VIRY.CZ

Dobrý den mám asi zavirované pc, automaticky to vypíná antivirový program a systém se seká. Přikládám log s RSIT. Díky za pomoc

Logfile of random's system information tool 1.09 (written by random/random)
Run by The Kingslayer at 2014-04-17 11:18:37
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 48 GB (20%) free of 238 GB
Total RAM: 4095 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:18:49, on 17.4.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16750)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Users\The Kingslayer\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files (x86)\DoughGo\bin\DoughGo.BrowserAdapter.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\The Kingslayer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.ividi.org/?src=tbhp&id=94 ... 9&affilt=3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: DoughGo - {0b0478d0-1077-4dab-a1b2-2d456ead4570} - C:\Program Files (x86)\DoughGo\DoughGobho.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ividi Helper Object - {8B8B2E80-1444-451D-AC8E-EB9A847F3887} - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_4AC963541AF5DC6D371534A317228375] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: + Offline &Explorer: Download the link - file://C:\Program Files (x86)\Offline Explorer\Add_UrlO.htm
O8 - Extra context menu item: + Offline E&xplorer: Download the current page - file://C:\Program Files (x86)\Offline Explorer\Add_AllO.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FA328B9-1FCA-4348-B30D-47D29CBF9D78}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FastBootAgent - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update DoughGo - Unknown owner - C:\Program Files (x86)\DoughGo\updateDoughGo.exe
O23 - Service: Util DoughGo - Unknown owner - C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12820 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2616
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe"
"taskhost.exe"
taskeng.exe {50E1BB5C-5246-4E78-9585-7A878A31028F}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
Atouch64.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4032.0.555117558\1983996392" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,28,34 --gpu-vendor-id=0x10de --gpu-device-id=0x0873 --gpu-driver-vendor=NVIDIA --gpu-driver-version=8.15.11.8619 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.4.622924208\1589818931" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.5.2021044578\1873867281" /prefetch:673131151
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.6.1098678021\1294072201" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.7.1870377806\1734906326" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.8.81273375\544466888" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.10.431008284\1564497413" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.11.340923515\736142826" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.14.1487733869\2039070768" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4032.16.1914252369\1860172074" --ppapi-flash-args --lang=en-US --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.17.1846136124\1701989096" /prefetch:673131151
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\The Kingslayer\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=en-US --channel="4032.18.2647239\1679577855" /prefetch:-390060480
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Users\The Kingslayer\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
"C:\Program Files (x86)\DoughGo\bin\FilterApp_C64.exe" /l false /s false /c "DoughGo" /t "C:\Program Files (x86)\DoughGo\bin\TEMP" /i "http://apidoughgobiz-a.akamaihd.net/gsr ... 0000000000" /d wStLibG64 /p 1d5de924-a34d-40af-b750-62514f5bbcb5:chrome
\??\C:\Windows\system32\conhost.exe "-1820880158-1947488298-303414345-1796251892-1234664549685393129-898291454469915857
/c 1d5de924-a34d-40af-b750-62514f5bbcb5 /s /z "n=DoughGo&is=kbmadvztcz&dpt=21"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.19.313117337\1496419363" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.21.963001703\1504034698" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.24.1638803871\1514050722" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.27.243612341\935544943" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="4032.29.328278868\2043258139" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\The Kingslayer\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-22 245592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16 1154720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b0478d0-1077-4dab-a1b2-2d456ead4570}]
DoughGo - C:\Program Files (x86)\DoughGo\DoughGobho.dll [2014-03-26 249624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-26 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B8B2E80-1444-451D-AC8E-EB9A847F3887}]
ividi Helper Object - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll [2013-07-25 301464]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-22 201784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-26 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-22 245592]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16 1154720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-22 201784]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-07-30 617856]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 116648]
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2014-02-14 1564992]
"KiesAirMessage"=C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []
"GoogleChromeAutoLaunch_4AC963541AF5DC6D371534A317228375"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2014-04-02 841032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64]
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-04-09 320000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\The Kingslayer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-27 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2009-06-11 16328736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-28 7982112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-12-04 218408]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-04-02 98304]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2014-01-22 4858968]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-02-14 311616]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-10-10 72248]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2009-10-10 3054136]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-17 11:18:38 ----D---- C:\Program Files\trend micro
2014-04-17 11:18:37 ----D---- C:\rsit
2014-04-17 02:14:34 ----N---- C:\Windows\system32\MpSigStub.exe
2014-04-13 13:09:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\mgyun
2014-04-13 13:09:43 ----D---- C:\Program Files (x86)\VROOT
2014-04-13 13:05:55 ----D---- C:\Program Files (x86)\Z3X
2014-04-13 11:46:56 ----D---- C:\Users\The Kingslayer\AppData\Roaming\MPC-HC
2014-04-13 11:46:32 ----D---- C:\Program Files (x86)\MPC-HC
2014-04-12 21:47:29 ----SHD---- C:\Config.Msi
2014-04-12 21:45:17 ----D---- C:\ComboFix
2014-04-12 21:21:48 ----A---- C:\ComboFix.txt
2014-04-12 21:06:12 ----D---- C:\Qoobox
2014-04-12 21:05:43 ----D---- C:\Windows\erdnt
2014-04-12 20:54:52 ----D---- C:\Users\The Kingslayer\AppData\Roaming\AVAST Software
2014-04-12 20:48:37 ----D---- C:\AdwCleaner
2014-04-12 20:42:51 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-12 20:42:49 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-10 20:09:56 ----A---- C:\Windows\system32\drivers\ssudserd.sys
2014-04-10 19:54:07 ----D---- C:\Program Files (x86)\UnlockRoot Pro 4.1.2
2014-04-10 19:15:57 ----D---- C:\Program Files (x86)\Unlockroot Pro
2014-04-07 00:23:45 ----D---- C:\Users\The Kingslayer\AppData\Roaming\Samsung
2014-04-07 00:23:09 ----A---- C:\Windows\system32\drivers\ssudmdm.sys
2014-04-07 00:23:09 ----A---- C:\Windows\system32\drivers\ssudbus.sys
2014-04-07 00:22:12 ----D---- C:\Program Files (x86)\MyFree Codec
2014-04-07 00:20:58 ----A---- C:\Windows\system32\drivers\wStLibG64.sys
2014-04-06 23:11:33 ----A---- C:\Windows\SYSWOW64\secman.dll
2014-04-06 23:11:32 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2014-04-06 23:09:57 ----D---- C:\Program Files (x86)\Samsung
2014-04-06 22:50:27 ----D---- C:\Program Files (x86)\DoughGo

======List of files/folders modified in the last 1 month======

2014-04-17 11:18:49 ----D---- C:\Windows\Prefetch
2014-04-17 11:18:46 ----D---- C:\Windows\Temp
2014-04-17 11:18:38 ----RD---- C:\Program Files
2014-04-17 11:11:03 ----D---- C:\Windows\system32\config
2014-04-17 10:53:40 ----A---- C:\Windows\win.ini
2014-04-17 10:50:55 ----D---- C:\Windows\system32\Tasks
2014-04-17 02:57:34 ----SHD---- C:\System Volume Information
2014-04-17 02:14:34 ----D---- C:\Windows\System32
2014-04-17 01:56:30 ----D---- C:\Windows\system32\catroot2
2014-04-17 01:55:44 ----D---- C:\Windows\SysWOW64
2014-04-17 01:55:44 ----D---- C:\Windows\inf
2014-04-14 23:12:50 ----D---- C:\Program Files (x86)\Kingo Android ROOT
2014-04-13 14:37:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-13 14:32:18 ----D---- C:\Windows
2014-04-13 14:30:06 ----D---- C:\Windows\Tasks
2014-04-13 14:30:06 ----D---- C:\Windows\system32\wfp
2014-04-13 14:29:58 ----D---- C:\Windows\system32\wbem
2014-04-13 14:28:55 ----DC---- C:\Windows\system32\DRVSTORE
2014-04-13 14:28:55 ----D---- C:\Windows\SYSWOW64\Fast Boot
2014-04-13 14:28:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-13 14:28:55 ----D---- C:\Windows\system32\NDF
2014-04-13 14:28:55 ----D---- C:\Windows\system32\DriverStore
2014-04-13 14:28:55 ----D---- C:\Windows\system32\drivers\etc
2014-04-13 14:28:55 ----D---- C:\Windows\system32\drivers
2014-04-13 14:28:55 ----D---- C:\Windows\system32\CodeIntegrity
2014-04-13 14:28:55 ----D---- C:\Windows\system32\catroot
2014-04-13 14:28:54 ----SHD---- C:\Windows\Installer
2014-04-13 14:28:54 ----D---- C:\Windows\cs
2014-04-13 14:28:54 ----D---- C:\Windows\AppCompat
2014-04-13 14:28:54 ----D---- C:\Users\The Kingslayer\AppData\Roaming\vlc
2014-04-13 14:28:54 ----D---- C:\Users\The Kingslayer\AppData\Roaming\Unitech LLC
2014-04-13 14:28:47 ----D---- C:\ProgramData\Temp
2014-04-13 14:28:47 ----D---- C:\ProgramData\P4G
2014-04-13 14:28:46 ----SD---- C:\ProgramData\Microsoft
2014-04-13 14:28:46 ----HD---- C:\ProgramData
2014-04-13 14:28:46 ----D---- C:\ProgramData\Hotspot Shield
2014-04-13 14:28:46 ----D---- C:\ProgramData\CyberLink
2014-04-13 14:28:42 ----D---- C:\Program Files\Windows Live
2014-04-13 14:28:41 ----RD---- C:\Program Files (x86)\Skype
2014-04-13 14:28:41 ----RD---- C:\Program Files (x86)
2014-04-13 14:28:41 ----D---- C:\Program Files (x86)\Windows Live
2014-04-13 14:28:41 ----D---- C:\Program Files (x86)\Unitech LLC
2014-04-13 14:28:19 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-04-13 14:28:19 ----D---- C:\Program Files (x86)\Microsoft
2014-04-13 14:28:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-04-13 14:28:18 ----D---- C:\Program Files (x86)\Hotspot Shield
2014-04-13 14:28:17 ----D---- C:\Program Files (x86)\Google
2014-04-13 14:28:17 ----D---- C:\Program Files (x86)\cyotek
2014-04-13 14:28:16 ----D---- C:\Program Files (x86)\CyberLink
2014-04-13 14:28:13 ----SHD---- C:\$RECYCLE.BIN
2014-04-13 14:28:13 ----D---- C:\Program Files (x86)\Common Files
2014-04-13 14:28:13 ----D---- C:\Program Files (x86)\ASUS
2014-04-13 14:28:13 ----D---- C:\ADSM_PData_0150
2014-04-13 14:27:55 ----D---- C:\Windows\Minidump
2014-04-13 14:27:51 ----D---- C:\Windows\registration
2014-04-13 14:27:49 ----D---- C:\Windows\winsxs
2014-04-13 14:27:27 ----RSD---- C:\Windows\assembly
2014-04-13 14:26:35 ----RD---- C:\Users
2014-04-12 21:45:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\DAEMON Tools Lite
2014-04-12 21:45:40 ----D---- C:\Windows\Panther
2014-04-12 21:45:39 ----D---- C:\Windows\Logs
2014-04-12 21:45:39 ----D---- C:\Windows\debug
2014-04-12 20:43:15 ----D---- C:\ProgramData\AVAST Software
2014-04-07 00:23:41 ----D---- C:\Windows\Microsoft.NET
2014-04-06 23:10:14 ----D---- C:\ProgramData\Samsung
2014-03-30 13:26:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\uTorrent
2014-03-19 23:51:50 ----D---- C:\Users\The Kingslayer\AppData\Roaming\Mozilla

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2009-10-10 35384]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-22 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2014-01-22 189936]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-07-30 241696]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-10-27 834544]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2014-01-22 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-01-22 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-01-22 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2014-01-22 64288]
R1 HssDRV6;Hotspot Shield Routing Driver 6; C:\Windows\system32\DRIVERS\hssdrv6.sys [2012-11-15 42248]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2013-10-29 231376]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R1 wStLibG64;wStLibG64; C:\Windows\system32\drivers\wStLibG64.sys [2014-04-07 61112]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2014-01-22 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-22 80816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-06 1478144]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-07-09 140800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-28 1966624]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-06-29 28704]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2012-11-15 40712]
S1 PQNTDrv;PQNTDrv; C:\Windows\system32\drivers\PQNTDrv.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 axcy349u;axcy349u; C:\Windows\system32\drivers\axcy349u.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2013-12-26 108856]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2013-12-26 206136]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2010-09-17 201280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-22 46808]
R2 FastBootAgent;FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [2009-07-24 306232]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-06-11 382496]
R2 Util DoughGo;Util DoughGo; C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe [2014-04-06 350488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [2013-12-16 247968]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [2013-12-16 193696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-30 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 Update DoughGo;Update DoughGo; C:\Program Files (x86)\DoughGo\updateDoughGo.exe [2014-04-07 350488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09 257416]
S3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
S3 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-09-15 359552]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-30 136176]
S3 hshld;Hotspot Shield Service; C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe [2012-11-15 527728]
S3 HssSrv;Hotspot Shield Routing Service; C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe [2012-11-17 443760]
S3 HssTrayService;Hotspot Shield Tray Service; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [2012-11-15 78072]
S3 HssWd;Hotspot Shield Monitoring Service; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [2012-11-15 389488]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-30 1255736]
S4 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

ahoj,
co je toto za partizancina
2014-04-12 21:21:48 ----A---- C:\ComboFix.txt
vloz jeho obsah

takova zkouska jestli to pomuze znovu.. ale nepomohlo

ComboFix 14-04-12.01 - The Kingslayer 12.04.2014 21:10:48.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.2808 [GMT 2:00]
Spuštěný z: c:\users\The Kingslayer\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\The Kingslayer\AppData\Local\Microsoft\Windows\Temporary Internet Files\DoughGo_iels
c:\windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-12 do 2014-04-12 )))))))))))))))))))))))))))))))
.
.
2014-04-12 19:18 . 2014-04-12 19:18 -------- d-----w- c:\users\lolek\AppData\Local\temp
2014-04-12 19:18 . 2014-04-12 19:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-12 18:54 . 2014-04-12 18:54 -------- d-----w- c:\users\The Kingslayer\AppData\Roaming\AVAST Software
2014-04-12 18:48 . 2014-04-12 18:51 -------- d-----w- C:\AdwCleaner
2014-04-12 18:46 . 2014-04-12 18:46 84816 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-04-12 18:46 . 2014-04-12 18:46 43152 ----a-w- c:\windows\avastSS.scr
2014-04-12 18:42 . 2014-04-12 18:46 208928 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-12 18:42 . 2014-04-12 18:46 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-04-10 18:09 . 2010-09-17 17:42 201280 ----a-w- c:\windows\system32\drivers\ssudserd.sys
2014-04-10 17:54 . 2014-04-10 17:54 -------- d-----w- c:\program files (x86)\UnlockRoot Pro 4.1.2
2014-04-10 17:15 . 2014-04-10 17:57 -------- d-----w- c:\program files (x86)\Unlockroot Pro
2014-04-06 22:23 . 2014-04-06 22:23 -------- d-----w- c:\users\The Kingslayer\AppData\Local\Samsung
2014-04-06 22:23 . 2014-04-06 22:23 -------- d-----w- c:\users\The Kingslayer\AppData\Roaming\Samsung
2014-04-06 22:23 . 2013-12-26 05:41 206136 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2014-04-06 22:23 . 2013-12-26 05:41 108856 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2014-04-06 22:20 . 2014-04-06 22:20 61112 ----a-w- c:\windows\system32\drivers\wStLibG64.sys
2014-04-06 21:11 . 2014-01-23 16:23 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-04-06 21:11 . 2014-01-23 16:23 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-04-06 21:09 . 2014-04-10 18:10 -------- d-----w- c:\program files (x86)\Samsung
2014-04-06 21:08 . 2014-04-06 21:08 -------- d-----w- c:\users\The Kingslayer\AppData\Local\Downloaded Installations
2014-04-06 20:50 . 2014-04-06 21:50 -------- d-----w- c:\program files (x86)\DoughGo
2014-03-15 21:30 . 2014-03-15 21:30 -------- d-----w- c:\users\The Kingslayer\.android
2014-03-15 21:12 . 2013-05-02 04:23 708168 ----a-w- c:\windows\system32\WinUSBCoInstaller.dll
2014-03-15 21:12 . 2013-05-02 04:23 1490656 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll
2014-03-15 21:11 . 2014-03-15 21:11 -------- d-----w- c:\program files\SAMSUNG
2014-03-15 21:11 . 2014-04-06 21:10 -------- d-----w- c:\programdata\Samsung
2014-03-15 21:03 . 2014-03-15 21:03 -------- d-----w- c:\users\The Kingslayer\AppData\Roaming\ZJMedia
2014-03-15 21:03 . 2014-03-15 21:03 -------- d-----w- c:\users\The Kingslayer\AppData\Local\ZJMedia
2014-03-15 21:03 . 2014-04-10 17:42 -------- d-----w- c:\program files (x86)\Kingo Android ROOT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-12 18:46 . 2012-09-29 22:04 423240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-04-12 18:46 . 2012-09-29 22:04 1039096 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-04-12 18:46 . 2012-09-29 22:04 79184 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-04-12 18:46 . 2012-09-29 22:04 334648 ----a-w- c:\windows\system32\aswBoot.exe
2014-04-12 18:46 . 2012-09-29 22:04 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-01-23 16:31 . 2014-01-23 16:31 90112 ----a-w- c:\windows\MAMCityDownload.ocx
2014-01-23 16:31 . 2014-01-23 16:31 330240 ----a-w- c:\windows\MASetupCaller.dll
2014-01-23 16:31 . 2014-01-23 16:31 30568 ----a-w- c:\windows\MusiccityDownload.exe
2014-01-23 16:31 . 2014-01-23 16:31 45056 ----a-w- c:\windows\SysWow64\MACXMLProto.dll
2014-01-23 16:31 . 2014-01-23 16:31 135168 ----a-w- c:\windows\SysWow64\muzaf1.dll
2014-01-23 16:31 . 2014-01-23 16:31 974848 ----a-w- c:\windows\SysWow64\cis-2.4.dll
2014-01-23 16:31 . 2014-01-23 16:31 81920 ----a-w- c:\windows\SysWow64\issacapi_bs-2.3.dll
2014-01-23 16:31 . 2014-01-23 16:31 65536 ----a-w- c:\windows\SysWow64\issacapi_pe-2.3.dll
2014-01-23 16:31 . 2014-01-23 16:31 57344 ----a-w- c:\windows\SysWow64\MTXSYNCICON.dll
2014-01-23 16:31 . 2014-01-23 16:31 57344 ----a-w- c:\windows\SysWow64\MK_Lyric.dll
2014-01-23 16:31 . 2014-01-23 16:31 57344 ----a-w- c:\windows\SysWow64\issacapi_se-2.3.dll
2014-01-23 16:31 . 2014-01-23 16:31 569344 ----a-w- c:\windows\SysWow64\muzdecode.ax
2014-01-23 16:31 . 2014-01-23 16:31 491520 ----a-w- c:\windows\SysWow64\muzapp.dll
2014-01-23 16:31 . 2014-01-23 16:31 49152 ----a-w- c:\windows\SysWow64\MaJGUILib.dll
2014-01-23 16:31 . 2014-01-23 16:31 45320 ----a-w- c:\windows\SysWow64\MAMACExtract.dll
2014-01-23 16:31 . 2014-01-23 16:31 45056 ----a-w- c:\windows\SysWow64\MaXMLProto.dll
2014-01-23 16:31 . 2014-01-23 16:31 40960 ----a-w- c:\windows\SysWow64\MTTELECHIP.dll
2014-01-23 16:31 . 2014-01-23 16:31 352256 ----a-w- c:\windows\SysWow64\MSLUR71.dll
2014-01-23 16:31 . 2014-01-23 16:31 258048 ----a-w- c:\windows\SysWow64\muzoggsp.ax
2014-01-23 16:31 . 2014-01-23 16:31 245760 ----a-w- c:\windows\SysWow64\MSCLib.dll
2014-01-23 16:31 . 2014-01-23 16:31 24576 ----a-w- c:\windows\SysWow64\MASetupCleaner.exe
2014-01-23 16:31 . 2014-01-23 16:31 200704 ----a-w- c:\windows\SysWow64\muzwmts.dll
2014-01-23 16:31 . 2014-01-23 16:31 172032 ----a-w- c:\windows\SysWow64\muzapp.exe
2014-01-23 16:31 . 2014-01-23 16:31 155648 ----a-w- c:\windows\SysWow64\MSFLib.dll
2014-01-23 16:31 . 2014-01-23 16:31 143360 ----a-w- c:\windows\SysWow64\3DAudio.ax
2014-01-23 16:31 . 2014-01-23 16:31 131072 ----a-w- c:\windows\SysWow64\muzmpgsp.ax
2014-01-23 16:31 . 2014-01-23 16:31 122880 ----a-w- c:\windows\SysWow64\muzeffect.ax
2014-01-23 16:31 . 2014-01-23 16:31 118784 ----a-w- c:\windows\SysWow64\MaDRM.dll
2014-01-23 16:31 . 2014-01-23 16:31 110592 ----a-w- c:\windows\SysWow64\muzmp4sp.ax
2014-01-13 15:24 . 2014-01-13 15:24 97280 ----a-w- c:\windows\system32\mshtmled.dll
2014-01-13 15:24 . 2014-01-13 15:24 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-01-13 15:24 . 2014-01-13 15:24 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-01-13 15:24 . 2014-01-13 15:24 89600 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-01-13 15:24 . 2014-01-13 15:24 855552 ----a-w- c:\windows\system32\jscript.dll
2014-01-13 15:24 . 2014-01-13 15:24 81408 ----a-w- c:\windows\system32\icardie.dll
2014-01-13 15:24 . 2014-01-13 15:24 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-01-13 15:24 . 2014-01-13 15:24 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2014-01-13 15:24 . 2014-01-13 15:24 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-01-13 15:24 . 2014-01-13 15:24 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-01-13 15:24 . 2014-01-13 15:24 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-01-13 15:24 . 2014-01-13 15:24 67072 ----a-w- c:\windows\system32\iesetup.dll
2014-01-13 15:24 . 2014-01-13 15:24 62976 ----a-w- c:\windows\system32\pngfilt.dll
2014-01-13 15:24 . 2014-01-13 15:24 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-01-13 15:24 . 2014-01-13 15:24 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-01-13 15:24 . 2014-01-13 15:24 603136 ----a-w- c:\windows\system32\msfeeds.dll
2014-01-13 15:24 . 2014-01-13 15:24 599552 ----a-w- c:\windows\system32\vbscript.dll
2014-01-13 15:24 . 2014-01-13 15:24 53248 ----a-w- c:\windows\system32\jsproxy.dll
2014-01-13 15:24 . 2014-01-13 15:24 526336 ----a-w- c:\windows\system32\ieui.dll
2014-01-13 15:24 . 2014-01-13 15:24 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-01-13 15:24 . 2014-01-13 15:24 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-01-13 15:24 . 2014-01-13 15:24 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2014-01-13 15:24 . 2014-01-13 15:24 51200 ----a-w- c:\windows\system32\imgutil.dll
2014-01-13 15:24 . 2014-01-13 15:24 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-01-13 15:24 . 2014-01-13 15:24 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-01-13 15:24 . 2014-01-13 15:24 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2014-01-13 15:24 . 2014-01-13 15:24 441856 ----a-w- c:\windows\system32\html.iec
2014-01-13 15:24 . 2014-01-13 15:24 39936 ----a-w- c:\windows\system32\iernonce.dll
2014-01-13 15:24 . 2014-01-13 15:24 3959808 ----a-w- c:\windows\system32\jscript9.dll
2014-01-13 15:24 . 2014-01-13 15:24 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-01-13 15:24 . 2014-01-13 15:24 361984 ----a-w- c:\windows\SysWow64\html.iec
2014-01-13 15:24 . 2014-01-13 15:24 2877952 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-01-13 15:24 . 2014-01-13 15:24 281600 ----a-w- c:\windows\system32\dxtrans.dll
2014-01-13 15:24 . 2014-01-13 15:24 27648 ----a-w- c:\windows\system32\licmgr10.dll
2014-01-13 15:24 . 2014-01-13 15:24 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2014-01-13 15:24 . 2014-01-13 15:24 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-01-13 15:24 . 2014-01-13 15:24 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2014-01-13 15:24 . 2014-01-13 15:24 2648576 ----a-w- c:\windows\system32\iertutil.dll
2014-01-13 15:24 . 2014-01-13 15:24 247296 ----a-w- c:\windows\system32\webcheck.dll
2014-01-13 15:24 . 2014-01-13 15:24 235008 ----a-w- c:\windows\system32\url.dll
2014-01-13 15:24 . 2014-01-13 15:24 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-01-13 15:24 . 2014-01-13 15:24 226304 ----a-w- c:\windows\system32\elshyph.dll
2014-01-13 15:24 . 2014-01-13 15:24 2241536 ----a-w- c:\windows\system32\wininet.dll
2014-01-13 15:24 . 2014-01-13 15:24 216064 ----a-w- c:\windows\system32\msls31.dll
2014-01-13 15:24 . 2014-01-13 15:24 197120 ----a-w- c:\windows\system32\msrating.dll
2014-01-13 15:24 . 2014-01-13 15:24 19271168 ----a-w- c:\windows\system32\mshtml.dll
2014-01-13 15:24 . 2014-01-13 15:24 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-01-13 15:24 . 2014-01-13 15:24 1767936 ----a-w- c:\windows\SysWow64\wininet.dll
2014-01-13 15:24 . 2014-01-13 15:24 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2014-01-13 15:24 . 2014-01-13 15:24 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-01-13 15:24 . 2014-01-13 15:24 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2014-01-13 15:24 . 2014-01-13 15:24 15404032 ----a-w- c:\windows\system32\ieframe.dll
2014-01-13 15:24 . 2014-01-13 15:24 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2014-01-13 15:24 . 2014-01-13 15:24 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-01-13 15:24 . 2014-01-13 15:24 149504 ----a-w- c:\windows\system32\occache.dll
2014-01-13 15:24 . 2014-01-13 15:24 144896 ----a-w- c:\windows\system32\wextract.exe
2014-01-13 15:24 . 2014-01-13 15:24 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-01-13 15:24 . 2014-01-13 15:24 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2014-01-13 15:24 . 2014-01-13 15:24 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2014-01-13 15:24 . 2014-01-13 15:24 13824 ----a-w- c:\windows\system32\mshta.exe
2014-01-13 15:24 . 2014-01-13 15:24 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-01-13 15:24 . 2014-01-13 15:24 136704 ----a-w- c:\windows\system32\iesysprep.dll
2014-01-13 15:24 . 2014-01-13 15:24 1365504 ----a-w- c:\windows\system32\urlmon.dll
2014-01-13 15:24 . 2014-01-13 15:24 136192 ----a-w- c:\windows\system32\iepeers.dll
2014-01-13 15:24 . 2014-01-13 15:24 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-01-13 15:24 . 2014-01-13 15:24 12800 ----a-w- c:\windows\SysWow64\mshta.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{0b0478d0-1077-4dab-a1b2-2d456ead4570}]
2014-03-25 22:08 249624 ----a-w- c:\program files (x86)\DoughGo\DoughGoBHO.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-02-14 1564992]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-04-02 98304]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-07-07 8493624]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-04-20 159744]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-02-14 311616]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-04-12 3854640]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe -d [2009-10-10 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /M:13b8c415 /wow /dir:C:\Program
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-10-03 11:08 35696 ----a-w- c:\program files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
2009-06-24 19:30 272952 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-10-10 04:53 72248 ----a-w- c:\windows\AsScrProlog.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2009-10-10 04:53 3054136 ----a-w- c:\windows\AsScrPro.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2008-07-19 02:52 104936 ----a-w- c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S1 wStLibG64;wStLibG64;c:\windows\system32\drivers\wStLibG64.sys;c:\windows\SYSNATIVE\drivers\wStLibG64.sys [x]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys;c:\program files\ATKGFNEX\ASMMAP64.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 FastBootAgent;FastBootAgent;c:\windows\SysWOW64\Fast Boot\FastBootAgent.exe;c:\windows\SysWOW64\Fast Boot\FastBootAgent.exe [x]
S2 Update DoughGo;Update DoughGo;c:\program files (x86)\DoughGo\updateDoughGo.exe;c:\program files (x86)\DoughGo\updateDoughGo.exe [x]
S2 Util DoughGo;Util DoughGo;c:\program files (x86)\DoughGo\bin\utilDoughGo.exe;c:\program files (x86)\DoughGo\bin\utilDoughGo.exe [x]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWRVRT
*NewlyCreated* - ASWSTM
*NewlyCreated* - ASWVMM
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-10 13:06 1077576 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-24 16:13]
.
2013-08-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
- c:\users\The Kingslayer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-27 21:58]
.
2013-08-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job
- c:\users\The Kingslayer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-27 21:58]
.
2014-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-29 22:04]
.
2014-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-29 22:04]
.
2014-04-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
- c:\users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-06 23:10]
.
2014-04-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job
- c:\users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-06 23:10]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-04-12 18:46 290888 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 23:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-07-30 617856]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.ividi.org/?src=tbhp&id=9422dedf00000000000000ff8b1908c9&affilt=3
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: + Offline &Explorer: Download the link - file://c:\program files (x86)\Offline Explorer\Add_UrlO.htm
IE: + Offline E&xplorer: Download the current page - file://c:\program files (x86)\Offline Explorer\Add_AllO.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 8.8.4.4 8.8.8.8
TCP: Interfaces\{9FA328B9-1FCA-4348-B30D-47D29CBF9D78}: NameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{8B8B2E80-1444-451D-AC8E-EB9A847F3887} - c:\program files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-KiesAirMessage - c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk - c:\windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe /f=srs_premium_sound_nopreset.zip /h
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-ividi - c:\program files (x86)\Unitech LLC\ividi\1.8.23.0\uninstall.exe
AddRemove-MetaProducts Offline Explorer - c:\program files (x86)\Offline Explorer\OE.exe
AddRemove-OneClickRoot - c:\users\THEKIN~1\AppData\Local\Temp\uninst.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1022244719-3293779036-2618421149-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (S-1-5-21-1022244719-3293779036-2618421149-1001)
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-04-12 21:21:45
ComboFix-quarantined-files.txt 2014-04-12 19:21
.
Před spuštěním: Volných bajtů: 51 373 494 272
Po spuštění: Volných bajtů: 51 111 747 584
.
- - End Of File - - E890345E09B2C5C6A83A15B31DA4FE54
5C616939100B85E558DA92B899A0FC36

vloz logy z MBAM + TDSSKiller

tdsskiller:

12:22:39.0706 0x1540 TDSS rootkit removing tool 3.0.0.16 Nov 1 2013 15:53:38
12:22:53.0558 0x1540 ============================================================
12:22:53.0558 0x1540 Current date / time: 2014/04/17 12:22:53.0558
12:22:53.0558 0x1540 SystemInfo:
12:22:53.0558 0x1540
12:22:53.0558 0x1540 OS Version: 6.1.7601 ServicePack: 1.0
12:22:53.0558 0x1540 Product type: Workstation
12:22:53.0558 0x1540 ComputerName: THEKINGSLAYER
12:22:53.0559 0x1540 UserName: The Kingslayer
12:22:53.0559 0x1540 Windows directory: C:\Windows
12:22:53.0559 0x1540 System windows directory: C:\Windows
12:22:53.0559 0x1540 Running under WOW64
12:22:53.0559 0x1540 Processor architecture: Intel x64
12:22:53.0559 0x1540 Number of processors: 2
12:22:53.0559 0x1540 Page size: 0x1000
12:22:53.0559 0x1540 Boot type: Normal boot
12:22:53.0559 0x1540 ============================================================
12:23:00.0509 0x1540 System UUID: {22209E74-50CD-2CAC-2C70-0CCA2E184D44}
12:23:02.0513 0x1540 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:23:02.0537 0x1540 ============================================================
12:23:02.0537 0x1540 \Device\Harddisk0\DR0:
12:23:02.0539 0x1540 MBR partitions:
12:23:02.0539 0x1540 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D4B000, BlocksNum 0x1D1C3000
12:23:02.0570 0x1540 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1EF0E800, BlocksNum 0x1B477000
12:23:02.0570 0x1540 ============================================================
12:23:02.0710 0x1540 C: <-> \Device\Harddisk0\DR0\Partition1
12:23:02.0793 0x1540 D: <-> \Device\Harddisk0\DR0\Partition2
12:23:02.0794 0x1540 ============================================================
12:23:02.0794 0x1540 Initialize success
12:23:02.0794 0x1540 ============================================================
12:23:17.0430 0x0210 ============================================================
12:23:17.0430 0x0210 Scan started
12:23:17.0430 0x0210 Mode: Manual;
12:23:17.0430 0x0210 ============================================================
12:23:17.0430 0x0210 KSN ping started
12:23:31.0873 0x0210 KSN ping finished: true
12:23:33.0844 0x0210 ================ Scan system memory ========================
12:23:33.0844 0x0210 System memory - ok
12:23:33.0845 0x0210 ================ Scan services =============================
12:23:34.0183 0x0210 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
12:23:34.0193 0x0210 1394ohci - ok
12:23:34.0259 0x0210 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
12:23:34.0296 0x0210 ACPI - ok
12:23:34.0328 0x0210 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
12:23:34.0331 0x0210 AcpiPmi - ok
12:23:34.0459 0x0210 [ A283108E14F3970432C21AF4C0CB1BCE, 1D3219EF916D54232838870EDE557296AACB714B456ED0AAE0DE3CE3822F4643 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
12:23:34.0469 0x0210 AdobeFlashPlayerUpdateSvc - ok
12:23:34.0528 0x0210 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:23:34.0552 0x0210 adp94xx - ok
12:23:34.0598 0x0210 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:23:34.0617 0x0210 adpahci - ok
12:23:34.0640 0x0210 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:23:34.0648 0x0210 adpu320 - ok
12:23:34.0740 0x0210 [ C0BF554D2277F7A4C735D475ADE2E3B2, 58ED620CD73239A6AB8F993492494AB0F09705B25E671A842D5163B13F452B15 ] ADSMService C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
12:23:34.0756 0x0210 ADSMService - ok
12:23:34.0804 0x0210 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:23:34.0808 0x0210 AeLookupSvc - ok
12:23:34.0994 0x0210 [ 114C042FF784B4C5670290A661799357, 9826170EDF76C19F6C3320942012642E44494EC99AB0411D8BE5A7814AEBE5FF ] AFBAgent C:\Windows\system32\FBAgent.exe
12:23:35.0076 0x0210 AFBAgent - ok
12:23:35.0159 0x0210 [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD C:\Windows\system32\drivers\afd.sys
12:23:35.0182 0x0210 AFD - ok
12:23:35.0223 0x0210 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
12:23:35.0230 0x0210 agp440 - ok
12:23:35.0266 0x0210 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
12:23:35.0271 0x0210 ALG - ok
12:23:35.0317 0x0210 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
12:23:35.0319 0x0210 aliide - ok
12:23:35.0344 0x0210 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
12:23:35.0348 0x0210 amdide - ok
12:23:35.0386 0x0210 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:23:35.0391 0x0210 AmdK8 - ok
12:23:35.0406 0x0210 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:23:35.0409 0x0210 AmdPPM - ok
12:23:35.0452 0x0210 [ 6EC6D772EAE38DC17C14AED9B178D24B, B4FB936B31B1265B8CC6B426C64965C34D0CCF1638E645ACD65E88F4AFFC57A6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:23:35.0457 0x0210 amdsata - ok
12:23:35.0493 0x0210 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:23:35.0501 0x0210 amdsbs - ok
12:23:35.0513 0x0210 [ 1142A21DB581A84EA5597B03A26EBAA0, F94EB140D0CD068760D7EB081FF75154C75DAC75E5E24B6DE4E4F9CE65A70343 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:23:35.0517 0x0210 amdxata - ok
12:23:35.0572 0x0210 [ 391887990CDAA83DE5C56C3FDE966DA1, BC55E21E03B3FE7BBDBB13D56AADB8FBA74F58521AC73B105AD9788E7AE18F0B ] AmUStor C:\Windows\system32\drivers\AmUStor.SYS
12:23:35.0577 0x0210 AmUStor - ok
12:23:35.0624 0x0210 [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys
12:23:35.0627 0x0210 AppID - ok
12:23:35.0654 0x0210 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:23:35.0657 0x0210 AppIDSvc - ok
12:23:35.0694 0x0210 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
12:23:35.0697 0x0210 Appinfo - ok
12:23:35.0735 0x0210 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys
12:23:35.0739 0x0210 arc - ok
12:23:35.0763 0x0210 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:23:35.0767 0x0210 arcsas - ok
12:23:35.0804 0x0210 [ 88FBC8BEBFD38566235EAA5E4DBC4E05, E714D913BA9786BD536F9D99E3510C489CA32F646044718394CEE65247941288 ] AsDsm C:\Windows\system32\drivers\AsDsm.sys
12:23:35.0806 0x0210 AsDsm - ok
12:23:35.0858 0x0210 [ EB1807795CD3EEAA3288B4A30DE254E8, C9F1FFD9A1EFD0127923DC887A348D943847B69266A66C8655934E515D2ECE03 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
12:23:35.0862 0x0210 ASLDRService - ok
12:23:35.0904 0x0210 [ 2DB34EDD17D3A8DA7105A19C95A3DD68, 5F76C140118B181427969237E364FD70B14FA36533061FD4D8EB2F4751706739 ] ASMMAP64 C:\Program Files\ATKGFNEX\ASMMAP64.sys
12:23:35.0906 0x0210 ASMMAP64 - ok
12:23:36.0009 0x0210 [ 9217D874131AE6FF8F642F124F00A555, BE2923D5AA7748FDAAED73AF567D015517B36F1C739C6E5637DD15112EFDF495 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
12:23:36.0113 0x0210 aspnet_state - ok
12:23:36.0155 0x0210 [ 49497EB7AF992C01AFC535F30B0B0385, EAFCB805B35B0D14BAB1D9EF34EC0ADD043759ED46778EE4F2E33D2BBE355E1F ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
12:23:36.0158 0x0210 aswFsBlk - ok
12:23:36.0178 0x0210 [ 104B022CA8245FB93CD7BBFA5D0D70C4, D03B7197D32ED9DAE79626075222839B90B9394BFDC97DDC91ECF095863859D5 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
12:23:36.0184 0x0210 aswMonFlt - ok
12:23:36.0206 0x0210 [ B82250774942C411C9B0E3E21C8B3750, 2BDEE7F11D77D126AFE6E4EE04E05DB6F1F32A3118D7DCBBA6CA60744E7A2CDD ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
12:23:36.0210 0x0210 aswRdr - ok
12:23:36.0255 0x0210 [ DC80CB69042C790E3EACD38942C680D4, 8E0333C67F0A7881F3FEC10CE927C31004447BAAABF3AD86CB4DEB6A5C42741E ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
12:23:36.0261 0x0210 aswRvrt - ok
12:23:36.0325 0x0210 [ 2A07C1A6D9773F4DFC7C307CE9005004, EF810D14D64373AE5AF7E8EAE2CB1FC70F78A6C5B021A11764561A7648EBB6C6 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
12:23:36.0382 0x0210 aswSnx - ok
12:23:36.0413 0x0210 [ C641FE56B85807683CA2F4DCD44F6776, D08F154377E3996DAB900497FF5CE8C5F6D601A44EDB0CF76E257AFD098F1B98 ] aswSP C:\Windows\system32\drivers\aswSP.sys
12:23:36.0425 0x0210 aswSP - ok
12:23:36.0448 0x0210 [ 367CF04C38DFF33368FCDBBF71C96297, B533833A9592FCE2B665B7E98AACC8D699845B14B7473710A333FC1E0AC0BB2F ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
12:23:36.0452 0x0210 aswTdi - ok
12:23:36.0475 0x0210 [ 43E5B51F295E09D51D64FF1C66757DAA, BF542EDD3279946F1E70A4B071FE351974DC850FE7A34D52C005BCB1642B094E ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
12:23:36.0482 0x0210 aswVmm - ok
12:23:36.0510 0x0210 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:23:36.0513 0x0210 AsyncMac - ok
12:23:36.0556 0x0210 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
12:23:36.0558 0x0210 atapi - ok
12:23:36.0872 0x0210 [ E0FABC10635C670BD7D89FD214A405D7, DB1A7755F38F92D1BFCBC8EC710CB997C1AEE88E4FD7461B0E2A7C1EF3D2F5E4 ] athr C:\Windows\system32\DRIVERS\athrx.sys
12:23:36.0939 0x0210 athr - ok
12:23:36.0957 0x0210 [ 7C157574A181B19B9DCF5F339E25337E, 7CA78363CD420BFE4BFE9A38683CA9E31023AC573D9092666CDAEE6AF4998B60 ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe
12:23:36.0961 0x0210 ATKGFNEXSrv - ok
12:23:37.0014 0x0210 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:23:37.0049 0x0210 AudioEndpointBuilder - ok
12:23:37.0074 0x0210 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv C:\Windows\System32\Audiosrv.dll
12:23:37.0088 0x0210 AudioSrv - ok
12:23:37.0208 0x0210 [ E3BE7DAC6E46C2F1461996F29A09B6FA, 322469F33E508FDE6F20F1B3F2D4078A0FA47246D3CBADCCA5B1B926BAB057BF ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
12:23:37.0212 0x0210 avast! Antivirus - ok
12:23:37.0268 0x0210 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:23:37.0276 0x0210 AxInstSV - ok
12:23:37.0324 0x0210 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
12:23:37.0352 0x0210 b06bdrv - ok
12:23:37.0397 0x0210 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
12:23:37.0406 0x0210 b57nd60a - ok
12:23:37.0525 0x0210 [ F2E8CEFC8CF4D6454F4121C5FF93136A, DFD05AD328BD0FDD8BF44043C40084A6DF98BF6F5CEAE71BF793176AF6ADFBBB ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe
12:23:37.0562 0x0210 BBSvc - ok
12:23:37.0623 0x0210 [ 6E1BCC590C9D30FEE8FC14DBD053CE94, 4F698D399225A890B7FDCE3773E504B2880534ED1C0F4C37589568C44BA51743 ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe
12:23:37.0634 0x0210 BBUpdate - ok
12:23:37.0667 0x0210 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
12:23:37.0673 0x0210 BDESVC - ok
12:23:37.0727 0x0210 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
12:23:37.0730 0x0210 Beep - ok
12:23:38.0061 0x0210 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
12:23:38.0326 0x0210 BFE - ok
12:23:38.0543 0x0210 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
12:23:38.0626 0x0210 BITS - ok
12:23:38.0828 0x0210 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:23:38.0832 0x0210 blbdrive - ok
12:23:38.0910 0x0210 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:23:38.0953 0x0210 bowser - ok
12:23:39.0046 0x0210 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:23:39.0080 0x0210 BrFiltLo - ok
12:23:39.0101 0x0210 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:23:39.0104 0x0210 BrFiltUp - ok
12:23:39.0282 0x0210 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
12:23:39.0368 0x0210 Browser - ok
12:23:39.0418 0x0210 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:23:39.0502 0x0210 Brserid - ok
12:23:39.0538 0x0210 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:23:39.0542 0x0210 BrSerWdm - ok
12:23:39.0642 0x0210 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:23:39.0645 0x0210 BrUsbMdm - ok
12:23:39.0692 0x0210 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:23:39.0695 0x0210 BrUsbSer - ok
12:23:39.0795 0x0210 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:23:39.0798 0x0210 BTHMODEM - ok
12:23:39.0851 0x0210 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
12:23:39.0934 0x0210 bthserv - ok
12:23:40.0013 0x0210 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:23:40.0123 0x0210 cdfs - ok
12:23:40.0386 0x0210 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\drivers\cdrom.sys
12:23:40.0395 0x0210 cdrom - ok
12:23:40.0446 0x0210 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
12:23:40.0450 0x0210 CertPropSvc - ok
12:23:40.0474 0x0210 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:23:40.0477 0x0210 circlass - ok
12:23:40.0519 0x0210 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
12:23:40.0538 0x0210 CLFS - ok
12:23:40.0597 0x0210 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:23:40.0637 0x0210 clr_optimization_v2.0.50727_32 - ok
12:23:40.0674 0x0210 [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:23:40.0733 0x0210 clr_optimization_v2.0.50727_64 - ok
12:23:40.0817 0x0210 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:23:40.0970 0x0210 clr_optimization_v4.0.30319_32 - ok
12:23:41.0009 0x0210 [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:23:41.0051 0x0210 clr_optimization_v4.0.30319_64 - ok
12:23:41.0089 0x0210 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:23:41.0092 0x0210 CmBatt - ok
12:23:41.0117 0x0210 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
12:23:41.0119 0x0210 cmdide - ok
12:23:41.0165 0x0210 [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys
12:23:41.0188 0x0210 CNG - ok
12:23:41.0224 0x0210 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:23:41.0227 0x0210 Compbatt - ok
12:23:41.0253 0x0210 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
12:23:41.0257 0x0210 CompositeBus - ok
12:23:41.0270 0x0210 COMSysApp - ok
12:23:41.0292 0x0210 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:23:41.0295 0x0210 crcdisk - ok
12:23:41.0340 0x0210 [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:23:41.0347 0x0210 CryptSvc - ok
12:23:41.0401 0x0210 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
12:23:41.0437 0x0210 DcomLaunch - ok
12:23:41.0491 0x0210 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
12:23:41.0502 0x0210 defragsvc - ok
12:23:41.0548 0x0210 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:23:41.0553 0x0210 DfsC - ok
12:23:41.0586 0x0210 [ E0FB647661B59632E3987D40D6F75281, D999CE7FDC788A217E128F059A05216BACD2FD26207362469C55D477C6E0A3EE ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
12:23:41.0591 0x0210 dg_ssudbus - ok
12:23:41.0651 0x0210 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
12:23:41.0664 0x0210 Dhcp - ok
12:23:41.0698 0x0210 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
12:23:41.0701 0x0210 discache - ok
12:23:41.0732 0x0210 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:23:41.0736 0x0210 Disk - ok
12:23:41.0780 0x0210 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:23:41.0787 0x0210 Dnscache - ok
12:23:41.0826 0x0210 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
12:23:41.0837 0x0210 dot3svc - ok
12:23:41.0874 0x0210 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
12:23:41.0881 0x0210 DPS - ok
12:23:41.0917 0x0210 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:23:41.0918 0x0210 drmkaud - ok
12:23:41.0965 0x0210 [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:23:42.0011 0x0210 DXGKrnl - ok
12:23:42.0060 0x0210 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
12:23:42.0065 0x0210 EapHost - ok
12:23:42.0234 0x0210 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
12:23:42.0396 0x0210 ebdrv - ok
12:23:42.0443 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] EFS C:\Windows\System32\lsass.exe
12:23:42.0449 0x0210 EFS - ok
12:23:42.0562 0x0210 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:23:42.0640 0x0210 ehRecvr - ok
12:23:42.0668 0x0210 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
12:23:42.0673 0x0210 ehSched - ok
12:23:42.0733 0x0210 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:23:42.0759 0x0210 elxstor - ok
12:23:42.0774 0x0210 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
12:23:42.0776 0x0210 ErrDev - ok
12:23:42.0877 0x0210 [ 1299D1EA00B7A4BF69C5869DCA31E0F6, 55071BAD9FCE2529E1BC2D7CBF689047CE4A83878DAEE1209DEE0DA3DEBBABFF ] ETD C:\Windows\system32\DRIVERS\ETD.sys
12:23:42.0886 0x0210 ETD - ok
12:23:42.0931 0x0210 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
12:23:42.0955 0x0210 EventSystem - ok
12:23:42.0987 0x0210 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
12:23:42.0994 0x0210 exfat - ok
12:23:43.0108 0x0210 [ 8C89F06DBC239492E0AAAA0B0D8645EA, 77DF8A131411C64E304B6565956C4BC52C9839016882AF380C7C5663C89FF9A5 ] FastBootAgent C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
12:23:43.0117 0x0210 FastBootAgent - ok
12:23:43.0146 0x0210 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:23:43.0153 0x0210 fastfat - ok
12:23:43.0217 0x0210 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
12:23:43.0253 0x0210 Fax - ok
12:23:43.0287 0x0210 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:23:43.0290 0x0210 fdc - ok
12:23:43.0324 0x0210 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
12:23:43.0329 0x0210 fdPHost - ok
12:23:43.0349 0x0210 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
12:23:43.0354 0x0210 FDResPub - ok
12:23:43.0401 0x0210 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:23:43.0405 0x0210 FileInfo - ok
12:23:43.0426 0x0210 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:23:43.0430 0x0210 Filetrace - ok
12:23:43.0452 0x0210 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:23:43.0456 0x0210 flpydisk - ok
12:23:43.0518 0x0210 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:23:43.0534 0x0210 FltMgr - ok
12:23:43.0615 0x0210 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
12:23:43.0670 0x0210 FontCache - ok
12:23:43.0736 0x0210 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:23:43.0740 0x0210 FontCache3.0.0.0 - ok
12:23:43.0768 0x0210 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:23:43.0771 0x0210 FsDepends - ok
12:23:43.0810 0x0210 [ B16B626996C74B564005BA855C5DEE90, B432C669EB610C262B18F3F8308EEE1B910DE7F7BC2A8EB5483419DC52A07AE1 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
12:23:43.0814 0x0210 fssfltr - ok
12:23:43.0935 0x0210 [ 812E1BA5C52A78F13EA6AA10DF708B1D, CF1C4D8E072CF0D66C977DFA4C852E5CE757843BEAF5D29454D26A9AC5766E61 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
12:23:44.0011 0x0210 fsssvc - ok
12:23:44.0047 0x0210 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:23:44.0051 0x0210 Fs_Rec - ok
12:23:44.0111 0x0210 [ 1F7B25B858FA27015169FE95E54108ED, 72DD12E924AA7273B3E4BDD2A2C581DECE304C8EF3D44EA79ABB032F3F95DCE5 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:23:44.0119 0x0210 fvevol - ok
12:23:44.0153 0x0210 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:23:44.0158 0x0210 gagp30kx - ok
12:23:44.0380 0x0210 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
12:23:44.0504 0x0210 gpsvc - ok
12:23:44.0594 0x0210 [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:23:44.0612 0x0210 gupdate - ok
12:23:44.0629 0x0210 [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:23:44.0633 0x0210 gupdatem - ok
12:23:44.0671 0x0210 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:23:44.0675 0x0210 hcw85cir - ok
12:23:44.0738 0x0210 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:23:44.0749 0x0210 HdAudAddService - ok
12:23:44.0798 0x0210 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
12:23:44.0803 0x0210 HDAudBus - ok
12:23:44.0831 0x0210 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:23:44.0834 0x0210 HidBatt - ok
12:23:44.0857 0x0210 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:23:44.0862 0x0210 HidBth - ok
12:23:44.0900 0x0210 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:23:44.0903 0x0210 HidIr - ok
12:23:44.0950 0x0210 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
12:23:44.0957 0x0210 hidserv - ok
12:23:45.0015 0x0210 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:23:45.0020 0x0210 HidUsb - ok
12:23:45.0061 0x0210 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:23:45.0067 0x0210 hkmsvc - ok
12:23:45.0110 0x0210 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:23:45.0121 0x0210 HomeGroupListener - ok
12:23:45.0160 0x0210 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:23:45.0171 0x0210 HomeGroupProvider - ok
12:23:45.0219 0x0210 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
12:23:45.0222 0x0210 HpSAMD - ok
12:23:45.0307 0x0210 [ 1664905CC1F7F176F8A592720D9629B9, 4142460BCCC237BA040165ED600CDF15B7286F24DB8CE50B3F17926BC37CDA7D ] hshld C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
12:23:45.0346 0x0210 hshld - ok
12:23:45.0419 0x0210 [ 37B08E0921417BEB7A39FA80E47D43FC, 8FABB8A20B4E124A0C329DCFA71331BBF547EF9E52A64D460AEF56F04A61DB63 ] HssDRV6 C:\Windows\system32\DRIVERS\hssdrv6.sys
12:23:45.0422 0x0210 HssDRV6 - ok
12:23:45.0489 0x0210 [ F01ED33CD4242EDC81E5DE532571F47F, 5127AE52A018CD46F090633BAB5385FE4D6BB9E2A1CBEC1B3A6C4E56BBA5D4CC ] HssSrv C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
12:23:45.0537 0x0210 HssSrv - ok
12:23:45.0585 0x0210 [ 8B20915B82ACFE7108C3BFA45C0383AE, C26C463315544B8CF0F80650E70F0F4DE890FE587F469D592AB97BF1DC6CBA2D ] HssTrayService C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE
12:23:45.0589 0x0210 HssTrayService - ok
12:23:45.0621 0x0210 [ 35E91DF99B8CEAA477E0AB86052475D6, FBC983D0EECF45B98A1F52A6807DD29ED0358531466DBB50FB6CB59067598E94 ] HssWd C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
12:23:45.0639 0x0210 HssWd - ok
12:23:45.0708 0x0210 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:23:45.0744 0x0210 HTTP - ok
12:23:45.0784 0x0210 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:23:45.0785 0x0210 hwpolicy - ok
12:23:45.0825 0x0210 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
12:23:45.0829 0x0210 i8042prt - ok
12:23:45.0885 0x0210 [ 3DF4395A7CF8B7A72A5F4606366B8C2D, 483588B8FC6E05488ED631C4E1CFC398553FEBFA2CD2BB527B4DF12D19774F80 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:23:45.0910 0x0210 iaStorV - ok
12:23:45.0985 0x0210 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:23:46.0053 0x0210 idsvc - ok
12:23:46.0113 0x0210 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:23:46.0116 0x0210 iirsp - ok
12:23:46.0173 0x0210 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
12:23:46.0222 0x0210 IKEEXT - ok
12:23:46.0347 0x0210 [ 0C3CF4B3BAE28E121A1689E3538F8712, 1599785D54E8306872A1DDD8546D316C9B193A85C5AEB37CF956B8C4077B8792 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
12:23:46.0450 0x0210 IntcAzAudAddService - ok
12:23:46.0499 0x0210 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
12:23:46.0502 0x0210 intelide - ok
12:23:46.0523 0x0210 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:23:46.0528 0x0210 intelppm - ok
12:23:46.0557 0x0210 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:23:46.0565 0x0210 IPBusEnum - ok
12:23:46.0599 0x0210 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:23:46.0603 0x0210 IpFilterDriver - ok
12:23:46.0682 0x0210 [ A34A587FFFD45FA649FBA6D03784D257, C9A2BCD4E2A5EB6E320092A3AFD5737ECDCDA0B83EE42314A23C4978F2974767 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:23:46.0718 0x0210 iphlpsvc - ok
12:23:46.0746 0x0210 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
12:23:46.0751 0x0210 IPMIDRV - ok
12:23:46.0779 0x0210 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:23:46.0784 0x0210 IPNAT - ok
12:23:46.0813 0x0210 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:23:46.0816 0x0210 IRENUM - ok
12:23:46.0838 0x0210 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
12:23:46.0842 0x0210 isapnp - ok
12:23:46.0866 0x0210 [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
12:23:46.0876 0x0210 iScsiPrt - ok
12:23:46.0906 0x0210 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:23:46.0910 0x0210 kbdclass - ok
12:23:46.0949 0x0210 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:23:46.0952 0x0210 kbdhid - ok
12:23:46.0989 0x0210 [ E63EF8C3271D014F14E2469CE75FECB4, 3A8DFA4B446AFDC35F01FD5218D0BEBC510A1E3DE9976210F00D19767D0F9069 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
12:23:46.0992 0x0210 kbfiltr - ok
12:23:47.0010 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] KeyIso C:\Windows\system32\lsass.exe
12:23:47.0015 0x0210 KeyIso - ok
12:23:47.0043 0x0210 [ 8F489706472F7E9A06BAAA198703FA64, F020406690FB38EABD82D63B91D33039CC93ED52A5497AE12BAF475F22D0B08A ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:23:47.0049 0x0210 KSecDD - ok
12:23:47.0092 0x0210 [ 868A2CAAB12EFC7A021682BCA0EEC54C, 12C4925B5B3D6EA7B6410C01F33158C6EAB50CBD6AF445F8B04ED9899720C2DD ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:23:47.0099 0x0210 KSecPkg - ok
12:23:47.0135 0x0210 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
12:23:47.0138 0x0210 ksthunk - ok
12:23:47.0184 0x0210 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
12:23:47.0214 0x0210 KtmRm - ok
12:23:47.0269 0x0210 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
12:23:47.0302 0x0210 LanmanServer - ok
12:23:47.0345 0x0210 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:23:47.0357 0x0210 LanmanWorkstation - ok
12:23:47.0397 0x0210 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:23:47.0401 0x0210 lltdio - ok
12:23:47.0436 0x0210 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:23:47.0456 0x0210 lltdsvc - ok
12:23:47.0483 0x0210 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
12:23:47.0489 0x0210 lmhosts - ok
12:23:47.0539 0x0210 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:23:47.0545 0x0210 LSI_FC - ok
12:23:47.0560 0x0210 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:23:47.0565 0x0210 LSI_SAS - ok
12:23:47.0583 0x0210 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:23:47.0587 0x0210 LSI_SAS2 - ok
12:23:47.0598 0x0210 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:23:47.0602 0x0210 LSI_SCSI - ok
12:23:47.0698 0x0210 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
12:23:47.0705 0x0210 luafv - ok
12:23:47.0745 0x0210 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:23:47.0753 0x0210 Mcx2Svc - ok
12:23:47.0774 0x0210 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:23:47.0777 0x0210 megasas - ok
12:23:47.0807 0x0210 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:23:47.0819 0x0210 MegaSR - ok
12:23:47.0909 0x0210 [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
12:23:48.0032 0x0210 Microsoft Office Groove Audit Service - ok
12:23:48.0151 0x0210 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
12:23:48.0160 0x0210 MMCSS - ok
12:23:48.0196 0x0210 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
12:23:48.0199 0x0210 Modem - ok
12:23:48.0246 0x0210 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:23:48.0250 0x0210 monitor - ok
12:23:48.0275 0x0210 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:23:48.0278 0x0210 mouclass - ok
12:23:48.0313 0x0210 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:23:48.0317 0x0210 mouhid - ok
12:23:48.0354 0x0210 [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:23:48.0359 0x0210 mountmgr - ok
12:23:48.0393 0x0210 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
12:23:48.0400 0x0210 mpio - ok
12:23:48.0454 0x0210 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:23:48.0458 0x0210 mpsdrv - ok
12:23:48.0504 0x0210 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
12:23:48.0559 0x0210 MpsSvc - ok
12:23:48.0610 0x0210 [ DC722758B8261E1ABAFD31A3C0A66380, 88BBE073E2CCD1DAB4656DDC53D5161E8A91D035ADAC1465D0CEBA86F1BB6D9A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:23:48.0616 0x0210 MRxDAV - ok
12:23:48.0662 0x0210 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:23:48.0669 0x0210 mrxsmb - ok
12:23:48.0694 0x0210 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:23:48.0704 0x0210 mrxsmb10 - ok
12:23:48.0722 0x0210 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:23:48.0727 0x0210 mrxsmb20 - ok
12:23:48.0752 0x0210 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
12:23:48.0755 0x0210 msahci - ok
12:23:48.0802 0x0210 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
12:23:48.0807 0x0210 msdsm - ok
12:23:48.0833 0x0210 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
12:23:48.0843 0x0210 MSDTC - ok
12:23:48.0884 0x0210 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:23:48.0887 0x0210 Msfs - ok
12:23:48.0912 0x0210 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:23:48.0915 0x0210 mshidkmdf - ok
12:23:48.0940 0x0210 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
12:23:48.0942 0x0210 msisadrv - ok
12:23:48.0982 0x0210 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:23:48.0991 0x0210 MSiSCSI - ok
12:23:48.0997 0x0210 msiserver - ok
12:23:49.0040 0x0210 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:23:49.0043 0x0210 MSKSSRV - ok
12:23:49.0079 0x0210 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:23:49.0082 0x0210 MSPCLOCK - ok
12:23:49.0100 0x0210 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:23:49.0103 0x0210 MSPQM - ok
12:23:49.0150 0x0210 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:23:49.0164 0x0210 MsRPC - ok
12:23:49.0211 0x0210 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
12:23:49.0214 0x0210 mssmbios - ok
12:23:49.0238 0x0210 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:23:49.0244 0x0210 MSTEE - ok
12:23:49.0264 0x0210 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:23:49.0268 0x0210 MTConfig - ok
12:23:49.0299 0x0210 [ 032D35C996F21D19A205A7C8F0B76F3C, 1A1C5BD7204BB937A05E201BCC0840B2C8E4B273D8E1D6D9407264FB4C57F014 ] MTsensor C:\Windows\system32\DRIVERS\ATK64AMD.sys
12:23:49.0302 0x0210 MTsensor - ok
12:23:49.0335 0x0210 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
12:23:49.0339 0x0210 Mup - ok
12:23:49.0391 0x0210 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
12:23:49.0433 0x0210 napagent - ok
12:23:49.0475 0x0210 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:23:49.0487 0x0210 NativeWifiP - ok
12:23:49.0624 0x0210 [ 79B47FD40D9A817E932F9D26FAC0A81C, 53E260B8BFC50BA45FA73BFCF4E58C233890D0EAA9DEFDCCBB55FD3EB992FF2D ] NDIS C:\Windows\system32\drivers\ndis.sys
12:23:49.0671 0x0210 NDIS - ok
12:23:49.0699 0x0210 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:23:49.0702 0x0210 NdisCap - ok
12:23:49.0742 0x0210 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:23:49.0746 0x0210 NdisTapi - ok
12:23:49.0790 0x0210 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:23:49.0794 0x0210 Ndisuio - ok
12:23:49.0856 0x0210 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:23:49.0863 0x0210 NdisWan - ok
12:23:49.0908 0x0210 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:23:49.0911 0x0210 NDProxy - ok
12:23:49.0951 0x0210 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:23:49.0955 0x0210 NetBIOS - ok
12:23:49.0997 0x0210 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:23:50.0007 0x0210 NetBT - ok
12:23:50.0026 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] Netlogon C:\Windows\system32\lsass.exe
12:23:50.0033 0x0210 Netlogon - ok
12:23:50.0075 0x0210 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
12:23:50.0117 0x0210 Netman - ok
12:23:50.0183 0x0210 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:23:50.0188 0x0210 NetMsmqActivator - ok
12:23:50.0205 0x0210 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:23:50.0210 0x0210 NetPipeActivator - ok
12:23:50.0243 0x0210 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
12:23:50.0283 0x0210 netprofm - ok
12:23:50.0292 0x0210 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:23:50.0297 0x0210 NetTcpActivator - ok
12:23:50.0309 0x0210 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:23:50.0313 0x0210 NetTcpPortSharing - ok
12:23:50.0374 0x0210 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:23:50.0378 0x0210 nfrd960 - ok
12:23:50.0429 0x0210 [ 1EE99A89CC788ADA662441D1E9830529, 6B4FDD74BB81E12BD4B25A3E8AECB0FA77FA0075D454DD1D6DC1790ADF1F2AA8 ] NlaSvc C:\Windows\System32\nlasvc.dll
12:23:50.0451 0x0210 NlaSvc - ok
12:23:50.0474 0x0210 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:23:50.0477 0x0210 Npfs - ok
12:23:50.0504 0x0210 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
12:23:50.0510 0x0210 nsi - ok
12:23:50.0527 0x0210 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:23:50.0529 0x0210 nsiproxy - ok
12:23:50.0622 0x0210 [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:23:50.0700 0x0210 Ntfs - ok
12:23:50.0744 0x0210 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
12:23:50.0746 0x0210 Null - ok
12:23:51.0218 0x0210 [ 5AE348E8710F743199E7225B5DD90868, B1C0BC73771721D0195FFA3F4962176CBCB03717251EC6A6A4449DC248925B84 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
12:23:51.0709 0x0210 nvlddmkm - ok
12:23:51.0950 0x0210 [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48, 7738785DE8B50D69993F4408498B812D0283FEE5C04FF5B89C20F149B44E9737 ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:23:51.0956 0x0210 nvraid - ok
12:23:51.0995 0x0210 [ E58D81FB8616D0CB55C1E36AA0B213C9, D83F78615889A466ADE2BFEF7AB357C0D31B7FA9A1A52668DED32A51FEFA87B5 ] nvsmu C:\Windows\system32\DRIVERS\nvsmu.sys
12:23:51.0998 0x0210 nvsmu - ok
12:23:52.0055 0x0210 [ F7CD50FE7139F07E77DA8AC8033D1832, DA96F4B15C8165E6AE1D00E03A062C66CA3A3089E4FF0E9E11CE00B154DD12EC ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:23:52.0062 0x0210 nvstor - ok
12:23:52.0094 0x0210 [ 1978DD2EE567287D040B5A9468ECEB72, C72A6F3DC4C34E3F417728516197ABEB20C9EB0C02774BB28A5F651553003CC4 ] nvstor64 C:\Windows\system32\DRIVERS\nvstor64.sys
12:23:52.0101 0x0210 nvstor64 - ok
12:23:52.0171 0x0210 [ EC61934CDA39114DA769E29B1DC092BE, E7F6B92BDC71AF365B209DB2C0FD30E03EDB5BFAE4104994C296CE46B4A79AA2 ] nvsvc C:\Windows\system32\nvvsvc.exe
12:23:52.0202 0x0210 nvsvc - ok
12:23:52.0229 0x0210 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
12:23:52.0235 0x0210 nv_agp - ok
12:23:52.0307 0x0210 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
12:23:52.0393 0x0210 odserv - ok
12:23:52.0435 0x0210 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
12:23:52.0438 0x0210 ohci1394 - ok
12:23:52.0476 0x0210 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:23:52.0483 0x0210 ose - ok
12:23:52.0519 0x0210 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:23:52.0551 0x0210 p2pimsvc - ok
12:23:52.0617 0x0210 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
12:23:52.0657 0x0210 p2psvc - ok
12:23:52.0686 0x0210 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:23:52.0690 0x0210 Parport - ok
12:23:52.0735 0x0210 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:23:52.0738 0x0210 partmgr - ok
12:23:52.0764 0x0210 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
12:23:52.0774 0x0210 PcaSvc - ok
12:23:52.0809 0x0210 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
12:23:52.0818 0x0210 pci - ok
12:23:52.0845 0x0210 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
12:23:52.0847 0x0210 pciide - ok
12:23:52.0881 0x0210 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:23:52.0889 0x0210 pcmcia - ok
12:23:52.0908 0x0210 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
12:23:52.0913 0x0210 pcw - ok
12:23:52.0945 0x0210 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:23:52.0980 0x0210 PEAUTH - ok
12:23:53.0043 0x0210 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
12:23:53.0052 0x0210 PerfHost - ok
12:23:53.0223 0x0210 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
12:23:53.0318 0x0210 pla - ok
12:23:53.0435 0x0210 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:23:53.0499 0x0210 PlugPlay - ok
12:23:53.0547 0x0210 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:23:53.0570 0x0210 PNRPAutoReg - ok
12:23:53.0599 0x0210 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:23:53.0626 0x0210 PNRPsvc - ok
12:23:53.0705 0x0210 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:23:53.0741 0x0210 PolicyAgent - ok
12:23:53.0792 0x0210 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
12:23:53.0830 0x0210 Power - ok
12:23:53.0884 0x0210 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:23:53.0889 0x0210 PptpMiniport - ok
12:23:53.0922 0x0210 PQNTDrv - ok
12:23:53.0960 0x0210 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:23:53.0966 0x0210 Processor - ok
12:23:54.0025 0x0210 [ 5C78838B4D166D1A27DB3A8A820C799A, BBF7E1D0B6754CF06BF3936671FDF5BF6E845CA5678D0940EA54E9212B539B7F ] ProfSvc C:\Windows\system32\profsvc.dll
12:23:54.0053 0x0210 ProfSvc - ok
12:23:54.0197 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] ProtectedStorage C:\Windows\system32\lsass.exe
12:23:54.0206 0x0210 ProtectedStorage - ok
12:23:54.0327 0x0210 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:23:54.0400 0x0210 Psched - ok
12:23:54.0548 0x0210 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:23:54.0621 0x0210 ql2300 - ok
12:23:54.0670 0x0210 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:23:54.0677 0x0210 ql40xx - ok
12:23:54.0720 0x0210 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
12:23:54.0734 0x0210 QWAVE - ok
12:23:54.0756 0x0210 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:23:54.0760 0x0210 QWAVEdrv - ok
12:23:54.0789 0x0210 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:23:54.0791 0x0210 RasAcd - ok
12:23:54.0835 0x0210 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:23:54.0838 0x0210 RasAgileVpn - ok
12:23:54.0867 0x0210 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
12:23:54.0877 0x0210 RasAuto - ok
12:23:55.0036 0x0210 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:23:55.0062 0x0210 Rasl2tp - ok
12:23:55.0254 0x0210 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
12:23:55.0270 0x0210 RasMan - ok
12:23:55.0298 0x0210 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:23:55.0303 0x0210 RasPppoe - ok
12:23:55.0324 0x0210 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:23:55.0330 0x0210 RasSstp - ok
12:23:55.0389 0x0210 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:23:55.0415 0x0210 rdbss - ok
12:23:55.0440 0x0210 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:23:55.0447 0x0210 rdpbus - ok
12:23:55.0482 0x0210 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:23:55.0484 0x0210 RDPCDD - ok
12:23:55.0502 0x0210 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:23:55.0504 0x0210 RDPENCDD - ok
12:23:55.0532 0x0210 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:23:55.0533 0x0210 RDPREFMP - ok
12:23:55.0571 0x0210 [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:23:55.0580 0x0210 RDPWD - ok
12:23:55.0637 0x0210 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:23:55.0646 0x0210 rdyboost - ok
12:23:55.0680 0x0210 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
12:23:55.0689 0x0210 RemoteAccess - ok
12:23:55.0722 0x0210 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:23:55.0744 0x0210 RemoteRegistry - ok
12:23:55.0787 0x0210 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:23:55.0810 0x0210 RpcEptMapper - ok
12:23:55.0846 0x0210 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
12:23:55.0852 0x0210 RpcLocator - ok
12:23:55.0905 0x0210 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
12:23:55.0925 0x0210 RpcSs - ok
12:23:55.0964 0x0210 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:23:55.0971 0x0210 rspndr - ok
12:23:56.0014 0x0210 [ B49DC435AE3695BAC5623DD94B05732D, D63160B09385ED31C2A479ADC5AFCA483906F38598874972025D680BDB45ECA0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
12:23:56.0026 0x0210 RTL8167 - ok
12:23:56.0056 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] SamSs C:\Windows\system32\lsass.exe
12:23:56.0061 0x0210 SamSs - ok
12:23:56.0090 0x0210 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
12:23:56.0095 0x0210 sbp2port - ok
12:23:56.0134 0x0210 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:23:56.0146 0x0210 SCardSvr - ok
12:23:56.0185 0x0210 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:23:56.0188 0x0210 scfilter - ok
12:23:56.0268 0x0210 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
12:23:56.0338 0x0210 Schedule - ok
12:23:56.0402 0x0210 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:23:56.0405 0x0210 SCPolicySvc - ok
12:23:56.0608 0x0210 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:23:56.0627 0x0210 SDRSVC - ok
12:23:56.0772 0x0210 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:23:56.0874 0x0210 secdrv - ok
12:23:56.0927 0x0210 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
12:23:57.0009 0x0210 seclogon - ok
12:23:57.0063 0x0210 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
12:23:57.0139 0x0210 SENS - ok
12:23:57.0273 0x0210 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:23:57.0303 0x0210 SensrSvc - ok
12:23:57.0334 0x0210 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:23:57.0338 0x0210 Serenum - ok
12:23:57.0382 0x0210 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:23:57.0389 0x0210 Serial - ok
12:23:57.0428 0x0210 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:23:57.0430 0x0210 sermouse - ok
12:23:57.0490 0x0210 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
12:23:57.0502 0x0210 SessionEnv - ok
12:23:57.0533 0x0210 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
12:23:57.0535 0x0210 sffdisk - ok
12:23:57.0542 0x0210 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
12:23:57.0544 0x0210 sffp_mmc - ok
12:23:57.0553 0x0210 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
12:23:57.0555 0x0210 sffp_sd - ok
12:23:57.0591 0x0210 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:23:57.0598 0x0210 sfloppy - ok
12:23:57.0658 0x0210 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:23:57.0688 0x0210 SharedAccess - ok
12:23:57.0730 0x0210 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:23:57.0761 0x0210 ShellHWDetection - ok
12:23:57.0802 0x0210 [ 1BC348CF6BAA90EC8E533EF6E6A69933, 2B26F6EB701F48E092DED6A7B888F24736F2899EE81D54DD4B1E9DF7CFD36E7A ] SiSGbeLH C:\Windows\system32\DRIVERS\SiSG664.sys
12:23:57.0805 0x0210 SiSGbeLH - ok
12:23:57.0840 0x0210 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:23:57.0845 0x0210 SiSRaid2 - ok
12:23:57.0864 0x0210 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:23:57.0871 0x0210 SiSRaid4 - ok
12:23:57.0937 0x0210 [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
12:23:57.0945 0x0210 SkypeUpdate - ok
12:23:57.0974 0x0210 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:23:57.0978 0x0210 Smb - ok
12:23:58.0016 0x0210 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:23:58.0028 0x0210 SNMPTRAP - ok
12:23:58.0143 0x0210 [ 1D8474722CDFFBB8FCA5FA12C50A05A2, C0B8B8DDDC1CEDD92FE6DA4DF4FBE036D3C71822128C417B7B978E7B86C6C29D ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
12:23:58.0246 0x0210 SNP2UVC - ok
12:23:58.0268 0x0210 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
12:23:58.0271 0x0210 spldr - ok
12:23:58.0321 0x0210 [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler C:\Windows\System32\spoolsv.exe
12:23:58.0356 0x0210 Spooler - ok
12:23:58.0539 0x0210 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
12:23:58.0682 0x0210 sppsvc - ok
12:23:58.0739 0x0210 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:23:58.0749 0x0210 sppuinotify - ok
12:23:58.0805 0x0210 [ 602884696850C86434530790B110E8EB, C9B734F070E55732B274C70381EA28AB574EF6AD3F606D3DC9B9B0038F3EDEEA ] sptd C:\Windows\system32\Drivers\sptd.sys
12:23:58.0806 0x0210 Suspicious file ( NoAccess ): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850C86434530790B110E8EB, sha256: C9B734F070E55732B274C70381EA28AB574EF6AD3F606D3DC9B9B0038F3EDEEA
12:23:58.0809 0x0210 sptd - detected LockedFile.Multi.Generic ( 1 )
12:24:01.0299 0x0210 Detect skipped due to KSN trusted
12:24:01.0299 0x0210 sptd - ok
12:24:01.0365 0x0210 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:24:01.0395 0x0210 srv - ok
12:24:01.0437 0x0210 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:24:01.0467 0x0210 srv2 - ok
12:24:01.0504 0x0210 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:24:01.0512 0x0210 srvnet - ok
12:24:01.0549 0x0210 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:24:01.0570 0x0210 SSDPSRV - ok
12:24:01.0591 0x0210 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:24:01.0602 0x0210 SstpSvc - ok
12:24:01.0645 0x0210 [ 6A87E01028D7594BD58EB47DABD8CEAE, 2D0B1E9CD01FB90B92F4D8C0AF878BBDD3D9F978E11C06D3C6E06B39F352B58B ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
12:24:01.0653 0x0210 ssudmdm - ok
12:24:01.0706 0x0210 [ 9373201A0DEEB06621DC1CE6349D6C59, AD0133A346FB91DD5BBA35D734207D0D8A853888B45D2CA90F9A105167178956 ] ssudserd C:\Windows\system32\DRIVERS\ssudserd.sys
12:24:01.0714 0x0210 ssudserd - ok
12:24:01.0736 0x0210 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:24:01.0739 0x0210 stexstor - ok
12:24:01.0808 0x0210 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
12:24:01.0845 0x0210 stisvc - ok
12:24:01.0873 0x0210 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys
12:24:01.0876 0x0210 swenum - ok
12:24:01.0923 0x0210 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
12:24:01.0958 0x0210 swprv - ok
12:24:02.0056 0x0210 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
12:24:02.0145 0x0210 SysMain - ok
12:24:02.0200 0x0210 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:24:02.0210 0x0210 TabletInputService - ok
12:24:02.0249 0x0210 [ 8B9FD32C71F29DF235A27CE9FF4F19DC, AADDA066557704C311D281347FA5732A9A731A3C8E27B637AFA84D90238B528B ] taphss6 C:\Windows\system32\DRIVERS\taphss6.sys
12:24:02.0252 0x0210 taphss6 - ok
12:24:02.0293 0x0210 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
12:24:02.0324 0x0210 TapiSrv - ok
12:24:02.0355 0x0210 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
12:24:02.0363 0x0210 TBS - ok
12:24:02.0464 0x0210 [ DB74544B75566C974815E79A62433F29, 035EBF70FDA28CF2B6C1FD7EE0ED703DB4B647064B5DBA6E258878A19B1BCCA4 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:24:02.0545 0x0210 Tcpip - ok
12:24:02.0645 0x0210 [ DB74544B75566C974815E79A62433F29, 035EBF70FDA28CF2B6C1FD7EE0ED703DB4B647064B5DBA6E258878A19B1BCCA4 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:24:02.0684 0x0210 TCPIP6 - ok
12:24:02.0730 0x0210 [ DF687E3D8836BFB04FCC0615BF15A519, 7C5B1E72673B4299DFC21E869F0FBB28198CA54DF4F4AF7080005F2D82467784 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:24:02.0734 0x0210 tcpipreg - ok
12:24:02.0773 0x0210 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:24:02.0776 0x0210 TDPIPE - ok
12:24:02.0811 0x0210 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:24:02.0814 0x0210 TDTCP - ok
12:24:02.0869 0x0210 [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:24:02.0873 0x0210 tdx - ok
12:24:02.0893 0x0210 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys
12:24:02.0899 0x0210 TermDD - ok
12:24:02.0954 0x0210 [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService C:\Windows\System32\termsrv.dll
12:24:02.0989 0x0210 TermService - ok
12:24:03.0016 0x0210 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
12:24:03.0027 0x0210 Themes - ok
12:24:03.0063 0x0210 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
12:24:03.0072 0x0210 THREADORDER - ok
12:24:03.0122 0x0210 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
12:24:03.0136 0x0210 TrkWks - ok
12:24:03.0203 0x0210 [ 370A6907DDF79532A39319492B1FA38A, 46AECC5160F04FC3FFE4D37B404CCBBD1C5DC1501C2CEEE8284FF544DBDF10F8 ] truecrypt C:\Windows\system32\drivers\truecrypt.sys
12:24:03.0212 0x0210 truecrypt - ok
12:24:03.0279 0x0210 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:24:03.0319 0x0210 TrustedInstaller - ok
12:24:03.0361 0x0210 [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:24:03.0364 0x0210 tssecsrv - ok
12:24:03.0504 0x0210 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
12:24:03.0577 0x0210 TsUsbFlt - ok
12:24:03.0690 0x0210 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:24:03.0695 0x0210 tunnel - ok
12:24:03.0723 0x0210 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:24:03.0726 0x0210 uagp35 - ok
12:24:03.0769 0x0210 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:24:03.0780 0x0210 udfs - ok
12:24:03.0827 0x0210 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:24:03.0836 0x0210 UI0Detect - ok
12:24:03.0861 0x0210 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
12:24:03.0865 0x0210 uliagpkx - ok
12:24:03.0889 0x0210 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\drivers\umbus.sys
12:24:03.0892 0x0210 umbus - ok
12:24:03.0933 0x0210 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:24:03.0936 0x0210 UmPass - ok
12:24:04.0017 0x0210 [ CF296FE6B40BF4163992F5979609DD78, 90A292480535919C2F5460835DB60B32C97BEE7761449F6B8A7EA00D93C4B195 ] Update DoughGo C:\Program Files (x86)\DoughGo\updateDoughGo.exe
12:24:04.0031 0x0210 Update DoughGo - ok
12:24:04.0074 0x0210 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
12:24:04.0107 0x0210 upnphost - ok
12:24:04.0142 0x0210 [ 481DFF26B4DCA8F4CBAC1F7DCE1D6829, 5D6E404FE0AB875202CA1A3E8E9D2F4368DF6ACCFA1C872ECFAF8399CBA3A485 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:24:04.0146 0x0210 usbccgp - ok
12:24:04.0181 0x0210 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
12:24:04.0186 0x0210 usbcir - ok
12:24:04.0207 0x0210 [ 74EE782B1D9C241EFE425565854C661C, E8258EA65B0FCAD4E077B176E9D9324646B652D6E651241E397346A39770D065 ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:24:04.0211 0x0210 usbehci - ok
12:24:04.0254 0x0210 [ DC96BD9CCB8403251BCF25047573558E, 66EBF8A6B3BC0634F32DDCC8BA31F1EB5987E8C6853E1DC26005E3EED0945565 ] usbhub C:\Windows\system32\drivers\usbhub.sys
12:24:04.0273 0x0210 usbhub - ok
12:24:04.0288 0x0210 [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:24:04.0290 0x0210 usbohci - ok
12:24:04.0318 0x0210 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:24:04.0320 0x0210 usbprint - ok
12:24:04.0344 0x0210 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:24:04.0347 0x0210 usbscan - ok
12:24:04.0385 0x0210 [ D76510CFA0FC09023077F22C2F979D86, 5662281C6D515423255D3C262EA368DBAFC250235E535FBFA3E59D3487695439 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:24:04.0389 0x0210 USBSTOR - ok
12:24:04.0426 0x0210 [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:24:04.0429 0x0210 usbuhci - ok
12:24:04.0472 0x0210 [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
12:24:04.0478 0x0210 usbvideo - ok
12:24:04.0524 0x0210 [ CF296FE6B40BF4163992F5979609DD78, 90A292480535919C2F5460835DB60B32C97BEE7761449F6B8A7EA00D93C4B195 ] Util DoughGo C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe
12:24:04.0538 0x0210 Util DoughGo - ok
12:24:04.0568 0x0210 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
12:24:04.0577 0x0210 UxSms - ok
12:24:04.0596 0x0210 [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] VaultSvc C:\Windows\system32\lsass.exe
12:24:04.0604 0x0210 VaultSvc - ok
12:24:04.0642 0x0210 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
12:24:04.0645 0x0210 vdrvroot - ok
12:24:04.0707 0x0210 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
12:24:04.0743 0x0210 vds - ok
12:24:04.0766 0x0210 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:24:04.0770 0x0210 vga - ok
12:24:04.0793 0x0210 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
12:24:04.0797 0x0210 VgaSave - ok
12:24:04.0842 0x0210 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
12:24:04.0850 0x0210 vhdmp - ok
12:24:04.0875 0x0210 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
12:24:04.0877 0x0210 viaide - ok
12:24:04.0917 0x0210 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
12:24:04.0964 0x0210 volmgr - ok
12:24:05.0073 0x0210 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:24:05.0125 0x0210 volmgrx - ok
12:24:05.0258 0x0210 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
12:24:05.0268 0x0210 volsnap - ok
12:24:05.0306 0x0210 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:24:05.0312 0x0210 vsmraid - ok
12:24:05.0488 0x0210 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
12:24:05.0573 0x0210 VSS - ok
12:24:05.0599 0x0210 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
12:24:05.0602 0x0210 vwifibus - ok
12:24:05.0616 0x0210 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
12:24:05.0621 0x0210 vwififlt - ok
12:24:05.0665 0x0210 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
12:24:05.0697 0x0210 W32Time - ok
12:24:05.0723 0x0210 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:24:05.0726 0x0210 WacomPen - ok
12:24:05.0792 0x0210 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:24:05.0796 0x0210 WANARP - ok
12:24:05.0805 0x0210 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:24:05.0808 0x0210 Wanarpv6 - ok
12:24:05.0921 0x0210 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:24:06.0010 0x0210 WatAdminSvc - ok
12:24:06.0122 0x0210 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
12:24:06.0187 0x0210 wbengine - ok
12:24:06.0238 0x0210 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:24:06.0250 0x0210 WbioSrvc - ok
12:24:06.0316 0x0210 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:24:06.0337 0x0210 wcncsvc - ok
12:24:06.0360 0x0210 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:24:06.0369 0x0210 WcsPlugInService - ok
12:24:06.0398 0x0210 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:24:06.0401 0x0210 Wd - ok
12:24:06.0446 0x0210 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:24:06.0481 0x0210 Wdf01000 - ok
12:24:06.0526 0x0210 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:24:06.0536 0x0210 WdiServiceHost - ok
12:24:06.0542 0x0210 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:24:06.0551 0x0210 WdiSystemHost - ok
12:24:06.0594 0x0210 [ 3DB6D04E1C64272F8B14EB8BC4616280, 9138642B1C19F895D4ECFD930160C80FBF15813CE63BBF4C899842C300FD3026 ] WebClient C:\Windows\System32\webclnt.dll
12:24:06.0611 0x0210 WebClient - ok
12:24:06.0632 0x0210 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:24:06.0653 0x0210 Wecsvc - ok
12:24:06.0672 0x0210 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:24:06.0683 0x0210 wercplsupport - ok
12:24:06.0714 0x0210 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
12:24:06.0724 0x0210 WerSvc - ok
12:24:06.0761 0x0210 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:24:06.0764 0x0210 WfpLwf - ok
12:24:06.0831 0x0210 [ 52DED146E4797E6CCF94799E8E22BB2A, 57A29260D81AA3AD3F8C29E9CFA7CE3970D7A8BF673ADD9B256EE76C7DEC080E ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
12:24:06.0836 0x0210 WimFltr - ok
12:24:06.0853 0x0210 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:24:06.0856 0x0210 WIMMount - ok
12:24:06.0885 0x0210 WinDefend - ok
12:24:06.0908 0x0210 WinHttpAutoProxySvc - ok
12:24:06.0973 0x0210 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:24:06.0991 0x0210 Winmgmt - ok
12:24:07.0434 0x0210 [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM C:\Windows\system32\WsmSvc.dll
12:24:07.0584 0x0210 WinRM - ok
12:24:07.0823 0x0210 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:24:07.0826 0x0210 WinUsb - ok
12:24:08.0045 0x0210 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:24:08.0104 0x0210 Wlansvc - ok
12:24:08.0948 0x0210 [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:24:09.0121 0x0210 wlidsvc - ok
12:24:09.0164 0x0210 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
12:24:09.0166 0x0210 WmiAcpi - ok
12:24:09.0218 0x0210 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:24:09.0300 0x0210 wmiApSrv - ok
12:24:09.0371 0x0210 WMPNetworkSvc - ok
12:24:09.0453 0x0210 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:24:09.0463 0x0210 WPCSvc - ok
12:24:09.0509 0x0210 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:24:09.0520 0x0210 WPDBusEnum - ok
12:24:09.0541 0x0210 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:24:09.0544 0x0210 ws2ifsl - ok
12:24:09.0562 0x0210 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
12:24:09.0574 0x0210 wscsvc - ok
12:24:09.0585 0x0210 WSearch - ok
12:24:09.0622 0x0210 [ 08F7E6202400BF68212A8C92568405D6, 6E225381DDAE74C89A1E7BEA4869FA22A61059E0ECE59E2B7D490A2D523E48F0 ] wStLibG64 C:\Windows\system32\drivers\wStLibG64.sys
12:24:09.0626 0x0210 wStLibG64 - ok
12:24:09.0766 0x0210 [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv C:\Windows\system32\wuaueng.dll
12:24:09.0875 0x0210 wuauserv - ok
12:24:09.0931 0x0210 [ D3381DC54C34D79B22CEE0D65BA91B7C, 70DC4ADCA4C0C28BB133287511E329D1B6B9B97F96CDE5B1D2F1F59FE1A965D9 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:24:09.0935 0x0210 WudfPf - ok
12:24:09.0974 0x0210 [ CF8D590BE3373029D57AF80914190682, FB9641777E90A58C063FBE95F081DC6D2F4770827DE19108A9DC3E3D6B17B4BF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:24:09.0981 0x0210 WUDFRd - ok
12:24:10.0022 0x0210 [ 7A95C95B6C4CF292D689106BCAE49543, 9029F489E1E817CE12839B8C6656E46190497D445DC3F43C20CF96E5E6BD0691 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:24:10.0037 0x0210 wudfsvc - ok
12:24:10.0081 0x0210 [ 9A3452B3C2A46C073166C5CF49FAD1AE, D6F95F51D8E37BA4CF403965EC08CCFEEA9EEFDBFC7752432EAEC19925BDA115 ] WwanSvc C:\Windows\System32\wwansvc.dll
12:24:10.0114 0x0210 WwanSvc - ok
12:24:10.0157 0x0210 ================ Scan global ===============================
12:24:10.0189 0x0210 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
12:24:10.0224 0x0210 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
12:24:10.0248 0x0210 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
12:24:10.0297 0x0210 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
12:24:10.0569 0x0210 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
12:24:10.0602 0x0210 [ Global ] - ok
12:24:10.0602 0x0210 ================ Scan MBR ==================================
12:24:10.0622 0x0210 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
12:24:12.0093 0x0210 \Device\Harddisk0\DR0 - ok
12:24:12.0095 0x0210 ================ Scan VBR ==================================
12:24:12.0111 0x0210 [ 27380E2459205872DFBF8A17E9F184EF ] \Device\Harddisk0\DR0\Partition1
12:24:12.0114 0x0210 \Device\Harddisk0\DR0\Partition1 - ok
12:24:12.0135 0x0210 [ 500FBA7A67CD9DD443D0525B08EB29AC ] \Device\Harddisk0\DR0\Partition2
12:24:12.0138 0x0210 \Device\Harddisk0\DR0\Partition2 - ok
12:24:12.0139 0x0210 Waiting for KSN requests completion. In queue: 87
12:24:13.0139 0x0210 Waiting for KSN requests completion. In queue: 87
12:24:14.0139 0x0210 Waiting for KSN requests completion. In queue: 87
12:24:15.0265 0x0210 AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 8.0.1506.399 ), 0x41000 ( enabled : updated )
12:24:15.0302 0x0210 Win FW state via NFP2: enabled
12:24:17.0738 0x0210 ============================================================
12:24:17.0738 0x0210 Scan finished
12:24:17.0738 0x0210 ============================================================
12:24:17.0753 0x11bc Detected object count: 0
12:24:17.0753 0x11bc Actual detected object count: 0

mbam:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 17.4.2014
Scan Time: 12:42:26
Logfile: 123.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.17.02
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: The Kingslayer

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 289031
Time Elapsed: 16 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 3
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe, 2456, , [3135cb60a3d8bd7972a583de31d03ec2]
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGo.BrowserAdapter.exe, 3424, , [650151dafd7e67cfb8af86ebf0123ec2]
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\FilterApp_C64.exe, 5524, , [650151dafd7e67cfb8af86ebf0123ec2]

Modules: 3
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGoBA.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGoBA.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGoBAApp.dll, , [650151dafd7e67cfb8af86ebf0123ec2],

Registry Keys: 69
PUP.Optional.DoughGo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util DoughGo, , [3135cb60a3d8bd7972a583de31d03ec2],
PUP.Optional.DoughGo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update DoughGo, , [145277b4b3c8b581ee298ed347ba1ce4],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\APPID\{685F23D9-FCFD-475C-B56A-362645945C5A}, , [61059992f289bd79f9b150c5af53ce32],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{685F23D9-FCFD-475C-B56A-362645945C5A}, , [61059992f289bd79f9b150c5af53ce32],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [f175b47758236ec8aa1969e1778b5da3],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [f175b47758236ec8aa1969e1778b5da3],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0b0478d0-1077-4dab-a1b2-2d456ead4570}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{B8AC2D82-51EC-4548-AC05-AB5BC2708442}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{CAEDC07F-03AC-42FE-A040-0FA6D3576C0D}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CAEDC07F-03AC-42FE-A040-0FA6D3576C0D}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{B8AC2D82-51EC-4548-AC05-AB5BC2708442}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0B0478D0-1077-4DAB-A1B2-2D456EAD4570}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0B0478D0-1077-4DAB-A1B2-2D456EAD4570}, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DoughGo, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\esrv.ividiESrvc, , [2640a18a8cef1c1ab554de9c7290cc34],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\esrv.ividiESrvc.1, , [cd9927042d4e55e177923b3ffb0717e9],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiappCore, , [ef7732f9f685a5914bf7fb824bb77e82],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiappCore.1, , [acbacb60770470c6251d09747f8351af],
PUP.Optional.DoughGo.A, HKLM\SOFTWARE\WOW6432NODE\DoughGo, , [8ed80f1c90eb35013732cda4fe0433cd],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.ividiESrvc, , [8fd7e6454f2c4cea43c64436e9198a76],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.ividiESrvc.1, , [5610ea41b0cb82b4ac5d6b0fdb27eb15],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiappCore, , [f07653d83348b87e3f031c61cd35728e],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiappCore.1, , [2046e14a2b50fe3857eb6a1329d9eb15],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\giacfgjdclhnmkacnfbaljbmpnelflol, , [a6c006251e5dae8857ec0875da282cd4],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\kpdhgpkkloealnjnmepfhanpcleldbef, , [25418e9df38895a192b2235a6f93e41c],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\UNITECH LLC\ividi, , [02641e0dc2b978be0e3729547b87f808],
PUP.Optional.DoughGo.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DoughGo, , [ed79a289a3d85fd75018e38e14ee1be5],
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\iVIDI Plugin, , [5313cc5f84f779bd024565181fe3aa56],
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\iVIDI.org, , [d690cd5e5a213df985c3c0bd20e2b848],
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\UNITECH LLC\ividi, , [5f07dc4f80fb999d64e2334aff038f71],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{231047C5-F7E9-45BE-9EFD-6E9BB6D59A9F}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{82443621-A29A-473E-8335-F5C958A7A4CA}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{231047C5-F7E9-45BE-9EFD-6E9BB6D59A9F}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{82443621-A29A-473E-8335-F5C958A7A4CA}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\IEhelperActiveX.IEhelperLabel.1, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\IEhelperActiveX.IEhelperLabel, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IEhelperActiveX.IEhelperLabel, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IEhelperActiveX.IEhelperLabel.1, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iVIDI Plugin, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{211B330A-499B-415E-B1F1-B7132A8751D2}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D18734A5-B131-4335-A3E0-15FF90AC90EE}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\i, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\i, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{905E34C2-F4EB-49BE-A36B-47692CF957A8}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{905E34C2-F4EB-49BE-A36B-47692CF957A8}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ividi, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8B8B2E80-1444-451D-AC8E-EB9A847F3887}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiHlpr.1, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiHlpr, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiHlpr, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8B8B2E80-1444-451D-AC8E-EB9A847F3887}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiHlpr.1, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8B8B2E80-1444-451D-AC8E-EB9A847F3887}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8B8B2E80-1444-451D-AC8E-EB9A847F3887}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C541A8F9-E098-4EAC-BDC6-D3FF5CAABFB4}, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, , [e185ab80661560d60a5ed08f996901ff],

Registry Values: 1
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://search.ividi.org/?q={searchTerms ... 9&affilt=3, , [e5811219aad1ac8a01954826a45ee41c]

Registry Data: 1
PUP.Optional.Ividi.A, HKU\S-1-5-21-1022244719-3293779036-2618421149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.ividi.org/?src=tbhp&id=94 ... 9&affilt=3, Good: (http://www.google.com), Bad: (http://search.ividi.org/?src=tbhp&id=94 ... 9&affilt=3),,[1551f03bd3a83cfac9cb011bb64e2bd5]

Folders: 11
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\TEMP, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.Unitech.A, C:\Users\The Kingslayer\AppData\Roaming\Unitech LLC, , [194ded3e81fabc7aa41bdb9d8c7613ed],
PUP.Optional.Ividi.A, C:\Program Files (x86)\iVIDI.org plugin, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh, , [e185ab80661560d60a5ed08f996901ff],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\bitstreams, , [82e47eadccaf37ff409f283722e05fa1],

Files: 46
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\utilDoughGo.exe, , [3135cb60a3d8bd7972a583de31d03ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\updateDoughGo.exe, , [145277b4b3c8b581ee298ed347ba1ce4],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\DoughGoBHO.dll, , [3135f03b7dfef3439a2dd93b2bd7c13f],
PUP.Optional.Somoto, C:\Users\The Kingslayer\AppData\Local\Temp\bitool.dll, , [ca9c75b616650a2c5360dc1fdd241ee2],
PUP.Optional.BundleInstaller.A, C:\Users\The Kingslayer\Downloads\OneClickRoot.exe, , [7fe78c9fe79462d42cdf0d2710f0ea16],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\DoughGo.ico, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\7za.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\DoughGo.FirstRun.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\DoughGoUninstall.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\updateDoughGo.InstallState, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\7za.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\BrowserAdapterS.7z, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGo.BrowserAdapter.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGoBA.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\DoughGoBAApp.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\FilterApp_C64.exe, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\utilDoughGo.InstallState, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.Bromon.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.BrowserAdapterS.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.CompatibilityChecker.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.FFUpdate.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.IEUpdate.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.DoughGo.A, C:\Program Files (x86)\DoughGo\bin\plugins\DoughGo.PurBrowseG.dll, , [650151dafd7e67cfb8af86ebf0123ec2],
PUP.Optional.Unitech.A, C:\Users\The Kingslayer\AppData\Roaming\Unitech LLC\sqlite3.dll, , [194ded3e81fabc7aa41bdb9d8c7613ed],
PUP.Optional.Ividi.A, C:\Program Files (x86)\iVIDI.org plugin\IEhelperActiveX.dll, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, C:\Program Files (x86)\iVIDI.org plugin\uninst.exe, , [5f075ecdd1aa092d69feb6a97e84d927],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividiApp.dll, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividiEng.dll, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividisrv.exe, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\uninstall.exe, , [e185ab80661560d60a5ed08f996901ff],
PUP.Optional.Ividi.A, C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll, , [e185ab80661560d60a5ed08f996901ff],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\diablo130302.cl, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\diakgcn121016.cl, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\libcurl-4.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\libeay32.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\libidn-11.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\librtmp.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\libssh2.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\mncexjse.exe, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\phatk121016.cl, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\poclbm130302.cl, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\scrypt130511.cl, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\ssleay32.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\zlib1.dll, , [82e47eadccaf37ff409f283722e05fa1],
Trojan.Agent.BCM, C:\Windows\inf\mncexjse\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [82e47eadccaf37ff409f283722e05fa1],

Physical Sectors: 0
(No malicious items detected)


(end)

vsetko najdene nechaj zmazat v MBAM - restart - a vycisti este s ADWCleanerom

tak jsem to teda dal do karanteny a projel tim adwcleanerem a myslim ze je to o mnoho lepsi. diky za pomoc

Omlouvám se za vstup.
Vy máte dva nicky?

ne psal jsem od pritelkyne protoze jsem se nemohl prihlasit.. musel jsem nakonec obnovit heslo.

Že do toho teda kolegovi lezu (pardon ), můžete dát ještě nový log,prosím

Logfile of random's system information tool 1.09 (written by random/random)
Run by The Kingslayer at 2014-04-18 10:33:25
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 48 GB (20%) free of 238 GB
Total RAM: 4095 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:33:37, on 18.4.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16750)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\The Kingslayer\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\The Kingslayer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: + Offline &Explorer: Download the link - file://C:\Program Files (x86)\Offline Explorer\Add_UrlO.htm
O8 - Extra context menu item: + Offline E&xplorer: Download the current page - file://C:\Program Files (x86)\Offline Explorer\Add_AllO.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FA328B9-1FCA-4348-B30D-47D29CBF9D78}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FastBootAgent - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10921 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1056
taskeng.exe {CC30ED1D-C0AD-4840-B7B2-0E99F10EA814}
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files\P4G\BatteryLife.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
Atouch64.exe
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3256.0.1862739912\1512948305" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,28,34 --gpu-vendor-id=0x10de --gpu-device-id=0x0873 --gpu-driver-vendor=NVIDIA --gpu-driver-version=8.15.11.8619 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.4.221218115\925538186" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.5.1117969111\718657809" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.6.206796026\265843792" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.7.1266885109\789483103" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3256.9.601798896\273457621" --ppapi-flash-args --lang=en-US --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\The Kingslayer\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=en-US --channel="3256.10.626966996\85426839" /prefetch:-390060480
"C:\Users\The Kingslayer\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.11.1571791563\1263613996" /prefetch:673131151
"C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.13.2031936794\694833348" /prefetch:673131151
taskeng.exe {EFB8BCC1-368A-40F2-B187-A8762A87B2D6}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.16.1712947902\1602316042" /prefetch:673131151
taskhost.exe $(Arg0)
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Control/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_51/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="3256.17.244393157\1222086516" /prefetch:673131151
"C:\Users\The Kingslayer\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1022244719-3293779036-2618421149-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-22 245592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16 1154720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-26 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-22 201784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-26 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-22 245592]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16 1154720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-22 201784]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-07-30 617856]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-28 7982112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64]
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-04-09 320000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeleteMarkAny]
C:\Windows\SysWOW64\MASetupCleaner.exe [2014-01-23 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\The Kingslayer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-27 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\The Kingslayer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_4AC963541AF5DC6D371534A317228375]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2014-04-02 841032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2009-06-11 16328736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-12-04 218408]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-04-02 98304]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2014-01-22 4858968]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-10-10 72248]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2009-10-10 3054136]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-17 22:57:26 ----A---- C:\AdwCleaner[S3].txt
2014-04-17 22:57:13 ----A---- C:\AdwCleaner[R3].txt
2014-04-17 12:42:26 ----A---- C:\123.txt
2014-04-17 12:25:23 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-04-17 12:25:01 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-04-17 12:25:01 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-04-17 12:25:01 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-04-17 12:25:00 ----D---- C:\ProgramData\Malwarebytes
2014-04-17 12:25:00 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-17 12:22:39 ----A---- C:\TDSSKiller.3.0.0.16_17.04.2014_12.22.39_log.txt
2014-04-17 11:18:38 ----D---- C:\Program Files\trend micro
2014-04-17 11:18:37 ----D---- C:\rsit
2014-04-17 02:14:34 ----N---- C:\Windows\system32\MpSigStub.exe
2014-04-13 13:09:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\mgyun
2014-04-13 13:09:43 ----D---- C:\Program Files (x86)\VROOT
2014-04-13 13:05:55 ----D---- C:\Program Files (x86)\Z3X
2014-04-13 11:46:56 ----D---- C:\Users\The Kingslayer\AppData\Roaming\MPC-HC
2014-04-13 11:46:32 ----D---- C:\Program Files (x86)\MPC-HC
2014-04-12 21:47:29 ----SHD---- C:\Config.Msi
2014-04-12 21:45:17 ----D---- C:\ComboFix
2014-04-12 21:21:48 ----A---- C:\ComboFix.txt
2014-04-12 21:06:12 ----D---- C:\Qoobox
2014-04-12 21:05:43 ----D---- C:\Windows\erdnt
2014-04-12 20:54:52 ----D---- C:\Users\The Kingslayer\AppData\Roaming\AVAST Software
2014-04-12 20:48:37 ----D---- C:\AdwCleaner
2014-04-12 20:42:51 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-12 20:42:49 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-10 20:09:56 ----A---- C:\Windows\system32\drivers\ssudserd.sys
2014-04-10 19:54:07 ----D---- C:\Program Files (x86)\UnlockRoot Pro 4.1.2
2014-04-10 19:15:57 ----D---- C:\Program Files (x86)\Unlockroot Pro
2014-04-07 00:23:45 ----D---- C:\Users\The Kingslayer\AppData\Roaming\Samsung
2014-04-07 00:23:09 ----A---- C:\Windows\system32\drivers\ssudmdm.sys
2014-04-07 00:23:09 ----A---- C:\Windows\system32\drivers\ssudbus.sys
2014-04-07 00:22:12 ----D---- C:\Program Files (x86)\MyFree Codec
2014-04-07 00:20:58 ----A---- C:\Windows\system32\drivers\wStLibG64.sys
2014-04-06 23:11:33 ----A---- C:\Windows\SYSWOW64\secman.dll
2014-04-06 23:11:32 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2014-04-06 23:09:57 ----D---- C:\Program Files (x86)\Samsung
2014-04-06 22:50:27 ----D---- C:\Program Files (x86)\DoughGo

======List of files/folders modified in the last 1 month======

2014-04-18 10:33:35 ----D---- C:\Windows\Temp
2014-04-18 00:01:54 ----D---- C:\Windows\system32\config
2014-04-17 23:46:59 ----D---- C:\Windows\system32\Tasks
2014-04-17 23:46:00 ----D---- C:\Windows
2014-04-17 23:41:22 ----D---- C:\Windows\inf
2014-04-17 23:39:38 ----SHD---- C:\Windows\Installer
2014-04-17 23:39:37 ----RD---- C:\Program Files
2014-04-17 23:39:35 ----D---- C:\Windows\System32
2014-04-17 23:39:21 ----SHD---- C:\System Volume Information
2014-04-17 23:38:26 ----D---- C:\ProgramData\Samsung
2014-04-17 23:35:12 ----D---- C:\Windows\Prefetch
2014-04-17 13:01:54 ----D---- C:\Windows\system32\catroot
2014-04-17 12:48:45 ----A---- C:\Windows\win.ini
2014-04-17 12:43:28 ----RD---- C:\Program Files (x86)
2014-04-17 12:43:28 ----D---- C:\Program Files (x86)\Unitech LLC
2014-04-17 12:25:23 ----D---- C:\Windows\system32\drivers
2014-04-17 12:25:00 ----HD---- C:\ProgramData
2014-04-17 01:56:30 ----D---- C:\Windows\system32\catroot2
2014-04-17 01:55:44 ----D---- C:\Windows\SysWOW64
2014-04-14 23:12:50 ----D---- C:\Program Files (x86)\Kingo Android ROOT
2014-04-13 14:37:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-13 14:30:06 ----D---- C:\Windows\Tasks
2014-04-13 14:30:06 ----D---- C:\Windows\system32\wfp
2014-04-13 14:29:58 ----D---- C:\Windows\system32\wbem
2014-04-13 14:28:55 ----DC---- C:\Windows\system32\DRVSTORE
2014-04-13 14:28:55 ----D---- C:\Windows\SYSWOW64\Fast Boot
2014-04-13 14:28:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-13 14:28:55 ----D---- C:\Windows\system32\NDF
2014-04-13 14:28:55 ----D---- C:\Windows\system32\DriverStore
2014-04-13 14:28:55 ----D---- C:\Windows\system32\drivers\etc
2014-04-13 14:28:55 ----D---- C:\Windows\system32\CodeIntegrity
2014-04-13 14:28:54 ----D---- C:\Windows\cs
2014-04-13 14:28:54 ----D---- C:\Windows\AppCompat
2014-04-13 14:28:54 ----D---- C:\Users\The Kingslayer\AppData\Roaming\vlc
2014-04-13 14:28:47 ----D---- C:\ProgramData\Temp
2014-04-13 14:28:47 ----D---- C:\ProgramData\P4G
2014-04-13 14:28:46 ----SD---- C:\ProgramData\Microsoft
2014-04-13 14:28:46 ----D---- C:\ProgramData\Hotspot Shield
2014-04-13 14:28:46 ----D---- C:\ProgramData\CyberLink
2014-04-13 14:28:42 ----D---- C:\Program Files\Windows Live
2014-04-13 14:28:41 ----RD---- C:\Program Files (x86)\Skype
2014-04-13 14:28:41 ----D---- C:\Program Files (x86)\Windows Live
2014-04-13 14:28:19 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-04-13 14:28:19 ----D---- C:\Program Files (x86)\Microsoft
2014-04-13 14:28:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-04-13 14:28:18 ----D---- C:\Program Files (x86)\Hotspot Shield
2014-04-13 14:28:17 ----D---- C:\Program Files (x86)\Google
2014-04-13 14:28:17 ----D---- C:\Program Files (x86)\cyotek
2014-04-13 14:28:16 ----D---- C:\Program Files (x86)\CyberLink
2014-04-13 14:28:13 ----SHD---- C:\$RECYCLE.BIN
2014-04-13 14:28:13 ----D---- C:\Program Files (x86)\Common Files
2014-04-13 14:28:13 ----D---- C:\Program Files (x86)\ASUS
2014-04-13 14:28:13 ----D---- C:\ADSM_PData_0150
2014-04-13 14:27:55 ----D---- C:\Windows\Minidump
2014-04-13 14:27:51 ----D---- C:\Windows\registration
2014-04-13 14:27:49 ----D---- C:\Windows\winsxs
2014-04-13 14:27:27 ----RSD---- C:\Windows\assembly
2014-04-13 14:26:35 ----RD---- C:\Users
2014-04-12 21:45:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\DAEMON Tools Lite
2014-04-12 21:45:40 ----D---- C:\Windows\Panther
2014-04-12 21:45:39 ----D---- C:\Windows\Logs
2014-04-12 21:45:39 ----D---- C:\Windows\debug
2014-04-12 20:43:15 ----D---- C:\ProgramData\AVAST Software
2014-04-07 00:23:41 ----D---- C:\Windows\Microsoft.NET
2014-03-30 13:26:44 ----D---- C:\Users\The Kingslayer\AppData\Roaming\uTorrent
2014-03-19 23:51:50 ----D---- C:\Users\The Kingslayer\AppData\Roaming\Mozilla

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2009-10-10 35384]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-22 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2014-01-22 189936]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-07-30 241696]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-10-27 834544]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2014-01-22 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-01-22 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-01-22 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2014-01-22 64288]
R1 HssDRV6;Hotspot Shield Routing Driver 6; C:\Windows\system32\DRIVERS\hssdrv6.sys [2012-11-15 42248]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2013-10-29 231376]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R1 wStLibG64;wStLibG64; C:\Windows\system32\drivers\wStLibG64.sys [2014-04-07 61112]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2014-01-22 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-22 80816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-06 1478144]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-07-09 140800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-28 1966624]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-06-29 28704]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2012-11-15 40712]
S1 PQNTDrv;PQNTDrv; C:\Windows\system32\drivers\PQNTDrv.sys []
S3 ajrofizq;ajrofizq; C:\Windows\system32\drivers\ajrofizq.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2013-12-26 108856]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2013-12-26 206136]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2010-09-17 201280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-22 46808]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-06-11 382496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [2013-12-16 247968]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [2013-12-16 193696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 FastBootAgent;FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [2009-07-24 306232]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-30 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-30 136176]
S3 hshld;Hotspot Shield Service; C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe [2012-11-15 527728]
S3 HssSrv;Hotspot Shield Routing Service; C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe [2012-11-17 443760]
S3 HssTrayService;Hotspot Shield Tray Service; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [2012-11-15 78072]
S3 HssWd;Hotspot Shield Monitoring Service; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [2012-11-15 389488]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-30 1255736]
S4 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Tuto složku smažte
C:\Users\The Kingslayer\AppData\Roaming\mgyun

smazano..

Pokud nejsou problémy, je to vše