VIRY.CZ

Když kliknu na myš ať už v prohlížeči nebo normálně na ploše automaticky je z toho dvojklik a v prohlížeči navíc, když chci kliknou na nějaký odkaz stránka skáče nahoru a dolu. Děkuji za pomoc a rady

Logfile of random's system information tool 1.09 (written by random/random)
Run by PC at 2013-10-25 12:20:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 386 GB (40%) free of 954 GB
Total RAM: 8139 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:20:50, on 25.10.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\PC.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\RunOnce: [GBTUpd] C:\Program Files (x86)\Gigabyte\UpdManager\PreRun.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - Global Startup: AML Device Install.lnk = C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Dr.Web Control Service (DrWebAVService) - Doctor Web, Ltd. - C:\Program Files\DrWeb\dwservice.exe
O23 - Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) - Doctor Web, Ltd. - C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
O23 - Service: Dr.Web Firewall Service (DrWebFwSvc) - Doctor Web, Ltd. - C:\Program Files\DrWeb\frwl_svc.exe
O23 - Service: Dr.Web Net Filtering Service (DrWebNetFilter) - Doctor Web, Ltd. - C:\Program Files\DrWeb\dwnetfilter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7082 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\DrWeb\dwservice.exe" --logfile="C:\ProgramData\Doctor Web\Logs\dwservice.log"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\DrWeb\frwl_svc.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\diMaster.dll" /prefetch:1
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe" /c /a /s UserSession2
"C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe"
"C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwarkdaemon.exe" -arkpipe:\pipe\ARServer
"C:\Program Files\DrWeb\dwnetfilter.exe" --ats
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
watcher 2404 584 dwe-spider-964-1ced150a53e230e-watch
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\DrWeb\frwl_notify.exe"
"C:\Program Files\DrWeb\spideragent.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4416.0.1319775048\287264851" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,18,24,26 --gpu-vendor-id=0x1002 --gpu-device-id=0x6818 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.950.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group2 pct:10a stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --instant-process --enable-threaded-compositing --disable-html-notifications --channel="4416.1.1337223318\1007391035" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group2 pct:10a stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4416.10.38176530\542433407" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4416.12.593368855\1872462401" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\PC\Downloads\RSITx64 (2).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\b9y9aipm.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll [2013-02-02 512408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL [2012-06-21 210400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll [2013-02-02 512408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-16 12445288]
"Firewall"=C:\Program Files\DrWeb\frwl_notify.exe [2013-08-24 2502176]
"SpIDerAgent"=C:\Program Files\DrWeb\spideragent.exe [2013-08-24 15774976]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe [2013-08-23 888152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Windows\SysWOW64\qttask.exe [2013-08-22 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe [2013-08-23 888152]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-27 291608]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-02-14 636032]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GBTUpd"=C:\Program Files (x86)\Gigabyte\UpdManager\PreRun.exe [2008-04-03 297480]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AML Device Install.lnk - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DrWebEngine]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DrWebEngine]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.l3codecp"=l3codecp.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-10-09 07:28:19 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-09 07:28:18 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-09 07:28:18 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-09 07:28:18 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-09 07:28:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-09 07:28:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-09 07:28:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 07:28:18 ----A---- C:\Windows\system32\ieui.dll
2013-10-09 07:28:18 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-09 07:28:18 ----A---- C:\Windows\system32\iesetup.dll
2013-10-09 07:28:18 ----A---- C:\Windows\system32\iernonce.dll
2013-10-09 07:28:18 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-09 07:28:17 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-09 07:28:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-09 07:28:17 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-09 07:28:17 ----A---- C:\Windows\system32\jscript.dll
2013-10-09 07:28:17 ----A---- C:\Windows\system32\iertutil.dll
2013-10-09 07:28:16 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-09 07:28:16 ----A---- C:\Windows\system32\jscript9.dll
2013-10-09 07:28:15 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-09 07:28:15 ----A---- C:\Windows\system32\urlmon.dll
2013-10-09 07:28:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-09 07:28:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-09 07:28:14 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-09 07:28:14 ----A---- C:\Windows\system32\wininet.dll
2013-10-09 07:28:14 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-09 07:28:13 ----A---- C:\Windows\system32\ieframe.dll
2013-10-09 07:28:12 ----A---- C:\Windows\system32\mshtml.dll
2013-10-09 07:28:11 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-09 07:10:01 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-09 07:10:01 ----A---- C:\Windows\system32\comctl32.dll
2013-10-09 07:09:59 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-09 07:09:59 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-09 07:09:59 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-09 07:09:59 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-09 07:09:59 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-09 07:09:59 ----A---- C:\Windows\system32\lpk.dll
2013-10-09 07:09:59 ----A---- C:\Windows\system32\fontsub.dll
2013-10-09 07:09:59 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-09 07:09:59 ----A---- C:\Windows\system32\dciman32.dll
2013-10-09 07:09:59 ----A---- C:\Windows\system32\atmlib.dll
2013-10-09 07:09:59 ----A---- C:\Windows\system32\atmfd.dll
2013-10-09 07:09:58 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-09 07:09:56 ----A---- C:\Windows\system32\drivers\usbscan.sys
2013-10-09 07:09:56 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-09 07:09:56 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-09 07:09:55 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-09 07:09:55 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-09 07:09:54 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-09 07:09:54 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-09 07:09:54 ----A---- C:\Windows\system32\davclnt.dll
2013-10-09 07:09:53 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-09 07:09:53 ----A---- C:\Windows\system32\mswsock.dll
2013-10-09 07:09:53 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-09 07:09:53 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-09 07:09:52 ----A---- C:\Windows\system32\win32k.sys
2013-10-09 07:09:51 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-09 07:09:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-09 07:09:48 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-09 07:09:47 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-10-09 07:09:47 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-09 07:09:47 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-09 07:09:47 ----A---- C:\Windows\system32\wow64.dll
2013-10-09 07:09:47 ----A---- C:\Windows\system32\tdh.dll
2013-10-09 07:09:47 ----A---- C:\Windows\system32\ntdll.dll
2013-10-09 07:09:47 ----A---- C:\Windows\system32\advapi32.dll
2013-10-09 07:09:46 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-09 07:09:46 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-09 07:09:46 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-09 07:09:46 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-09 07:09:46 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-09 07:09:43 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:09:43 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:09:35 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-09 07:09:34 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-10-09 07:09:33 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-08 18:16:37 ----D---- C:\Users\PC\AppData\Roaming\Mozilla
2013-10-08 18:16:14 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2013-10-25 12:20:50 ----D---- C:\Windows\Prefetch
2013-10-25 12:20:46 ----D---- C:\Program Files\trend micro
2013-10-25 12:20:30 ----D---- C:\Windows\temp
2013-10-25 12:10:22 ----D---- C:\Users\PC\AppData\Roaming\uTorrent
2013-10-25 09:18:42 ----D---- C:\Windows\system32\config
2013-10-25 09:06:41 ----SHD---- C:\System Volume Information
2013-10-25 03:24:10 ----D---- C:\Windows\system32\wdi
2013-10-21 16:23:39 ----D---- C:\Windows\system32\catroot2
2013-10-20 19:16:28 ----D---- C:\Users\PC\AppData\Roaming\vlc
2013-10-20 19:04:13 ----D---- C:\Windows\System32
2013-10-20 19:04:13 ----D---- C:\Windows\inf
2013-10-20 19:04:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-10-17 19:05:11 ----D---- C:\Windows\rescache
2013-10-17 14:59:03 ----SHD---- C:\Windows\Installer
2013-10-17 14:55:02 ----RD---- C:\Program Files (x86)
2013-10-09 19:37:09 ----D---- C:\ProgramData\Norton
2013-10-09 18:00:16 ----SHD---- C:\DrWeb Quarantine
2013-10-09 18:00:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2013-10-09 17:15:54 ----RSD---- C:\Windows\assembly
2013-10-09 17:15:54 ----D---- C:\Windows\Microsoft.NET
2013-10-09 14:39:19 ----D---- C:\Windows\winsxs
2013-10-09 14:37:01 ----D---- C:\Windows\SysWOW64
2013-10-09 14:37:01 ----D---- C:\Program Files\Internet Explorer
2013-10-09 14:37:01 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-09 14:37:00 ----D---- C:\Windows\system32\drivers
2013-10-09 14:37:00 ----D---- C:\Windows\AppPatch
2013-10-09 14:36:59 ----D---- C:\Windows\system32\cs-CZ
2013-10-09 14:36:57 ----D---- C:\Windows\system32\DriverStore
2013-10-09 07:28:29 ----D---- C:\Windows\system32\catroot
2013-09-29 13:12:47 ----D---- C:\Users\PC\AppData\Roaming\BSplayer
2013-09-28 12:20:42 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 DrWebLwf;Dr.Web Firewall Kernel-Mode Driver; C:\Windows\system32\drivers\DrWebLwf.sys [2013-08-24 247024]
R0 DwProt;DrWeb Protection; C:\Windows\system32\drivers\dwprot.sys [2013-08-24 255672]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-27 16152]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SpiderG3;DrWeb file system scanner; C:\Windows\system32\drivers\spiderg3.sys [2013-08-24 234168]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS [2011-07-25 451192]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS [2012-05-22 1129120]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [2013-10-23 1524824]
R1 ccSet_NIS;Norton Internet Security Settings Manager; C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys [2012-06-07 167072]
R1 DrWebWfp;DrWebWfp; C:\Windows\system32\drivers\dw_wfp.sys [2013-08-24 74912]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-24 283200]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-08-27 484952]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20131024.001\IDSvia64.sys [2013-10-15 521816]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS [2012-07-06 37536]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS [2012-04-18 190072]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS [2012-04-18 405624]
R1 VirtDiskBus;3TB+ Unlock; C:\Windows\system32\DRIVERS\VirtDiskBus64.sys [2011-02-08 66160]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-15 10856960]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-15 327680]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-08-27 140376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-01-17 4734440]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-27 356120]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-27 787736]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131024.019\ENG64.SYS [2013-08-29 126040]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131024.019\EX64.SYS [2013-08-29 2099288]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2011-12-02 239208]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS [2012-07-06 737952]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-08-23 175736]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2013-08-22 25640]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-02-15 235520]
R2 DrWebAVService;Dr.Web Control Service; C:\Program Files\DrWeb\dwservice.exe [2013-08-24 5263600]
R2 DrWebFwSvc;Dr.Web Firewall Service; C:\Program Files\DrWeb\frwl_svc.exe [2013-08-24 1871256]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [2012-06-16 138272]
R3 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine); C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe [2013-08-24 1968192]
R3 DrWebNetFilter;Dr.Web Net Filtering Service; C:\Program Files\DrWeb\dwnetfilter.exe [2013-08-24 5435648]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-22 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-22 116648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-23 1255736]

-----------------EOF-----------------

Zdravim

V prve rade vyzkousejte jinou mys

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1005

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 10.0.9200.16721

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8534646784, free: 6308212736

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1005

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 10.0.9200.16721

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8534646784, free: 6267052032

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1005

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 10.0.9200.16721

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8534646784, free: 6122254336

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1007

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 10.0.9200.16721

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8534646784, free: 6018908160

Downloaded database version: v2013.10.27.02
Downloaded database version: v2013.10.11.02
Initializing...
======================
------------ Kernel report ------------
10/27/2013 10:03:27
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\DRIVERS\iusb3hcs.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\drivers\spiderg3.sys
\SystemRoot\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS
\SystemRoot\system32\drivers\DrWebLwf.sys
\SystemRoot\system32\drivers\msrpc.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\system32\drivers\NDIS.SYS
\SystemRoot\system32\drivers\TDI.SYS
\SystemRoot\system32\drivers\dwprot.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\dtsoftbus01.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\drivers\NISx64\1309010.00E\ccSetx64.sys
\SystemRoot\system32\drivers\NISx64\1309010.00E\Ironx64.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\serial.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\VirtDiskBus64.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS
\??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
\SystemRoot\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20131025.001\IDSvia64.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
\SystemRoot\system32\drivers\dw_wfp.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20131022.001\BHDrvx64.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\iusb3xhc.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\DRIVERS\serenum.sys
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\parport.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\iusb3hub.sys
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_msahci.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\drivers\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Windows\TEMP\4DD089E.sys
\SystemRoot\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\system32\drivers\RtHDMIVX.sys
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131026.007\EX64.SYS
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131026.007\ENG64.SYS
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\clbcatq.dll
\Windows\System32\msvcrt.dll
\Windows\System32\sechost.dll
\Windows\System32\kernel32.dll
\Windows\System32\setupapi.dll
\Windows\System32\lpk.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8007869060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP1T0L0-1\
Lower Device Object: 0xfffffa800758b060
Lower Device Driver Name: \Driver\atapi\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8007868060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa800750d060
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xfffffa8007869060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007869b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007869060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa800758b060, DeviceName: \Device\Ide\IdeDeviceP1T0L0-1\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007868060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007868b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007868060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa800750d060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: 0

GPT Protective MBR Partition information:

Partition 0 type is EFI-GPT (0xee)
Partition is NOT ACTIVE.
Partition starts at LBA: 1 Numsec = 4294967295

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

GPT Partition information:

GPT Header Signature 4546492050415254
GPT Header Revision 65536 Size 92 CRC 3239875663
GPT Header CurrentLba = 1 BackupLba 5860533167
GPT Header FirstUsableLba 34 LastUsableLba 5860533134
GPT Header Guid e7bd73c2-df21-47a2-9e58-88863fee064
GPT Header Contains 128 partition entries starting at LBA 2
GPT Header Partition entry size = 128

Backup GPT header Signature 4546492050415254
Backup GPT header Revision 65536 Size 92 CRC 3239875663
Backup GPT header CurrentLba = 5860533167 BackupLba 1
Backup GPT header FirstUsableLba 34 LastUsableLba 5860533134
Backup GPT header Guid e7bd73c2-df21-47a2-9e58-88863fee064
Backup GPT header Contains 128 partition entries starting at LBA 5860533135
Backup GPT header Partition entry size = 128

Partition 0 Type e3c9e316-b5c-4db8-817d-f92df0215ae
Partition ID acfc4b0f-ca3d-4c00-871f-d15a24c810
FirstLBA 34 Last LBA 262177
Attributes 0
Partition Name Microsoft reserved partition

Partition 1 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Partition ID 8f00a4e2-15bb-48b1-a55b-1c7971e8c6b
FirstLBA 264192 Last LBA 5860532223
Attributes 0
Partition Name Basic data partition

Disk Size: 3000592982016 bytes
Sector size: 512 bytes

Done!
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: A3519339

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 204800
Partition file system is NTFS
Partition is bootable

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 206848 Numsec = 1953314816

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204886016 bytes
Sector size: 512 bytes

Done!
Infected: C:\Users\PC\Downloads\77ZipSetup.exe --> [Adware.InstallBrain]
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_1_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_1_0_2048_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_1_r.mbam...
Removal finished

Problem je i po vymene mysi??

Ano, chvilku to bylo dobré, ale pak se to zase objevilo..

Stahnete si TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe

• Kliknete na volbu Change parametrs
• V okne Additional Option zakliknete vsechny moznosti
• Kliknete na OK
• Utilite prikazte, at skenuje - klik na Start Scan
• Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip
• Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip
• Pokud mate vsude Skip, kliknete na Continue
• Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

18:18:43.0607 4032 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:18:49.0945 4032 ============================================================
18:18:49.0946 4032 Current date / time: 2013/10/30 18:18:49.0945
18:18:49.0946 4032 SystemInfo:
18:18:49.0946 4032
18:18:49.0946 4032 OS Version: 6.1.7601 ServicePack: 1.0
18:18:49.0946 4032 Product type: Workstation
18:18:49.0946 4032 ComputerName: PC-PC
18:18:49.0946 4032 UserName: PC
18:18:49.0946 4032 Windows directory: C:\Windows
18:18:49.0946 4032 System windows directory: C:\Windows
18:18:49.0946 4032 Running under WOW64
18:18:49.0946 4032 Processor architecture: Intel x64
18:18:49.0946 4032 Number of processors: 4
18:18:49.0946 4032 Page size: 0x1000
18:18:49.0946 4032 Boot type: Normal boot
18:18:49.0946 4032 ============================================================
18:18:52.0605 4032 Drive \Device\Harddisk0\DR0 - Size: 0x2BAA1476000 (2794.52 Gb), SectorSize: 0x200, Cylinders: 0x59101, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:18:52.0701 4032 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:18:52.0708 4032 ============================================================
18:18:52.0708 4032 \Device\Harddisk0\DR0:
18:18:52.0708 4032 GPT partitions:
18:18:52.0709 4032 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {ACFC4B0F-CA3D-4C00-871F-D15A0204C810}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
18:18:52.0709 4032 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {8F00A4E2-15BB-48B1-A55B-01C7971E8C6B}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x5D4C9800
18:18:52.0709 4032 MBR partitions:
18:18:52.0709 4032 \Device\Harddisk1\DR1:
18:18:52.0709 4032 MBR partitions:
18:18:52.0709 4032 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
18:18:52.0709 4032 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
18:18:52.0709 4032 ============================================================
18:18:52.0986 4032 C: <-> \Device\Harddisk1\DR1\Partition2
18:18:53.0026 4032 E: <-> \Device\Harddisk0\DR0\Partition2
18:18:53.0063 4032 F: <-> \Device\Harddisk1\DR1\Partition1
18:18:53.0063 4032 ============================================================
18:18:53.0063 4032 Initialize success
18:18:53.0063 4032 ============================================================
18:19:27.0901 5472 ============================================================
18:19:27.0901 5472 Scan started
18:19:27.0901 5472 Mode: Manual; SigCheck; TDLFS;
18:19:27.0901 5472 ============================================================
18:19:30.0430 5472 ================ Scan system memory ========================
18:19:30.0430 5472 System memory - ok
18:19:30.0431 5472 ================ Scan services =============================
18:19:32.0299 5472 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
18:19:32.0561 5472 1394ohci - ok
18:19:32.0865 5472 5F96D99 - ok
18:19:32.0979 5472 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
18:19:33.0041 5472 ACPI - ok
18:19:33.0066 5472 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
18:19:33.0349 5472 AcpiPmi - ok
18:19:35.0097 5472 [ 24A0876D07EF356DCBC1D7A7929354AB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
18:19:35.0114 5472 AdobeFlashPlayerUpdateSvc - ok
18:19:35.0203 5472 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
18:19:35.0264 5472 adp94xx - ok
18:19:35.0487 5472 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
18:19:35.0516 5472 adpahci - ok
18:19:35.0546 5472 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
18:19:35.0558 5472 adpu320 - ok
18:19:35.0736 5472 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:19:36.0986 5472 AeLookupSvc - ok
18:19:37.0254 5472 [ 314C17917AC8523EC77A710215012A65 ] AFD C:\Windows\system32\drivers\afd.sys
18:19:38.0095 5472 AFD - ok
18:19:38.0333 5472 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:19:38.0349 5472 agp440 - ok
18:19:38.0609 5472 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
18:19:38.0964 5472 ALG - ok
18:19:39.0096 5472 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
18:19:39.0110 5472 aliide - ok
18:19:39.0392 5472 [ 962227630779043B5C1D4CD157ABB912 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
18:19:39.0443 5472 AMD External Events Utility - ok
18:19:39.0472 5472 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
18:19:39.0486 5472 amdide - ok
18:19:39.0564 5472 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
18:19:39.0642 5472 AmdK8 - ok
18:19:43.0368 5472 [ 56D6631761EC37745F0DF16BCDC4CAF4 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
18:19:43.0757 5472 amdkmdag - ok
18:19:44.0138 5472 [ 2D9005EA0BFD25C740E53C8DD3C069E0 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
18:19:44.0342 5472 amdkmdap - ok
18:19:44.0601 5472 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
18:19:45.0105 5472 AmdPPM - ok
18:19:45.0393 5472 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
18:19:45.0407 5472 amdsata - ok
18:19:45.0471 5472 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
18:19:45.0481 5472 amdsbs - ok
18:19:45.0497 5472 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
18:19:45.0504 5472 amdxata - ok
18:19:46.0289 5472 [ BEF294FFE5F40BE768BDCBE1837DFABE ] APNMCP C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
18:19:46.0300 5472 APNMCP - ok
18:19:46.0485 5472 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
18:19:48.0933 5472 AppID - ok
18:19:49.0593 5472 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:19:49.0807 5472 AppIDSvc - ok
18:19:50.0043 5472 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
18:19:50.0362 5472 Appinfo - ok
18:19:50.0583 5472 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
18:19:50.0593 5472 arc - ok
18:19:50.0674 5472 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
18:19:50.0682 5472 arcsas - ok
18:19:50.0700 5472 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:19:51.0327 5472 AsyncMac - ok
18:19:51.0372 5472 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
18:19:51.0379 5472 atapi - ok
18:19:51.0613 5472 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:19:52.0202 5472 AudioEndpointBuilder - ok
18:19:52.0263 5472 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
18:19:52.0304 5472 AudioSrv - ok
18:19:52.0372 5472 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:19:53.0721 5472 AxInstSV - ok
18:19:53.0872 5472 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
18:19:54.0178 5472 b06bdrv - ok
18:19:54.0249 5472 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
18:19:54.0370 5472 b57nd60a - ok
18:19:54.0654 5472 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
18:19:54.0813 5472 BDESVC - ok
18:19:54.0902 5472 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
18:19:55.0510 5472 Beep - ok
18:19:55.0829 5472 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
18:19:56.0058 5472 BFE - ok
18:19:56.0745 5472 [ CB1B72BDCCF77B8F2104CF068FD2355C ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20131022.001\BHDrvx64.sys
18:19:56.0811 5472 BHDrvx64 - ok
18:19:57.0058 5472 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
18:19:57.0232 5472 BITS - ok
18:19:57.0283 5472 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:19:57.0354 5472 blbdrive - ok
18:19:57.0524 5472 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:19:57.0988 5472 bowser - ok
18:19:58.0025 5472 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
18:19:58.0303 5472 BrFiltLo - ok
18:19:58.0330 5472 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
18:19:58.0344 5472 BrFiltUp - ok
18:19:58.0563 5472 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
18:19:58.0637 5472 BridgeMP - ok
18:19:58.0661 5472 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
18:19:58.0842 5472 Browser - ok
18:19:58.0896 5472 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:19:59.0224 5472 Brserid - ok
18:19:59.0262 5472 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:19:59.0479 5472 BrSerWdm - ok
18:19:59.0547 5472 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:19:59.0715 5472 BrUsbMdm - ok
18:19:59.0773 5472 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:19:59.0849 5472 BrUsbSer - ok
18:19:59.0884 5472 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
18:19:59.0929 5472 BTHMODEM - ok
18:20:00.0055 5472 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
18:20:00.0222 5472 bthserv - ok
18:20:00.0264 5472 catchme - ok
18:20:00.0443 5472 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NIS C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys
18:20:00.0457 5472 ccSet_NIS - ok
18:20:00.0546 5472 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:20:00.0791 5472 cdfs - ok
18:20:00.0927 5472 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:20:00.0938 5472 cdrom - ok
18:20:00.0987 5472 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
18:20:01.0671 5472 CertPropSvc - ok
18:20:01.0743 5472 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
18:20:01.0982 5472 circlass - ok
18:20:02.0061 5472 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
18:20:02.0150 5472 CLFS - ok
18:20:02.0406 5472 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:20:02.0418 5472 clr_optimization_v2.0.50727_32 - ok
18:20:02.0570 5472 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:20:02.0582 5472 clr_optimization_v2.0.50727_64 - ok
18:20:02.0774 5472 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:20:02.0818 5472 clr_optimization_v4.0.30319_32 - ok
18:20:03.0055 5472 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:20:03.0065 5472 clr_optimization_v4.0.30319_64 - ok
18:20:03.0156 5472 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
18:20:03.0311 5472 CmBatt - ok
18:20:03.0343 5472 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:20:03.0358 5472 cmdide - ok
18:20:03.0491 5472 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
18:20:03.0561 5472 CNG - ok
18:20:03.0580 5472 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
18:20:03.0590 5472 Compbatt - ok
18:20:03.0640 5472 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
18:20:03.0759 5472 CompositeBus - ok
18:20:03.0786 5472 COMSysApp - ok
18:20:03.0819 5472 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
18:20:03.0828 5472 crcdisk - ok
18:20:03.0949 5472 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:20:04.0027 5472 CryptSvc - ok
18:20:04.0127 5472 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:20:04.0226 5472 DcomLaunch - ok
18:20:04.0335 5472 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
18:20:04.0727 5472 defragsvc - ok
18:20:04.0765 5472 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:20:04.0934 5472 DfsC - ok
18:20:05.0061 5472 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
18:20:05.0218 5472 Dhcp - ok
18:20:05.0265 5472 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
18:20:05.0318 5472 discache - ok
18:20:05.0368 5472 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
18:20:05.0376 5472 Disk - ok
18:20:05.0446 5472 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:20:05.0513 5472 Dnscache - ok
18:20:05.0572 5472 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:20:05.0610 5472 dot3svc - ok
18:20:05.0665 5472 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
18:20:05.0716 5472 DPS - ok
18:20:05.0777 5472 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:20:05.0820 5472 drmkaud - ok
18:20:07.0295 5472 [ BC3CAB69D15A1A5EA8D8AAC7CBB4A14B ] DrWebAVService C:\Program Files\DrWeb\dwservice.exe
18:20:07.0364 5472 DrWebAVService - ok
18:20:07.0922 5472 [ 1E7EF454F95418E8C886AE8DC87AB145 ] DrWebEngine C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
18:20:07.0951 5472 DrWebEngine - ok
18:20:08.0365 5472 [ D2D8841EC5F196B79674D577A1C0A09C ] DrWebFwSvc C:\Program Files\DrWeb\frwl_svc.exe
18:20:08.0403 5472 DrWebFwSvc - ok
18:20:08.0450 5472 [ C9F900CE607D54B110BF602B7826EF97 ] DrWebLwf C:\Windows\system32\drivers\DrWebLwf.sys
18:20:08.0460 5472 DrWebLwf - ok
18:20:10.0151 5472 [ 96AB5B94D4D6618D2623D89CEEFF1DD7 ] DrWebNetFilter C:\Program Files\DrWeb\dwnetfilter.exe
18:20:10.0209 5472 DrWebNetFilter - ok
18:20:10.0531 5472 [ BBA6613DA410BD87F90E342C7087E635 ] DrWebWfp C:\Windows\system32\drivers\dw_wfp.sys
18:20:10.0545 5472 DrWebWfp - ok
18:20:11.0056 5472 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
18:20:11.0065 5472 dtsoftbus01 - ok
18:20:11.0310 5472 [ 85C474FDDA4C3277B1503C5AC755C852 ] DwProt C:\Windows\system32\drivers\dwprot.sys
18:20:11.0321 5472 DwProt - ok
18:20:11.0989 5472 [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:20:12.0075 5472 DXGKrnl - ok
18:20:12.0281 5472 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
18:20:12.0402 5472 EapHost - ok
18:20:13.0538 5472 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
18:20:14.0165 5472 ebdrv - ok
18:20:14.0494 5472 [ A2DA3D8E0B336E13F7A155B5789B58CF ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
18:20:14.0562 5472 eeCtrl - ok
18:20:14.0779 5472 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
18:20:14.0855 5472 EFS - ok
18:20:15.0152 5472 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:20:15.0346 5472 ehRecvr - ok
18:20:15.0382 5472 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
18:20:15.0396 5472 ehSched - ok
18:20:15.0527 5472 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
18:20:15.0565 5472 elxstor - ok
18:20:15.0675 5472 [ 23C3061D2F7F8BCB6140A098447035B4 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
18:20:15.0691 5472 EraserUtilRebootDrv - ok
18:20:15.0714 5472 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:20:15.0789 5472 ErrDev - ok
18:20:15.0940 5472 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
18:20:16.0026 5472 EventSystem - ok
18:20:16.0047 5472 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
18:20:16.0102 5472 exfat - ok
18:20:16.0127 5472 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:20:16.0222 5472 fastfat - ok
18:20:16.0447 5472 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
18:20:16.0535 5472 Fax - ok
18:20:16.0588 5472 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
18:20:16.0636 5472 fdc - ok
18:20:16.0679 5472 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
18:20:16.0916 5472 fdPHost - ok
18:20:16.0973 5472 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
18:20:17.0037 5472 FDResPub - ok
18:20:17.0057 5472 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:20:17.0070 5472 FileInfo - ok
18:20:17.0138 5472 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:20:17.0243 5472 Filetrace - ok
18:20:17.0288 5472 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
18:20:17.0442 5472 flpydisk - ok
18:20:17.0551 5472 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:20:17.0571 5472 FltMgr - ok
18:20:17.0782 5472 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
18:20:17.0968 5472 FontCache - ok
18:20:18.0421 5472 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:20:18.0432 5472 FontCache3.0.0.0 - ok
18:20:18.0451 5472 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:20:18.0461 5472 FsDepends - ok
18:20:18.0550 5472 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:20:18.0565 5472 Fs_Rec - ok
18:20:18.0647 5472 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:20:18.0669 5472 fvevol - ok
18:20:18.0762 5472 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
18:20:18.0777 5472 gagp30kx - ok
18:20:19.0063 5472 [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv C:\Windows\gdrv.sys
18:20:19.0072 5472 gdrv - ok
18:20:19.0256 5472 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
18:20:19.0328 5472 gpsvc - ok
18:20:19.0438 5472 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:20:19.0448 5472 gupdate - ok
18:20:19.0519 5472 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:20:19.0532 5472 gupdatem - ok
18:20:19.0551 5472 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:20:19.0899 5472 hcw85cir - ok
18:20:20.0123 5472 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:20:20.0942 5472 HdAudAddService - ok
18:20:21.0245 5472 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:20:21.0368 5472 HDAudBus - ok
18:20:21.0431 5472 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
18:20:21.0603 5472 HidBatt - ok
18:20:21.0691 5472 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
18:20:21.0788 5472 HidBth - ok
18:20:21.0873 5472 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
18:20:21.0926 5472 HidIr - ok
18:20:22.0072 5472 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
18:20:22.0162 5472 hidserv - ok
18:20:22.0342 5472 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:20:22.0460 5472 HidUsb - ok
18:20:22.0599 5472 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:20:22.0696 5472 hkmsvc - ok
18:20:22.0773 5472 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:20:22.0851 5472 HomeGroupListener - ok
18:20:22.0988 5472 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:20:23.0063 5472 HomeGroupProvider - ok
18:20:23.0123 5472 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
18:20:23.0197 5472 HpSAMD - ok
18:20:23.0374 5472 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:20:23.0504 5472 HTTP - ok
18:20:23.0610 5472 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:20:23.0617 5472 hwpolicy - ok
18:20:23.0760 5472 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
18:20:23.0835 5472 i8042prt - ok
18:20:24.0507 5472 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
18:20:24.0635 5472 iaStorV - ok
18:20:24.0986 5472 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:20:25.0009 5472 idsvc - ok
18:20:26.0357 5472 [ B96F641291378569E8525383FAA183EB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20131029.002\IDSvia64.sys
18:20:26.0379 5472 IDSVia64 - ok
18:20:26.0458 5472 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
18:20:26.0472 5472 iirsp - ok
18:20:26.0784 5472 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
18:20:26.0897 5472 IKEEXT - ok
18:20:28.0061 5472 [ ACACD1B925D448558C1C9D0258749451 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:20:28.0192 5472 IntcAzAudAddService - ok
18:20:28.0273 5472 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
18:20:28.0285 5472 intelide - ok
18:20:28.0533 5472 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:20:28.0714 5472 intelppm - ok
18:20:28.0823 5472 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:20:28.0880 5472 IPBusEnum - ok
18:20:28.0895 5472 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:20:28.0919 5472 IpFilterDriver - ok
18:20:29.0090 5472 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:20:29.0300 5472 iphlpsvc - ok
18:20:29.0317 5472 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
18:20:30.0096 5472 IPMIDRV - ok
18:20:30.0125 5472 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:20:30.0242 5472 IPNAT - ok
18:20:30.0391 5472 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:20:30.0409 5472 IRENUM - ok
18:20:30.0508 5472 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:20:30.0516 5472 isapnp - ok
18:20:30.0570 5472 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
18:20:30.0637 5472 iScsiPrt - ok
18:20:30.0747 5472 [ 492F2DF02CD817CE8D544F96097BD77A ] IT9135BDA C:\Windows\system32\Drivers\IT9135BDA.sys
18:20:30.0912 5472 IT9135BDA - ok
18:20:31.0024 5472 [ 6BCEF45131C8B8E1C558BE540B190B3C ] iusb3hcs C:\Windows\system32\DRIVERS\iusb3hcs.sys
18:20:31.0036 5472 iusb3hcs - ok
18:20:31.0225 5472 [ F080EADA8715F811B58BD35BB774F2F9 ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys
18:20:31.0282 5472 iusb3hub - ok
18:20:31.0609 5472 [ 0F1756D9396740F053221FA6260FCE66 ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys
18:20:31.0651 5472 iusb3xhc - ok
18:20:31.0720 5472 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:20:31.0735 5472 kbdclass - ok
18:20:31.0827 5472 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:20:31.0887 5472 kbdhid - ok
18:20:31.0920 5472 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
18:20:31.0929 5472 KeyIso - ok
18:20:31.0990 5472 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:20:32.0002 5472 KSecDD - ok
18:20:32.0070 5472 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:20:32.0086 5472 KSecPkg - ok
18:20:32.0137 5472 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
18:20:32.0219 5472 ksthunk - ok
18:20:32.0312 5472 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
18:20:32.0365 5472 KtmRm - ok
18:20:32.0464 5472 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
18:20:32.0528 5472 LanmanServer - ok
18:20:32.0583 5472 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:20:32.0660 5472 LanmanWorkstation - ok
18:20:32.0700 5472 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:20:32.0774 5472 lltdio - ok
18:20:32.0819 5472 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:20:32.0874 5472 lltdsvc - ok
18:20:32.0941 5472 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:20:33.0007 5472 lmhosts - ok
18:20:33.0085 5472 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
18:20:33.0095 5472 LSI_FC - ok
18:20:33.0112 5472 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
18:20:33.0121 5472 LSI_SAS - ok
18:20:33.0173 5472 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
18:20:33.0190 5472 LSI_SAS2 - ok
18:20:33.0239 5472 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
18:20:33.0249 5472 LSI_SCSI - ok
18:20:33.0290 5472 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
18:20:33.0339 5472 luafv - ok
18:20:33.0419 5472 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:20:33.0435 5472 Mcx2Svc - ok
18:20:33.0453 5472 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
18:20:33.0464 5472 megasas - ok
18:20:33.0487 5472 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
18:20:33.0523 5472 MegaSR - ok
18:20:33.0673 5472 [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
18:20:33.0686 5472 MEIx64 - ok
18:20:33.0741 5472 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
18:20:33.0804 5472 MMCSS - ok
18:20:33.0831 5472 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
18:20:33.0886 5472 Modem - ok
18:20:33.0989 5472 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:20:34.0047 5472 monitor - ok
18:20:34.0094 5472 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:20:34.0106 5472 mouclass - ok
18:20:34.0147 5472 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:20:34.0166 5472 mouhid - ok
18:20:34.0204 5472 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:20:34.0222 5472 mountmgr - ok
18:20:34.0271 5472 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
18:20:34.0288 5472 mpio - ok
18:20:34.0343 5472 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:20:34.0376 5472 mpsdrv - ok
18:20:34.0485 5472 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
18:20:34.0585 5472 MpsSvc - ok
18:20:34.0619 5472 [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:20:34.0672 5472 MRxDAV - ok
18:20:34.0707 5472 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:20:34.0760 5472 mrxsmb - ok
18:20:34.0805 5472 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:20:34.0817 5472 mrxsmb10 - ok
18:20:34.0893 5472 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:20:34.0907 5472 mrxsmb20 - ok
18:20:34.0963 5472 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
18:20:34.0972 5472 msahci - ok
18:20:34.0996 5472 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:20:35.0006 5472 msdsm - ok
18:20:35.0063 5472 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
18:20:35.0103 5472 MSDTC - ok
18:20:35.0205 5472 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:20:35.0238 5472 Msfs - ok
18:20:35.0335 5472 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:20:35.0414 5472 mshidkmdf - ok
18:20:35.0460 5472 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:20:35.0474 5472 msisadrv - ok
18:20:35.0570 5472 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:20:35.0607 5472 MSiSCSI - ok
18:20:35.0609 5472 msiserver - ok
18:20:35.0689 5472 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:20:35.0752 5472 MSKSSRV - ok
18:20:35.0827 5472 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:20:35.0851 5472 MSPCLOCK - ok
18:20:35.0898 5472 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:20:35.0964 5472 MSPQM - ok
18:20:36.0018 5472 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:20:36.0050 5472 MsRPC - ok
18:20:36.0078 5472 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:20:36.0086 5472 mssmbios - ok
18:20:36.0090 5472 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:20:36.0165 5472 MSTEE - ok
18:20:36.0186 5472 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
18:20:36.0219 5472 MTConfig - ok
18:20:36.0246 5472 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
18:20:36.0255 5472 Mup - ok
18:20:36.0333 5472 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
18:20:36.0393 5472 napagent - ok
18:20:36.0435 5472 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:20:36.0501 5472 NativeWifiP - ok
18:20:36.0717 5472 [ 702E07EC32F96ACDB873E9A5465D4401 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131029.039\ENG64.SYS
18:20:36.0729 5472 NAVENG - ok
18:20:37.0129 5472 [ 302EA314A1AF0D7CEF0A3D0195F79561 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131029.039\EX64.SYS
18:20:37.0166 5472 NAVEX15 - ok
18:20:37.0356 5472 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:20:37.0380 5472 NDIS - ok
18:20:37.0433 5472 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:20:37.0509 5472 NdisCap - ok
18:20:37.0550 5472 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:20:37.0611 5472 NdisTapi - ok
18:20:37.0738 5472 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:20:37.0813 5472 Ndisuio - ok
18:20:37.0870 5472 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:20:37.0947 5472 NdisWan - ok
18:20:38.0179 5472 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:20:38.0205 5472 NDProxy - ok
18:20:38.0251 5472 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:20:38.0319 5472 NetBIOS - ok
18:20:38.0350 5472 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:20:38.0390 5472 NetBT - ok
18:20:38.0429 5472 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
18:20:38.0439 5472 Netlogon - ok
18:20:38.0575 5472 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
18:20:38.0653 5472 Netman - ok
18:20:38.0710 5472 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
18:20:38.0823 5472 netprofm - ok
18:20:38.0866 5472 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:20:38.0880 5472 NetTcpPortSharing - ok
18:20:38.0918 5472 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
18:20:38.0926 5472 nfrd960 - ok
18:20:39.0101 5472 [ F2840DBFE9322F35557219AE82CC4597 ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
18:20:39.0113 5472 NIS - ok
18:20:39.0165 5472 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:20:39.0202 5472 NlaSvc - ok
18:20:39.0240 5472 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:20:39.0264 5472 Npfs - ok
18:20:39.0327 5472 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
18:20:39.0357 5472 nsi - ok
18:20:39.0395 5472 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:20:39.0451 5472 nsiproxy - ok
18:20:39.0719 5472 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:20:39.0779 5472 Ntfs - ok
18:20:39.0821 5472 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
18:20:39.0885 5472 Null - ok
18:20:39.0958 5472 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:20:39.0972 5472 nvraid - ok
18:20:40.0030 5472 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:20:40.0049 5472 nvstor - ok
18:20:40.0089 5472 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:20:40.0104 5472 nv_agp - ok
18:20:40.0186 5472 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:20:40.0244 5472 ohci1394 - ok
18:20:40.0297 5472 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:20:40.0428 5472 p2pimsvc - ok
18:20:40.0491 5472 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
18:20:40.0513 5472 p2psvc - ok
18:20:40.0568 5472 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:20:40.0601 5472 Parport - ok
18:20:40.0655 5472 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:20:40.0669 5472 partmgr - ok
18:20:40.0715 5472 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:20:40.0766 5472 PcaSvc - ok
18:20:40.0819 5472 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
18:20:40.0834 5472 pci - ok
18:20:40.0897 5472 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
18:20:40.0909 5472 pciide - ok
18:20:40.0986 5472 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
18:20:41.0026 5472 pcmcia - ok
18:20:41.0078 5472 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
18:20:41.0087 5472 pcw - ok
18:20:41.0138 5472 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:20:41.0217 5472 PEAUTH - ok
18:20:42.0260 5472 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
18:20:42.0380 5472 PerfHost - ok
18:20:42.0712 5472 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
18:20:42.0778 5472 pla - ok
18:20:42.0842 5472 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:20:42.0952 5472 PlugPlay - ok
18:20:43.0001 5472 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:20:43.0044 5472 PNRPAutoReg - ok
18:20:43.0088 5472 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:20:43.0099 5472 PNRPsvc - ok
18:20:43.0207 5472 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:20:43.0251 5472 PolicyAgent - ok
18:20:43.0297 5472 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
18:20:43.0368 5472 Power - ok
18:20:43.0457 5472 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:20:43.0517 5472 PptpMiniport - ok
18:20:43.0548 5472 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
18:20:43.0595 5472 Processor - ok
18:20:43.0625 5472 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
18:20:43.0706 5472 ProfSvc - ok
18:20:43.0724 5472 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:20:43.0735 5472 ProtectedStorage - ok
18:20:43.0856 5472 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:20:43.0908 5472 Psched - ok
18:20:44.0114 5472 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
18:20:44.0174 5472 ql2300 - ok
18:20:44.0218 5472 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
18:20:44.0227 5472 ql40xx - ok
18:20:44.0293 5472 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
18:20:44.0316 5472 QWAVE - ok
18:20:44.0335 5472 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:20:44.0370 5472 QWAVEdrv - ok
18:20:44.0403 5472 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:20:44.0478 5472 RasAcd - ok
18:20:44.0609 5472 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:20:44.0649 5472 RasAgileVpn - ok
18:20:44.0673 5472 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
18:20:44.0853 5472 RasAuto - ok
18:20:45.0051 5472 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:20:45.0159 5472 Rasl2tp - ok
18:20:45.0398 5472 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
18:20:45.0504 5472 RasMan - ok
18:20:45.0683 5472 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:20:45.0875 5472 RasPppoe - ok
18:20:46.0056 5472 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:20:46.0171 5472 RasSstp - ok
18:20:46.0270 5472 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:20:46.0311 5472 rdbss - ok
18:20:46.0340 5472 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
18:20:46.0376 5472 rdpbus - ok
18:20:46.0431 5472 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:20:46.0466 5472 RDPCDD - ok
18:20:46.0536 5472 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:20:46.0580 5472 RDPENCDD - ok
18:20:46.0597 5472 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:20:46.0620 5472 RDPREFMP - ok
18:20:46.0692 5472 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:20:46.0777 5472 RDPWD - ok
18:20:46.0830 5472 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:20:46.0845 5472 rdyboost - ok
18:20:46.0907 5472 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:20:46.0937 5472 RemoteAccess - ok
18:20:47.0016 5472 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:20:47.0065 5472 RemoteRegistry - ok
18:20:47.0084 5472 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:20:47.0154 5472 RpcEptMapper - ok
18:20:47.0169 5472 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
18:20:47.0212 5472 RpcLocator - ok
18:20:47.0341 5472 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
18:20:47.0377 5472 RpcSs - ok
18:20:47.0396 5472 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:20:47.0421 5472 rspndr - ok
18:20:47.0521 5472 [ C20F64FCD5E2B40310A1774495877ACD ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
18:20:47.0539 5472 RTHDMIAzAudService - ok
18:20:47.0635 5472 [ 7F4F11527AF5A7E4526CB6A146B3E40C ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
18:20:47.0675 5472 RTL8167 - ok
18:20:47.0678 5472 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
18:20:47.0691 5472 SamSs - ok
18:20:47.0721 5472 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:20:47.0733 5472 sbp2port - ok
18:20:47.0772 5472 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:20:47.0811 5472 SCardSvr - ok
18:20:47.0828 5472 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:20:47.0941 5472 scfilter - ok
18:20:48.0190 5472 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
18:20:48.0413 5472 Schedule - ok
18:20:48.0479 5472 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
18:20:48.0503 5472 SCPolicySvc - ok
18:20:48.0541 5472 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:20:48.0623 5472 SDRSVC - ok
18:20:48.0738 5472 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:20:48.0801 5472 secdrv - ok
18:20:48.0820 5472 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
18:20:48.0874 5472 seclogon - ok
18:20:48.0963 5472 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
18:20:49.0009 5472 SENS - ok
18:20:49.0033 5472 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:20:49.0130 5472 SensrSvc - ok
18:20:49.0201 5472 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:20:49.0243 5472 Serenum - ok
18:20:49.0285 5472 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:20:49.0330 5472 Serial - ok
18:20:49.0401 5472 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
18:20:49.0442 5472 sermouse - ok
18:20:49.0478 5472 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
18:20:49.0523 5472 SessionEnv - ok
18:20:49.0553 5472 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:20:49.0590 5472 sffdisk - ok
18:20:49.0621 5472 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:20:49.0679 5472 sffp_mmc - ok
18:20:49.0701 5472 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:20:49.0744 5472 sffp_sd - ok
18:20:49.0824 5472 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
18:20:49.0863 5472 sfloppy - ok
18:20:49.0958 5472 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:20:49.0995 5472 SharedAccess - ok
18:20:50.0089 5472 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:20:50.0155 5472 ShellHWDetection - ok
18:20:50.0183 5472 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
18:20:50.0197 5472 SiSRaid2 - ok
18:20:50.0251 5472 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
18:20:50.0269 5472 SiSRaid4 - ok
18:20:50.0338 5472 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:20:50.0386 5472 Smb - ok
18:20:50.0613 5472 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:20:50.0705 5472 SNMPTRAP - ok
18:20:50.0818 5472 [ ADE414BC3373B0331FD325DBB27A0E92 ] SpiderG3 C:\Windows\system32\drivers\spiderg3.sys
18:20:50.0832 5472 SpiderG3 - ok
18:20:50.0890 5472 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
18:20:50.0949 5472 spldr - ok
18:20:51.0237 5472 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
18:20:51.0413 5472 Spooler - ok
18:20:51.0932 5472 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
18:20:51.0984 5472 sppsvc - ok
18:20:52.0035 5472 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:20:52.0072 5472 sppuinotify - ok
18:20:52.0261 5472 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS
18:20:52.0318 5472 SRTSP - ok
18:20:52.0366 5472 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS
18:20:52.0383 5472 SRTSPX - ok
18:20:52.0506 5472 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
18:20:52.0592 5472 srv - ok
18:20:52.0659 5472 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:20:52.0708 5472 srv2 - ok
18:20:52.0742 5472 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:20:52.0755 5472 srvnet - ok
18:20:52.0795 5472 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:20:52.0879 5472 SSDPSRV - ok
18:20:52.0912 5472 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:20:52.0943 5472 SstpSvc - ok
18:20:53.0084 5472 [ BC76D75A372BC02831A6A6AEA66510F8 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
18:20:53.0107 5472 Steam Client Service - ok
18:20:53.0160 5472 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
18:20:53.0174 5472 stexstor - ok
18:20:53.0358 5472 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
18:20:53.0412 5472 stisvc - ok
18:20:53.0444 5472 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:20:53.0453 5472 swenum - ok
18:20:53.0563 5472 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
18:20:53.0590 5472 swprv - ok
18:20:53.0692 5472 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS
18:20:53.0729 5472 SymDS - ok
18:20:53.0871 5472 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\Windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS
18:20:53.0923 5472 SymEFA - ok
18:20:53.0991 5472 [ 898BB48C797483420DF523B2BBC1ECDB ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
18:20:54.0008 5472 SymEvent - ok
18:20:54.0051 5472 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS
18:20:54.0068 5472 SymIRON - ok
18:20:54.0131 5472 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS
18:20:54.0172 5472 SymNetS - ok
18:20:54.0297 5472 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
18:20:54.0377 5472 SysMain - ok
18:20:54.0409 5472 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:20:54.0474 5472 TabletInputService - ok
18:20:54.0518 5472 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:20:54.0567 5472 TapiSrv - ok
18:20:54.0597 5472 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
18:20:54.0621 5472 TBS - ok
18:20:54.0971 5472 [ 40AF23633D197905F03AB5628C558C51 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:20:55.0055 5472 Tcpip - ok
18:20:55.0230 5472 [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:20:55.0258 5472 TCPIP6 - ok
18:20:55.0307 5472 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:20:55.0356 5472 tcpipreg - ok
18:20:55.0406 5472 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:20:55.0500 5472 TDPIPE - ok
18:20:55.0551 5472 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:20:55.0593 5472 TDTCP - ok
18:20:55.0648 5472 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:20:55.0701 5472 tdx - ok
18:20:55.0735 5472 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
18:20:55.0744 5472 TermDD - ok
18:20:55.0807 5472 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
18:20:55.0852 5472 TermService - ok
18:20:55.0883 5472 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
18:20:55.0897 5472 Themes - ok
18:20:56.0017 5472 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
18:20:56.0048 5472 THREADORDER - ok
18:20:56.0089 5472 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
18:20:56.0149 5472 TrkWks - ok
18:20:56.0280 5472 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:20:56.0313 5472 TrustedInstaller - ok
18:20:56.0344 5472 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:20:56.0416 5472 tssecsrv - ok
18:20:56.0472 5472 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
18:20:56.0531 5472 TsUsbFlt - ok
18:20:56.0584 5472 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
18:20:56.0646 5472 TsUsbGD - ok
18:20:56.0713 5472 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:20:56.0778 5472 tunnel - ok
18:20:56.0818 5472 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
18:20:56.0828 5472 uagp35 - ok
18:20:56.0910 5472 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:20:57.0079 5472 udfs - ok
18:20:57.0102 5472 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:20:57.0140 5472 UI0Detect - ok
18:20:57.0170 5472 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:20:57.0190 5472 uliagpkx - ok
18:20:57.0226 5472 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:20:57.0445 5472 umbus - ok
18:20:57.0573 5472 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
18:20:57.0637 5472 UmPass - ok
18:20:57.0751 5472 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
18:20:57.0794 5472 upnphost - ok
18:20:57.0864 5472 [ ACCEA6BC68D0C9A78EB97EE159028B4E ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:20:57.0905 5472 usbccgp - ok
18:20:57.0928 5472 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:20:58.0015 5472 usbcir - ok
18:20:58.0085 5472 [ 311C1DD1088E55BEAE15954D17F50646 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:20:58.0128 5472 usbehci - ok
18:20:58.0223 5472 [ 280E90CBF4B2DDD169F0728CB44D726F ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:20:58.0268 5472 usbhub - ok
18:20:58.0292 5472 [ 9406D801042FAF859CF81B2C886413DC ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:20:58.0350 5472 usbohci - ok
18:20:58.0496 5472 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:20:58.0533 5472 usbprint - ok
18:20:58.0614 5472 [ 9661DA76B4531B2DA272ECCE25A8AF24 ] usbscan C:\Windows\system32\drivers\usbscan.sys
18:20:58.0702 5472 usbscan - ok
18:20:58.0719 5472 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:20:58.0791 5472 USBSTOR - ok
18:20:58.0831 5472 [ A83D0EC9AE4C31704442099D40BA2471 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
18:20:58.0845 5472 usbuhci - ok
18:20:58.0915 5472 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
18:20:58.0981 5472 UxSms - ok
18:20:59.0007 5472 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
18:20:59.0017 5472 VaultSvc - ok
18:20:59.0094 5472 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
18:20:59.0109 5472 vdrvroot - ok
18:20:59.0187 5472 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
18:20:59.0268 5472 vds - ok
18:20:59.0321 5472 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:20:59.0332 5472 vga - ok
18:20:59.0376 5472 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
18:20:59.0434 5472 VgaSave - ok
18:20:59.0545 5472 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
18:20:59.0567 5472 vhdmp - ok
18:20:59.0595 5472 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
18:20:59.0608 5472 viaide - ok
18:20:59.0801 5472 [ FF7C6E015AA32FC6BE0AEF582B802332 ] VirtDiskBus C:\Windows\system32\DRIVERS\VirtDiskBus64.sys
18:20:59.0814 5472 VirtDiskBus - ok
18:20:59.0866 5472 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:20:59.0882 5472 volmgr - ok
18:20:59.0978 5472 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:21:00.0003 5472 volmgrx - ok
18:21:00.0039 5472 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:21:00.0087 5472 volsnap - ok
18:21:00.0135 5472 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
18:21:00.0147 5472 vsmraid - ok
18:21:00.0346 5472 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
18:21:00.0403 5472 VSS - ok
18:21:00.0436 5472 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
18:21:00.0486 5472 vwifibus - ok
18:21:00.0592 5472 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
18:21:00.0636 5472 W32Time - ok
18:21:00.0665 5472 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
18:21:00.0708 5472 WacomPen - ok
18:21:00.0842 5472 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:21:00.0975 5472 WANARP - ok
18:21:00.0978 5472 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:21:01.0001 5472 Wanarpv6 - ok
18:21:01.0164 5472 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
18:21:01.0195 5472 WatAdminSvc - ok
18:21:01.0334 5472 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
18:21:01.0421 5472 wbengine - ok
18:21:01.0460 5472 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:21:01.0480 5472 WbioSrvc - ok
18:21:01.0527 5472 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:21:01.0586 5472 wcncsvc - ok
18:21:01.0616 5472 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:21:01.0645 5472 WcsPlugInService - ok
18:21:01.0657 5472 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
18:21:01.0667 5472 Wd - ok
18:21:01.0781 5472 [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:21:01.0853 5472 Wdf01000 - ok
18:21:01.0900 5472 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:21:02.0386 5472 WdiServiceHost - ok
18:21:02.0388 5472 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:21:02.0403 5472 WdiSystemHost - ok
18:21:02.0440 5472 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D ] WebClient C:\Windows\System32\webclnt.dll
18:21:02.0451 5472 WebClient - ok
18:21:02.0507 5472 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:21:02.0568 5472 Wecsvc - ok
18:21:02.0596 5472 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:21:02.0625 5472 wercplsupport - ok
18:21:02.0674 5472 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
18:21:02.0699 5472 WerSvc - ok
18:21:02.0770 5472 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:21:02.0812 5472 WfpLwf - ok
18:21:02.0844 5472 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:21:02.0858 5472 WIMMount - ok
18:21:04.0392 5472 WinDefend - ok
18:21:04.0395 5472 WinHttpAutoProxySvc - ok
18:21:06.0701 5472 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:21:06.0769 5472 Winmgmt - ok
18:21:07.0150 5472 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
18:21:07.0194 5472 WinRM - ok
18:21:07.0302 5472 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:21:07.0337 5472 WinUsb - ok
18:21:07.0403 5472 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
18:21:07.0438 5472 Wlansvc - ok
18:21:07.0552 5472 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
18:21:07.0569 5472 WmiAcpi - ok
18:21:07.0605 5472 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:21:07.0654 5472 wmiApSrv - ok
18:21:07.0741 5472 WMPNetworkSvc - ok
18:21:07.0836 5472 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:21:07.0857 5472 WPCSvc - ok
18:21:07.0888 5472 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:21:08.0058 5472 WPDBusEnum - ok
18:21:08.0122 5472 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:21:08.0197 5472 ws2ifsl - ok
18:21:08.0216 5472 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
18:21:08.0284 5472 wscsvc - ok
18:21:08.0287 5472 WSearch - ok
18:21:08.0700 5472 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
18:21:08.0810 5472 wuauserv - ok
18:21:08.0839 5472 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:21:08.0927 5472 WudfPf - ok
18:21:08.0978 5472 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:21:08.0992 5472 WUDFRd - ok
18:21:09.0053 5472 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:21:09.0103 5472 wudfsvc - ok
18:21:09.0188 5472 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
18:21:09.0220 5472 WwanSvc - ok
18:21:09.0223 5472 ================ Scan global ===============================
18:21:09.0283 5472 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:21:09.0321 5472 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
18:21:09.0346 5472 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
18:21:09.0398 5472 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:21:09.0492 5472 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:21:09.0499 5472 [Global] - ok
18:21:09.0500 5472 ================ Scan MBR ==================================
18:21:09.0502 5472 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:21:09.0819 5472 \Device\Harddisk0\DR0 - ok
18:21:09.0867 5472 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
18:21:22.0606 5472 \Device\Harddisk1\DR1 - ok
18:21:22.0607 5472 ================ Scan VBR ==================================
18:21:22.0608 5472 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition1
18:21:22.0609 5472 \Device\Harddisk0\DR0\Partition1 - ok
18:21:22.0630 5472 [ BC78B505E72755AF07D72792D403C07C ] \Device\Harddisk0\DR0\Partition2
18:21:22.0631 5472 \Device\Harddisk0\DR0\Partition2 - ok
18:21:22.0653 5472 [ 2F6F35001EF4723000693F6580A6FA69 ] \Device\Harddisk1\DR1\Partition1
18:21:22.0656 5472 \Device\Harddisk1\DR1\Partition1 - ok
18:21:22.0658 5472 [ 2DE34916C9E46ED4F3B2216EB60B0A23 ] \Device\Harddisk1\DR1\Partition2
18:21:22.0659 5472 \Device\Harddisk1\DR1\Partition2 - ok
18:21:22.0659 5472 ============================================================
18:21:22.0660 5472 Scan finished
18:21:22.0660 5472 ============================================================
18:21:22.0664 4260 Detected object count: 0
18:21:22.0665 4260 Actual detected object count: 0

Jeste pockam na MBAM, ale nepripada mi to na chybu zpusobenou haveti...

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.10.30.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
PC :: PC-PC [administrátor]

Ochrana: Povolena

30.10.2013 19:36:16
MBAM-log-2013-10-30 (21-10-40).txt

Typ: Kompletní kontrola (C:\|E:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 450680
Uplynulý čas: 1 hodin, 14 minut, 58 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 5
C:\Hry\Codemasters\DiRT 3\paul.dll (PUP.RiskwareTool.CK) -> Nebyla provedena žádná instrukce.
C:\Hry\Codemasters\DiRT 3\SKIDROW.dll (Trojan.Downloader.H) -> Nebyla provedena žádná instrukce.
C:\Users\PC\Downloads\77ZipSetup.exe (Adware.InstallBrain) -> Nebyla provedena žádná instrukce.
C:\Users\PC\Downloads\bsplayer265.1074.exe (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\PC\Downloads\YTDSetup.exe (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.

(konec)

Nalezy smazte

Dvojklik je stale??