480 PlugPlay - ok
15:21:59.0303 1480 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
15:21:59.0303 1480 PNRPAutoReg - ok
15:21:59.0303 1480 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
15:21:59.0319 1480 PNRPsvc - ok
15:21:59.0381 1480 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
15:21:59.0381 1480 PolicyAgent - ok
15:21:59.0428 1480 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll
15:21:59.0444 1480 Power - ok
15:21:59.0506 1480 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
15:21:59.0506 1480 PptpMiniport - ok
15:21:59.0537 1480 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\DRIVERS\processr.sys
15:21:59.0537 1480 Processor - ok
15:21:59.0600 1480 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
15:21:59.0600 1480 ProfSvc - ok
15:21:59.0600 1480 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
15:21:59.0600 1480 ProtectedStorage - ok
15:21:59.0693 1480 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
15:21:59.0693 1480 Psched - ok
15:21:59.0756 1480 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\DRIVERS\ql2300.sys
15:21:59.0771 1480 ql2300 - ok
15:21:59.0802 1480 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\DRIVERS\ql40xx.sys
15:21:59.0802 1480 ql40xx - ok
15:21:59.0849 1480 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
15:21:59.0865 1480 QWAVE - ok
15:21:59.0880 1480 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
15:21:59.0880 1480 QWAVEdrv - ok
15:21:59.0896 1480 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
15:21:59.0896 1480 RasAcd - ok
15:21:59.0943 1480 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
15:21:59.0943 1480 RasAgileVpn - ok
15:21:59.0974 1480 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
15:21:59.0974 1480 RasAuto - ok
15:22:00.0021 1480 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
15:22:00.0021 1480 Rasl2tp - ok
15:22:00.0083 1480 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
15:22:00.0083 1480 RasMan - ok
15:22:00.0099 1480 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
15:22:00.0099 1480 RasPppoe - ok
15:22:00.0130 1480 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
15:22:00.0130 1480 RasSstp - ok
15:22:00.0192 1480 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
15:22:00.0192 1480 rdbss - ok
15:22:00.0208 1480 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\DRIVERS\rdpbus.sys
15:22:00.0208 1480 rdpbus - ok
15:22:00.0239 1480 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
15:22:00.0239 1480 RDPCDD - ok
15:22:00.0286 1480 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
15:22:00.0286 1480 RDPENCDD - ok
15:22:00.0317 1480 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
15:22:00.0317 1480 RDPREFMP - ok
15:22:00.0380 1480 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
15:22:00.0380 1480 RDPWD - ok
15:22:00.0458 1480 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
15:22:00.0458 1480 rdyboost - ok
15:22:00.0489 1480 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
15:22:00.0489 1480 RemoteAccess - ok
15:22:00.0504 1480 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
15:22:00.0504 1480 RemoteRegistry - ok
15:22:00.0692 1480 [ B60F58F175DE20A6739194E85B035178 ] rpcapd C:\Program Files (x86)\WinPcap\rpcapd.exe
15:22:00.0692 1480 rpcapd - ok
15:22:00.0707 1480 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
15:22:00.0723 1480 RpcEptMapper - ok
15:22:00.0738 1480 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
15:22:00.0738 1480 RpcLocator - ok
15:22:00.0801 1480 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\System32\rpcss.dll
15:22:00.0801 1480 RpcSs - ok
15:22:00.0832 1480 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
15:22:00.0832 1480 rspndr - ok
15:22:00.0863 1480 [ 134DFDB9778A6BD1BBE7E8FE50D324C6 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
15:22:00.0879 1480 RTL8167 - ok
15:22:00.0957 1480 [ 6E4582B575CA1EBA50B4DB3D4A06ED12 ] Saffire C:\windows\system32\Drivers\Saffire.sys
15:22:00.0972 1480 Saffire - ok
15:22:01.0050 1480 [ 11240427B51EA922600F980852C24407 ] SaffireAudio C:\windows\system32\drivers\SaffireAudio.sys
15:22:01.0050 1480 SaffireAudio - ok
15:22:01.0128 1480 [ 89F4C358306A9A0B62639465C9450B3D ] SaffireMidi C:\windows\system32\drivers\SaffireMidi.sys
15:22:01.0144 1480 SaffireMidi - ok
15:22:01.0144 1480 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
15:22:01.0144 1480 SamSs - ok
15:22:01.0206 1480 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
15:22:01.0206 1480 sbp2port - ok
15:22:01.0238 1480 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
15:22:01.0253 1480 SCardSvr - ok
15:22:01.0300 1480 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
15:22:01.0300 1480 scfilter - ok
15:22:01.0362 1480 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
15:22:01.0378 1480 Schedule - ok
15:22:01.0425 1480 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
15:22:01.0425 1480 SCPolicySvc - ok
15:22:01.0503 1480 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\windows\system32\drivers\sdbus.sys
15:22:01.0503 1480 sdbus - ok
15:22:01.0581 1480 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
15:22:01.0581 1480 SDRSVC - ok
15:22:01.0628 1480 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
15:22:01.0628 1480 secdrv - ok
15:22:01.0690 1480 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
15:22:01.0690 1480 seclogon - ok
15:22:01.0706 1480 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\system32\sens.dll
15:22:01.0721 1480 SENS - ok
15:22:01.0737 1480 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
15:22:01.0737 1480 SensrSvc - ok
15:22:01.0737 1480 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\DRIVERS\serenum.sys
15:22:01.0737 1480 Serenum - ok
15:22:01.0784 1480 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\DRIVERS\serial.sys
15:22:01.0784 1480 Serial - ok
15:22:01.0830 1480 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\DRIVERS\sermouse.sys
15:22:01.0846 1480 sermouse - ok
15:22:01.0893 1480 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
15:22:01.0893 1480 SessionEnv - ok
15:22:01.0940 1480 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
15:22:01.0940 1480 sffdisk - ok
15:22:01.0986 1480 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
15:22:01.0986 1480 sffp_mmc - ok
15:22:02.0002 1480 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
15:22:02.0002 1480 sffp_sd - ok
15:22:02.0033 1480 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\DRIVERS\sfloppy.sys
15:22:02.0033 1480 sfloppy - ok
15:22:02.0064 1480 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
15:22:02.0080 1480 SharedAccess - ok
15:22:02.0127 1480 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
15:22:02.0142 1480 ShellHWDetection - ok
15:22:02.0189 1480 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\DRIVERS\SiSRaid2.sys
15:22:02.0189 1480 SiSRaid2 - ok
15:22:02.0220 1480 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\DRIVERS\sisraid4.sys
15:22:02.0220 1480 SiSRaid4 - ok
15:22:02.0298 1480 [ B7FBC508933553828E0948B537FD7984 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
15:22:02.0298 1480 SkypeUpdate - ok
15:22:02.0330 1480 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
15:22:02.0330 1480 Smb - ok
15:22:02.0408 1480 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
15:22:02.0408 1480 SNMPTRAP - ok
15:22:02.0423 1480 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
15:22:02.0423 1480 spldr - ok
15:22:02.0470 1480 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
15:22:02.0486 1480 Spooler - ok
15:22:02.0595 1480 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
15:22:02.0673 1480 sppsvc - ok
15:22:02.0704 1480 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
15:22:02.0704 1480 sppuinotify - ok
15:22:02.0751 1480 [ 602884696850C86434530790B110E8EB ] sptd C:\windows\system32\Drivers\sptd.sys
15:22:02.0766 1480 sptd - ok
15:22:02.0798 1480 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
15:22:02.0798 1480 srv - ok
15:22:02.0813 1480 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
15:22:02.0829 1480 srv2 - ok
15:22:02.0844 1480 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
15:22:02.0860 1480 srvnet - ok
15:22:02.0891 1480 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
15:22:02.0891 1480 SSDPSRV - ok
15:22:02.0907 1480 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
15:22:02.0907 1480 SstpSvc - ok
15:22:02.0954 1480 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\DRIVERS\stexstor.sys
15:22:02.0954 1480 stexstor - ok
15:22:03.0016 1480 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
15:22:03.0032 1480 stisvc - ok
15:22:03.0094 1480 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\drivers\swenum.sys
15:22:03.0094 1480 swenum - ok
15:22:03.0125 1480 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
15:22:03.0125 1480 swprv - ok
15:22:03.0172 1480 [ 470C47DABA9CA3966F0AB3F835D7D135 ] SynTP C:\windows\system32\DRIVERS\SynTP.sys
15:22:03.0188 1480 SynTP - ok
15:22:03.0266 1480 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
15:22:03.0281 1480 SysMain - ok
15:22:03.0328 1480 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
15:22:03.0328 1480 TabletInputService - ok
15:22:03.0359 1480 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
15:22:03.0359 1480 TapiSrv - ok
15:22:03.0390 1480 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
15:22:03.0390 1480 TBS - ok
15:22:03.0546 1480 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\windows\system32\drivers\tcpip.sys
15:22:03.0562 1480 Tcpip - ok
15:22:03.0640 1480 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
15:22:03.0640 1480 TCPIP6 - ok
15:22:03.0702 1480 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
15:22:03.0702 1480 tcpipreg - ok
15:22:03.0749 1480 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
15:22:03.0749 1480 TDPIPE - ok
15:22:03.0843 1480 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
15:22:03.0843 1480 TDTCP - ok
15:22:03.0890 1480 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
15:22:03.0905 1480 tdx - ok
15:22:03.0921 1480 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\drivers\termdd.sys
15:22:03.0921 1480 TermDD - ok
15:22:03.0936 1480 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
15:22:03.0952 1480 TermService - ok
15:22:03.0983 1480 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
15:22:03.0983 1480 Themes - ok
15:22:04.0030 1480 [ C013F6ACAA9761F571BD28DADA7C157D ] Thpdrv C:\windows\system32\DRIVERS\thpdrv.sys
15:22:04.0030 1480 Thpdrv - ok
15:22:04.0061 1480 [ B4E609047434ED948AF7BDEF2FA66E38 ] Thpevm C:\windows\system32\DRIVERS\Thpevm.SYS
15:22:04.0061 1480 Thpevm - ok
15:22:04.0092 1480 [ F6927BBA3B09AFF26A53A9191F7378F9 ] Thpsrv C:\windows\system32\ThpSrv.exe
15:22:04.0108 1480 Thpsrv - ok
15:22:04.0124 1480 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
15:22:04.0124 1480 THREADORDER - ok
15:22:04.0170 1480 [ 895F6972480306CB2A2A246991E34C68 ] TOSHIBA Bluetooth Service C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
15:22:04.0186 1480 TOSHIBA Bluetooth Service - ok
15:22:04.0280 1480 [ 8021F63311797085949FA387F7C83583 ] tosporte C:\windows\system32\DRIVERS\tosporte.sys
15:22:04.0280 1480 tosporte - ok
15:22:04.0436 1480 [ 1B09357180034639E62CF745E77AC66E ] tosrfbd C:\windows\system32\DRIVERS\tosrfbd.sys
15:22:04.0436 1480 tosrfbd - ok
15:22:04.0498 1480 [ 62512B5277D88600F8BD4B7AEC43569D ] tosrfbnp C:\windows\system32\Drivers\tosrfbnp.sys
15:22:04.0498 1480 tosrfbnp - ok
15:22:04.0576 1480 [ C523A9186C39D65CC9ADEBB2E1B93CCD ] Tosrfcom C:\windows\system32\Drivers\tosrfcom.sys
15:22:04.0576 1480 Tosrfcom - ok
15:22:04.0607 1480 [ 11699D47B3491D86249C168496D55C92 ] tosrfec C:\windows\system32\DRIVERS\tosrfec.sys
15:22:04.0607 1480 tosrfec - ok
15:22:04.0638 1480 [ 451B8C1815C6CC39650AF916C2A382CD ] Tosrfhid C:\windows\system32\DRIVERS\Tosrfhid.sys
15:22:04.0638 1480 Tosrfhid - ok
15:22:04.0794 1480 [ B6FDC3C76FFE9C5171EEA9C37EA367C2 ] tosrfnds C:\windows\system32\DRIVERS\tosrfnds.sys
15:22:04.0794 1480 tosrfnds - ok
15:22:04.0888 1480 [ E1E045240C1184FA6628F3C7E7FF85D8 ] TosRfSnd C:\windows\system32\drivers\tosrfsnd.sys
15:22:04.0888 1480 TosRfSnd - ok
15:22:04.0966 1480 [ DE44A2A2459D0504F146E599F4BD2074 ] Tosrfusb C:\windows\system32\DRIVERS\tosrfusb.sys
15:22:04.0966 1480 Tosrfusb - ok
15:22:05.0122 1480 [ C676B0F52F2B6483AFB88F79CABB011E ] Tpkd C:\windows\system32\drivers\Tpkd.sys
15:22:05.0122 1480 Tpkd - ok
15:22:05.0138 1480 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
15:22:05.0138 1480 TrkWks - ok
15:22:05.0216 1480 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
15:22:05.0216 1480 TrustedInstaller - ok
15:22:05.0294 1480 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
15:22:05.0294 1480 tssecsrv - ok
15:22:05.0372 1480 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
15:22:05.0387 1480 TsUsbFlt - ok
15:22:05.0450 1480 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
15:22:05.0465 1480 tunnel - ok
15:22:05.0496 1480 [ 550B567F9364D8F7684C3FB3EA665A72 ] TVALZ C:\windows\system32\DRIVERS\TVALZ_O.SYS
15:22:05.0496 1480 TVALZ - ok
15:22:05.0528 1480 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\DRIVERS\uagp35.sys
15:22:05.0528 1480 uagp35 - ok
15:22:05.0574 1480 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
15:22:05.0574 1480 udfs - ok
15:22:05.0606 1480 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
15:22:05.0606 1480 UI0Detect - ok
15:22:05.0637 1480 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
15:22:05.0637 1480 uliagpkx - ok
15:22:05.0730 1480 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\drivers\umbus.sys
15:22:05.0730 1480 umbus - ok
15:22:05.0746 1480 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\DRIVERS\umpass.sys
15:22:05.0746 1480 UmPass - ok
15:22:05.0855 1480 [ CC3775100ABA633984F73DFAE1F55CAE ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
15:22:05.0933 1480 UNS - ok
15:22:05.0964 1480 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
15:22:05.0980 1480 upnphost - ok
15:22:06.0011 1480 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\windows\system32\drivers\usbaudio.sys
15:22:06.0027 1480 usbaudio - ok
15:22:06.0105 1480 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
15:22:06.0105 1480 usbccgp - ok
15:22:06.0183 1480 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
15:22:06.0183 1480 usbcir - ok
15:22:06.0198 1480 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\drivers\usbehci.sys
15:22:06.0198 1480 usbehci - ok
15:22:06.0214 1480 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
15:22:06.0230 1480 usbhub - ok
15:22:06.0276 1480 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
15:22:06.0276 1480 usbohci - ok
15:22:06.0323 1480 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
15:22:06.0323 1480 usbprint - ok
15:22:06.0339 1480 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
15:22:06.0339 1480 USBSTOR - ok
15:22:06.0354 1480 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys
15:22:06.0386 1480 usbuhci - ok
15:22:06.0432 1480 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\System32\Drivers\usbvideo.sys
15:22:06.0432 1480 usbvideo - ok
15:22:06.0542 1480 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\windows\system32\drivers\usb8023x.sys
15:22:06.0542 1480 usb_rndisx - ok
15:22:06.0573 1480 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
15:22:06.0573 1480 UxSms - ok
15:22:06.0588 1480 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
15:22:06.0588 1480 VaultSvc - ok
15:22:06.0682 1480 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
15:22:06.0682 1480 vdrvroot - ok
15:22:06.0713 1480 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
15:22:06.0713 1480 vds - ok
15:22:06.0744 1480 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
15:22:06.0744 1480 vga - ok
15:22:06.0760 1480 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
15:22:06.0760 1480 VgaSave - ok
15:22:06.0807 1480 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
15:22:06.0807 1480 vhdmp - ok
15:22:06.0869 1480 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
15:22:06.0869 1480 viaide - ok
15:22:06.0885 1480 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
15:22:06.0885 1480 volmgr - ok
15:22:06.0947 1480 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
15:22:06.0947 1480 volmgrx - ok
15:22:06.0978 1480 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys
15:22:06.0978 1480 volsnap - ok
15:22:07.0025 1480 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\DRIVERS\vsmraid.sys
15:22:07.0025 1480 vsmraid - ok
15:22:07.0103 1480 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
15:22:07.0119 1480 VSS - ok
15:22:07.0119 1480 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
15:22:07.0119 1480 vwifibus - ok
15:22:07.0150 1480 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
15:22:07.0150 1480 vwififlt - ok
15:22:07.0166 1480 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
15:22:07.0166 1480 vwifimp - ok
15:22:07.0212 1480 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
15:22:07.0228 1480 W32Time - ok
15:22:07.0259 1480 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\DRIVERS\wacompen.sys
15:22:07.0259 1480 WacomPen - ok
15:22:07.0337 1480 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
15:22:07.0337 1480 WANARP - ok
15:22:07.0337 1480 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
15:22:07.0337 1480 Wanarpv6 - ok
15:22:07.0415 1480 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe
15:22:07.0415 1480 WatAdminSvc - ok
15:22:07.0493 1480 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
15:22:07.0509 1480 wbengine - ok
15:22:07.0540 1480 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
15:22:07.0540 1480 WbioSrvc - ok
15:22:07.0587 1480 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
15:22:07.0602 1480 wcncsvc - ok
15:22:07.0618 1480 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
15:22:07.0618 1480 WcsPlugInService - ok
15:22:07.0649 1480 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\DRIVERS\wd.sys
15:22:07.0649 1480 Wd - ok
15:22:07.0743 1480 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
15:22:07.0758 1480 Wdf01000 - ok
15:22:07.0774 1480 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
15:22:07.0774 1480 WdiServiceHost - ok
15:22:07.0774 1480 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
15:22:07.0774 1480 WdiSystemHost - ok
15:22:07.0836 1480 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
15:22:07.0836 1480 WebClient - ok
15:22:07.0852 1480 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
15:22:07.0852 1480 Wecsvc - ok
15:22:07.0883 1480 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
15:22:07.0883 1480 wercplsupport - ok
15:22:07.0914 1480 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
15:22:07.0914 1480 WerSvc - ok
15:22:07.0946 1480 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
15:22:07.0946 1480 WfpLwf - ok
15:22:07.0961 1480 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
15:22:07.0961 1480 WIMMount - ok
15:22:07.0977 1480 WinDefend - ok
15:22:07.0992 1480 WinHttpAutoProxySvc - ok
15:22:08.0039 1480 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
15:22:08.0055 1480 Winmgmt - ok
15:22:08.0148 1480 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
15:22:08.0164 1480 WinRM - ok
15:22:08.0226 1480 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
15:22:08.0226 1480 WinUsb - ok
15:22:08.0273 1480 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
15:22:08.0273 1480 Wlansvc - ok
15:22:08.0382 1480 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
15:22:08.0382 1480 wlcrasvc - ok
15:22:08.0523 1480 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:22:08.0538 1480 wlidsvc - ok
15:22:08.0601 1480 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\drivers\wmiacpi.sys
15:22:08.0601 1480 WmiAcpi - ok
15:22:08.0632 1480 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
15:22:08.0632 1480 wmiApSrv - ok
15:22:08.0648 1480 WMPNetworkSvc - ok
15:22:08.0679 1480 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
15:22:08.0679 1480 WPCSvc - ok
15:22:08.0741 1480 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
15:22:08.0741 1480 WPDBusEnum - ok
15:22:08.0772 1480 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
15:22:08.0772 1480 ws2ifsl - ok
15:22:08.0804 1480 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll
15:22:08.0804 1480 wscsvc - ok
15:22:08.0804 1480 WSearch - ok
15:22:08.0913 1480 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
15:22:08.0944 1480 wuauserv - ok
15:22:08.0991 1480 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys
15:22:08.0991 1480 WudfPf - ok
15:22:09.0084 1480 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
15:22:09.0084 1480 WUDFRd - ok
15:22:09.0100 1480 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll
15:22:09.0100 1480 wudfsvc - ok
15:22:09.0147 1480 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll
15:22:09.0147 1480 WwanSvc - ok
15:22:09.0162 1480 ================ Scan global ===============================
15:22:09.0194 1480 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
15:22:09.0318 1480 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll
15:22:09.0334 1480 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll
15:22:09.0365 1480 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
15:22:09.0396 1480 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe
15:22:09.0412 1480 [Global] - ok
15:22:09.0412 1480 ================ Scan MBR ==================================
15:22:09.0412 1480 [ 5B5E648D12FCADC244C1EC30318E1EB9 ] \Device\Harddisk0\DR0
15:22:09.0599 1480 \Device\Harddisk0\DR0 - ok
15:22:09.0599 1480 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
15:22:11.0783 1480 \Device\Harddisk1\DR1 - ok
15:22:11.0783 1480 ================ Scan VBR ==================================
15:22:11.0814 1480 [ 42BE42ACDE0C87C0CD9FEA4267FEA5D6 ] \Device\Harddisk0\DR0\Partition1
15:22:11.0814 1480 \Device\Harddisk0\DR0\Partition1 - ok
15:22:11.0830 1480 [ 8E9DA17C6C174FD136EB6B8F1DCB6B2D ] \Device\Harddisk1\DR1\Partition1
15:22:11.0830 1480 \Device\Harddisk1\DR1\Partition1 - ok
15:22:11.0830 1480 ============================================================
15:22:11.0830 1480 Scan finished
15:22:11.0830 1480 ============================================================
15:22:11.0846 0392 Detected object count: 0
15:22:11.0846 0392 Actual detected object count: 0

ADWCleaner:
# AdwCleaner v2.114 - Logfile created 03/13/2013 at 15:24:17
# Updated 05/03/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Michal - MICHAL-TOSHIBA
# Boot Mode : Safe mode with networking
# Running from : C:\Users\Michal\Downloads\adwcleaner (1).exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
File Deleted : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\searchplugins\Search_Results.xml
File Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\searchplugins\SweetIm.xml
Folder Deleted : C:\ProgramData\APN
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\Users\Michal\AppData\Local\OpenCandy
Folder Deleted : C:\Users\Michal\AppData\Local\Temp\{f34c9277-6577-4dff-b2d7-7d58092f272f}

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\iLividSRTB
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Key Deleted : HKLM\SOFTWARE\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchnu.com/406 --> hxxp://www.google.com

-\\ Mozilla Firefox v13.0.1 (cs)

File : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\8ouybynf.default\prefs.js

Deleted : user_pref("browser.search.selectedEngine", "Search Results");
Deleted : user_pref("browser.search.defaultenginename", "Search Results");
Deleted : user_pref("browser.search.order.1", "Search Results");
Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=435&systemid=406&apn[...]
Deleted : user_pref("browser.startup.homepage", "hxxp://www.searchnu.com/406");

-\\ Google Chrome v25.0.1364.152

File : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.1965] : homepage = "hxxp://www.searchnu.com/406",

*************************

AdwCleaner[S1].txt - [4312 octets] - [13/03/2013 15:24:17]

########## EOF - C:\AdwCleaner[S1].txt - [4372 octets] ##########

je to pisane pre XP, ale pozri bod 8
- ci nie je disk v PIO mode ?
- vloz obrazok z benchmark

aaaa link >> http://forum.viry.cz/viewtopic.php?f=46&t=79325