VIRY.CZ

Dobrý den,
prosím o kontrolu logu. Strašné zpomalení systému jen po připojení k internetu. Základní očistu ccleanerem jsem provedl.
Pro RSIT jsem nechal 1 měsíc, ale nevím od kdy je tento stav. NTB je mého nadřízeného.
Děkuji
---------------------

Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin SV MO at 2013-08-30 07:58:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 41 GB (83%) free of 50 GB
Total RAM: 503 MB (58% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\avast! Emergency Update.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast Business\aswWebRepIE.dll [2013-06-27 201784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast Business\aswWebRepIE.dll [2013-06-27 201784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-18 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-18 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-18 455168]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-09-23 860160]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-11-16 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-11-16 126976]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2004-08-24 88363]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-11-04 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-11-04 688218]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2004-09-07 213054]
"NWEReboot"= []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2004-09-13 49152]
"avast"=C:\Program Files\AVAST Software\Avast Business\avastUI.exe [2013-06-27 4769352]
"PDFPrint"=C:\Program Files\PDF24\pdf24.exe [2013-03-20 162856]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-11-16 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58f15d69-48fa-11e1-8cef-4d6564696130}]
shell\AutoRun\command - F:\AutoRun.exe


======List of files/folders created in the last 1 months======

2013-08-30 07:58:51 ----D---- C:\Program Files\trend micro
2013-08-30 07:58:50 ----D---- C:\rsit
2013-08-30 07:56:44 ----D---- C:\Program Files\CCleaner
2013-08-30 07:55:24 ----A---- C:\TDSSKiller.2.9.2.0_30.08.2013_07.55.24_log.txt
2013-08-30 06:49:14 ----D---- C:\Documents and Settings\Admin SV MO\Data aplikací\Malwarebytes
2013-08-30 06:48:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-08-29 11:37:39 ----D---- C:\Program Files\7-Zip
2013-08-29 11:35:30 ----D---- C:\Program Files\VideoLAN
2013-08-29 11:29:57 ----D---- C:\Documents and Settings\Admin SV MO\Data aplikací\Mozilla
2013-08-29 11:22:30 ----A---- C:\WINDOWS\system32\gcapi_dll.dll
2013-08-29 11:22:12 ----D---- C:\Documents and Settings\Admin SV MO\Data aplikací\Foxit Software
2013-08-29 11:22:10 ----D---- C:\Program Files\Foxit Software
2013-08-29 11:19:42 ----D---- C:\Program Files\Mozilla Firefox
2013-08-28 20:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2834902-v2_WM10$
2013-08-18 21:18:06 ----D---- C:\WINDOWS\system32\MRT
2013-08-18 21:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2013-08-18 21:16:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2013-08-18 21:16:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2863058$
2013-08-18 21:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2849470$

======List of files/folders modified in the last 1 months======

2013-08-30 07:58:51 ----RD---- C:\Program Files
2013-08-30 07:57:46 ----D---- C:\WINDOWS\Temp
2013-08-30 07:57:16 ----D---- C:\WINDOWS
2013-08-30 07:55:25 ----D---- C:\WINDOWS\system32\drivers
2013-08-30 07:54:26 ----D---- C:\WINDOWS\Prefetch
2013-08-30 07:54:08 ----SHD---- C:\System Volume Information
2013-08-30 07:54:08 ----D---- C:\WINDOWS\system32\Restore
2013-08-30 07:48:41 ----N---- C:\WINDOWS\SchedLgU.Txt
2013-08-30 07:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2834902_WM10$
2013-08-30 07:10:34 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-30 06:47:13 ----D---- C:\WINDOWS\system32
2013-08-29 12:26:03 ----SHD---- C:\WINDOWS\Installer
2013-08-29 12:26:01 ----HD---- C:\Config.Msi
2013-08-29 11:14:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-29 11:13:38 ----D---- C:\WINDOWS\Help
2013-08-29 11:13:27 ----D---- C:\WINDOWS\system32\inetsrv
2013-08-29 11:06:25 ----D---- C:\Program Files\SAGEM
2013-08-29 11:05:53 ----HD---- C:\Program Files\InstallShield Installation Information
2013-08-29 11:05:52 ----A---- C:\WINDOWS\adiras.ini
2013-08-29 11:05:46 ----HD---- C:\WINDOWS\inf
2013-08-29 10:49:41 ----D---- C:\Program Files\HPQ
2013-08-29 10:47:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-29 10:47:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-29 10:40:57 ----D---- C:\Documents and Settings\Admin SV MO\Data aplikací\LibreOffice
2013-08-29 10:38:28 ----D---- C:\WINDOWS\SHELLNEW
2013-08-29 10:28:54 ----D---- C:\Documents and Settings\Admin SV MO\Data aplikací\Sonic
2013-08-29 10:28:08 ----D---- C:\Program Files\Common Files
2013-08-29 10:27:05 ----SD---- C:\WINDOWS\Tasks
2013-08-29 10:23:34 ----D---- C:\Program Files\Java
2013-08-29 10:04:51 ----D---- C:\Program Files\Google
2013-08-29 10:04:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-08-29 10:01:42 ----D---- C:\Program Files\GRETECH
2013-08-29 09:48:30 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-08-29 09:39:59 ----D---- C:\WINDOWS\Minidump
2013-08-29 09:39:59 ----D---- C:\WINDOWS\Debug
2013-08-20 15:38:49 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2013-08-20 14:35:55 ----A---- C:\WINDOWS\iltwain.ini
2013-08-18 21:22:25 ----D---- C:\Program Files\Internet Explorer
2013-08-18 21:22:05 ----D---- C:\WINDOWS\ie8updates
2013-08-18 21:17:41 ----A---- C:\WINDOWS\system32\MRT.exe
2013-07-31 06:56:12 ----A---- C:\WINDOWS\system32\wmvdmod.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2013-06-27 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-06-27 765736]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-06-27 368176]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-06-27 62376]
R1 ClntMgmt.sys;ClntMgmt.sys; C:\WINDOWS\System32\Drivers\ClntMgmt.sys [2004-02-20 59044]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-06-27 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2004-11-08 127744]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-08-24 1268204]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2004-05-26 44928]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-11-16 754909]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-10-13 259840]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-11-04 186016]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-11-16 3222784]
S1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
S1 MpKsl54df9d24;MpKsl54df9d24; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{09A395CD-6C4D-4791-AC2F-5C1BC78318B6}\MpKsl54df9d24.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 adusbnet;Anydata USB-NDIS miniport; C:\WINDOWS\system32\DRIVERS\adusbnet.sys []
S3 adusbser;Anydata USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys []
S3 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-06-27 175176]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-12-15 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-12-15 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-12-15 21744]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast Business\AvastSvc.exe [2013-06-27 45248]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\SHARED\HPQWMI.exe [2004-10-04 98304]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

Zdravím,

Budeš alespoň povýšen?
Firemní stroje tu neřešíme, ale člověk má udělat dobrý skutek každý den (a ač poruším pravidla) tobě navrhnu:

stáhni a spusť http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
některé Antiviry jej mohou blokovat, proto je budeš muset na tu chvíli odstavit
- Zvol možnost Prohledat a poté Smazat a následně Zpráva - otevře se log, ten sem vlož

Stáhni Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Ulož jej na plochu a spusť - zobrazí se licenční podminky -> start libovolnou klávesou.
Bude vytvořena záloha a proběhne skenování.
Vyskočí log (nebo je uložen zde c:\JRT jako JRT.txt) - zkopíruj jej sem

Stáhni AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Ulož nejlépe na plochu -> ukonči všechny programy -> spusť AdwCleaner -> klikni na Search po dokončení na Clean
bude provedena oprava, restartuje se - (případně restartuj) a vypadne log C:\AdwCleaner\AdwCleaner[S?].txt , jeho obsah vložíš sem

TDSSKiller a MBAM nic nenašli? jinak mi se hoď ty logy taky

Děkuji a hluboce se klaním. On to už není firemní notebook, on si ho už znárodnil
Povýšen nebudu, v jeho očích maximálně stoupne moje elektrotechnická čest.
Už se mu s tím ........ druhý den, místo abych dělal projektovou dokumentaci.

TDSS nenašel nic. Posílám logy.

07:55:24.0093 0x0b0c TDSS rootkit removing tool 2.9.2.0 Aug 15 2013 16:44:29
07:55:24.0234 0x0b0c ============================================================
07:55:24.0234 0x0b0c Current date / time: 2013/08/30 07:55:24.0234
07:55:24.0234 0x0b0c SystemInfo:
07:55:24.0234 0x0b0c
07:55:24.0234 0x0b0c OS Version: 5.1.2600 ServicePack: 3.0
07:55:24.0234 0x0b0c Product type: Workstation
07:55:24.0234 0x0b0c ComputerName: NB33887
07:55:24.0234 0x0b0c UserName: Admin SV MO
07:55:24.0234 0x0b0c Windows directory: C:\WINDOWS
07:55:24.0234 0x0b0c System windows directory: C:\WINDOWS
07:55:24.0234 0x0b0c Processor architecture: Intel x86
07:55:24.0234 0x0b0c Number of processors: 1
07:55:24.0234 0x0b0c Page size: 0x1000
07:55:24.0234 0x0b0c Boot type: Normal boot
07:55:24.0234 0x0b0c ============================================================
07:55:25.0843 0x0b0c Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054
07:55:25.0906 0x0b0c Drive \Device\Harddisk1\DR3 - Size: 0xEF000000 (3.73 Gb), SectorSize: 0x200, Cylinders: 0x1E7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
07:55:25.0906 0x0b0c ============================================================
07:55:25.0906 0x0b0c \Device\Harddisk0\DR0:
07:55:25.0921 0x0b0c MBR partitions:
07:55:25.0921 0x0b0c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A6301
07:55:25.0937 0x0b0c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A637F, BlocksNum 0x7DE9581
07:55:25.0937 0x0b0c \Device\Harddisk1\DR3:
07:55:25.0937 0x0b0c MBR partitions:
07:55:25.0937 0x0b0c \Device\Harddisk1\DR3\Partition1: MBR, Type 0x7, StartLBA 0x80, BlocksNum 0x777F80
07:55:25.0937 0x0b0c ============================================================
07:55:25.0968 0x0b0c C: <-> \Device\Harddisk0\DR0\Partition1
07:55:26.0000 0x0b0c D: <-> \Device\Harddisk0\DR0\Partition2
07:55:26.0000 0x0b0c ============================================================
07:55:26.0000 0x0b0c Initialize success
07:55:26.0000 0x0b0c ============================================================
07:55:29.0437 0x0b2c ============================================================
07:55:29.0437 0x0b2c Scan started
07:55:29.0437 0x0b2c Mode: Manual;
07:55:29.0437 0x0b2c ============================================================
07:55:30.0843 0x0b2c ================ Scan system memory ========================
07:55:30.0843 0x0b2c System memory - ok
07:55:30.0843 0x0b2c ================ Scan services =============================
07:55:30.0937 0x0b2c Abiosdsk - ok
07:55:30.0937 0x0b2c abp480n5 - ok
07:55:30.0984 0x0b2c [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
07:55:30.0984 0x0b2c ACPI - ok
07:55:31.0000 0x0b2c [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
07:55:31.0000 0x0b2c ACPIEC - ok
07:55:31.0015 0x0b2c ADILOADER - ok
07:55:31.0031 0x0b2c adiusbaw - ok
07:55:31.0031 0x0b2c adpu160m - ok
07:55:31.0046 0x0b2c adusbnet - ok
07:55:31.0062 0x0b2c adusbser - ok
07:55:31.0093 0x0b2c [ AD707942E4CCB28D77CEE5ED989C9E55 ] aeaudio C:\WINDOWS\system32\drivers\aeaudio.sys
07:55:31.0093 0x0b2c aeaudio - ok
07:55:31.0109 0x0b2c [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
07:55:31.0125 0x0b2c aec - ok
07:55:31.0156 0x0b2c [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
07:55:31.0156 0x0b2c AFD - ok
07:55:31.0218 0x0b2c [ 593AEFC67283D409F34CC1245D00A509 ] AgereSoftModem C:\WINDOWS\system32\DRIVERS\AGRSM.sys
07:55:31.0265 0x0b2c AgereSoftModem - ok
07:55:31.0281 0x0b2c Aha154x - ok
07:55:31.0281 0x0b2c aic78u2 - ok
07:55:31.0296 0x0b2c aic78xx - ok
07:55:31.0328 0x0b2c [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
07:55:31.0328 0x0b2c Alerter - ok
07:55:31.0359 0x0b2c [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
07:55:31.0359 0x0b2c ALG - ok
07:55:31.0375 0x0b2c AliIde - ok
07:55:31.0390 0x0b2c amsint - ok
07:55:31.0421 0x0b2c [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
07:55:31.0437 0x0b2c AppMgmt - ok
07:55:31.0468 0x0b2c [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
07:55:31.0484 0x0b2c Arp1394 - ok
07:55:31.0484 0x0b2c asc - ok
07:55:31.0500 0x0b2c asc3350p - ok
07:55:31.0515 0x0b2c asc3550 - ok
07:55:31.0578 0x0b2c [ E1A1206A4FB19B675E947B29CCD25FBA ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
07:55:31.0578 0x0b2c aspnet_state - ok
07:55:31.0609 0x0b2c [ 0ED7EDABC8E62F9F762B5A2CAA7D1EE2 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
07:55:31.0609 0x0b2c aswFsBlk - ok
07:55:31.0640 0x0b2c [ DE1C9C0902C9F97CAFB12E4A176662BF ] aswKbd C:\WINDOWS\system32\drivers\aswKbd.sys
07:55:31.0640 0x0b2c aswKbd - ok
07:55:31.0671 0x0b2c [ 3199B25BBE9C8BCBBA2C91084708E84B ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
07:55:31.0671 0x0b2c aswMonFlt - ok
07:55:31.0703 0x0b2c [ E42F88F09A6F8A841E3AE645E4193603 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
07:55:31.0703 0x0b2c aswRdr - ok
07:55:31.0734 0x0b2c [ DCB5C76CF86D64BACD1BAA7664129977 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
07:55:31.0750 0x0b2c aswRvrt - ok
07:55:31.0812 0x0b2c [ 4DB4DC60A42AA75F2CED83C269BE55A1 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
07:55:31.0843 0x0b2c aswSnx - ok
07:55:31.0875 0x0b2c [ 75C2AA086F295619FDE49C75817EB29D ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
07:55:31.0906 0x0b2c aswSP - ok
07:55:31.0921 0x0b2c [ 4E27C4A7EB1694FEC1EE5AA1E1553EE7 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
07:55:31.0921 0x0b2c aswTdi - ok
07:55:31.0968 0x0b2c [ 7EFFCE4EB4E84B731ABA59C0340CBB80 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
07:55:31.0968 0x0b2c aswVmm - ok
07:55:32.0000 0x0b2c [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
07:55:32.0000 0x0b2c AsyncMac - ok
07:55:32.0015 0x0b2c [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
07:55:32.0015 0x0b2c atapi - ok
07:55:32.0031 0x0b2c Atdisk - ok
07:55:32.0062 0x0b2c [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
07:55:32.0062 0x0b2c Atmarpc - ok
07:55:32.0109 0x0b2c [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
07:55:32.0109 0x0b2c AudioSrv - ok
07:55:32.0140 0x0b2c [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
07:55:32.0140 0x0b2c audstub - ok
07:55:32.0234 0x0b2c [ 3229DE22C8ED18E6FC78D5AB78B79780 ] avast! Antivirus C:\Program Files\AVAST Software\Avast Business\AvastSvc.exe
07:55:32.0234 0x0b2c avast! Antivirus - ok
07:55:32.0281 0x0b2c [ 78123F44BE9E4768852A3A017E02D637 ] bcm4sbxp C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
07:55:32.0296 0x0b2c bcm4sbxp - ok
07:55:32.0328 0x0b2c [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
07:55:32.0328 0x0b2c Beep - ok
07:55:32.0375 0x0b2c [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
07:55:32.0406 0x0b2c BITS - ok
07:55:32.0453 0x0b2c [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
07:55:32.0453 0x0b2c Browser - ok
07:55:32.0484 0x0b2c [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
07:55:32.0484 0x0b2c cbidf2k - ok
07:55:32.0500 0x0b2c cd20xrnt - ok
07:55:32.0531 0x0b2c [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
07:55:32.0531 0x0b2c Cdaudio - ok
07:55:32.0578 0x0b2c [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
07:55:32.0578 0x0b2c Cdfs - ok
07:55:32.0625 0x0b2c [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
07:55:32.0625 0x0b2c Cdrom - ok
07:55:32.0640 0x0b2c Changer - ok
07:55:32.0687 0x0b2c [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
07:55:32.0687 0x0b2c CiSvc - ok
07:55:32.0718 0x0b2c [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
07:55:32.0718 0x0b2c ClipSrv - ok
07:55:32.0765 0x0b2c [ 573DA08641AFC8D940E0431945867906 ] ClntMgmt.sys C:\WINDOWS\System32\Drivers\ClntMgmt.sys
07:55:32.0765 0x0b2c ClntMgmt.sys - ok
07:55:32.0781 0x0b2c [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
07:55:32.0796 0x0b2c CmBatt - ok
07:55:32.0812 0x0b2c CmdIde - ok
07:55:32.0812 0x0b2c [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
07:55:32.0828 0x0b2c Compbatt - ok
07:55:32.0843 0x0b2c COMSysApp - ok
07:55:32.0859 0x0b2c Cpqarray - ok
07:55:32.0890 0x0b2c [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
07:55:32.0890 0x0b2c CryptSvc - ok
07:55:32.0906 0x0b2c dac2w2k - ok
07:55:32.0921 0x0b2c dac960nt - ok
07:55:32.0968 0x0b2c [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
07:55:33.0000 0x0b2c DcomLaunch - ok
07:55:33.0046 0x0b2c [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
07:55:33.0046 0x0b2c Dhcp - ok
07:55:33.0078 0x0b2c [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
07:55:33.0078 0x0b2c Disk - ok
07:55:33.0093 0x0b2c dmadmin - ok
07:55:33.0140 0x0b2c [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
07:55:33.0171 0x0b2c dmboot - ok
07:55:33.0203 0x0b2c [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
07:55:33.0203 0x0b2c dmio - ok
07:55:33.0250 0x0b2c [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
07:55:33.0250 0x0b2c dmload - ok
07:55:33.0265 0x0b2c [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
07:55:33.0265 0x0b2c dmserver - ok
07:55:33.0296 0x0b2c [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
07:55:33.0296 0x0b2c DMusic - ok
07:55:33.0328 0x0b2c [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
07:55:33.0328 0x0b2c Dnscache - ok
07:55:33.0359 0x0b2c [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
07:55:33.0359 0x0b2c Dot3svc - ok
07:55:33.0375 0x0b2c dpti2o - ok
07:55:33.0390 0x0b2c [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
07:55:33.0390 0x0b2c drmkaud - ok
07:55:33.0421 0x0b2c eabfiltr - ok
07:55:33.0468 0x0b2c [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
07:55:33.0468 0x0b2c EapHost - ok
07:55:33.0484 0x0b2c [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
07:55:33.0500 0x0b2c ERSvc - ok
07:55:33.0531 0x0b2c [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
07:55:33.0531 0x0b2c Eventlog - ok
07:55:33.0593 0x0b2c [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
07:55:33.0625 0x0b2c EventSystem - ok
07:55:33.0671 0x0b2c [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
07:55:33.0687 0x0b2c Fastfat - ok
07:55:33.0734 0x0b2c [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
07:55:33.0750 0x0b2c FastUserSwitchingCompatibility - ok
07:55:33.0765 0x0b2c [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
07:55:33.0765 0x0b2c Fdc - ok
07:55:33.0796 0x0b2c [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
07:55:33.0796 0x0b2c Fips - ok
07:55:33.0812 0x0b2c [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
07:55:33.0828 0x0b2c Flpydisk - ok
07:55:33.0859 0x0b2c [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
07:55:33.0875 0x0b2c FltMgr - ok
07:55:33.0875 0x0b2c [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
07:55:33.0890 0x0b2c Fs_Rec - ok
07:55:33.0906 0x0b2c [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
07:55:33.0906 0x0b2c Ftdisk - ok
07:55:33.0937 0x0b2c [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
07:55:33.0953 0x0b2c Gpc - ok
07:55:34.0000 0x0b2c [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
07:55:34.0000 0x0b2c helpsvc - ok
07:55:34.0015 0x0b2c HidServ - ok
07:55:34.0031 0x0b2c [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
07:55:34.0031 0x0b2c HidUsb - ok
07:55:34.0078 0x0b2c [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
07:55:34.0078 0x0b2c hkmsvc - ok
07:55:34.0093 0x0b2c hpn - ok
07:55:34.0140 0x0b2c [ E369FA38C3F4E286F2BBA607B4B4F639 ] hpqwmi C:\Program Files\HPQ\SHARED\HPQWMI.exe
07:55:34.0140 0x0b2c hpqwmi - ok
07:55:34.0171 0x0b2c [ 9F1D80908658EB7F1BF70809E0B51470 ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
07:55:34.0187 0x0b2c HPZid412 - ok
07:55:34.0203 0x0b2c [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
07:55:34.0203 0x0b2c HPZipr12 - ok
07:55:34.0234 0x0b2c [ CF1B7951B4EC8D13F3C93B74BB2B461B ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
07:55:34.0234 0x0b2c HPZius12 - ok
07:55:34.0312 0x0b2c [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
07:55:34.0312 0x0b2c HTTP - ok
07:55:34.0359 0x0b2c [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
07:55:34.0359 0x0b2c HTTPFilter - ok
07:55:34.0375 0x0b2c Huawei - ok
07:55:34.0390 0x0b2c hwdatacard - ok
07:55:34.0406 0x0b2c hwusbdev - ok
07:55:34.0421 0x0b2c i2omgmt - ok
07:55:34.0437 0x0b2c i2omp - ok
07:55:34.0468 0x0b2c [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
07:55:34.0468 0x0b2c i8042prt - ok
07:55:34.0546 0x0b2c [ 65E836680B2902AB7FF037A17B519CFF ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
07:55:34.0578 0x0b2c ialm - ok
07:55:34.0609 0x0b2c [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
07:55:34.0609 0x0b2c Imapi - ok
07:55:34.0656 0x0b2c [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
07:55:34.0671 0x0b2c ImapiService - ok
07:55:34.0687 0x0b2c ini910u - ok
07:55:34.0734 0x0b2c [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
07:55:34.0734 0x0b2c IntelIde - ok
07:55:34.0750 0x0b2c [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
07:55:34.0750 0x0b2c intelppm - ok
07:55:34.0781 0x0b2c [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
07:55:34.0781 0x0b2c Ip6Fw - ok
07:55:34.0812 0x0b2c [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
07:55:34.0828 0x0b2c IpFilterDriver - ok
07:55:34.0843 0x0b2c [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
07:55:34.0843 0x0b2c IpInIp - ok
07:55:34.0890 0x0b2c [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
07:55:34.0890 0x0b2c IpNat - ok
07:55:34.0921 0x0b2c [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
07:55:34.0921 0x0b2c IPSec - ok
07:55:34.0953 0x0b2c [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
07:55:34.0953 0x0b2c IRENUM - ok
07:55:34.0968 0x0b2c [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
07:55:34.0984 0x0b2c isapnp - ok
07:55:35.0000 0x0b2c [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
07:55:35.0015 0x0b2c Kbdclass - ok
07:55:35.0031 0x0b2c [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
07:55:35.0046 0x0b2c kmixer - ok
07:55:35.0078 0x0b2c [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
07:55:35.0078 0x0b2c KSecDD - ok
07:55:35.0109 0x0b2c [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
07:55:35.0125 0x0b2c lanmanserver - ok
07:55:35.0156 0x0b2c [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
07:55:35.0171 0x0b2c lanmanworkstation - ok
07:55:35.0203 0x0b2c lbrtfdc - ok
07:55:35.0250 0x0b2c [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
07:55:35.0250 0x0b2c LmHosts - ok
07:55:35.0281 0x0b2c [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
07:55:35.0296 0x0b2c Messenger - ok
07:55:35.0343 0x0b2c [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
07:55:35.0343 0x0b2c mnmdd - ok
07:55:35.0375 0x0b2c [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
07:55:35.0375 0x0b2c mnmsrvc - ok
07:55:35.0406 0x0b2c [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
07:55:35.0406 0x0b2c Modem - ok
07:55:35.0421 0x0b2c [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
07:55:35.0421 0x0b2c Mouclass - ok
07:55:35.0453 0x0b2c [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
07:55:35.0453 0x0b2c mouhid - ok
07:55:35.0468 0x0b2c [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
07:55:35.0468 0x0b2c MountMgr - ok
07:55:35.0562 0x0b2c MpKsl54df9d24 - ok
07:55:35.0578 0x0b2c mraid35x - ok
07:55:35.0609 0x0b2c [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
07:55:35.0609 0x0b2c MRxDAV - ok
07:55:35.0656 0x0b2c [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
07:55:35.0687 0x0b2c MRxSmb - ok
07:55:35.0750 0x0b2c [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
07:55:35.0750 0x0b2c MSDTC - ok
07:55:35.0765 0x0b2c [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
07:55:35.0765 0x0b2c Msfs - ok
07:55:35.0781 0x0b2c MSIServer - ok
07:55:35.0812 0x0b2c [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
07:55:35.0812 0x0b2c MSKSSRV - ok
07:55:35.0843 0x0b2c [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
07:55:35.0843 0x0b2c MSPCLOCK - ok
07:55:35.0859 0x0b2c [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
07:55:35.0859 0x0b2c MSPQM - ok
07:55:35.0906 0x0b2c [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
07:55:35.0906 0x0b2c mssmbios - ok
07:55:35.0937 0x0b2c [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
07:55:35.0937 0x0b2c Mup - ok
07:55:35.0984 0x0b2c [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
07:55:36.0000 0x0b2c napagent - ok
07:55:36.0031 0x0b2c [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
07:55:36.0046 0x0b2c NDIS - ok
07:55:36.0078 0x0b2c [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
07:55:36.0078 0x0b2c NdisTapi - ok
07:55:36.0109 0x0b2c [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
07:55:36.0109 0x0b2c Ndisuio - ok
07:55:36.0125 0x0b2c [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
07:55:36.0125 0x0b2c NdisWan - ok
07:55:36.0156 0x0b2c [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
07:55:36.0156 0x0b2c NDProxy - ok
07:55:36.0171 0x0b2c [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
07:55:36.0171 0x0b2c NetBIOS - ok
07:55:36.0203 0x0b2c [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
07:55:36.0218 0x0b2c NetBT - ok
07:55:36.0265 0x0b2c [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
07:55:36.0265 0x0b2c NetDDE - ok
07:55:36.0281 0x0b2c [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
07:55:36.0296 0x0b2c NetDDEdsdm - ok
07:55:36.0343 0x0b2c [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
07:55:36.0343 0x0b2c Netlogon - ok
07:55:36.0375 0x0b2c [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
07:55:36.0390 0x0b2c Netman - ok
07:55:36.0421 0x0b2c [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
07:55:36.0421 0x0b2c NIC1394 - ok
07:55:36.0484 0x0b2c [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
07:55:36.0484 0x0b2c Nla - ok
07:55:36.0500 0x0b2c [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
07:55:36.0515 0x0b2c Npfs - ok
07:55:36.0546 0x0b2c [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
07:55:36.0562 0x0b2c Ntfs - ok
07:55:36.0593 0x0b2c [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
07:55:36.0593 0x0b2c NtLmSsp - ok
07:55:36.0625 0x0b2c [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
07:55:36.0656 0x0b2c NtmsSvc - ok
07:55:36.0687 0x0b2c [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
07:55:36.0687 0x0b2c Null - ok
07:55:36.0734 0x0b2c [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
07:55:36.0734 0x0b2c NwlnkFlt - ok
07:55:36.0750 0x0b2c [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
07:55:36.0750 0x0b2c NwlnkFwd - ok
07:55:36.0765 0x0b2c [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
07:55:36.0781 0x0b2c ohci1394 - ok
07:55:36.0843 0x0b2c [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
07:55:36.0859 0x0b2c ose - ok
07:55:36.0890 0x0b2c [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\drivers\Parport.sys
07:55:36.0890 0x0b2c Parport - ok
07:55:36.0906 0x0b2c [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
07:55:36.0906 0x0b2c PartMgr - ok
07:55:36.0937 0x0b2c [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
07:55:36.0937 0x0b2c ParVdm - ok
07:55:36.0953 0x0b2c [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
07:55:36.0953 0x0b2c PCI - ok
07:55:36.0968 0x0b2c PCIDump - ok
07:55:37.0000 0x0b2c [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\drivers\PCIIde.sys
07:55:37.0000 0x0b2c PCIIde - ok
07:55:37.0015 0x0b2c [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
07:55:37.0015 0x0b2c Pcmcia - ok
07:55:37.0031 0x0b2c PDCOMP - ok
07:55:37.0046 0x0b2c PDFRAME - ok
07:55:37.0062 0x0b2c PDRELI - ok
07:55:37.0078 0x0b2c PDRFRAME - ok
07:55:37.0093 0x0b2c perc2 - ok
07:55:37.0109 0x0b2c perc2hib - ok
07:55:37.0171 0x0b2c [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
07:55:37.0171 0x0b2c PlugPlay - ok
07:55:37.0234 0x0b2c [ 9D84376931440F3679BEEF2A414FA493 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
07:55:37.0265 0x0b2c Pml Driver HPZ12 - ok
07:55:37.0281 0x0b2c [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
07:55:37.0281 0x0b2c PolicyAgent - ok
07:55:37.0312 0x0b2c [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
07:55:37.0312 0x0b2c PptpMiniport - ok
07:55:37.0328 0x0b2c [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
07:55:37.0328 0x0b2c ProtectedStorage - ok
07:55:37.0343 0x0b2c [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
07:55:37.0343 0x0b2c PSched - ok
07:55:37.0359 0x0b2c [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
07:55:37.0359 0x0b2c Ptilink - ok
07:55:37.0375 0x0b2c [ 30CBAE0A34359F1CD19D1576245149ED ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
07:55:37.0390 0x0b2c PxHelp20 - ok
07:55:37.0390 0x0b2c ql1080 - ok
07:55:37.0406 0x0b2c Ql10wnt - ok
07:55:37.0421 0x0b2c ql12160 - ok
07:55:37.0421 0x0b2c ql1240 - ok
07:55:37.0437 0x0b2c ql1280 - ok
07:55:37.0453 0x0b2c [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
07:55:37.0468 0x0b2c RasAcd - ok
07:55:37.0500 0x0b2c [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
07:55:37.0500 0x0b2c RasAuto - ok
07:55:37.0531 0x0b2c [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
07:55:37.0531 0x0b2c Rasl2tp - ok
07:55:37.0562 0x0b2c [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
07:55:37.0578 0x0b2c RasMan - ok
07:55:37.0593 0x0b2c [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
07:55:37.0593 0x0b2c RasPppoe - ok
07:55:37.0609 0x0b2c [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
07:55:37.0609 0x0b2c Raspti - ok
07:55:37.0625 0x0b2c [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
07:55:37.0625 0x0b2c Rdbss - ok
07:55:37.0656 0x0b2c [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
07:55:37.0656 0x0b2c RDPCDD - ok
07:55:37.0671 0x0b2c [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
07:55:37.0671 0x0b2c rdpdr - ok
07:55:37.0734 0x0b2c [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
07:55:37.0734 0x0b2c RDPWD - ok
07:55:37.0921 0x0b2c [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
07:55:37.0921 0x0b2c RDSessMgr - ok
07:55:37.0937 0x0b2c [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
07:55:37.0937 0x0b2c redbook - ok
07:55:37.0968 0x0b2c [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
07:55:37.0984 0x0b2c RemoteAccess - ok
07:55:38.0015 0x0b2c [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
07:55:38.0015 0x0b2c RemoteRegistry - ok
07:55:38.0046 0x0b2c [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
07:55:38.0062 0x0b2c RpcLocator - ok
07:55:38.0093 0x0b2c [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
07:55:38.0109 0x0b2c RpcSs - ok
07:55:38.0140 0x0b2c [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
07:55:38.0140 0x0b2c RSVP - ok
07:55:38.0171 0x0b2c [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
07:55:38.0171 0x0b2c SamSs - ok
07:55:38.0203 0x0b2c [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
07:55:38.0203 0x0b2c SCardSvr - ok
07:55:38.0234 0x0b2c [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
07:55:38.0250 0x0b2c Schedule - ok
07:55:38.0281 0x0b2c [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
07:55:38.0281 0x0b2c Secdrv - ok
07:55:38.0296 0x0b2c [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
07:55:38.0296 0x0b2c seclogon - ok
07:55:38.0312 0x0b2c [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
07:55:38.0328 0x0b2c SENS - ok
07:55:38.0343 0x0b2c [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\drivers\Serial.sys
07:55:38.0343 0x0b2c Serial - ok
07:55:38.0375 0x0b2c [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\DRIVERS\sfloppy.sys
07:55:38.0375 0x0b2c Sfloppy - ok
07:55:38.0406 0x0b2c [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
07:55:38.0421 0x0b2c SharedAccess - ok
07:55:38.0453 0x0b2c [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
07:55:38.0468 0x0b2c ShellHWDetection - ok
07:55:38.0484 0x0b2c Simbad - ok
07:55:38.0515 0x0b2c [ 858934C454BDC6664C752BF0CD3EAEAE ] smwdm C:\WINDOWS\system32\drivers\smwdm.sys
07:55:38.0531 0x0b2c smwdm - ok
07:55:38.0562 0x0b2c [ 3978F082274F723AD5A0A8058C2417DD ] SoundMAX Agent Service (default) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
07:55:38.0578 0x0b2c SoundMAX Agent Service (default) - ok
07:55:38.0593 0x0b2c Sparrow - ok
07:55:38.0625 0x0b2c [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
07:55:38.0625 0x0b2c splitter - ok
07:55:38.0656 0x0b2c [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
07:55:38.0671 0x0b2c Spooler - ok
07:55:38.0703 0x0b2c [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
07:55:38.0703 0x0b2c sr - ok
07:55:38.0750 0x0b2c [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
07:55:38.0781 0x0b2c srservice - ok
07:55:38.0812 0x0b2c [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
07:55:38.0828 0x0b2c Srv - ok
07:55:38.0859 0x0b2c [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
07:55:38.0875 0x0b2c SSDPSRV - ok
07:55:38.0906 0x0b2c [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
07:55:38.0921 0x0b2c stisvc - ok
07:55:38.0953 0x0b2c [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
07:55:38.0968 0x0b2c swenum - ok
07:55:38.0984 0x0b2c [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
07:55:38.0984 0x0b2c swmidi - ok
07:55:39.0000 0x0b2c SwPrv - ok
07:55:39.0015 0x0b2c symc810 - ok
07:55:39.0031 0x0b2c symc8xx - ok
07:55:39.0046 0x0b2c sym_hi - ok
07:55:39.0062 0x0b2c sym_u3 - ok
07:55:39.0109 0x0b2c [ 23FE1F173996B8BAD4B9ED74003676D8 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
07:55:39.0109 0x0b2c SynTP - ok
07:55:39.0140 0x0b2c [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
07:55:39.0140 0x0b2c sysaudio - ok
07:55:39.0171 0x0b2c [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
07:55:39.0187 0x0b2c SysmonLog - ok
07:55:39.0218 0x0b2c [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
07:55:39.0234 0x0b2c TapiSrv - ok
07:55:39.0296 0x0b2c [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
07:55:39.0312 0x0b2c Tcpip - ok
07:55:39.0328 0x0b2c [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
07:55:39.0343 0x0b2c TDPIPE - ok
07:55:39.0359 0x0b2c [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
07:55:39.0359 0x0b2c TDTCP - ok
07:55:39.0390 0x0b2c [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
07:55:39.0390 0x0b2c TermDD - ok
07:55:39.0421 0x0b2c [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
07:55:39.0468 0x0b2c TermService - ok
07:55:39.0500 0x0b2c [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
07:55:39.0500 0x0b2c Themes - ok
07:55:39.0531 0x0b2c [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
07:55:39.0546 0x0b2c TlntSvr - ok
07:55:39.0562 0x0b2c TosIde - ok
07:55:39.0593 0x0b2c [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
07:55:39.0593 0x0b2c TrkWks - ok
07:55:39.0640 0x0b2c [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
07:55:39.0640 0x0b2c Udfs - ok
07:55:39.0656 0x0b2c ultra - ok
07:55:39.0703 0x0b2c [ C81B8635DEE0D3EF5F64B3DD643023A5 ] UMWdf C:\WINDOWS\system32\wdfmgr.exe
07:55:39.0718 0x0b2c UMWdf - ok
07:55:39.0765 0x0b2c [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
07:55:39.0781 0x0b2c Update - ok
07:55:39.0812 0x0b2c [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
07:55:39.0843 0x0b2c upnphost - ok
07:55:39.0875 0x0b2c [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
07:55:39.0875 0x0b2c UPS - ok
07:55:39.0921 0x0b2c [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
07:55:39.0921 0x0b2c usbccgp - ok
07:55:39.0953 0x0b2c [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
07:55:39.0953 0x0b2c usbehci - ok
07:55:39.0984 0x0b2c [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
07:55:39.0984 0x0b2c usbhub - ok
07:55:40.0015 0x0b2c [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
07:55:40.0015 0x0b2c usbprint - ok
07:55:40.0031 0x0b2c [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
07:55:40.0046 0x0b2c usbscan - ok
07:55:40.0093 0x0b2c [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
07:55:40.0093 0x0b2c USBSTOR - ok
07:55:40.0125 0x0b2c [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
07:55:40.0125 0x0b2c usbuhci - ok
07:55:40.0140 0x0b2c [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
07:55:40.0156 0x0b2c VgaSave - ok
07:55:40.0171 0x0b2c ViaIde - ok
07:55:40.0187 0x0b2c [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
07:55:40.0187 0x0b2c VolSnap - ok
07:55:40.0234 0x0b2c [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
07:55:40.0250 0x0b2c VSS - ok
07:55:40.0437 0x0b2c [ C89DA341FCC883A3D79DC11727484FC2 ] w29n51 C:\WINDOWS\system32\DRIVERS\w29n51.sys
07:55:40.0546 0x0b2c w29n51 - ok
07:55:40.0593 0x0b2c [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
07:55:40.0609 0x0b2c W32Time - ok
07:55:40.0656 0x0b2c [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
07:55:40.0656 0x0b2c Wanarp - ok
07:55:40.0671 0x0b2c WDICA - ok
07:55:40.0703 0x0b2c [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
07:55:40.0703 0x0b2c wdmaud - ok
07:55:40.0750 0x0b2c [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
07:55:40.0765 0x0b2c WebClient - ok
07:55:40.0828 0x0b2c [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
07:55:40.0843 0x0b2c winmgmt - ok
07:55:40.0890 0x0b2c [ A477391B7A8B0A0DAABADB17CF533A4B ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
07:55:40.0906 0x0b2c WmdmPmSN - ok
07:55:40.0953 0x0b2c [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
07:55:40.0984 0x0b2c Wmi - ok
07:55:41.0015 0x0b2c [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
07:55:41.0015 0x0b2c WmiAcpi - ok
07:55:41.0046 0x0b2c [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
07:55:41.0062 0x0b2c WmiApSrv - ok
07:55:41.0093 0x0b2c [ C1B3D9D75C3FB735F5FA3A5806ADED57 ] WpdUsb C:\WINDOWS\system32\Drivers\wpdusb.sys
07:55:41.0093 0x0b2c WpdUsb - ok
07:55:41.0140 0x0b2c [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
07:55:41.0156 0x0b2c wscsvc - ok
07:55:41.0171 0x0b2c [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
07:55:41.0187 0x0b2c wuauserv - ok
07:55:41.0250 0x0b2c [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
07:55:41.0281 0x0b2c WZCSVC - ok
07:55:41.0312 0x0b2c [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
07:55:41.0328 0x0b2c xmlprov - ok
07:55:41.0359 0x0b2c ================ Scan global ===============================
07:55:41.0390 0x0b2c [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
07:55:41.0421 0x0b2c [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
07:55:41.0468 0x0b2c [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
07:55:41.0515 0x0b2c [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
07:55:41.0515 0x0b2c [Global] - ok
07:55:41.0531 0x0b2c ================ Scan MBR ==================================
07:55:41.0531 0x0b2c [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
07:55:41.0765 0x0b2c \Device\Harddisk0\DR0 - ok
07:55:41.0781 0x0b2c [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR3
07:55:41.0875 0x0b2c \Device\Harddisk1\DR3 - ok
07:55:41.0875 0x0b2c ================ Scan VBR ==================================
07:55:41.0890 0x0b2c [ 3699AE6396BF19BF07608A2BFE0A6D4B ] \Device\Harddisk0\DR0\Partition1
07:55:41.0890 0x0b2c \Device\Harddisk0\DR0\Partition1 - ok
07:55:41.0921 0x0b2c [ 45FEDE7D69BFA78BC9A17C0512E61F0F ] \Device\Harddisk0\DR0\Partition2
07:55:41.0921 0x0b2c \Device\Harddisk0\DR0\Partition2 - ok
07:55:41.0921 0x0b2c [ 496C8EC0665DADF32AA63E5C8EF707F3 ] \Device\Harddisk1\DR3\Partition1
07:55:41.0937 0x0b2c \Device\Harddisk1\DR3\Partition1 - ok
07:55:41.0937 0x0b2c ============================================================
07:55:41.0937 0x0b2c Scan finished
07:55:41.0937 0x0b2c ============================================================
07:55:41.0953 0x0b24 Detected object count: 0
07:55:41.0953 0x0b24 Actual detected object count: 0
07:55:49.0171 0x0b08 Deinitialize success



Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.08.30.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Admin SV MO :: NB33887 [administrátor]

Ochrana: Povolena

30. 8. 2013 7:00:17
mbam-log-2013-08-30 (07-00-17).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 204822
Uplynulý čas: 8 minut, 16 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 7
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\down.3884.newtab_setup.exe (PUP.Adware.MultiPlug) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\down.4056.coupon_setup.exe (PUP.Adware.MultiPlug) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\{0C1D9A7B-2C20-4CCF-AE24-6402D7FEB88D}\Addons\agent_setup.exe (PUP.Optional.BetterSoft.A) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\{0C1D9A7B-2C20-4CCF-AE24-6402D7FEB88D}\Addons\assistant_v3.exe (PUP.Optional.SProtect.A) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\{0C1D9A7B-2C20-4CCF-AE24-6402D7FEB88D}\Addons\ext_setup.exe (PUP.Adware.MultiPlug) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\{0C1D9A7B-2C20-4CCF-AE24-6402D7FEB88D}\Addons\OptimizerProInstaller.exe (PUP.Optional.OptimizePro.A) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\Admin SV MO\Local Settings\Temp\{0C1D9A7B-2C20-4CCF-AE24-6402D7FEB88D}\Addons\web_assistant_v2.exe (PUP.Optional.SProtect.A) -> Přesun do karantény a smazání se zdařilo.

(konec)


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.08.30.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Admin SV MO :: NB33887 [administrátor]

Ochrana: Zakázána

30. 8. 2013 7:13:54
mbam-log-2013-08-30 (07-13-54).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 237013
Uplynulý čas: 31 minut, 56 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)


POKRAČOVÁNÍ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.5 (08.28.2013:1)
OS: Microsoft Windows XP x86
Ran by Admin SV MO on p  30. 08. 2013 at 10:43:45,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  30. 08. 2013 at 10:48:04,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



RogueKiller V8.6.7 [Aug 28 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Admin SV MO [Práva správce]
Mód : Kontrola -- Datum : 08/30/2013 10:31:17
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD1200BEVE-00WZT0 +++++
--- User ---
[MBR] 4c9cd636832a09e0b736c0da5d417541
[BSP] a5e189e77c8ecc8740e6c00c44592949 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 49996 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 102392640 | Size: 64466 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD1200BEVE-00WZT0 +++++
--- User ---
[MBR] b43f5f30a162c7c4916b7e438f464588
[BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 128 | Size: 3823 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[0]_S_08302013_103117.txt >>


# AdwCleaner v3.001 - Report created 30/08/2013 at 10:38:56
# Updated 24/08/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Admin SV MO - NB33887
# Running from : C:\Documents and Settings\Admin SV MO\Plocha\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v23.0.1 (cs)

[ File : C:\Documents and Settings\Admin SV MO\Data aplikací\Mozilla\Firefox\Profiles\d3m0vwrw.default\prefs.js ]


*************************

AdwCleaner[R1].txt - [815 octets] - [30/08/2013 10:38:07]
AdwCleaner[S1].txt - [737 octets] - [30/08/2013 10:38:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [796 octets] ##########

KONEC LOGŮ,
děkuji.

Žádný nález

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM

Začne reagovat zhruba 2 minuty po restartu.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Admin SV MO
->Temp folder emptied: 2671242 bytes
->Temporary Internet Files folder emptied: 4538770 bytes
->Java cache emptied: 609756 bytes
->FireFox cache emptied: 15750517 bytes
->Flash cache emptied: 506 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 4978554 bytes

User: NetworkService
->Temp folder emptied: 58598 bytes
->Temporary Internet Files folder emptied: 33237 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 88470664 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 112,00 mb


[EMPTYFLASH]

User: Admin SV MO
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: Admin SV MO
->Java cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

Total Java Files Cleaned = 0,00 mb


Restore point Set: OTM Restore Point
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\twain_32\hpqgnds2.tmp moved successfully.
File/Folder C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Cpqset deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NWEReboot deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
========== SERVICES/DRIVERS ==========
Service MpKsl54df9d24 stopped successfully!
Service MpKsl54df9d24 deleted successfully!

OTM by OldTimer - Version 3.1.21.0 log created on 08302013_112102

Files moved on Reboot...

Registry entries deleted on Reboot...

Total RAM: 503 MB není až tak moc a 2min. na načtení všech ovladačů a nastavení bych bral
Jak velká je složka "Plocha"

Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.

Plocha má 4,08MB. Já vím, že ta paměť je žalostná, hodně pomohl MBAM a odstranění toho svinstva. Původně nereagoval NTB vůbec, i bez netu.
Děkuji za pomoc. Stejně budu muset tenhle stroj předat, šéf utíká z práce.

Tak opět je to stejné, po restartu po úklidu OTM přestal reagovat.
HDD stále svítí, odezva na cokoliv 10 minut po naběhnutí systému je nulová.
Správce úloh se ani trojhmatem nespustí.
NTB jsem musel odpojit od netu a nyní píšu z jiného.
Máte prosím ještě nějaký nápad?
Díky

Vyzkoušej jak se chová po restartu do Nouzového režimu
a pak v Nouzovém režimu s prací v síti.

Tak to už jsem to nestihnul. Ntb si můj vedoucí odnesl domů a už je to prý v pořádku.
Takže děkuji za pomoc. U vedoucího mám malé, ale hodně betvýznamné plus.

Nemáš zač - rádo se stalo a jsme tady i příště