VIRY.CZ

Zdravím, nemôžem naištalovať aktualizácie na win7. Príjmem len niektoré napr. Nástroj na odstránenie škodlivého softvéru v systéme Windows- august 2014 (KB890830)
nechápem prečo mi nezoberie aj ostatné?

Prikladám log zo RSITu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by PC at 2014-08-18 12:27:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 11 GB (2%) free of 477 GB
Total RAM: 2943 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:27:23, on 18. 8. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Windows\explorer.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\explorer.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\explorer.exe
C:\Users\PC\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\PC.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Stiahnuť s IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stiahnuť s IDM všetky prepojenia - C:\Program Files\Internet Download Manager\IEGetAll.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~1\amazon\amazon~1\\amazon~1.dll
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

--
End of file - 3924 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\temp_02a07bd7-2128-4e25-8078-2d4cc5572ee3.job - C:\Program Files\Internet Speed Checker\02a07bd7-2128-4e25-8078-2d4cc5572ee3.exe /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=A935C452821C4DCA917FFECC86FBB9F6IE /verifier=d40a70c7d9614cd0c3954b1ab144b2ec /installerversion=1_34_08_12 /installationtime=1408109027 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.inputdatacloud.com

=========Mozilla firefox=========

ProfilePath - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.zoznam.sk/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default\extensions\
1405037432_xpi
abs@avira.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDM integration (IDMIEHlprObj Class) - C:\Program Files\Internet Download Manager\IDMIECC.dll [2013-06-10 374296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-15 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-15 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2014-08-12 751184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2014-04-15 399224]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2014-04-15 3595856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnTBMon]
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2014-08-12 751184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\Windows\system32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe [2014-05-09 844976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
C:\Program Files\Internet Download Manager\IDMan.exe [2014-04-15 3595856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Media Codec Update Service]
C:\Program Files\Essentials Codec Pack\update.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2007-08-07 200704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2014-04-11 4390912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Windows\Skytel.exe [2014-04-11 1822720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VNT]
C:\Program Files\VNT\vntldr.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Xvid]
C:\Program Files\Xvid\CheckUpdate.exe [2011-01-17 8192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YourFile DownloaderInstaller Starter]
C:\Users\PC\AppData\Local\Temp\install62739.exe -startup []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~1\amazon\amazon~1\\amazon~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"=C:\Program Files\DVDIdle Pro\DVDShell.dll [2004-10-09 49152]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=i420vfw.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.yv12"=yv12vfw.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.VIFP"=VFCodec.dll
"msacm.ac3filter"=ac3filter.acm
"msacm.lameacm"=lameACM.acm
"msacm.aacacm"=AACACM.acm
"msacm.l3pacm"=l3codecp.acm
"vidc.XVID"=xvidvfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-18 12:17:23 ----D---- C:\rsit
2014-08-18 12:17:23 ----D---- C:\Program Files\trend micro
2014-08-18 11:51:35 ----D---- C:\Program Files\xp-AntiSpy
2014-08-17 01:47:28 ----D---- C:\Program Files\Custom Technology
2014-08-17 01:20:59 ----D---- C:\Program Files\Common Files\Skype
2014-08-15 15:19:20 ----D---- C:\Users\PC\AppData\Roaming\dlg
2014-08-15 15:18:37 ----D---- C:\Program Files\Zrychlenie PC
2014-08-15 13:51:32 ----D---- C:\UNDER_THE_SKIN
2014-08-14 20:28:53 ----D---- C:\Cas pred explozi
2014-08-14 20:09:23 ----A---- C:\Windows\pdf2word.INI
2014-08-14 20:05:07 ----D---- C:\Program Files\VeryPDF PDF2Word v3.1
2014-08-14 13:13:33 ----D---- C:\DVD_8
2014-08-14 13:11:39 ----D---- C:\DVD_7
2014-08-14 13:10:23 ----D---- C:\DVD_6
2014-08-14 13:08:15 ----D---- C:\DVD_5
2014-08-14 13:06:52 ----D---- C:\DVD_4
2014-08-12 12:31:29 ----D---- C:\ProgramData\Package Cache
2014-08-11 15:21:07 ----D---- C:\DVD_3
2014-08-11 15:19:45 ----D---- C:\DVD_2
2014-08-11 15:17:49 ----D---- C:\DVD_1
2014-08-08 02:12:26 ----ASH---- C:\pagefile.sys
2014-08-06 04:31:34 ----D---- C:\V nebi
2014-08-04 03:01:11 ----D---- C:\Jak získat pritele
2014-08-01 07:13:29 ----RASH---- C:\MSDOS.SYS
2014-08-01 07:13:29 ----RASH---- C:\IO.SYS
2014-07-29 15:22:01 ----D---- C:\Taras_Bulba
2014-07-29 15:10:06 ----D---- C:\torenty BitHQ
2014-07-25 02:07:24 ----D---- C:\Program Files\Mozilla Firefox
2014-07-21 06:29:05 ----D---- C:\PizzaConnectionPart_full

======List of files/folders modified in the last 1 month======

2014-08-18 12:27:23 ----D---- C:\Windows\Prefetch
2014-08-18 12:27:22 ----D---- C:\Windows\Temp
2014-08-18 12:27:07 ----D---- C:\Users\PC\AppData\Roaming\uTorrent
2014-08-18 12:21:28 ----D---- C:\Users\PC\AppData\Roaming\DMCache
2014-08-18 12:21:20 ----D---- C:\Windows
2014-08-18 12:19:56 ----SHD---- C:\Windows\Installer
2014-08-18 12:19:55 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2014-08-18 12:17:23 ----RD---- C:\Program Files
2014-08-18 11:56:24 ----D---- C:\Windows\system32\config
2014-08-18 11:44:28 ----D---- C:\DVD
2014-08-18 11:22:37 ----D---- C:\Users\PC\AppData\Roaming\vlc
2014-08-18 10:18:05 ----D---- C:\ProgramData\DVD Shrink
2014-08-18 10:14:42 ----D---- C:\Users\PC\AppData\Roaming\Skype
2014-08-18 09:49:26 ----D---- C:\Demux
2014-08-17 04:56:23 ----A---- C:\Windows\IfoEdit.INI
2014-08-17 01:44:47 ----AD---- C:\ProgramData\TEMP
2014-08-17 01:27:13 ----D---- C:\AllokMP3toAMRFolder
2014-08-17 01:21:24 ----RD---- C:\Program Files\Skype
2014-08-17 01:21:04 ----D---- C:\ProgramData\Skype
2014-08-17 01:20:59 ----D---- C:\Program Files\Common Files
2014-08-17 01:17:37 ----D---- C:\Windows\winsxs
2014-08-15 18:09:55 ----D---- C:\Windows\system32\MRT
2014-08-15 18:04:42 ----D---- C:\Windows\debug
2014-08-15 18:04:40 ----A---- C:\Windows\system32\MRT.exe
2014-08-15 18:03:14 ----D---- C:\Windows\system32\catroot2
2014-08-15 18:03:14 ----D---- C:\Windows\system32\catroot
2014-08-15 16:08:26 ----D---- C:\Windows\system32\drivers
2014-08-15 16:08:26 ----D---- C:\Windows\Resources
2014-08-15 16:06:57 ----D---- C:\Windows\Tasks
2014-08-15 16:06:57 ----D---- C:\Windows\system32\Tasks
2014-08-15 15:37:38 ----D---- C:\AdwCleaner
2014-08-15 15:33:37 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-08-15 15:27:36 ----D---- C:\ProgramData\Avira
2014-08-15 15:27:35 ----D---- C:\Windows\System32
2014-08-15 15:27:35 ----D---- C:\Program Files\Avira
2014-08-15 15:23:02 ----D---- C:\Windows\AppPatch
2014-08-14 14:37:36 ----D---- C:\Users\PC\AppData\Roaming\dvdcss
2014-08-14 13:43:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-14 13:43:29 ----D---- C:\Windows\inf
2014-08-13 21:47:00 ----D---- C:\MyAudio
2014-08-12 12:31:29 ----HD---- C:\ProgramData
2014-08-12 12:30:17 ----D---- C:\Program Files\Opera
2014-08-04 19:51:42 ----A---- C:\Windows\system32\TempWmicBatchFile.bat
2014-08-04 18:59:42 ----D---- C:\Kus naseho mladi
2014-08-04 18:34:11 ----D---- C:\telerano
2014-08-04 03:07:19 ----D---- C:\VideoOutput
2014-08-04 02:33:07 ----D---- C:\Torrent up
2014-08-03 13:01:01 ----D---- C:\ProgramData\VSO
2014-08-03 12:49:02 ----D---- C:\Users\PC\AppData\Roaming\avidemux
2014-08-03 12:42:45 ----D---- C:\Program Files\Avidemux 2.6
2014-08-01 07:20:13 ----D---- C:\Windows\system32\Setup
2014-08-01 07:00:56 ----D---- C:\Windows\system32\DriverStore
2014-07-29 15:46:43 ----D---- C:\Users\PC\AppData\Roaming\Vso
2014-07-29 15:09:44 ----D---- C:\torrenty na stiahnutie
2014-07-29 13:04:08 ----A---- C:\Windows\MenuEdit.INI
2014-07-29 12:22:34 ----A---- C:\Users\PC\AppData\Roaming\DVDSubEdit.ini
2014-07-29 03:45:51 ----D---- C:\Audio Tool
2014-07-28 20:56:39 ----A---- C:\Users\PC\AppData\Roaming\DVDSubEditLastFile0.txt
2014-07-28 19:16:50 ----A---- C:\Windows\VobEdit.INI
2014-07-28 09:46:51 ----D---- C:\kriminalka 2
2014-07-28 08:03:24 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-26 01:02:28 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2014-05-15 136216]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2014-02-14 37352]
R1 cdrbsdrv;cdrbsdrv; C:\Windows\system32\drivers\cdrbsdrv.sys [2014-05-04 38944]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2007-08-07 33052]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2014-02-14 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2014-07-01 97648]
R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2013-05-25 102344]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2014-04-11 1747936]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2014-08-12 430160]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2014-08-12 430160]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 108032]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-14 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-18 262320]
S4 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [2014-08-12 1021520]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\system32\bgsvcgen.exe [2014-05-04 139264]
S4 CronService;Cron Service for Prey; C:\Prey\platform\windows\cronsvc.exe [2013-12-06 23552]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-25 119408]
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-19 1259296]
S4 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]

-----------------EOF-----------------

Ďakujem za pomoc.

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Zdravím, ďakujem za ochotu. Prikladám log z ADW cleaner

# AdwCleaner v3.307 - Report created 19/08/2014 at 00:46:30
# Updated 17/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : PC - PC-PC
# Running from : C:\Users\PC\Desktop\adwcleaner_3.307.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=

*************************
AdwCleaner[S8].txt - [1446 octets] - [19/08/2014 00:46:30]

########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [1506 octets] ##########

Toto je OK. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Zdravím, som každý deň do noci v práci tak preto až teraz:
Log z Combo Fix

ComboFix 14-08-19.01 - PC . 08. 2014 4:09.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2943.1987 [GMT 2:00]
Running from: c:\users\PC\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\xp-AntiSpy
c:\program files\xp-AntiSpy\Uninstall.exe
c:\program files\xp-AntiSpy\xp-AntiSpy.exe
c:\program files\xp-AntiSpy\xp-AntiSpy.chm
c:\program files\xp-AntiSpy\xp-AntiSpy.url
c:\users\PC\AppData\Roaming\DVDSubEditLastFile0.txt
.
.
((((((((((((((((((((((((( Files Created from 2014-07-20 to 2014-08-20 )))))))))))))))))))))))))))))))
.
.
2014-08-20 02:17 . 2014-08-20 02:17 -------- d-----w- c:\users\PC\AppData\Local\temp
2014-08-20 02:17 . 2014-08-20 02:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-20 00:53 . 2014-08-20 00:53 -------- d-----w- C:\ženská
2014-08-18 12:23 . 2014-08-18 12:23 -------- d-----w- C:\CUSTER_OF_THE_WEST_1967
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- C:\rsit
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- c:\program files\trend micro
2014-08-16 23:47 . 2014-08-16 23:47 -------- d-----w- c:\program files\Custom Technology
2014-08-16 23:20 . 2014-08-16 23:20 -------- d-----w- c:\program files\Common Files\Skype
2014-08-15 13:19 . 2014-08-15 13:19 -------- d-----w- c:\users\PC\AppData\Roaming\dlg
2014-08-15 13:18 . 2014-08-15 13:25 -------- d-----w- c:\program files\Zrychlenie PC
2014-08-15 11:51 . 2014-08-15 11:51 -------- d-----w- C:\UNDER_THE_SKIN
2014-08-14 18:28 . 2014-08-14 18:28 -------- d-----w- C:\Cas pred explozi
2014-08-14 18:05 . 2014-08-14 18:05 -------- d-----w- c:\program files\VeryPDF PDF2Word v3.1
2014-08-14 11:13 . 2014-08-14 11:13 -------- d-----w- C:\DVD_8
2014-08-14 11:11 . 2014-08-14 11:11 -------- d-----w- C:\DVD_7
2014-08-14 11:10 . 2014-08-14 11:10 -------- d-----w- C:\DVD_6
2014-08-14 11:08 . 2014-08-14 11:08 -------- d-----w- C:\DVD_5
2014-08-14 11:06 . 2014-08-14 11:06 -------- d-----w- C:\DVD_4
2014-08-12 10:31 . 2014-08-15 13:39 -------- d-----w- c:\programdata\Package Cache
2014-08-11 13:21 . 2014-08-11 13:21 -------- d-----w- C:\DVD_3
2014-08-11 13:19 . 2014-08-11 13:19 -------- d-----w- C:\DVD_2
2014-08-11 13:17 . 2014-08-11 13:17 -------- d-----w- C:\DVD_1
2014-08-06 02:31 . 2014-08-06 02:34 -------- d-----w- C:\V nebi
2014-07-29 13:22 . 2014-07-29 13:22 -------- d-----w- C:\Taras_Bulba
2014-07-29 13:10 . 2014-07-29 13:10 -------- d-----w- C:\torenty BitHQ
2014-07-21 04:29 . 2014-07-21 12:18 -------- d-----w- C:\PizzaConnectionPart_full
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-19 22:43 . 2014-07-11 06:56 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-04 17:51 . 2014-06-27 11:49 29 ----a-w- c:\windows\system32\TempWmicBatchFile.bat
2014-07-17 22:37 . 2014-04-14 14:37 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-17 22:37 . 2014-04-14 14:37 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-07-17 10:52 . 2014-04-14 22:56 35848 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-01 12:12 . 2014-04-14 22:56 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2005-09-04 15:25 307712 --sha-w- c:\windows\System32\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\System32\AVSredirect.dll
2011-06-15 21:00 163328 --sha-r- c:\windows\System32\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\System32\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\System32\nbDX.dll
2010-01-06 21:00 107520 --sha-r- c:\windows\System32\TAKDSDecoder.dll
2012-10-05 17:54 188416 --sha-r- c:\windows\System32\winDCE32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2014-04-15 399224]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2014-04-15 3595856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-08-12 751184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVDIdle Pro\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2014-08-12 10:29 751184 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 17:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
2014-05-09 07:47 844976 ----a-w- c:\windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2014-04-15 10:51 3595856 ----a-w- c:\program files\Internet Download Manager\IDMan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2014-04-11 19:51 4390912 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2014-04-11 19:51 1822720 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Xvid]
2011-01-17 19:41 8192 ----a-w- c:\program files\Xvid\CheckUpdate.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"IDMan"=c:\program files\Internet Download Manager\IDMan.exe /onboot
"uTorrent"="c:\program files\uTorrent\uTorrent.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Wondershare Helper Compact.exe"=c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" /min
.
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-06 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2014-04-14 1343400]
R4 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-08-12 1021520]
R4 CronService;Cron Service for Prey;c:\prey\platform\windows\cronsvc.exe [2013-12-06 23552]
R4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-02-14 37352]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-08-12 430160]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2013-05-25 102344]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-08-19 110296]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-13 11:46 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 22:37]
.
2014-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
2014-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = about:blank
IE: Stiahnuť s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stiahnuť s IDM všetky prepojenia - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: DhcpNameServer = 195.146.132.58 192.168.0.1
FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.zoznam.sk/
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-ApnTBMon - c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
MSConfigStartUp-Media Codec Update Service - c:\program files\Essentials Codec Pack\update.exe
MSConfigStartUp-VNT - c:\program files\VNT\vntldr.exe
MSConfigStartUp-YourFile DownloaderInstaller Starter - c:\users\PC\AppData\Local\Temp\install62739.exe
HKLM_ActiveSetup-{981b174d-7733-4e7f-b89d-6545a7c21838} - c:\program files\Amazon\Amazon1ButtonApp\Amazon1ButtonTaskbarApp.exe
AddRemove-CCE SP Trial Version - c:\progra~1\CUSTOM~1\CCESPT~1\uinst.exe
AddRemove-xp-AntiSpy - c:\program files\xp-AntiSpy\Uninstall.exe
.
.
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: WDC_WD50 rev.01.0 -> Harddisk0\DR0 -> \Device\0000005b
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
error: Read Nedostatok systémových prostriedkov na dokončenie požadovanej služby.
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):f0,b2,a4,4f,10,67,da,de,b8,50,94,50,94,6b,c8,af,5d,79,32,d1,90,
50,d9,98,97,08,c2,59,68,dc,ac,90,7d,8a,65,f9,4f,6c,ab,3d,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{a67e6c00-98e7-4fe7-891a-6f3b84153b92}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e2
"Therad"=dword:0000001e
"SpecVersion"=dword:000000e1
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-08-20 04:20:11
ComboFix-quarantined-files.txt 2014-08-20 02:20
.
Pre-Run: 16 479 342 592 bytes free
Post-Run: 16 482 627 584 bytes free
.
- - End Of File - - D41D9A58E74B9F0F1AD3FFDB4544D529
8F558EB6672622401DA993E1E865C861

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

RegLock::
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{a67e6c00-98e7-4fe7-891a-6f3b84153b92}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spsutí a vykoná příkazy ze skriptu.



Dále stáhněte a spusťte TDSSKiller: http://support.kaspersky.com/viruses/utility# . Nechte pracovat a po ukončení akce sem dejte log.

Tu je z ComboFix

ComboFix 14-08-19.01 - PC . 08. 2014 13:52:18.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2943.1965 [GMT 2:00]
Running from: c:\users\PC\Desktop\ComboFix.exe
Command switches used :: c:\users\PC\Desktop\CFScript.txt..txt
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2014-07-21 to 2014-08-21 )))))))))))))))))))))))))))))))
.
.
2014-08-21 12:01 . 2014-08-21 12:01 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-08-21 12:01 . 2014-08-21 12:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-20 22:39 . 2014-08-20 22:39 -------- d-----w- C:\The.Garden.Of.Eden.2008.DVDRip.XviD-VoMiT.[UsaBit.com]
2014-08-20 13:33 . 2014-08-20 13:33 -------- d-----w- C:\Seduction
2014-08-20 02:20 . 2014-08-21 12:22 -------- d-----w- c:\users\PC\AppData\Local\temp
2014-08-20 00:53 . 2014-08-20 11:38 -------- d-----w- C:\ženská
2014-08-18 12:23 . 2014-08-18 12:23 -------- d-----w- C:\CUSTER_OF_THE_WEST_1967
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- C:\rsit
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- c:\program files\trend micro
2014-08-16 23:47 . 2014-08-16 23:47 -------- d-----w- c:\program files\Custom Technology
2014-08-16 23:20 . 2014-08-16 23:20 -------- d-----w- c:\program files\Common Files\Skype
2014-08-15 13:19 . 2014-08-15 13:19 -------- d-----w- c:\users\PC\AppData\Roaming\dlg
2014-08-15 13:18 . 2014-08-15 13:25 -------- d-----w- c:\program files\Zrychlenie PC
2014-08-15 11:51 . 2014-08-21 11:23 -------- d-----w- C:\UNDER_THE_SKIN
2014-08-14 18:28 . 2014-08-14 18:28 -------- d-----w- C:\Cas pred explozi
2014-08-14 18:05 . 2014-08-14 18:05 -------- d-----w- c:\program files\VeryPDF PDF2Word v3.1
2014-08-14 11:13 . 2014-08-14 11:13 -------- d-----w- C:\DVD_8
2014-08-14 11:11 . 2014-08-14 11:11 -------- d-----w- C:\DVD_7
2014-08-14 11:10 . 2014-08-14 11:10 -------- d-----w- C:\DVD_6
2014-08-14 11:08 . 2014-08-14 11:08 -------- d-----w- C:\DVD_5
2014-08-14 11:06 . 2014-08-14 11:06 -------- d-----w- C:\DVD_4
2014-08-12 10:31 . 2014-08-15 13:39 -------- d-----w- c:\programdata\Package Cache
2014-08-11 13:21 . 2014-08-11 13:21 -------- d-----w- C:\DVD_3
2014-08-11 13:19 . 2014-08-11 13:19 -------- d-----w- C:\DVD_2
2014-08-11 13:17 . 2014-08-11 13:17 -------- d-----w- C:\DVD_1
2014-08-06 02:31 . 2014-08-06 02:34 -------- d-----w- C:\V nebi
2014-07-29 13:22 . 2014-07-29 13:22 -------- d-----w- C:\Taras_Bulba
2014-07-29 13:10 . 2014-07-29 13:10 -------- d-----w- C:\torenty BitHQ
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-20 10:31 . 2014-07-11 06:56 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-04 17:51 . 2014-06-27 11:49 29 ----a-w- c:\windows\system32\TempWmicBatchFile.bat
2014-07-17 22:37 . 2014-04-14 14:37 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-17 22:37 . 2014-04-14 14:37 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-07-17 10:52 . 2014-04-14 22:56 35848 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-01 12:12 . 2014-04-14 22:56 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2005-09-04 15:25 307712 --sha-w- c:\windows\System32\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\System32\AVSredirect.dll
2011-06-15 21:00 163328 --sha-r- c:\windows\System32\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\System32\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\System32\nbDX.dll
2010-01-06 21:00 107520 --sha-r- c:\windows\System32\TAKDSDecoder.dll
2012-10-05 17:54 188416 --sha-r- c:\windows\System32\winDCE32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2014-04-15 399224]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2014-04-15 3595856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-08-12 751184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVDIdle Pro\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2014-08-12 10:29 751184 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 17:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
2014-05-09 07:47 844976 ----a-w- c:\windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2014-04-15 10:51 3595856 ----a-w- c:\program files\Internet Download Manager\IDMan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2014-04-11 19:51 4390912 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2014-04-11 19:51 1822720 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Xvid]
2011-01-17 19:41 8192 ----a-w- c:\program files\Xvid\CheckUpdate.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"IDMan"=c:\program files\Internet Download Manager\IDMan.exe /onboot
"uTorrent"="c:\program files\uTorrent\uTorrent.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Wondershare Helper Compact.exe"=c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" /min
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-06 108032]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2014-04-14 1343400]
R4 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-08-12 1021520]
R4 CronService;Cron Service for Prey;c:\prey\platform\windows\cronsvc.exe [2013-12-06 23552]
R4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-02-14 37352]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-08-12 430160]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2013-05-25 102344]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-13 11:46 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 22:37]
.
2014-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
2014-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = about:blank
IE: Stiahnuť s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stiahnuť s IDM všetky prepojenia - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: DhcpNameServer = 195.146.132.58 192.168.0.1
FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.zoznam.sk/
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):f0,b2,a4,4f,10,67,da,de,b8,50,94,50,94,6b,c8,af,5d,79,32,d1,90,
50,d9,98,97,08,c2,59,68,dc,ac,90,7d,8a,65,f9,4f,6c,ab,3d,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{a67e6c00-98e7-4fe7-891a-6f3b84153b92}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e2
"Therad"=dword:0000001e
"SpecVersion"=dword:000000e1
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
.
**************************************************************************
.
Completion time: 2014-08-21 14:25:14 - machine was rebooted
ComboFix-quarantined-files.txt 2014-08-21 12:25
ComboFix2.txt 2014-08-20 02:20
.
Pre-Run: 561 463 296 bytes free
Post-Run: 1 008 971 776 bytes free
.
- - End Of File - - ABDFFD99D3071C4D38A26596FFE984FD
8F558EB6672622401DA993E1E865C861

Tak ještě jednou. Chybně jste uložil skript (CFScript.txt..txt) . Nutno uložit jako CFScript.txt .

A tu z TDSSKillera 1.časť

14:28:02.0640 0x0c18 TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58
14:28:07.0747 0x0c18 ============================================================
14:28:07.0747 0x0c18 Current date / time: 2014/08/21 14:28:07.0747
14:28:07.0747 0x0c18 SystemInfo:
14:28:07.0747 0x0c18
14:28:07.0747 0x0c18 OS Version: 6.1.7601 ServicePack: 1.0
14:28:07.0747 0x0c18 Product type: Workstation
14:28:07.0747 0x0c18 ComputerName: PC-PC
14:28:07.0747 0x0c18 UserName: PC
14:28:07.0748 0x0c18 Windows directory: C:\Windows
14:28:07.0748 0x0c18 System windows directory: C:\Windows
14:28:07.0748 0x0c18 Processor architecture: Intel x86
14:28:07.0748 0x0c18 Number of processors: 2
14:28:07.0748 0x0c18 Page size: 0x1000
14:28:07.0748 0x0c18 Boot type: Normal boot
14:28:07.0748 0x0c18 ============================================================
14:28:09.0449 0x0c18 KLMD registered as C:\Windows\system32\drivers\00122670.sys
14:28:09.0679 0x0c18 System UUID: {8A6F7D73-724B-0056-4E44-01F2CEE7A5DF}
14:28:10.0369 0x0c18 Drive \Device\Harddisk1\DR1 - Size: 0x4A85C4DE00 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:28:10.0382 0x0c18 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0x14B355, SectorsPerTrack: 0xC, TracksPerCylinder: 0x3C, Type 'K0', Flags 0x00000050
14:28:10.0385 0x0c18 Drive \Device\Harddisk2\DR2 - Size: 0x4A85C4DE00 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:28:10.0624 0x0c18 Drive \Device\Harddisk3\DR3 - Size: 0xDF8F90000 ( 55.89 Gb ), SectorSize: 0x200, Cylinders: 0x1C80, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:28:10.0658 0x0c18 Drive \Device\Harddisk4\DR4 - Size: 0x950B056000 ( 596.17 Gb ), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:28:11.0255 0x0c18 Drive \Device\Harddisk5\DR5 - Size: 0x3A8400000 ( 14.63 Gb ), SectorSize: 0x200, Cylinders: 0x775, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:28:11.0266 0x0c18 ============================================================
14:28:11.0266 0x0c18 \Device\Harddisk1\DR1:
14:28:11.0267 0x0c18 MBR partitions:
14:28:11.0267 0x0c18 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542D800
14:28:11.0267 0x0c18 \Device\Harddisk0\DR0:
14:28:11.0273 0x0c18 MBR partitions:
14:28:11.0273 0x0c18 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:28:11.0273 0x0c18 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
14:28:11.0273 0x0c18 \Device\Harddisk2\DR2:
14:28:11.0274 0x0c18 MBR partitions:
14:28:11.0274 0x0c18 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542D7F8
14:28:11.0274 0x0c18 \Device\Harddisk3\DR3:
14:28:11.0276 0x0c18 MBR partitions:
14:28:11.0276 0x0c18 \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x6FC7C41
14:28:11.0276 0x0c18 \Device\Harddisk4\DR4:
14:28:11.0277 0x0c18 MBR partitions:
14:28:11.0277 0x0c18 \Device\Harddisk4\DR4\Partition1: MBR, Type 0x7, StartLBA 0x20, BlocksNum 0x4A85AD62
14:28:11.0277 0x0c18 \Device\Harddisk5\DR5:
14:28:11.0278 0x0c18 MBR partitions:
14:28:11.0278 0x0c18 \Device\Harddisk5\DR5\Partition1: MBR, Type 0xC, StartLBA 0x2000, BlocksNum 0x1D40000
14:28:11.0279 0x0c18 ============================================================
14:28:11.0311 0x0c18 C: <-> \Device\Harddisk0\DR0\Partition2
14:28:11.0331 0x0c18 D: <-> \Device\Harddisk1\DR1\Partition1
14:28:11.0407 0x0c18 E: <-> \Device\Harddisk2\DR2\Partition1
14:28:11.0470 0x0c18 F: <-> \Device\Harddisk4\DR4\Partition1
14:28:11.0715 0x0c18 I: <-> \Device\Harddisk3\DR3\Partition1
14:28:11.0715 0x0c18 ============================================================
14:28:11.0715 0x0c18 Initialize success
14:28:11.0715 0x0c18 ============================================================
14:28:13.0964 0x0b60 ============================================================
14:28:13.0964 0x0b60 Scan started
14:28:13.0964 0x0b60 Mode: Manual;
14:28:13.0964 0x0b60 ============================================================
14:28:13.0964 0x0b60 KSN ping started
14:28:27.0759 0x0b60 KSN ping finished: true
14:28:29.0523 0x0b60 ================ Scan system memory ========================
14:28:29.0524 0x0b60 System memory - ok
14:28:29.0524 0x0b60 ================ Scan services =============================
14:28:29.0671 0x0b60 [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
14:28:29.0691 0x0b60 1394ohci - ok
14:28:29.0803 0x0b60 [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys
14:28:29.0811 0x0b60 ACPI - ok
14:28:29.0830 0x0b60 [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
14:28:29.0838 0x0b60 AcpiPmi - ok
14:28:29.0917 0x0b60 [ A6B6AB9502B63F43A9A56AE6AFB22078, DD1F0BA3D8F3333F52A71EAE3719A001F6EF844D647FFABF0E4C56C6C764ACA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:28:29.0927 0x0b60 AdobeFlashPlayerUpdateSvc - ok
14:28:29.0964 0x0b60 [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
14:28:29.0999 0x0b60 adp94xx - ok
14:28:30.0025 0x0b60 [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\drivers\adpahci.sys
14:28:30.0060 0x0b60 adpahci - ok
14:28:30.0086 0x0b60 [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\drivers\adpu320.sys
14:28:30.0102 0x0b60 adpu320 - ok
14:28:30.0131 0x0b60 [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:28:30.0134 0x0b60 AeLookupSvc - ok
14:28:30.0179 0x0b60 [ F81BB7E487EDCEAB630A7EE66CF23913, 7D1638FD7E388EF670FA0A421762E0413351058A20DDF0F9988A383F05395A68 ] AFD C:\Windows\system32\drivers\afd.sys
14:28:30.0227 0x0b60 AFD - ok
14:28:30.0253 0x0b60 [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys
14:28:30.0255 0x0b60 agp440 - ok
14:28:30.0284 0x0b60 [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\drivers\djsvs.sys
14:28:30.0296 0x0b60 aic78xx - ok
14:28:30.0320 0x0b60 [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe
14:28:30.0348 0x0b60 ALG - ok
14:28:30.0379 0x0b60 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys
14:28:30.0388 0x0b60 aliide - ok
14:28:30.0407 0x0b60 [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
14:28:30.0419 0x0b60 amdagp - ok
14:28:30.0434 0x0b60 [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide C:\Windows\system32\drivers\amdide.sys
14:28:30.0445 0x0b60 amdide - ok
14:28:30.0479 0x0b60 [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
14:28:30.0482 0x0b60 AmdK8 - ok
14:28:30.0498 0x0b60 [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
14:28:30.0511 0x0b60 AmdPPM - ok
14:28:30.0543 0x0b60 [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys
14:28:30.0556 0x0b60 amdsata - ok
14:28:30.0588 0x0b60 [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
14:28:30.0605 0x0b60 amdsbs - ok
14:28:30.0672 0x0b60 [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
14:28:30.0692 0x0b60 amdxata - ok
14:28:30.0780 0x0b60 [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
14:28:30.0797 0x0b60 AntiVirSchedulerService - ok
14:28:30.0837 0x0b60 [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
14:28:30.0849 0x0b60 AntiVirService - ok
14:28:30.0912 0x0b60 [ CA9E51B4456B64A92FE60A592EE7DE61, 358B95623C8577A158D789FB03910ECB86EE746031C78EC97A6A8EE9A5B0086B ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
14:28:30.0983 0x0b60 AntiVirWebService - ok
14:28:31.0011 0x0b60 [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID C:\Windows\system32\drivers\appid.sys
14:28:31.0023 0x0b60 AppID - ok
14:28:31.0056 0x0b60 [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc C:\Windows\System32\appidsvc.dll
14:28:31.0067 0x0b60 AppIDSvc - ok
14:28:31.0099 0x0b60 [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo C:\Windows\System32\appinfo.dll
14:28:31.0101 0x0b60 Appinfo - ok
14:28:31.0157 0x0b60 [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\drivers\arc.sys
14:28:31.0170 0x0b60 arc - ok
14:28:31.0181 0x0b60 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\drivers\arcsas.sys
14:28:31.0198 0x0b60 arcsas - ok
14:28:31.0289 0x0b60 [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:28:31.0302 0x0b60 aspnet_state - ok
14:28:31.0326 0x0b60 [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:28:31.0328 0x0b60 AsyncMac - ok
14:28:31.0368 0x0b60 [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys
14:28:31.0370 0x0b60 atapi - ok
14:28:31.0404 0x0b60 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:28:31.0420 0x0b60 AudioEndpointBuilder - ok
14:28:31.0452 0x0b60 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:28:31.0466 0x0b60 Audiosrv - ok
14:28:31.0508 0x0b60 [ B0A63DD71CB0CB597D8BD5C364E73F7C, 572B31F3FC962F50110D42A08CDD0614323E18C213575710CEEFA35EE7CAE8C5 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
14:28:31.0524 0x0b60 avgntflt - ok
14:28:31.0595 0x0b60 [ 05AF7CBF0BDA1571BBADC36703EB9CA4, 3925AD58053769D317D3CF0DDDF7371B010F2F4C839CF7B44F327AE9D0AB5442 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
14:28:31.0614 0x0b60 avipbb - ok
14:28:31.0690 0x0b60 [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
14:28:31.0703 0x0b60 avkmgr - ok
14:28:31.0728 0x0b60 [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll
14:28:31.0741 0x0b60 AxInstSV - ok
14:28:31.0785 0x0b60 [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\drivers\bxvbdx.sys
14:28:31.0822 0x0b60 b06bdrv - ok
14:28:31.0852 0x0b60 [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
14:28:31.0873 0x0b60 b57nd60x - ok
14:28:31.0896 0x0b60 [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll
14:28:31.0910 0x0b60 BDESVC - ok
14:28:31.0929 0x0b60 [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys
14:28:31.0930 0x0b60 Beep - ok
14:28:31.0965 0x0b60 [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll
14:28:31.0981 0x0b60 BFE - ok
14:28:32.0076 0x0b60 [ 27FDD13BEC08CEEAC4BE6B900A6C39CE, D2ED8A81284063F8C634BD84C941C42B29D494A44A4A3E0FBACE2BF9C24EAC54 ] bgsvcgen C:\Windows\system32\bgsvcgen.exe
14:28:32.0093 0x0b60 bgsvcgen - ok
14:28:32.0148 0x0b60 [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\system32\qmgr.dll
14:28:32.0166 0x0b60 BITS - ok
14:28:32.0190 0x0b60 [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
14:28:32.0199 0x0b60 blbdrive - ok
14:28:32.0239 0x0b60 [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:28:32.0251 0x0b60 bowser - ok
14:28:32.0268 0x0b60 [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
14:28:32.0275 0x0b60 BrFiltLo - ok
14:28:32.0301 0x0b60 [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
14:28:32.0309 0x0b60 BrFiltUp - ok
14:28:32.0360 0x0b60 [ 77361D72A04F18809D0EFB6CCEB74D4B, 55E7DB65BB29FF421F138CDFF05E5ECFFC7C8862FAA68F6179A3BA9D6B69AE64 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
14:28:32.0385 0x0b60 BridgeMP - ok
14:28:32.0422 0x0b60 [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser C:\Windows\System32\browser.dll
14:28:32.0426 0x0b60 Browser - ok
14:28:32.0453 0x0b60 [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys
14:28:32.0475 0x0b60 Brserid - ok
14:28:32.0497 0x0b60 [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
14:28:32.0508 0x0b60 BrSerWdm - ok
14:28:32.0521 0x0b60 [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
14:28:32.0527 0x0b60 BrUsbMdm - ok
14:28:32.0537 0x0b60 [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
14:28:32.0546 0x0b60 BrUsbSer - ok
14:28:32.0566 0x0b60 [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
14:28:32.0578 0x0b60 BTHMODEM - ok
14:28:32.0667 0x0b60 [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll
14:28:32.0681 0x0b60 bthserv - ok
14:28:32.0756 0x0b60 catchme - ok
14:28:32.0783 0x0b60 [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:28:32.0795 0x0b60 cdfs - ok
14:28:32.0841 0x0b60 [ 9008AD94F28360A2F1409592BFC7ACF7, 594AA106352079659838147BDB05AF043A413C75BC2B13DEB47B95195092B071 ] cdrbsdrv C:\Windows\system32\drivers\cdrbsdrv.sys
14:28:32.0852 0x0b60 cdrbsdrv - ok
14:28:32.0869 0x0b60 [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
14:28:32.0892 0x0b60 cdrom - ok
14:28:32.0921 0x0b60 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll
14:28:32.0924 0x0b60 CertPropSvc - ok
14:28:32.0951 0x0b60 [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\drivers\circlass.sys
14:28:32.0962 0x0b60 circlass - ok
14:28:32.0991 0x0b60 [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS C:\Windows\system32\CLFS.sys
14:28:33.0000 0x0b60 CLFS - ok
14:28:33.0061 0x0b60 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:28:33.0075 0x0b60 clr_optimization_v2.0.50727_32 - ok
14:28:33.0105 0x0b60 [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:28:33.0109 0x0b60 clr_optimization_v4.0.30319_32 - ok
14:28:33.0121 0x0b60 [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
14:28:33.0134 0x0b60 CmBatt - ok
14:28:33.0153 0x0b60 [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys
14:28:33.0162 0x0b60 cmdide - ok
14:28:33.0209 0x0b60 [ 85449EEBE8F8EBD6481EFBF0F352B4EB, E6FF04970C5A5BFDE7297A86C1C7B9BFE2E0F976A1A1AFB874CEB488DC6151CC ] CNG C:\Windows\system32\Drivers\cng.sys
14:28:33.0245 0x0b60 CNG - ok
14:28:33.0267 0x0b60 [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\drivers\compbatt.sys
14:28:33.0278 0x0b60 Compbatt - ok
14:28:33.0298 0x0b60 [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
14:28:33.0306 0x0b60 CompositeBus - ok
14:28:33.0317 0x0b60 COMSysApp - ok
14:28:33.0333 0x0b60 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
14:28:33.0343 0x0b60 crcdisk - ok
14:28:33.0425 0x0b60 [ 2C53AB51F07EF7B58D32C36D8F2F8C16, BC5284C83CD6FAAF26794EBD2E861B5B1239BE319F3FC1C7393B53D3846CA2B3 ] CronService C:\Prey\platform\windows\cronsvc.exe
14:28:33.0434 0x0b60 CronService - ok
14:28:33.0460 0x0b60 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9, E3AB4CC52A97E3855D7EAB87363F807FDD2162ED8C76A036CD71549ED64E7797 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:28:33.0465 0x0b60 CryptSvc - ok
14:28:33.0520 0x0b60 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll
14:28:33.0533 0x0b60 DcomLaunch - ok
14:28:33.0564 0x0b60 [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll
14:28:33.0600 0x0b60 defragsvc - ok
14:28:33.0667 0x0b60 [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
14:28:33.0683 0x0b60 DfsC - ok
14:28:33.0707 0x0b60 [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll
14:28:33.0715 0x0b60 Dhcp - ok
14:28:33.0730 0x0b60 [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys
14:28:33.0740 0x0b60 discache - ok
14:28:33.0752 0x0b60 [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\drivers\disk.sys
14:28:33.0765 0x0b60 Disk - ok
14:28:33.0791 0x0b60 [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:28:33.0796 0x0b60 Dnscache - ok
14:28:33.0829 0x0b60 [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll
14:28:33.0851 0x0b60 dot3svc - ok
14:28:33.0864 0x0b60 [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll
14:28:33.0870 0x0b60 DPS - ok
14:28:33.0893 0x0b60 [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:28:33.0902 0x0b60 drmkaud - ok
14:28:33.0949 0x0b60 [ 71BC35067CABC02C9453AEAA42B2E43E, 713B19F2C08EA5E4C087F7A74A8856932CF33E19D63384823DD4E02ED8798619 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:28:34.0008 0x0b60 DXGKrnl - ok
14:28:34.0038 0x0b60 [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll
14:28:34.0043 0x0b60 EapHost - ok
14:28:34.0189 0x0b60 [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\drivers\evbdx.sys
14:28:34.0354 0x0b60 ebdrv - ok
14:28:34.0402 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] EFS C:\Windows\System32\lsass.exe
14:28:34.0404 0x0b60 EFS - ok
14:28:34.0484 0x0b60 [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
14:28:34.0544 0x0b60 ehRecvr - ok
14:28:34.0573 0x0b60 [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe
14:28:34.0590 0x0b60 ehSched - ok
14:28:34.0700 0x0b60 [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
14:28:34.0736 0x0b60 elxstor - ok
14:28:34.0761 0x0b60 [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys
14:28:34.0769 0x0b60 ErrDev - ok
14:28:34.0831 0x0b60 [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll
14:28:34.0840 0x0b60 EventSystem - ok
14:28:34.0875 0x0b60 [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys
14:28:34.0896 0x0b60 exfat - ok
14:28:34.0913 0x0b60 [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:28:34.0929 0x0b60 fastfat - ok
14:28:34.0969 0x0b60 [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe
14:28:34.0985 0x0b60 Fax - ok
14:28:35.0005 0x0b60 [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
14:28:35.0016 0x0b60 fdc - ok
14:28:35.0039 0x0b60 [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll
14:28:35.0047 0x0b60 fdPHost - ok
14:28:35.0063 0x0b60 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll
14:28:35.0075 0x0b60 FDResPub - ok
14:28:35.0105 0x0b60 [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:28:35.0117 0x0b60 FileInfo - ok
14:28:35.0149 0x0b60 [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:28:35.0158 0x0b60 Filetrace - ok
14:28:35.0174 0x0b60 [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
14:28:35.0182 0x0b60 flpydisk - ok
14:28:35.0206 0x0b60 [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:28:35.0227 0x0b60 FltMgr - ok
14:28:35.0293 0x0b60 [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache C:\Windows\system32\FntCache.dll
14:28:35.0328 0x0b60 FontCache - ok
14:28:35.0380 0x0b60 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:28:35.0395 0x0b60 FontCache3.0.0.0 - ok
14:28:35.0417 0x0b60 [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
14:28:35.0430 0x0b60 FsDepends - ok
14:28:35.0459 0x0b60 [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:28:35.0469 0x0b60 Fs_Rec - ok
14:28:35.0499 0x0b60 [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
14:28:35.0526 0x0b60 fvevol - ok
14:28:35.0543 0x0b60 [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
14:28:35.0556 0x0b60 gagp30kx - ok
14:28:35.0622 0x0b60 [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll
14:28:35.0643 0x0b60 gpsvc - ok
14:28:35.0781 0x0b60 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:28:35.0785 0x0b60 gupdate - ok
14:28:35.0795 0x0b60 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:28:35.0799 0x0b60 gupdatem - ok
14:28:35.0826 0x0b60 [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
14:28:35.0835 0x0b60 hcw85cir - ok
14:28:35.0900 0x0b60 [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:28:35.0934 0x0b60 HdAudAddService - ok
14:28:35.0984 0x0b60 [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
14:28:35.0988 0x0b60 HDAudBus - ok
14:28:36.0000 0x0b60 [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
14:28:36.0009 0x0b60 HidBatt - ok
14:28:36.0025 0x0b60 [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\drivers\hidbth.sys
14:28:36.0040 0x0b60 HidBth - ok
14:28:36.0053 0x0b60 [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\drivers\hidir.sys
14:28:36.0063 0x0b60 HidIr - ok
14:28:36.0083 0x0b60 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\System32\hidserv.dll
14:28:36.0086 0x0b60 hidserv - ok
14:28:36.0118 0x0b60 [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
14:28:36.0126 0x0b60 HidUsb - ok
14:28:36.0147 0x0b60 [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll
14:28:36.0151 0x0b60 hkmsvc - ok
14:28:36.0171 0x0b60 [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:28:36.0207 0x0b60 HomeGroupListener - ok
14:28:36.0238 0x0b60 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:28:36.0245 0x0b60 HomeGroupProvider - ok
14:28:36.0255 0x0b60 [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
14:28:36.0270 0x0b60 HpSAMD - ok
14:28:36.0309 0x0b60 [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:28:36.0360 0x0b60 HTTP - ok
14:28:36.0378 0x0b60 [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
14:28:36.0387 0x0b60 hwpolicy - ok
14:28:36.0409 0x0b60 [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
14:28:36.0425 0x0b60 i8042prt - ok
14:28:36.0463 0x0b60 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
14:28:36.0499 0x0b60 iaStorV - ok
14:28:36.0537 0x0b60 [ FCDB2AEC95F2FEBE2DA5A0EF00BC2092, 025FA2620616ABD6B3FAD19E56DBB48D0406135F048274E9A1EFE756AB838BB4 ] IDMWFP C:\Windows\system32\DRIVERS\idmwfp.sys
14:28:36.0555 0x0b60 IDMWFP - ok
14:28:36.0620 0x0b60 [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:28:36.0689 0x0b60 idsvc - ok
14:28:36.0732 0x0b60 IEEtwCollectorService - ok
14:28:36.0754 0x0b60 [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\drivers\iirsp.sys
14:28:36.0765 0x0b60 iirsp - ok
14:28:36.0820 0x0b60 [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT C:\Windows\System32\ikeext.dll
14:28:36.0840 0x0b60 IKEEXT - ok
14:28:36.0945 0x0b60 [ 8D7EB1FD498FD0A34C95A298685EC1C7, D9A8F2049DF6257328BF5E6F868576DD85A586D4AC84037BF28C962850455076 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:28:37.0117 0x0b60 IntcAzAudAddService - ok
14:28:37.0163 0x0b60 [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys
14:28:37.0190 0x0b60 intelide - ok
14:28:37.0214 0x0b60 [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\drivers\intelppm.sys
14:28:37.0229 0x0b60 intelppm - ok
14:28:37.0263 0x0b60 [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
14:28:37.0337 0x0b60 IPBusEnum - ok
14:28:37.0357 0x0b60 [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:28:37.0385 0x0b60 IpFilterDriver - ok
14:28:37.0435 0x0b60 [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:28:37.0471 0x0b60 iphlpsvc - ok
14:28:37.0496 0x0b60 [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
14:28:37.0512 0x0b60 IPMIDRV - ok
14:28:37.0536 0x0b60 [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
14:28:37.0552 0x0b60 IPNAT - ok
14:28:37.0569 0x0b60 [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:28:37.0578 0x0b60 IRENUM - ok
14:28:37.0600 0x0b60 [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys
14:28:37.0614 0x0b60 isapnp - ok
14:28:37.0711 0x0b60 [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
14:28:37.0755 0x0b60 iScsiPrt - ok
14:28:37.0777 0x0b60 [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
14:28:37.0785 0x0b60 kbdclass - ok
14:28:37.0878 0x0b60 [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
14:28:37.0886 0x0b60 kbdhid - ok
14:28:37.0906 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] KeyIso C:\Windows\system32\lsass.exe
14:28:37.0909 0x0b60 KeyIso - ok
14:28:37.0932 0x0b60 [ 4120DA10AA42A9996F4575DB9E3E6E6E, 1C6E790772EA327ACB885D731A030408160534997DD56FEE4D6CEE6929873BB8 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:28:37.0945 0x0b60 KSecDD - ok
14:28:37.0958 0x0b60 [ D3964885F0A11ACF51DA3AAA776973B2, 417ED5A3201FC50FBC0D646F8F2114A1E8A91E7919A62508DCBC156C0BFB2FBA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
14:28:37.0975 0x0b60 KSecPkg - ok
14:28:38.0025 0x0b60 [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll
14:28:38.0062 0x0b60 KtmRm - ok
14:28:38.0113 0x0b60 [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\System32\srvsvc.dll
14:28:38.0121 0x0b60 LanmanServer - ok
14:28:38.0270 0x0b60 [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:28:38.0275 0x0b60 LanmanWorkstation - ok
14:28:38.0378 0x0b60 [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:28:38.0451 0x0b60 lltdio - ok
14:28:38.0513 0x0b60 [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:28:38.0532 0x0b60 lltdsvc - ok
14:28:38.0558 0x0b60 [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll
14:28:38.0567 0x0b60 lmhosts - ok
14:28:38.0588 0x0b60 [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
14:28:38.0603 0x0b60 LSI_FC - ok
14:28:38.0685 0x0b60 [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
14:28:38.0699 0x0b60 LSI_SAS - ok
14:28:38.0716 0x0b60 [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
14:28:38.0728 0x0b60 LSI_SAS2 - ok
14:28:38.0746 0x0b60 [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
14:28:38.0760 0x0b60 LSI_SCSI - ok
14:28:38.0778 0x0b60 [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys
14:28:38.0792 0x0b60 luafv - ok
14:28:38.0828 0x0b60 [ 8683C1B450F4B3872839308D836E0F92, C6CEEEA780D2191AEAC2537FD96324FF5501D92CE46313FB95ABB51765D919ED ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
14:28:38.0838 0x0b60 MBAMProtector - ok
14:28:38.0958 0x0b60 [ D84AEA3F3329D622DFC1297DDDF6163B, 316FE56CC30ED1473A917253F46B79EAA12F4ABD5B4B1ADB03929DFEE940F577 ] MBAMScheduler C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
14:28:39.0021 0x0b60 MBAMScheduler - ok
14:28:39.0081 0x0b60 [ 4F45ED469906494F9BF754E476390DBD, D8FF6AFD73D8C191F5732DF9737E6F83B2B52B06A3A6CD4CC6EAC9464CBB2772 ] MBAMService C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
14:28:39.0120 0x0b60 MBAMService - ok
14:28:39.0125 0x0b60 Suspicious service (Hidden): MBAMSwissArmy
14:28:39.0153 0x0b60 [ 12E71DA845D76665B56753AD149E32B3, 0E403710CCBACD5AB85FD4C32AAB6CB2C27BC1F043E8008EE49EE96ECA944146 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
14:28:39.0195 0x0b60 MBAMSwissArmy - detected HiddenService.Multi.Generic ( 1 )
14:28:41.0928 0x0b60 Detect skipped due to KSN trusted
14:28:41.0928 0x0b60 MBAMSwissArmy - ok
14:28:41.0990 0x0b60 [ BD27D97297934FD4217A37FD28A7ABC7, 446F3D6D278A4B3B79B331AA325632FD038952E5E910FC927894E9171A623794 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
14:28:41.0992 0x0b60 MBAMWebAccessControl - ok
14:28:42.0018 0x0b60 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
14:28:42.0034 0x0b60 Mcx2Svc - ok
14:28:42.0077 0x0b60 [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\drivers\megasas.sys
14:28:42.0088 0x0b60 megasas - ok
14:28:42.0112 0x0b60 [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
14:28:42.0133 0x0b60 MegaSR - ok
14:28:42.0158 0x0b60 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll
14:28:42.0162 0x0b60 MMCSS - ok
14:28:42.0180 0x0b60 [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys
14:28:42.0192 0x0b60 Modem - ok
14:28:42.0206 0x0b60 [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
14:28:42.0210 0x0b60 monitor - ok
14:28:42.0231 0x0b60 [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
14:28:42.0243 0x0b60 mouclass - ok
14:28:42.0261 0x0b60 [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
14:28:42.0271 0x0b60 mouhid - ok
14:28:42.0299 0x0b60 [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
14:28:42.0313 0x0b60 mountmgr - ok
14:28:42.0356 0x0b60 [ 4E9D8041D352A33332FD6F59A3A78B03, D4E6229B07EF9866993EEE4F6223DC7F1FF1108273FE14A3DC74E65C181DE56A ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:28:42.0376 0x0b60 MozillaMaintenance - ok
14:28:42.0401 0x0b60 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys
14:28:42.0421 0x0b60 mpio - ok
14:28:42.0445 0x0b60 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:28:42.0456 0x0b60 mpsdrv - ok
14:28:42.0495 0x0b60 [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll
14:28:42.0514 0x0b60 MpsSvc - ok
14:28:42.0565 0x0b60 [ 21F4B24ACFC79A483515BD986DD9043F, 22681907E02E0B723ABE2CEF0602D36C8EF862E7E2B62A9B40A5EF582E58D7BA ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:28:42.0581 0x0b60 MRxDAV - ok
14:28:42.0604 0x0b60 [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:28:42.0620 0x0b60 mrxsmb - ok
14:28:42.0641 0x0b60 [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:28:42.0664 0x0b60 mrxsmb10 - ok
14:28:42.0675 0x0b60 [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:28:42.0680 0x0b60 mrxsmb20 - ok
14:28:42.0700 0x0b60 [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys
14:28:42.0710 0x0b60 msahci - ok
14:28:42.0733 0x0b60 [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys
14:28:42.0749 0x0b60 msdsm - ok
14:28:42.0806 0x0b60 [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe
14:28:42.0826 0x0b60 MSDTC - ok
14:28:42.0846 0x0b60 [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:28:42.0858 0x0b60 Msfs - ok
14:28:42.0876 0x0b60 [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
14:28:42.0883 0x0b60 mshidkmdf - ok
14:28:42.0896 0x0b60 [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
14:28:42.0905 0x0b60 msisadrv - ok
14:28:42.0945 0x0b60 [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:28:42.0960 0x0b60 MSiSCSI - ok
14:28:42.0972 0x0b60 msiserver - ok
14:28:43.0004 0x0b60 [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:28:43.0010 0x0b60 MSKSSRV - ok
14:28:43.0034 0x0b60 [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:28:43.0041 0x0b60 MSPCLOCK - ok
14:28:43.0050 0x0b60 [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:28:43.0058 0x0b60 MSPQM - ok
14:28:43.0084 0x0b60 [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:28:43.0101 0x0b60 MsRPC - ok
14:28:43.0125 0x0b60 [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
14:28:43.0127 0x0b60 mssmbios - ok
14:28:43.0137 0x0b60 [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:28:43.0145 0x0b60 MSTEE - ok
14:28:43.0165 0x0b60 [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
14:28:43.0175 0x0b60 MTConfig - ok
14:28:43.0199 0x0b60 [ D48659BB24C48345D926ECB45C1EBDF5, EDEDE58316827530C25F8085F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
14:28:43.0207 0x0b60 MTsensor - ok
14:28:43.0223 0x0b60 [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys
14:28:43.0238 0x0b60 Mup - ok
14:28:43.0286 0x0b60 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll
14:28:43.0299 0x0b60 napagent - ok
14:28:43.0323 0x0b60 [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:28:43.0358 0x0b60 NativeWifiP - ok
14:28:43.0455 0x0b60 [ B498A14133BD09AD0817590ACE4470AD, 14CCC922C6596C97A5CF580209C4AFB6138A8FFD3A0E60CD506810DFCBC43A1A ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
14:28:43.0538 0x0b60 NBService - ok
14:28:43.0599 0x0b60 [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:28:43.0619 0x0b60 NDIS - ok
14:28:43.0638 0x0b60 [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
14:28:43.0647 0x0b60 NdisCap - ok
14:28:43.0667 0x0b60 [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:28:43.0684 0x0b60 NdisTapi - ok
14:28:43.0700 0x0b60 [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:28:43.0713 0x0b60 Ndisuio - ok
14:28:43.0731 0x0b60 [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:28:43.0748 0x0b60 NdisWan - ok
14:28:43.0758 0x0b60 [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:28:43.0773 0x0b60 NDProxy - ok
14:28:43.0786 0x0b60 [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:28:43.0795 0x0b60 NetBIOS - ok
14:28:43.0845 0x0b60 [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
14:28:43.0866 0x0b60 NetBT - ok
14:28:43.0882 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] Netlogon C:\Windows\system32\lsass.exe
14:28:43.0885 0x0b60 Netlogon - ok
14:28:43.0928 0x0b60 [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll
14:28:43.0943 0x0b60 Netman - ok
14:28:43.0977 0x0b60 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:28:43.0998 0x0b60 NetMsmqActivator - ok
14:28:44.0015 0x0b60 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:28:44.0020 0x0b60 NetPipeActivator - ok
14:28:44.0057 0x0b60 [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll
14:28:44.0069 0x0b60 netprofm - ok
14:28:44.0084 0x0b60 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:28:44.0089 0x0b60 NetTcpActivator - ok
14:28:44.0106 0x0b60 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:28:44.0111 0x0b60 NetTcpPortSharing - ok
14:28:44.0125 0x0b60 [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
14:28:44.0137 0x0b60 nfrd960 - ok
14:28:44.0181 0x0b60 [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc C:\Windows\System32\nlasvc.dll
14:28:44.0198 0x0b60 NlaSvc - ok
14:28:44.0273 0x0b60 [ A328A46D87BB92CE4D8A4528E9D84787, D3245ED700151111592BA82FB675B284DA7FCE52B07A7F68352F64A402CAB37C ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
14:28:44.0309 0x0b60 NMIndexingService - ok
14:28:44.0330 0x0b60 [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:28:44.0343 0x0b60 Npfs - ok
14:28:44.0359 0x0b60 [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll
14:28:44.0362 0x0b60 nsi - ok
14:28:44.0385 0x0b60 [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:28:44.0394 0x0b60 nsiproxy - ok
14:28:44.0465 0x0b60 [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:28:44.0498 0x0b60 Ntfs - ok
14:28:44.0530 0x0b60 [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys
14:28:44.0532 0x0b60 Null - ok
14:28:44.0575 0x0b60 [ B5E37E31C053BC9950455A257526514B, 16E2880621F3AA12BDADE71CD7682CA79E2A199D3C9E3E5927C49DCEF0F6183B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
14:28:44.0587 0x0b60 NVENETFD - ok
14:28:45.0054 0x0b60 [ 9A77B1C13BCCEDDF78DFD7AFC25B4F5E, 88FA632754A20025F03FE0970C93F572055919F53C8A50E5DB6CF1EF7B00B7FD ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:28:45.0560 0x0b60 nvlddmkm - ok
14:28:45.0652 0x0b60 [ 1DE923088878B495CD4219E47BA34EB8, 68B8FF593E2972DC239BB9A9E2436A513DBDD16FAC071117AFD45285AD004EC1 ] NVNET C:\Windows\system32\DRIVERS\nvmf6232.sys
14:28:45.0675 0x0b60 NVNET - ok
14:28:45.0703 0x0b60 [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys
14:28:45.0718 0x0b60 nvraid - ok
14:28:45.0762 0x0b60 [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
14:28:45.0767 0x0b60 nvstor - ok
14:28:45.0847 0x0b60 [ 31B8835B003CAA6D31BEAD83DDBF98E5, FB7C7BD1E95BEFB9A8FFEB3FB1B6D9BCD923E48498CB23169EDAA025C84CDD33 ] nvsvc C:\Windows\system32\nvvsvc.exe
14:28:45.0912 0x0b60 nvsvc - ok
14:28:46.0024 0x0b60 [ F935E817409F78FA50C5921DB39124B3, E1AB4B69E9C0AD89A5B9E99C7A0D77A1A50B4823C89E8687686B716957FBA2B3 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
14:28:46.0099 0x0b60 nvUpdatusService - ok
14:28:46.0126 0x0b60 [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
14:28:46.0154 0x0b60 nv_agp - ok
14:28:46.0186 0x0b60 [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
14:28:46.0206 0x0b60 ohci1394 - ok
14:28:46.0247 0x0b60 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
14:28:46.0258 0x0b60 p2pimsvc - ok
14:28:46.0292 0x0b60 [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll
14:28:46.0330 0x0b60 p2psvc - ok
14:28:46.0357 0x0b60 [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\DRIVERS\parport.sys
14:28:46.0370 0x0b60 Parport - ok
14:28:46.0398 0x0b60 [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr C:\Windows\system32\drivers\partmgr.sys
14:28:46.0412 0x0b60 partmgr - ok
14:28:46.0434 0x0b60 [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
14:28:46.0442 0x0b60 Parvdm - ok
14:28:46.0472 0x0b60 [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc C:\Windows\System32\pcasvc.dll
14:28:46.0493 0x0b60 PcaSvc - ok
14:28:46.0511 0x0b60 [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys
14:28:46.0530 0x0b60 pci - ok
14:28:46.0546 0x0b60 [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys
14:28:46.0555 0x0b60 pciide - ok
14:28:46.0571 0x0b60 [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
14:28:46.0595 0x0b60 pcmcia - ok
14:28:46.0605 0x0b60 [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys
14:28:46.0619 0x0b60 pcw - ok
14:28:46.0658 0x0b60 [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
14:28:46.0717 0x0b60 PEAUTH - ok
14:28:46.0821 0x0b60 [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll
14:28:46.0909 0x0b60 pla - ok
14:28:46.0953 0x0b60 [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
14:28:46.0966 0x0b60 PlugPlay - ok
14:28:46.0979 0x0b60 [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
14:28:46.0991 0x0b60 PNRPAutoReg - ok
14:28:47.0015 0x0b60 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
14:28:47.0025 0x0b60 PNRPsvc - ok
14:28:47.0065 0x0b60 [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
14:28:47.0077 0x0b60 PolicyAgent - ok
14:28:47.0110 0x0b60 [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll
14:28:47.0116 0x0b60 Power - ok
14:28:47.0139 0x0b60 [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
14:28:47.0152 0x0b60 PptpMiniport - ok
14:28:47.0175 0x0b60 [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\drivers\processr.sys
14:28:47.0187 0x0b60 Processor - ok
14:28:47.0227 0x0b60 [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc C:\Windows\system32\profsvc.dll
14:28:47.0234 0x0b60 ProfSvc - ok
14:28:47.0254 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:28:47.0259 0x0b60 ProtectedStorage - ok
14:28:47.0277 0x0b60 [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
14:28:47.0281 0x0b60 Psched - ok
14:28:47.0366 0x0b60 [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\drivers\ql2300.sys
14:28:47.0453 0x0b60 ql2300 - ok
14:28:47.0488 0x0b60 [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
14:28:47.0507 0x0b60 ql40xx - ok
14:28:47.0534 0x0b60 [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll
14:28:47.0558 0x0b60 QWAVE - ok
14:28:47.0576 0x0b60 [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
14:28:47.0589 0x0b60 QWAVEdrv - ok
14:28:47.0600 0x0b60 [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
14:28:47.0607 0x0b60 RasAcd - ok
14:28:47.0639 0x0b60 [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
14:28:47.0665 0x0b60 RasAgileVpn - ok
14:28:47.0743 0x0b60 [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll
14:28:47.0758 0x0b60 RasAuto - ok
14:28:47.0772 0x0b60 [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
14:28:47.0793 0x0b60 Rasl2tp - ok
14:28:47.0847 0x0b60 [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll
14:28:47.0886 0x0b60 RasMan - ok
14:28:47.0899 0x0b60 [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
14:28:47.0913 0x0b60 RasPppoe - ok
14:28:47.0924 0x0b60 [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
14:28:47.0937 0x0b60 RasSstp - ok
14:28:47.0971 0x0b60 [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
14:28:48.0005 0x0b60 rdbss - ok
14:28:48.0018 0x0b60 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
14:28:48.0026 0x0b60 rdpbus - ok
14:28:48.0047 0x0b60 [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
14:28:48.0056 0x0b60 RDPCDD - ok
14:28:48.0070 0x0b60 [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
14:28:48.0090 0x0b60 RDPENCDD - ok
14:28:48.0104 0x0b60 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
14:28:48.0115 0x0b60 RDPREFMP - ok
14:28:48.0155 0x0b60 [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:28:48.0162 0x0b60 RdpVideoMiniport - ok
14:28:48.0204 0x0b60 [ F031683E6D1FEA157ABB2FF260B51E61, 83B552819A5964152882C527E1421DBCEAACC74DEB897E3C4B53F52F1467FED3 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
14:28:48.0221 0x0b60 RDPWD - ok
14:28:48.0301 0x0b60 [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
14:28:48.0320 0x0b60 rdyboost - ok
14:28:48.0345 0x0b60 [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll
14:28:48.0360 0x0b60 RemoteAccess - ok
14:28:48.0388 0x0b60 [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:28:48.0394 0x0b60 RemoteRegistry - ok
14:28:48.0422 0x0b60 [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
14:28:48.0426 0x0b60 RpcEptMapper - ok
14:28:48.0456 0x0b60 [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe
14:28:48.0464 0x0b60 RpcLocator - ok
14:28:48.0497 0x0b60 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll
14:28:48.0511 0x0b60 RpcSs - ok
14:28:48.0581 0x0b60 [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
14:28:48.0594 0x0b60 rspndr - ok
14:28:48.0718 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] SamSs C:\Windows\system32\lsass.exe
14:28:48.0721 0x0b60 SamSs - ok
14:28:48.0755 0x0b60 [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
14:28:48.0809 0x0b60 sbp2port - ok
14:28:48.0899 0x0b60 [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll
14:28:48.0965 0x0b60 SCardSvr - ok
14:28:49.0005 0x0b60 [ 612A3D69E603DBBE5C3C1079186A0393, EDF1B18762DFF21B3029938472CEE95ACB0D24E7E79596267564A7EB7302F92D ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
14:28:49.0014 0x0b60 SCDEmu - ok
14:28:49.0031 0x0b60 [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
14:28:49.0041 0x0b60 scfilter - ok
14:28:49.0081 0x0b60 [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll
14:28:49.0104 0x0b60 Schedule - ok
14:28:49.0121 0x0b60 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll
14:28:49.0125 0x0b60 SCPolicySvc - ok
14:28:49.0161 0x0b60 [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll
14:28:49.0178 0x0b60 SDRSVC - ok
14:28:49.0197 0x0b60 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
14:28:49.0205 0x0b60 secdrv - ok
14:28:49.0220 0x0b60 [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll
14:28:49.0233 0x0b60 seclogon - ok
14:28:49.0255 0x0b60 [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\system32\sens.dll
14:28:49.0259 0x0b60 SENS - ok
14:28:49.0305 0x0b60 [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll
14:28:49.0317 0x0b60 SensrSvc - ok
14:28:49.0332 0x0b60 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
14:28:49.0341 0x0b60 Serenum - ok
14:28:49.0365 0x0b60 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\DRIVERS\serial.sys
14:28:49.0378 0x0b60 Serial - ok
14:28:49.0393 0x0b60 [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\drivers\sermouse.sys
14:28:49.0401 0x0b60 sermouse - ok
14:28:49.0440 0x0b60 [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll
14:28:49.0447 0x0b60 SessionEnv - ok
14:28:49.0461 0x0b60 [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
14:28:49.0469 0x0b60 sffdisk - ok
14:28:49.0478 0x0b60 [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
14:28:49.0486 0x0b60 sffp_mmc - ok
14:28:49.0495 0x0b60 [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
14:28:49.0504 0x0b60 sffp_sd - ok
14:28:49.0520 0x0b60 [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
14:28:49.0527 0x0b60 sfloppy - ok
14:28:49.0567 0x0b60 [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll
14:28:49.0663 0x0b60 SharedAccess - ok
14:28:49.0697 0x0b60 [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:28:49.0709 0x0b60 ShellHWDetection - ok
14:28:49.0729 0x0b60 [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys
14:28:49.0741 0x0b60 sisagp - ok
14:28:49.0759 0x0b60 [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
14:28:49.0773 0x0b60 SiSRaid2 - ok
14:28:49.0792 0x0b60 [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
14:28:49.0805 0x0b60 SiSRaid4 - ok
14:28:49.0861 0x0b60 [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
14:28:49.0940 0x0b60 SkypeUpdate - ok
14:28:49.0973 0x0b60 [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys
14:28:49.0986 0x0b60 Smb - ok
14:28:50.0009 0x0b60 [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
14:28:50.0019 0x0b60 SNMPTRAP - ok
14:28:50.0038 0x0b60 [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys
14:28:50.0048 0x0b60 spldr - ok
14:28:50.0097 0x0b60 [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler C:\Windows\System32\spoolsv.exe
14:28:50.0108 0x0b60 Spooler - ok
14:28:50.0255 0x0b60 [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe
14:28:50.0371 0x0b60 sppsvc - ok
14:28:50.0434 0x0b60 [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll
14:28:50.0448 0x0b60 sppuinotify - ok
14:28:50.0479 0x0b60 [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys
14:28:50.0507 0x0b60 srv - ok
14:28:50.0534 0x0b60 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
14:28:50.0560 0x0b60 srv2 - ok
14:28:50.0579 0x0b60 [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
14:28:50.0596 0x0b60 srvnet - ok
14:28:50.0654 0x0b60 [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
14:28:50.0661 0x0b60 SSDPSRV - ok
14:28:50.0685 0x0b60 [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
14:28:50.0694 0x0b60 ssmdrv - ok
14:28:50.0714 0x0b60 [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll
14:28:50.0729 0x0b60 SstpSvc - ok
14:28:50.0769 0x0b60 [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\drivers\stexstor.sys
14:28:50.0781 0x0b60 stexstor - ok
14:28:50.0818 0x0b60 [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll
14:28:50.0834 0x0b60 StiSvc - ok
14:28:50.0894 0x0b60 [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
14:28:50.0903 0x0b60 swenum - ok
14:28:50.0931 0x0b60 [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll
14:28:50.0968 0x0b60 swprv - ok
14:28:51.0030 0x0b60 [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll
14:28:51.0078 0x0b60 SysMain - ok
14:28:51.0109 0x0b60 [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
14:28:51.0124 0x0b60 TabletInputService - ok
14:28:51.0157 0x0b60 [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll
14:28:51.0167 0x0b60 TapiSrv - ok
14:28:51.0186 0x0b60 [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll
14:28:51.0190 0x0b60 TBS - ok
14:28:51.0277 0x0b60 [ CA59F7C570AF70BC174F477CFE2D9EE3, F09E4E14207A2AC6957D2C0AC8707D0E356A9087FA6DC703373242D8EEB026BD ] Tcpip C:\Windows\system32\drivers\tcpip.sys
14:28:51.0311 0x0b60 Tcpip - ok
14:28:51.0385 0x0b60 [ CA59F7C570AF70BC174F477CFE2D9EE3, F09E4E14207A2AC6957D2C0AC8707D0E356A9087FA6DC703373242D8EEB026BD ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
14:28:51.0419 0x0b60 TCPIP6 - ok
14:28:51.0446 0x0b60 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
14:28:51.0456 0x0b60 tcpipreg - ok
14:28:51.0481 0x0b60 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
14:28:51.0490 0x0b60 TDPIPE - ok
14:28:51.0530 0x0b60 [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
14:28:51.0538 0x0b60 TDTCP - ok
14:28:51.0565 0x0b60 [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
14:28:51.0568 0x0b60 tdx - ok
14:28:51.0579 0x0b60 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
14:28:51.0592 0x0b60 TermDD - ok
14:28:51.0685 0x0b60 [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService C:\Windows\System32\termsrv.dll
14:28:51.0701 0x0b60 TermService - ok
14:28:51.0717 0x0b60 [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll
14:28:51.0721 0x0b60 Themes - ok
14:28:51.0747 0x0b60 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll
14:28:51.0750 0x0b60 THREADORDER - ok
14:28:51.0772 0x0b60 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll
14:28:51.0778 0x0b60 TrkWks - ok
14:28:51.0838 0x0b60 [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:28:51.0845 0x0b60 TrustedInstaller - ok
14:28:51.0874 0x0b60 [ B37B08F2E5EEB1A37E448E09BACE1101, 32CC9E06B88BAB6FAB4696B744548DFCE9199A7FD2BA8B019F269CA75895852C ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
14:28:51.0884 0x0b60 tssecsrv - ok
14:28:51.0921 0x0b60 [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
14:28:51.0932 0x0b60 TsUsbFlt - ok
14:28:51.0950 0x0b60 [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
14:28:51.0959 0x0b60 TsUsbGD - ok
14:28:51.0996 0x0b60 [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
14:28:52.0011 0x0b60 tunnel - ok
14:28:52.0039 0x0b60 [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
14:28:52.0053 0x0b60 uagp35 - ok
14:28:52.0082 0x0b60 [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
14:28:52.0103 0x0b60 udfs - ok
14:28:52.0146 0x0b60 [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe
14:28:52.0159 0x0b60 UI0Detect - ok
14:28:52.0179 0x0b60 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
14:28:52.0191 0x0b60 uliagpkx - ok
14:28:52.0206 0x0b60 [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
14:28:52.0219 0x0b60 umbus - ok
14:28:52.0227 0x0b60 [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\drivers\umpass.sys
14:28:52.0238 0x0b60 UmPass - ok
14:28:52.0276 0x0b60 [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll
14:28:52.0286 0x0b60 upnphost - ok
14:28:52.0317 0x0b60 [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
14:28:52.0330 0x0b60 usbccgp - ok
14:28:52.0348 0x0b60 [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir C:\Windows\system32\drivers\usbcir.sys
14:28:52.0365 0x0b60 usbcir - ok
14:28:52.0389 0x0b60 [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
14:28:52.0400 0x0b60 usbehci - ok
14:28:52.0417 0x0b60 [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
14:28:52.0441 0x0b60 usbhub - ok
14:28:52.0458 0x0b60 [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
14:28:52.0467 0x0b60 usbohci - ok
14:28:52.0491 0x0b60 [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\drivers\usbprint.sys
14:28:52.0499 0x0b60 usbprint - ok
14:28:52.0519 0x0b60 [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:28:52.0532 0x0b60 USBSTOR - ok
14:28:52.0544 0x0b60 [ 78780C3EBCE17405B1CCD07A3A8A7D72, FBFF3111E22EE0B4BCAFA81F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
14:28:52.0552 0x0b60 usbuhci - ok
14:28:52.0575 0x0b60 [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll
14:28:52.0579 0x0b60 UxSms - ok
14:28:52.0594 0x0b60 [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] VaultSvc C:\Windows\system32\lsass.exe
14:28:52.0597 0x0b60 VaultSvc - ok
14:28:52.0617 0x0b60 [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
14:28:52.0628 0x0b60 vdrvroot - ok
14:28:52.0661 0x0b60 [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe
14:28:52.0695 0x0b60 vds - ok
14:28:52.0705 0x0b60 [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
14:28:52.0715 0x0b60 vga - ok
14:28:52.0750 0x0b60 [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys
14:28:52.0758 0x0b60 VgaSave - ok
14:28:52.0781 0x0b60 [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
14:28:52.0801 0x0b60 vhdmp - ok
14:28:52.0821 0x0b60 [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys
14:28:52.0833 0x0b60 viaagp - ok
14:28:52.0854 0x0b60 [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
14:28:52.0866 0x0b60 ViaC7 - ok
14:28:52.0890 0x0b60 [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys
14:28:52.0900 0x0b60 viaide - ok
14:28:52.0912 0x0b60 [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys
14:28:52.0924 0x0b60 volmgr - ok
14:28:52.0944 0x0b60 [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
14:28:52.0970 0x0b60 volmgrx - ok
14:28:52.0996 0x0b60 [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys
14:28:53.0021 0x0b60 volsnap - ok
14:28:53.0035 0x0b60 [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
14:28:53.0040 0x0b60 vsmraid - ok
14:28:53.0097 0x0b60 [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe
14:28:53.0167 0x0b60 VSS - ok
14:28:53.0188 0x0b60 [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
14:28:53.0197 0x0b60 vwifibus - ok
14:28:53.0220 0x0b60 [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll
14:28:53.0231 0x0b60 W32Time - ok
14:28:53.0245 0x0b60 [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
14:28:53.0256 0x0b60 WacomPen - ok
14:28:53.0266 0x0b60 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
14:28:53.0279 0x0b60 WANARP - ok
14:28:53.0290 0x0b60 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
14:28:53.0293 0x0b60 Wanarpv6 - ok
14:28:53.0398 0x0b60 [ 353A04C273EC58475D8633E75CCD5604, FFAE53B6B53AEFC9E8A10BF27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
14:28:53.0506 0x0b60 WatAdminSvc - ok
14:28:53.0571 0x0b60 [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe
14:28:53.0642 0x0b60 wbengine - ok
14:28:53.0686 0x0b60 [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
14:28:53.0704 0x0b60 WbioSrvc - ok
14:28:53.0741 0x0b60 [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll
14:28:53.0778 0x0b60 wcncsvc - ok
14:28:53.0810 0x0b60 [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:28:53.0822 0x0b60 WcsPlugInService - ok
14:28:53.0838 0x0b60 [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\drivers\wd.sys
14:28:53.0848 0x0b60 Wd - ok
14:28:53.0902 0x0b60 [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
14:28:53.0950 0x0b60 Wdf01000 - ok
14:28:53.0996 0x0b60 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:28:54.0001 0x0b60 WdiServiceHost - ok
14:28:54.0009 0x0b60 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\Windows\system32\wdi.dll
14:28:54.0014 0x0b60 WdiSystemHost - ok
14:28:54.0052 0x0b60 [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient C:\Windows\System32\webclnt.dll
14:28:54.0073 0x0b60 WebClient - ok
14:28:54.0097 0x0b60 [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll
14:28:54.0115 0x0b60 Wecsvc - ok
14:28:54.0130 0x0b60 [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll
14:28:54.0135 0x0b60 wercplsupport - ok
14:28:54.0153 0x0b60 [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll
14:28:54.0158 0x0b60 WerSvc - ok
14:28:54.0173 0x0b60 [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
14:28:54.0181 0x0b60 WfpLwf - ok
14:28:54.0193 0x0b60 [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys
14:28:54.0205 0x0b60 WIMMount - ok
14:28:54.0274 0x0b60 [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
14:28:54.0327 0x0b60 WinDefend - ok
14:28:54.0345 0x0b60 WinHttpAutoProxySvc - ok
14:28:54.0397 0x0b60 [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
14:28:54.0404 0x0b60 Winmgmt - ok
14:28:54.0461 0x0b60 [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM C:\Windows\system32\WsmSvc.dll
14:28:54.0511 0x0b60 WinRM - ok
14:28:54.0584 0x0b60 [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll
14:28:54.0643 0x0b60 Wlansvc - ok
14:28:54.0779 0x0b60 [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:28:54.0855 0x0b60 wlidsvc - ok
14:28:54.0885 0x0b60 [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
14:28:54.0892 0x0b60 WmiAcpi - ok
14:28:54.0921 0x0b60 [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:28:54.0938 0x0b60 wmiApSrv - ok
14:28:55.0015 0x0b60 [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
14:28:55.0089 0x0b60 WMPNetworkSvc - ok
14:28:55.0112 0x0b60 [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:28:55.0123 0x0b60 WPCSvc - ok
14:28:55.0144 0x0b60 [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:28:55.0150 0x0b60 WPDBusEnum - ok
14:28:55.0179 0x0b60 [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:28:55.0186 0x0b60 ws2ifsl - ok
14:28:55.0203 0x0b60 [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\system32\wscsvc.dll
14:28:55.0209 0x0b60 wscsvc - ok
14:28:55.0217 0x0b60 WSearch - ok
14:28:55.0327 0x0b60 [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D148979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv C:\Windows\system32\wuaueng.dll
14:28:55.0411 0x0b60 wuauserv - ok
14:28:55.0453 0x0b60 [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:28:55.0464 0x0b60 WudfPf - ok
14:28:55.0497 0x0b60 [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
14:28:55.0512 0x0b60 WUDFRd - ok
14:28:55.0535 0x0b60 [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:28:55.0541 0x0b60 wudfsvc - ok
14:28:55.0590 0x0b60 [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc C:\Windows\System32\wwansvc.dll
14:28:55.0611 0x0b60 WwanSvc - ok
14:28:55.0675 0x0b60 ================ Scan global ===============================
14:28:55.0749 0x0b60 [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
14:28:55.0783 0x0b60 [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
14:28:55.0801 0x0b60 [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
14:28:55.0834 0x0b60 [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
14:28:55.0868 0x0b60 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
14:28:55.0877 0x0b60 [ Global ] - ok
14:28:55.0878 0x0b60 ================ Scan MBR ==================================
14:28:55.0883 0x0b60 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
14:28:55.0892 0x0b60 \Device\Harddisk1\DR1 - ok
14:28:55.0912 0x0b60 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:28:56.0495 0x0b60 \Device\Harddisk0\DR0 - ok
14:28:56.0776 0x0b60 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk2\DR2
14:28:57.0283 0x0b60 \Device\Harddisk2\DR2 - ok
14:28:57.0292 0x0b60 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk3\DR3
14:28:57.0301 0x0b60 \Device\Harddisk3\DR3 - ok
14:28:57.0878 0x0b60 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk4\DR4
14:28:58.0297 0x0b60 \Device\Harddisk4\DR4 - ok
14:28:58.0305 0x0b60 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk5\DR5
14:28:58.0312 0x0b60 \Device\Harddisk5\DR5 - ok
14:28:58.0313 0x0b60 ================ Scan VBR ==================================
14:28:58.0318 0x0b60 [ FF26F15CEB51C70D81B9F959A199A270 ] \Device\Harddisk1\DR1\Partition1
14:28:58.0320 0x0b60 \Device\Harddisk1\DR1\Partition1 - ok
14:28:58.0339 0x0b60 [ 1B28245271DBA1BA9C33D3A7BD0E5952 ] \Device\Harddisk0\DR0\Partition1
14:28:58.0341 0x0b60 \Device\Harddisk0\DR0\Partition1 - ok
14:28:58.0346 0x0b60 [ FDBFA6960E893CCE4F766E3C4DDD49B4 ] \Device\Harddisk0\DR0\Partition2
14:28:58.0349 0x0b60 \Device\Harddisk0\DR0\Partition2 - ok
14:28:58.0357 0x0b60 [ 9D3F577D9A7B55A4BD930EFAC37285F0 ] \Device\Harddisk2\DR2\Partition1
14:28:58.0387 0x0b60 \Device\Harddisk2\DR2\Partition1 - ok
14:28:58.0392 0x0b60 [ 551890D3CD7FE2166E325A222D9DF100 ] \Device\Harddisk3\DR3\Partition1
14:28:58.0399 0x0b60 \Device\Harddisk3\DR3\Partition1 - ok
14:28:58.0405 0x0b60 [ D4A877D365A6BFE46CEB6D81DB4600B3 ] \Device\Harddisk4\DR4\Partition1
14:28:58.0425 0x0b60 \Device\Harddisk4\DR4\Partition1 - ok
14:28:58.0432 0x0b60 [ 1D8C0576A5DF011DBE4BF9D524C1CC35 ] \Device\Harddisk5\DR5\Partition1
14:28:58.0434 0x0b60 \Device\Harddisk5\DR5\Partition1 - ok
14:28:58.0435 0x0b60 ================ Scan generic autorun ======================
14:28:58.0502 0x0b60 [ 2AA5DD75EA1281432C40D22B5FD87D3A, 9868D4176C8F08EB72B0B992D3E2A480C587930CA025B4FDF3212F99B79C3017 ] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
14:28:58.0521 0x0b60 avgnt - ok
14:28:58.0559 0x0b60 [ 22DA0DDAF1BF9E0FB5C705319024429B, EC2C086FF784B06E4FF05243164DDB768B81EE32096AFED6D5E574FF350B619E ] C:\Program Files\uTorrent\uTorrent.exe
14:28:58.0569 0x0b60 uTorrent - ok
14:28:58.0728 0x0b60 [ 8B574E954166B812D30F44ECAAC1E99C, 912C29E48AAC75457E6ADDFF4DF160CB787A83A115BFE5CEE2D5F63D04FE567B ] C:\Program Files\Internet Download Manager\IDMan.exe
14:28:58.0871 0x0b60 IDMan - ok
14:28:58.0961 0x0b60 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:28:59.0002 0x0b60 Sidebar - ok
14:28:59.0038 0x0b60 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:28:59.0055 0x0b60 mctadmin - ok
14:28:59.0057 0x0b60 Waiting for KSN requests completion. In queue: 244
14:29:00.0057 0x0b60 Waiting for KSN requests completion. In queue: 244
14:29:01.0057 0x0b60 Waiting for KSN requests completion. In queue: 5
14:29:02.0384 0x0b60 AV detected via SS2: Avira Desktop, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 14.0.6.548 ), 0x40000 ( disabled : updated )

A tu 2. časť malo to veľa znakov.

14:29:02.0451 0x0b60 Win FW state via NFP2: enabled
14:29:05.0092 0x0b60 ============================================================
14:29:05.0092 0x0b60 Scan finished
14:29:05.0092 0x0b60 ============================================================
14:29:05.0111 0x08a0 Detected object count: 0
14:29:05.0111 0x08a0 Actual detected object count: 0
14:35:21.0534 0x04ac ============================================================
14:35:21.0534 0x04ac Scan started
14:35:21.0534 0x04ac Mode: Manual;
14:35:21.0534 0x04ac ============================================================
14:35:21.0534 0x04ac KSN ping started
14:35:35.0189 0x04ac KSN ping finished: true
14:35:36.0672 0x04ac ================ Scan system memory ========================
14:35:36.0672 0x04ac System memory - ok
14:35:36.0672 0x04ac ================ Scan services =============================
14:35:36.0819 0x04ac [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
14:35:36.0824 0x04ac 1394ohci - ok
14:35:36.0853 0x04ac [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys
14:35:36.0861 0x04ac ACPI - ok
14:35:36.0882 0x04ac [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
14:35:36.0883 0x04ac AcpiPmi - ok
14:35:36.0933 0x04ac [ A6B6AB9502B63F43A9A56AE6AFB22078, DD1F0BA3D8F3333F52A71EAE3719A001F6EF844D647FFABF0E4C56C6C764ACA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:35:36.0940 0x04ac AdobeFlashPlayerUpdateSvc - ok
14:35:36.0979 0x04ac [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
14:35:36.0991 0x04ac adp94xx - ok
14:35:37.0040 0x04ac [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\drivers\adpahci.sys
14:35:37.0048 0x04ac adpahci - ok
14:35:37.0078 0x04ac [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\drivers\adpu320.sys
14:35:37.0083 0x04ac adpu320 - ok
14:35:37.0123 0x04ac [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:35:37.0126 0x04ac AeLookupSvc - ok
14:35:37.0171 0x04ac [ F81BB7E487EDCEAB630A7EE66CF23913, 7D1638FD7E388EF670FA0A421762E0413351058A20DDF0F9988A383F05395A68 ] AFD C:\Windows\system32\drivers\afd.sys
14:35:37.0181 0x04ac AFD - ok
14:35:37.0196 0x04ac [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys
14:35:37.0198 0x04ac agp440 - ok
14:35:37.0226 0x04ac [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\drivers\djsvs.sys
14:35:37.0228 0x04ac aic78xx - ok
14:35:37.0252 0x04ac [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe
14:35:37.0255 0x04ac ALG - ok
14:35:37.0287 0x04ac [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys
14:35:37.0288 0x04ac aliide - ok
14:35:37.0314 0x04ac [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
14:35:37.0316 0x04ac amdagp - ok
14:35:37.0330 0x04ac [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide C:\Windows\system32\drivers\amdide.sys
14:35:37.0332 0x04ac amdide - ok
14:35:37.0351 0x04ac [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
14:35:37.0353 0x04ac AmdK8 - ok
14:35:37.0369 0x04ac [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
14:35:37.0371 0x04ac AmdPPM - ok
14:35:37.0403 0x04ac [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys
14:35:37.0405 0x04ac amdsata - ok
14:35:37.0429 0x04ac [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
14:35:37.0434 0x04ac amdsbs - ok
14:35:37.0448 0x04ac [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
14:35:37.0449 0x04ac amdxata - ok
14:35:37.0543 0x04ac [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
14:35:37.0556 0x04ac AntiVirSchedulerService - ok
14:35:37.0601 0x04ac [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
14:35:37.0613 0x04ac AntiVirService - ok
14:35:37.0676 0x04ac [ CA9E51B4456B64A92FE60A592EE7DE61, 358B95623C8577A158D789FB03910ECB86EE746031C78EC97A6A8EE9A5B0086B ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
14:35:37.0703 0x04ac AntiVirWebService - ok
14:35:37.0727 0x04ac [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID C:\Windows\system32\drivers\appid.sys
14:35:37.0729 0x04ac AppID - ok
14:35:37.0760 0x04ac [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc C:\Windows\System32\appidsvc.dll
14:35:37.0762 0x04ac AppIDSvc - ok
14:35:37.0791 0x04ac [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo C:\Windows\System32\appinfo.dll
14:35:37.0793 0x04ac Appinfo - ok
14:35:37.0835 0x04ac [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\drivers\arc.sys
14:35:37.0837 0x04ac arc - ok
14:35:37.0849 0x04ac [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\drivers\arcsas.sys
14:35:37.0852 0x04ac arcsas - ok
14:35:37.0933 0x04ac [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:35:37.0934 0x04ac aspnet_state - ok
14:35:37.0958 0x04ac [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:35:37.0959 0x04ac AsyncMac - ok
14:35:37.0988 0x04ac [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys
14:35:37.0989 0x04ac atapi - ok
14:35:38.0023 0x04ac [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:35:38.0037 0x04ac AudioEndpointBuilder - ok
14:35:38.0072 0x04ac [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:35:38.0086 0x04ac Audiosrv - ok
14:35:38.0104 0x04ac [ B0A63DD71CB0CB597D8BD5C364E73F7C, 572B31F3FC962F50110D42A08CDD0614323E18C213575710CEEFA35EE7CAE8C5 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
14:35:38.0107 0x04ac avgntflt - ok
14:35:38.0131 0x04ac [ 05AF7CBF0BDA1571BBADC36703EB9CA4, 3925AD58053769D317D3CF0DDDF7371B010F2F4C839CF7B44F327AE9D0AB5442 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
14:35:38.0135 0x04ac avipbb - ok
14:35:38.0154 0x04ac [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
14:35:38.0156 0x04ac avkmgr - ok
14:35:38.0179 0x04ac [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll
14:35:38.0183 0x04ac AxInstSV - ok
14:35:38.0212 0x04ac [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\drivers\bxvbdx.sys
14:35:38.0226 0x04ac b06bdrv - ok
14:35:38.0254 0x04ac [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
14:35:38.0261 0x04ac b57nd60x - ok
14:35:38.0288 0x04ac [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll
14:35:38.0291 0x04ac BDESVC - ok
14:35:38.0308 0x04ac [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys
14:35:38.0310 0x04ac Beep - ok
14:35:38.0345 0x04ac [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll
14:35:38.0360 0x04ac BFE - ok
14:35:38.0395 0x04ac [ 27FDD13BEC08CEEAC4BE6B900A6C39CE, D2ED8A81284063F8C634BD84C941C42B29D494A44A4A3E0FBACE2BF9C24EAC54 ] bgsvcgen C:\Windows\system32\bgsvcgen.exe
14:35:38.0400 0x04ac bgsvcgen - ok
14:35:38.0453 0x04ac [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\system32\qmgr.dll
14:35:38.0471 0x04ac BITS - ok
14:35:38.0482 0x04ac [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
14:35:38.0484 0x04ac blbdrive - ok
14:35:38.0523 0x04ac [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:35:38.0525 0x04ac bowser - ok
14:35:38.0540 0x04ac [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
14:35:38.0542 0x04ac BrFiltLo - ok
14:35:38.0560 0x04ac [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
14:35:38.0561 0x04ac BrFiltUp - ok
14:35:38.0596 0x04ac [ 77361D72A04F18809D0EFB6CCEB74D4B, 55E7DB65BB29FF421F138CDFF05E5ECFFC7C8862FAA68F6179A3BA9D6B69AE64 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
14:35:38.0599 0x04ac BridgeMP - ok
14:35:38.0633 0x04ac [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser C:\Windows\System32\browser.dll
14:35:38.0637 0x04ac Browser - ok
14:35:38.0665 0x04ac [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys
14:35:38.0673 0x04ac Brserid - ok
14:35:38.0697 0x04ac [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
14:35:38.0699 0x04ac BrSerWdm - ok
14:35:38.0721 0x04ac [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
14:35:38.0722 0x04ac BrUsbMdm - ok
14:35:38.0731 0x04ac [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
14:35:38.0732 0x04ac BrUsbSer - ok
14:35:38.0752 0x04ac [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
14:35:38.0754 0x04ac BTHMODEM - ok
14:35:38.0795 0x04ac [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll
14:35:38.0798 0x04ac bthserv - ok
14:35:38.0896 0x04ac catchme - ok
14:35:38.0923 0x04ac [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:35:38.0926 0x04ac cdfs - ok
14:35:38.0957 0x04ac [ 9008AD94F28360A2F1409592BFC7ACF7, 594AA106352079659838147BDB05AF043A413C75BC2B13DEB47B95195092B071 ] cdrbsdrv C:\Windows\system32\drivers\cdrbsdrv.sys
14:35:38.0959 0x04ac cdrbsdrv - ok
14:35:38.0973 0x04ac [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
14:35:38.0977 0x04ac cdrom - ok
14:35:39.0000 0x04ac [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll
14:35:39.0003 0x04ac CertPropSvc - ok
14:35:39.0031 0x04ac [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\drivers\circlass.sys
14:35:39.0033 0x04ac circlass - ok
14:35:39.0057 0x04ac [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS C:\Windows\system32\CLFS.sys
14:35:39.0067 0x04ac CLFS - ok
14:35:39.0117 0x04ac [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:35:39.0120 0x04ac clr_optimization_v2.0.50727_32 - ok
14:35:39.0160 0x04ac [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:35:39.0164 0x04ac clr_optimization_v4.0.30319_32 - ok
14:35:39.0177 0x04ac [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
14:35:39.0178 0x04ac CmBatt - ok
14:35:39.0197 0x04ac [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys
14:35:39.0198 0x04ac cmdide - ok
14:35:39.0241 0x04ac [ 85449EEBE8F8EBD6481EFBF0F352B4EB, E6FF04970C5A5BFDE7297A86C1C7B9BFE2E0F976A1A1AFB874CEB488DC6151CC ] CNG C:\Windows\system32\Drivers\cng.sys
14:35:39.0252 0x04ac CNG - ok
14:35:39.0265 0x04ac [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\drivers\compbatt.sys
14:35:39.0266 0x04ac Compbatt - ok
14:35:39.0281 0x04ac [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
14:35:39.0283 0x04ac CompositeBus - ok
14:35:39.0291 0x04ac COMSysApp - ok
14:35:39.0304 0x04ac [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
14:35:39.0305 0x04ac crcdisk - ok
14:35:39.0361 0x04ac [ 2C53AB51F07EF7B58D32C36D8F2F8C16, BC5284C83CD6FAAF26794EBD2E861B5B1239BE319F3FC1C7393B53D3846CA2B3 ] CronService C:\Prey\platform\windows\cronsvc.exe
14:35:39.0362 0x04ac CronService - ok
14:35:39.0396 0x04ac [ 7CA1BECEA5DE2643ADDAD32670E7A4C9, E3AB4CC52A97E3855D7EAB87363F807FDD2162ED8C76A036CD71549ED64E7797 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:35:39.0401 0x04ac CryptSvc - ok
14:35:39.0455 0x04ac [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll
14:35:39.0468 0x04ac DcomLaunch - ok
14:35:39.0511 0x04ac [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll
14:35:39.0519 0x04ac defragsvc - ok
14:35:39.0530 0x04ac [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
14:35:39.0533 0x04ac DfsC - ok
14:35:39.0558 0x04ac [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll
14:35:39.0566 0x04ac Dhcp - ok
14:35:39.0593 0x04ac [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys
14:35:39.0595 0x04ac discache - ok
14:35:39.0606 0x04ac [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\drivers\disk.sys
14:35:39.0608 0x04ac Disk - ok
14:35:39.0631 0x04ac [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:35:39.0636 0x04ac Dnscache - ok
14:35:39.0656 0x04ac [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll
14:35:39.0664 0x04ac dot3svc - ok
14:35:39.0679 0x04ac [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll
14:35:39.0685 0x04ac DPS - ok
14:35:39.0709 0x04ac [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:35:39.0709 0x04ac drmkaud - ok
14:35:39.0777 0x04ac [ 71BC35067CABC02C9453AEAA42B2E43E, 713B19F2C08EA5E4C087F7A74A8856932CF33E19D63384823DD4E02ED8798619 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:35:39.0797 0x04ac DXGKrnl - ok
14:35:39.0817 0x04ac [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll
14:35:39.0822 0x04ac EapHost - ok
14:35:39.0965 0x04ac [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\drivers\evbdx.sys
14:35:40.0046 0x04ac ebdrv - ok
14:35:40.0170 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] EFS C:\Windows\System32\lsass.exe
14:35:40.0172 0x04ac EFS - ok
14:35:40.0228 0x04ac [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
14:35:40.0244 0x04ac ehRecvr - ok
14:35:40.0269 0x04ac [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe
14:35:40.0272 0x04ac ehSched - ok
14:35:40.0312 0x04ac [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
14:35:40.0325 0x04ac elxstor - ok
14:35:40.0338 0x04ac [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys
14:35:40.0340 0x04ac ErrDev - ok
14:35:40.0384 0x04ac [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll
14:35:40.0393 0x04ac EventSystem - ok
14:35:40.0425 0x04ac [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys
14:35:40.0430 0x04ac exfat - ok
14:35:40.0455 0x04ac [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:35:40.0459 0x04ac fastfat - ok
14:35:40.0497 0x04ac [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe
14:35:40.0512 0x04ac Fax - ok
14:35:40.0534 0x04ac [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
14:35:40.0535 0x04ac fdc - ok
14:35:40.0554 0x04ac [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll
14:35:40.0556 0x04ac fdPHost - ok
14:35:40.0579 0x04ac [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll
14:35:40.0581 0x04ac FDResPub - ok
14:35:40.0607 0x04ac [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:35:40.0610 0x04ac FileInfo - ok
14:35:40.0629 0x04ac [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:35:40.0631 0x04ac Filetrace - ok
14:35:40.0642 0x04ac [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
14:35:40.0644 0x04ac flpydisk - ok
14:35:40.0673 0x04ac [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:35:40.0679 0x04ac FltMgr - ok
14:35:40.0749 0x04ac [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache C:\Windows\system32\FntCache.dll
14:35:40.0775 0x04ac FontCache - ok
14:35:40.0836 0x04ac [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:35:40.0839 0x04ac FontCache3.0.0.0 - ok
14:35:40.0861 0x04ac [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
14:35:40.0863 0x04ac FsDepends - ok
14:35:40.0891 0x04ac [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:35:40.0892 0x04ac Fs_Rec - ok
14:35:40.0919 0x04ac [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
14:35:40.0925 0x04ac fvevol - ok
14:35:40.0951 0x04ac [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
14:35:40.0953 0x04ac gagp30kx - ok
14:35:41.0005 0x04ac [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll
14:35:41.0022 0x04ac gpsvc - ok
14:35:41.0069 0x04ac [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:35:41.0073 0x04ac gupdate - ok
14:35:41.0082 0x04ac [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:35:41.0088 0x04ac gupdatem - ok
14:35:41.0102 0x04ac [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
14:35:41.0103 0x04ac hcw85cir - ok
14:35:41.0150 0x04ac [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:35:41.0159 0x04ac HdAudAddService - ok
14:35:41.0187 0x04ac [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
14:35:41.0191 0x04ac HDAudBus - ok
14:35:41.0203 0x04ac [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
14:35:41.0204 0x04ac HidBatt - ok
14:35:41.0229 0x04ac [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\drivers\hidbth.sys
14:35:41.0232 0x04ac HidBth - ok
14:35:41.0245 0x04ac [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\drivers\hidir.sys
14:35:41.0247 0x04ac HidIr - ok
14:35:41.0263 0x04ac [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\System32\hidserv.dll
14:35:41.0266 0x04ac hidserv - ok
14:35:41.0297 0x04ac [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
14:35:41.0299 0x04ac HidUsb - ok
14:35:41.0315 0x04ac [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll
14:35:41.0318 0x04ac hkmsvc - ok
14:35:41.0338 0x04ac [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:35:41.0348 0x04ac HomeGroupListener - ok
14:35:41.0381 0x04ac [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:35:41.0388 0x04ac HomeGroupProvider - ok
14:35:41.0400 0x04ac [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
14:35:41.0403 0x04ac HpSAMD - ok
14:35:41.0443 0x04ac [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:35:41.0457 0x04ac HTTP - ok
14:35:41.0473 0x04ac [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
14:35:41.0475 0x04ac hwpolicy - ok
14:35:41.0493 0x04ac [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
14:35:41.0496 0x04ac i8042prt - ok
14:35:41.0535 0x04ac [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
14:35:41.0544 0x04ac iaStorV - ok
14:35:41.0573 0x04ac [ FCDB2AEC95F2FEBE2DA5A0EF00BC2092, 025FA2620616ABD6B3FAD19E56DBB48D0406135F048274E9A1EFE756AB838BB4 ] IDMWFP C:\Windows\system32\DRIVERS\idmwfp.sys
14:35:41.0576 0x04ac IDMWFP - ok
14:35:41.0643 0x04ac [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:35:41.0667 0x04ac idsvc - ok
14:35:41.0678 0x04ac IEEtwCollectorService - ok
14:35:41.0705 0x04ac [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\drivers\iirsp.sys
14:35:41.0707 0x04ac iirsp - ok
14:35:41.0759 0x04ac [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT C:\Windows\System32\ikeext.dll
14:35:41.0781 0x04ac IKEEXT - ok
14:35:41.0883 0x04ac [ 8D7EB1FD498FD0A34C95A298685EC1C7, D9A8F2049DF6257328BF5E6F868576DD85A586D4AC84037BF28C962850455076 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:35:41.0930 0x04ac IntcAzAudAddService - ok
14:35:41.0971 0x04ac [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys
14:35:41.0972 0x04ac intelide - ok
14:35:41.0997 0x04ac [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\drivers\intelppm.sys
14:35:42.0000 0x04ac intelppm - ok
14:35:42.0035 0x04ac [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
14:35:42.0038 0x04ac IPBusEnum - ok
14:35:42.0056 0x04ac [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:35:42.0059 0x04ac IpFilterDriver - ok
14:35:42.0111 0x04ac [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:35:42.0127 0x04ac iphlpsvc - ok
14:35:42.0148 0x04ac [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
14:35:42.0150 0x04ac IPMIDRV - ok
14:35:42.0174 0x04ac [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
14:35:42.0177 0x04ac IPNAT - ok
14:35:42.0197 0x04ac [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:35:42.0199 0x04ac IRENUM - ok
14:35:42.0209 0x04ac [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys
14:35:42.0211 0x04ac isapnp - ok
14:35:42.0243 0x04ac [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
14:35:42.0249 0x04ac iScsiPrt - ok
14:35:42.0272 0x04ac [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
14:35:42.0274 0x04ac kbdclass - ok
14:35:42.0290 0x04ac [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
14:35:42.0291 0x04ac kbdhid - ok
14:35:42.0306 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] KeyIso C:\Windows\system32\lsass.exe
14:35:42.0308 0x04ac KeyIso - ok
14:35:42.0344 0x04ac [ 4120DA10AA42A9996F4575DB9E3E6E6E, 1C6E790772EA327ACB885D731A030408160534997DD56FEE4D6CEE6929873BB8 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:35:42.0346 0x04ac KSecDD - ok
14:35:42.0359 0x04ac [ D3964885F0A11ACF51DA3AAA776973B2, 417ED5A3201FC50FBC0D646F8F2114A1E8A91E7919A62508DCBC156C0BFB2FBA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
14:35:42.0364 0x04ac KSecPkg - ok
14:35:42.0413 0x04ac [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll
14:35:42.0423 0x04ac KtmRm - ok
14:35:42.0453 0x04ac [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\System32\srvsvc.dll
14:35:42.0460 0x04ac LanmanServer - ok
14:35:42.0501 0x04ac [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:35:42.0507 0x04ac LanmanWorkstation - ok
14:35:42.0526 0x04ac [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:35:42.0528 0x04ac lltdio - ok
14:35:42.0577 0x04ac [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:35:42.0584 0x04ac lltdsvc - ok
14:35:42.0610 0x04ac [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll
14:35:42.0613 0x04ac lmhosts - ok
14:35:42.0639 0x04ac [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
14:35:42.0642 0x04ac LSI_FC - ok
14:35:42.0664 0x04ac [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
14:35:42.0667 0x04ac LSI_SAS - ok
14:35:42.0684 0x04ac [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
14:35:42.0686 0x04ac LSI_SAS2 - ok
14:35:42.0702 0x04ac [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
14:35:42.0705 0x04ac LSI_SCSI - ok
14:35:42.0716 0x04ac [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys
14:35:42.0719 0x04ac luafv - ok
14:35:42.0748 0x04ac [ 8683C1B450F4B3872839308D836E0F92, C6CEEEA780D2191AEAC2537FD96324FF5501D92CE46313FB95ABB51765D919ED ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
14:35:42.0749 0x04ac MBAMProtector - ok
14:35:42.0876 0x04ac [ D84AEA3F3329D622DFC1297DDDF6163B, 316FE56CC30ED1473A917253F46B79EAA12F4ABD5B4B1ADB03929DFEE940F577 ] MBAMScheduler C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
14:35:42.0923 0x04ac MBAMScheduler - ok
14:35:42.0989 0x04ac [ 4F45ED469906494F9BF754E476390DBD, D8FF6AFD73D8C191F5732DF9737E6F83B2B52B06A3A6CD4CC6EAC9464CBB2772 ] MBAMService C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
14:35:43.0012 0x04ac MBAMService - ok
14:35:43.0044 0x04ac [ 12E71DA845D76665B56753AD149E32B3, 0E403710CCBACD5AB85FD4C32AAB6CB2C27BC1F043E8008EE49EE96ECA944146 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
14:35:43.0060 0x04ac MBAMSwissArmy - ok
14:35:43.0102 0x04ac [ BD27D97297934FD4217A37FD28A7ABC7, 446F3D6D278A4B3B79B331AA325632FD038952E5E910FC927894E9171A623794 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
14:35:43.0104 0x04ac MBAMWebAccessControl - ok
14:35:43.0142 0x04ac [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
14:35:43.0146 0x04ac Mcx2Svc - ok
14:35:43.0177 0x04ac [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\drivers\megasas.sys
14:35:43.0178 0x04ac megasas - ok
14:35:43.0199 0x04ac [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
14:35:43.0206 0x04ac MegaSR - ok
14:35:43.0234 0x04ac [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll
14:35:43.0237 0x04ac MMCSS - ok
14:35:43.0256 0x04ac [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys
14:35:43.0258 0x04ac Modem - ok
14:35:43.0282 0x04ac [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
14:35:43.0283 0x04ac monitor - ok
14:35:43.0306 0x04ac [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
14:35:43.0308 0x04ac mouclass - ok
14:35:43.0325 0x04ac [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
14:35:43.0326 0x04ac mouhid - ok
14:35:43.0350 0x04ac [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
14:35:43.0353 0x04ac mountmgr - ok
14:35:43.0384 0x04ac [ 4E9D8041D352A33332FD6F59A3A78B03, D4E6229B07EF9866993EEE4F6223DC7F1FF1108273FE14A3DC74E65C181DE56A ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:35:43.0387 0x04ac MozillaMaintenance - ok
14:35:43.0405 0x04ac [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys
14:35:43.0409 0x04ac mpio - ok
14:35:43.0423 0x04ac [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:35:43.0426 0x04ac mpsdrv - ok
14:35:43.0463 0x04ac [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll
14:35:43.0480 0x04ac MpsSvc - ok
14:35:43.0520 0x04ac [ 21F4B24ACFC79A483515BD986DD9043F, 22681907E02E0B723ABE2CEF0602D36C8EF862E7E2B62A9B40A5EF582E58D7BA ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:35:43.0524 0x04ac MRxDAV - ok
14:35:43.0536 0x04ac [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:35:43.0541 0x04ac mrxsmb - ok
14:35:43.0557 0x04ac [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:35:43.0565 0x04ac mrxsmb10 - ok
14:35:43.0577 0x04ac [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:35:43.0581 0x04ac mrxsmb20 - ok
14:35:43.0595 0x04ac [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys
14:35:43.0598 0x04ac msahci - ok
14:35:43.0616 0x04ac [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys
14:35:43.0621 0x04ac msdsm - ok
14:35:43.0641 0x04ac [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe
14:35:43.0647 0x04ac MSDTC - ok
14:35:43.0664 0x04ac [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:35:43.0666 0x04ac Msfs - ok
14:35:43.0688 0x04ac [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
14:35:43.0689 0x04ac mshidkmdf - ok
14:35:43.0698 0x04ac [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
14:35:43.0700 0x04ac msisadrv - ok
14:35:43.0744 0x04ac [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:35:43.0749 0x04ac MSiSCSI - ok
14:35:43.0757 0x04ac msiserver - ok
14:35:43.0792 0x04ac [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:35:43.0793 0x04ac MSKSSRV - ok
14:35:43.0810 0x04ac [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:35:43.0811 0x04ac MSPCLOCK - ok
14:35:43.0823 0x04ac [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:35:43.0824 0x04ac MSPQM - ok
14:35:43.0847 0x04ac [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:35:43.0853 0x04ac MsRPC - ok
14:35:43.0889 0x04ac [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
14:35:43.0891 0x04ac mssmbios - ok
14:35:43.0900 0x04ac [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:35:43.0902 0x04ac MSTEE - ok
14:35:43.0917 0x04ac [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
14:35:43.0918 0x04ac MTConfig - ok
14:35:43.0938 0x04ac [ D48659BB24C48345D926ECB45C1EBDF5, EDEDE58316827530C25F8085F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
14:35:43.0939 0x04ac MTsensor - ok
14:35:43.0963 0x04ac [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys
14:35:43.0966 0x04ac Mup - ok
14:35:44.0013 0x04ac [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll
14:35:44.0025 0x04ac napagent - ok
14:35:44.0050 0x04ac [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:35:44.0059 0x04ac NativeWifiP - ok
14:35:44.0145 0x04ac [ B498A14133BD09AD0817590ACE4470AD, 14CCC922C6596C97A5CF580209C4AFB6138A8FFD3A0E60CD506810DFCBC43A1A ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
14:35:44.0167 0x04ac NBService - ok
14:35:44.0230 0x04ac [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:35:44.0250 0x04ac NDIS - ok
14:35:44.0269 0x04ac [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
14:35:44.0271 0x04ac NdisCap - ok
14:35:44.0287 0x04ac [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:35:44.0288 0x04ac NdisTapi - ok
14:35:44.0308 0x04ac [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:35:44.0310 0x04ac Ndisuio - ok
14:35:44.0323 0x04ac [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:35:44.0327 0x04ac NdisWan - ok
14:35:44.0337 0x04ac [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:35:44.0340 0x04ac NDProxy - ok
14:35:44.0349 0x04ac [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:35:44.0351 0x04ac NetBIOS - ok
14:35:44.0382 0x04ac [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
14:35:44.0388 0x04ac NetBT - ok
14:35:44.0406 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] Netlogon C:\Windows\system32\lsass.exe
14:35:44.0409 0x04ac Netlogon - ok
14:35:44.0464 0x04ac [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll
14:35:44.0474 0x04ac Netman - ok
14:35:44.0513 0x04ac [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:35:44.0517 0x04ac NetMsmqActivator - ok
14:35:44.0528 0x04ac [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:35:44.0533 0x04ac NetPipeActivator - ok
14:35:44.0580 0x04ac [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll
14:35:44.0593 0x04ac netprofm - ok
14:35:44.0621 0x04ac [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:35:44.0626 0x04ac NetTcpActivator - ok
14:35:44.0639 0x04ac [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:35:44.0644 0x04ac NetTcpPortSharing - ok
14:35:44.0654 0x04ac [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
14:35:44.0656 0x04ac nfrd960 - ok
14:35:44.0693 0x04ac [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc C:\Windows\System32\nlasvc.dll
14:35:44.0701 0x04ac NlaSvc - ok
14:35:44.0784 0x04ac [ A328A46D87BB92CE4D8A4528E9D84787, D3245ED700151111592BA82FB675B284DA7FCE52B07A7F68352F64A402CAB37C ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
14:35:44.0793 0x04ac NMIndexingService - ok
14:35:44.0803 0x04ac [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:35:44.0806 0x04ac Npfs - ok
14:35:44.0823 0x04ac [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll
14:35:44.0826 0x04ac nsi - ok
14:35:44.0835 0x04ac [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:35:44.0837 0x04ac nsiproxy - ok
14:35:44.0903 0x04ac [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:35:44.0935 0x04ac Ntfs - ok
14:35:44.0956 0x04ac [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys
14:35:44.0958 0x04ac Null - ok
14:35:44.0990 0x04ac [ B5E37E31C053BC9950455A257526514B, 16E2880621F3AA12BDADE71CD7682CA79E2A199D3C9E3E5927C49DCEF0F6183B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
14:35:45.0000 0x04ac NVENETFD - ok
14:35:45.0435 0x04ac [ 9A77B1C13BCCEDDF78DFD7AFC25B4F5E, 88FA632754A20025F03FE0970C93F572055919F53C8A50E5DB6CF1EF7B00B7FD ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:35:45.0720 0x04ac nvlddmkm - ok
14:35:45.0827 0x04ac [ 1DE923088878B495CD4219E47BA34EB8, 68B8FF593E2972DC239BB9A9E2436A513DBDD16FAC071117AFD45285AD004EC1 ] NVNET C:\Windows\system32\DRIVERS\nvmf6232.sys
14:35:45.0835 0x04ac NVNET - ok
14:35:45.0854 0x04ac [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys
14:35:45.0859 0x04ac nvraid - ok
14:35:45.0890 0x04ac [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
14:35:45.0895 0x04ac nvstor - ok
14:35:45.0950 0x04ac [ 31B8835B003CAA6D31BEAD83DDBF98E5, FB7C7BD1E95BEFB9A8FFEB3FB1B6D9BCD923E48498CB23169EDAA025C84CDD33 ] nvsvc C:\Windows\system32\nvvsvc.exe
14:35:45.0969 0x04ac nvsvc - ok
14:35:46.0079 0x04ac [ F935E817409F78FA50C5921DB39124B3, E1AB4B69E9C0AD89A5B9E99C7A0D77A1A50B4823C89E8687686B716957FBA2B3 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
14:35:46.0112 0x04ac nvUpdatusService - ok
14:35:46.0133 0x04ac [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
14:35:46.0137 0x04ac nv_agp - ok
14:35:46.0157 0x04ac [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
14:35:46.0159 0x04ac ohci1394 - ok
14:35:46.0207 0x04ac [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
14:35:46.0216 0x04ac p2pimsvc - ok
14:35:46.0264 0x04ac [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll
14:35:46.0275 0x04ac p2psvc - ok
14:35:46.0292 0x04ac [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\DRIVERS\parport.sys
14:35:46.0295 0x04ac Parport - ok
14:35:46.0333 0x04ac [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr C:\Windows\system32\drivers\partmgr.sys
14:35:46.0336 0x04ac partmgr - ok
14:35:46.0357 0x04ac [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
14:35:46.0358 0x04ac Parvdm - ok
14:35:46.0382 0x04ac [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc C:\Windows\System32\pcasvc.dll
14:35:46.0389 0x04ac PcaSvc - ok
14:35:46.0405 0x04ac [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys
14:35:46.0409 0x04ac pci - ok
14:35:46.0434 0x04ac [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys
14:35:46.0435 0x04ac pciide - ok
14:35:46.0450 0x04ac [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
14:35:46.0455 0x04ac pcmcia - ok
14:35:46.0466 0x04ac [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys
14:35:46.0469 0x04ac pcw - ok
14:35:46.0508 0x04ac [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
14:35:46.0525 0x04ac PEAUTH - ok
14:35:46.0623 0x04ac [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll
14:35:46.0665 0x04ac pla - ok
14:35:46.0708 0x04ac [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
14:35:46.0719 0x04ac PlugPlay - ok
14:35:46.0735 0x04ac [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
14:35:46.0738 0x04ac PNRPAutoReg - ok
14:35:46.0759 0x04ac [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
14:35:46.0769 0x04ac PNRPsvc - ok
14:35:46.0808 0x04ac [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
14:35:46.0819 0x04ac PolicyAgent - ok
14:35:46.0865 0x04ac [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll
14:35:46.0872 0x04ac Power - ok
14:35:46.0894 0x04ac [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
14:35:46.0897 0x04ac PptpMiniport - ok
14:35:46.0919 0x04ac [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\drivers\processr.sys
14:35:46.0921 0x04ac Processor - ok
14:35:46.0959 0x04ac [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc C:\Windows\system32\profsvc.dll
14:35:46.0965 0x04ac ProfSvc - ok
14:35:46.0986 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:35:46.0988 0x04ac ProtectedStorage - ok
14:35:47.0008 0x04ac [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
14:35:47.0012 0x04ac Psched - ok
14:35:47.0083 0x04ac [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\drivers\ql2300.sys
14:35:47.0121 0x04ac ql2300 - ok
14:35:47.0145 0x04ac [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
14:35:47.0148 0x04ac ql40xx - ok
14:35:47.0182 0x04ac [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll
14:35:47.0190 0x04ac QWAVE - ok
14:35:47.0211 0x04ac [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
14:35:47.0214 0x04ac QWAVEdrv - ok
14:35:47.0235 0x04ac [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
14:35:47.0237 0x04ac RasAcd - ok
14:35:47.0251 0x04ac [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
14:35:47.0253 0x04ac RasAgileVpn - ok
14:35:47.0270 0x04ac [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll
14:35:47.0275 0x04ac RasAuto - ok
14:35:47.0291 0x04ac [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
14:35:47.0294 0x04ac Rasl2tp - ok
14:35:47.0326 0x04ac [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll
14:35:47.0336 0x04ac RasMan - ok
14:35:47.0349 0x04ac [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
14:35:47.0353 0x04ac RasPppoe - ok
14:35:47.0366 0x04ac [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
14:35:47.0369 0x04ac RasSstp - ok
14:35:47.0401 0x04ac [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
14:35:47.0408 0x04ac rdbss - ok
14:35:47.0421 0x04ac [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
14:35:47.0422 0x04ac rdpbus - ok
14:35:47.0442 0x04ac [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
14:35:47.0444 0x04ac RDPCDD - ok
14:35:47.0458 0x04ac [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
14:35:47.0460 0x04ac RDPENCDD - ok
14:35:47.0475 0x04ac [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
14:35:47.0477 0x04ac RDPREFMP - ok
14:35:47.0514 0x04ac [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:35:47.0516 0x04ac RdpVideoMiniport - ok
14:35:47.0552 0x04ac [ F031683E6D1FEA157ABB2FF260B51E61, 83B552819A5964152882C527E1421DBCEAACC74DEB897E3C4B53F52F1467FED3 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
14:35:47.0558 0x04ac RDPWD - ok
14:35:47.0589 0x04ac [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
14:35:47.0595 0x04ac rdyboost - ok
14:35:47.0625 0x04ac [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll
14:35:47.0629 0x04ac RemoteAccess - ok
14:35:47.0664 0x04ac [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:35:47.0670 0x04ac RemoteRegistry - ok
14:35:47.0698 0x04ac [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
14:35:47.0702 0x04ac RpcEptMapper - ok
14:35:47.0732 0x04ac [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe
14:35:47.0734 0x04ac RpcLocator - ok
14:35:47.0760 0x04ac [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll
14:35:47.0774 0x04ac RpcSs - ok
14:35:47.0820 0x04ac [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
14:35:47.0823 0x04ac rspndr - ok
14:35:47.0850 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] SamSs C:\Windows\system32\lsass.exe
14:35:47.0852 0x04ac SamSs - ok
14:35:47.0875 0x04ac [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
14:35:47.0878 0x04ac sbp2port - ok
14:35:47.0910 0x04ac [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll
14:35:47.0917 0x04ac SCardSvr - ok
14:35:47.0957 0x04ac [ 612A3D69E603DBBE5C3C1079186A0393, EDF1B18762DFF21B3029938472CEE95ACB0D24E7E79596267564A7EB7302F92D ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
14:35:47.0958 0x04ac SCDEmu - ok
14:35:47.0971 0x04ac [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
14:35:47.0973 0x04ac scfilter - ok
14:35:48.0020 0x04ac [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll
14:35:48.0043 0x04ac Schedule - ok
14:35:48.0060 0x04ac [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll
14:35:48.0063 0x04ac SCPolicySvc - ok
14:35:48.0089 0x04ac [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll
14:35:48.0095 0x04ac SDRSVC - ok
14:35:48.0112 0x04ac [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
14:35:48.0113 0x04ac secdrv - ok
14:35:48.0136 0x04ac [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll
14:35:48.0140 0x04ac seclogon - ok
14:35:48.0183 0x04ac [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\system32\sens.dll
14:35:48.0187 0x04ac SENS - ok
14:35:48.0220 0x04ac [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll
14:35:48.0224 0x04ac SensrSvc - ok
14:35:48.0248 0x04ac [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
14:35:48.0249 0x04ac Serenum - ok
14:35:48.0268 0x04ac [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\DRIVERS\serial.sys
14:35:48.0271 0x04ac Serial - ok
14:35:48.0285 0x04ac [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\drivers\sermouse.sys
14:35:48.0286 0x04ac sermouse - ok
14:35:48.0320 0x04ac [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll
14:35:48.0326 0x04ac SessionEnv - ok
14:35:48.0341 0x04ac [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
14:35:48.0342 0x04ac sffdisk - ok
14:35:48.0351 0x04ac [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
14:35:48.0353 0x04ac sffp_mmc - ok
14:35:48.0362 0x04ac [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
14:35:48.0364 0x04ac sffp_sd - ok
14:35:48.0388 0x04ac [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
14:35:48.0389 0x04ac sfloppy - ok
14:35:48.0423 0x04ac [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll
14:35:48.0433 0x04ac SharedAccess - ok
14:35:48.0468 0x04ac [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:35:48.0480 0x04ac ShellHWDetection - ok
14:35:48.0501 0x04ac [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys
14:35:48.0503 0x04ac sisagp - ok
14:35:48.0519 0x04ac [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
14:35:48.0521 0x04ac SiSRaid2 - ok
14:35:48.0539 0x04ac [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
14:35:48.0542 0x04ac SiSRaid4 - ok
14:35:48.0608 0x04ac [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
14:35:48.0614 0x04ac SkypeUpdate - ok
14:35:48.0637 0x04ac [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys
14:35:48.0640 0x04ac Smb - ok
14:35:48.0662 0x04ac [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
14:35:48.0665 0x04ac SNMPTRAP - ok
14:35:48.0678 0x04ac [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys
14:35:48.0679 0x04ac spldr - ok
14:35:48.0723 0x04ac [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler C:\Windows\System32\spoolsv.exe
14:35:48.0735 0x04ac Spooler - ok
14:35:48.0870 0x04ac [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe
14:35:48.0957 0x04ac sppsvc - ok
14:35:49.0061 0x04ac [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll
14:35:49.0066 0x04ac sppuinotify - ok
14:35:49.0107 0x04ac [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys
14:35:49.0116 0x04ac srv - ok
14:35:49.0136 0x04ac [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
14:35:49.0146 0x04ac srv2 - ok
14:35:49.0158 0x04ac [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
14:35:49.0163 0x04ac srvnet - ok
14:35:49.0186 0x04ac [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
14:35:49.0194 0x04ac SSDPSRV - ok
14:35:49.0228 0x04ac [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
14:35:49.0230 0x04ac ssmdrv - ok
14:35:49.0258 0x04ac [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll
14:35:49.0263 0x04ac SstpSvc - ok
14:35:49.0277 0x04ac [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\drivers\stexstor.sys
14:35:49.0278 0x04ac stexstor - ok
14:35:49.0314 0x04ac [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll
14:35:49.0330 0x04ac StiSvc - ok
14:35:49.0354 0x04ac [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
14:35:49.0355 0x04ac swenum - ok
14:35:49.0392 0x04ac [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll
14:35:49.0403 0x04ac swprv - ok
14:35:49.0466 0x04ac [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll
14:35:49.0499 0x04ac SysMain - ok
14:35:49.0521 0x04ac [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
14:35:49.0526 0x04ac TabletInputService - ok
14:35:49.0557 0x04ac [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll
14:35:49.0567 0x04ac TapiSrv - ok
14:35:49.0585 0x04ac [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll
14:35:49.0590 0x04ac TBS - ok
14:35:49.0664 0x04ac [ CA59F7C570AF70BC174F477CFE2D9EE3, F09E4E14207A2AC6957D2C0AC8707D0E356A9087FA6DC703373242D8EEB026BD ] Tcpip C:\Windows\system32\drivers\tcpip.sys
14:35:49.0700 0x04ac Tcpip - ok
14:35:49.0773 0x04ac [ CA59F7C570AF70BC174F477CFE2D9EE3, F09E4E14207A2AC6957D2C0AC8707D0E356A9087FA6DC703373242D8EEB026BD ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
14:35:49.0808 0x04ac TCPIP6 - ok
14:35:49.0859 0x04ac [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
14:35:49.0861 0x04ac tcpipreg - ok
14:35:49.0881 0x04ac [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
14:35:49.0883 0x04ac TDPIPE - ok
14:35:49.0917 0x04ac [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
14:35:49.0919 0x04ac TDTCP - ok
14:35:49.0941 0x04ac [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
14:35:49.0944 0x04ac tdx - ok
14:35:49.0956 0x04ac [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
14:35:49.0959 0x04ac TermDD - ok
14:35:50.0001 0x04ac [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService C:\Windows\System32\termsrv.dll
14:35:50.0018 0x04ac TermService - ok
14:35:50.0033 0x04ac [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll
14:35:50.0037 0x04ac Themes - ok
14:35:50.0050 0x04ac [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll
14:35:50.0054 0x04ac THREADORDER - ok
14:35:50.0074 0x04ac [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll
14:35:50.0079 0x04ac TrkWks - ok
14:35:50.0142 0x04ac [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:35:50.0148 0x04ac TrustedInstaller - ok
14:35:50.0178 0x04ac [ B37B08F2E5EEB1A37E448E09BACE1101, 32CC9E06B88BAB6FAB4696B744548DFCE9199A7FD2BA8B019F269CA75895852C ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
14:35:50.0180 0x04ac tssecsrv - ok
14:35:50.0212 0x04ac [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
14:35:50.0215 0x04ac TsUsbFlt - ok
14:35:50.0241 0x04ac [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
14:35:50.0243 0x04ac TsUsbGD - ok
14:35:50.0264 0x04ac [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
14:35:50.0268 0x04ac tunnel - ok
14:35:50.0283 0x04ac [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
14:35:50.0285 0x04ac uagp35 - ok
14:35:50.0314 0x04ac [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
14:35:50.0321 0x04ac udfs - ok
14:35:50.0354 0x04ac [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe
14:35:50.0358 0x04ac UI0Detect - ok
14:35:50.0374 0x04ac [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
14:35:50.0377 0x04ac uliagpkx - ok
14:35:50.0402 0x04ac [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
14:35:50.0404 0x04ac umbus - ok
14:35:50.0412 0x04ac [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\drivers\umpass.sys
14:35:50.0414 0x04ac UmPass - ok
14:35:50.0448 0x04ac [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll
14:35:50.0458 0x04ac upnphost - ok
14:35:50.0489 0x04ac [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
14:35:50.0492 0x04ac usbccgp - ok
14:35:50.0507 0x04ac [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir C:\Windows\system32\drivers\usbcir.sys
14:35:50.0511 0x04ac usbcir - ok
14:35:50.0537 0x04ac [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
14:35:50.0539 0x04ac usbehci - ok
14:35:50.0558 0x04ac [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
14:35:50.0565 0x04ac usbhub - ok
14:35:50.0582 0x04ac [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
14:35:50.0583 0x04ac usbohci - ok
14:35:50.0603 0x04ac [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\drivers\usbprint.sys
14:35:50.0604 0x04ac usbprint - ok
14:35:50.0618 0x04ac [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:35:50.0621 0x04ac USBSTOR - ok
14:35:50.0644 0x04ac [ 78780C3EBCE17405B1CCD07A3A8A7D72, FBFF3111E22EE0B4BCAFA81F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
14:35:50.0645 0x04ac usbuhci - ok
14:35:50.0663 0x04ac [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll
14:35:50.0667 0x04ac UxSms - ok
14:35:50.0682 0x04ac [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] VaultSvc C:\Windows\system32\lsass.exe
14:35:50.0684 0x04ac VaultSvc - ok
14:35:50.0705 0x04ac [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
14:35:50.0707 0x04ac vdrvroot - ok
14:35:50.0737 0x04ac [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe
14:35:50.0752 0x04ac vds - ok
14:35:50.0764 0x04ac [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
14:35:50.0766 0x04ac vga - ok
14:35:50.0801 0x04ac [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys
14:35:50.0803 0x04ac VgaSave - ok
14:35:50.0821 0x04ac [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
14:35:50.0826 0x04ac vhdmp - ok
14:35:50.0848 0x04ac [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys
14:35:50.0850 0x04ac viaagp - ok
14:35:50.0869 0x04ac [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
14:35:50.0872 0x04ac ViaC7 - ok
14:35:50.0894 0x04ac [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys
14:35:50.0896 0x04ac viaide - ok
14:35:50.0905 0x04ac [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys
14:35:50.0908 0x04ac volmgr - ok
14:35:50.0927 0x04ac [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
14:35:50.0937 0x04ac volmgrx - ok
14:35:50.0957 0x04ac [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys
14:35:50.0964 0x04ac volsnap - ok
14:35:50.0979 0x04ac [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
14:35:50.0984 0x04ac vsmraid - ok
14:35:51.0040 0x04ac [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe
14:35:51.0069 0x04ac VSS - ok
14:35:51.0095 0x04ac [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
14:35:51.0097 0x04ac vwifibus - ok
14:35:51.0127 0x04ac [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll
14:35:51.0138 0x04ac W32Time - ok
14:35:51.0153 0x04ac [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
14:35:51.0154 0x04ac WacomPen - ok
14:35:51.0166 0x04ac [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
14:35:51.0169 0x04ac WANARP - ok
14:35:51.0176 0x04ac [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
14:35:51.0180 0x04ac Wanarpv6 - ok
14:35:51.0268 0x04ac [ 353A04C273EC58475D8633E75CCD5604, FFAE53B6B53AEFC9E8A10BF27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
14:35:51.0304 0x04ac WatAdminSvc - ok
14:35:51.0370 0x04ac [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe
14:35:51.0405 0x04ac wbengine - ok
14:35:51.0438 0x04ac [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
14:35:51.0445 0x04ac WbioSrvc - ok
14:35:51.0481 0x04ac [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll
14:35:51.0492 0x04ac wcncsvc - ok
14:35:51.0513 0x04ac [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:35:51.0517 0x04ac WcsPlugInService - ok
14:35:51.0541 0x04ac [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\drivers\wd.sys
14:35:51.0543 0x04ac Wd - ok
14:35:51.0594 0x04ac [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
14:35:51.0610 0x04ac Wdf01000 - ok
14:35:51.0627 0x04ac [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:35:51.0633 0x04ac WdiServiceHost - ok
14:35:51.0641 0x04ac [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\Windows\system32\wdi.dll
14:35:51.0647 0x04ac WdiSystemHost - ok
14:35:51.0684 0x04ac [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient C:\Windows\System32\webclnt.dll
14:35:51.0692 0x04ac WebClient - ok
14:35:51.0716 0x04ac [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll
14:35:51.0724 0x04ac Wecsvc - ok
14:35:51.0749 0x04ac [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll
14:35:51.0754 0x04ac wercplsupport - ok
14:35:51.0773 0x04ac [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll
14:35:51.0778 0x04ac WerSvc - ok
14:35:51.0793 0x04ac [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
14:35:51.0795 0x04ac WfpLwf - ok
14:35:51.0812 0x04ac [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys
14:35:51.0814 0x04ac WIMMount - ok
14:35:51.0892 0x04ac [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
14:35:51.0911 0x04ac WinDefend - ok
14:35:51.0928 0x04ac WinHttpAutoProxySvc - ok
14:35:51.0969 0x04ac [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
14:35:51.0975 0x04ac Winmgmt - ok
14:35:52.0045 0x04ac [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM C:\Windows\system32\WsmSvc.dll
14:35:52.0079 0x04ac WinRM - ok
14:35:52.0144 0x04ac [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll
14:35:52.0169 0x04ac Wlansvc - ok
14:35:52.0277 0x04ac [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:35:52.0322 0x04ac wlidsvc - ok
14:35:52.0348 0x04ac [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
14:35:52.0350 0x04ac WmiAcpi - ok
14:35:52.0384 0x04ac [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:35:52.0389 0x04ac wmiApSrv - ok
14:35:52.0455 0x04ac [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
14:35:52.0485 0x04ac WMPNetworkSvc - ok
14:35:52.0516 0x04ac [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:35:52.0520 0x04ac WPCSvc - ok
14:35:52.0548 0x04ac [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:35:52.0553 0x04ac WPDBusEnum - ok
14:35:52.0583 0x04ac [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:35:52.0584 0x04ac ws2ifsl - ok
14:35:52.0607 0x04ac [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\system32\wscsvc.dll
14:35:52.0612 0x04ac wscsvc - ok
14:35:52.0620 0x04ac WSearch - ok
14:35:52.0730 0x04ac [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D148979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv C:\Windows\system32\wuaueng.dll
14:35:52.0787 0x04ac wuauserv - ok
14:35:52.0844 0x04ac [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:35:52.0847 0x04ac WudfPf - ok
14:35:52.0864 0x04ac [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
14:35:52.0870 0x04ac WUDFRd - ok
14:35:52.0890 0x04ac [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:35:52.0895 0x04ac wudfsvc - ok
14:35:52.0928 0x04ac [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc C:\Windows\System32\wwansvc.dll
14:35:52.0936 0x04ac WwanSvc - ok
14:35:52.0946 0x04ac ================ Scan global ===============================
14:35:52.0997 0x04ac [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
14:35:53.0031 0x04ac [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
14:35:53.0048 0x04ac [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
14:35:53.0070 0x04ac [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
14:35:53.0092 0x04ac [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
14:35:53.0101 0x04ac [ Global ] - ok
14:35:53.0102 0x04ac ================ Scan MBR ==================================
14:35:53.0106 0x04ac [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
14:35:53.0115 0x04ac \Device\Harddisk1\DR1 - ok
14:35:53.0135 0x04ac [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:35:53.0711 0x04ac \Device\Harddisk0\DR0 - ok
14:35:53.0718 0x04ac [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk2\DR2
14:35:54.0347 0x04ac \Device\Harddisk2\DR2 - ok
14:35:54.0354 0x04ac [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk3\DR3
14:35:54.0364 0x04ac \Device\Harddisk3\DR3 - ok
14:35:54.0945 0x04ac [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk4\DR4
14:35:55.0363 0x04ac \Device\Harddisk4\DR4 - ok
14:35:55.0374 0x04ac [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk5\DR5
14:35:55.0380 0x04ac \Device\Harddisk5\DR5 - ok
14:35:55.0381 0x04ac ================ Scan VBR ==================================
14:35:55.0386 0x04ac [ FF26F15CEB51C70D81B9F959A199A270 ] \Device\Harddisk1\DR1\Partition1
14:35:55.0390 0x04ac \Device\Harddisk1\DR1\Partition1 - ok
14:35:55.0396 0x04ac [ 1B28245271DBA1BA9C33D3A7BD0E5952 ] \Device\Harddisk0\DR0\Partition1
14:35:55.0398 0x04ac \Device\Harddisk0\DR0\Partition1 - ok
14:35:55.0407 0x04ac [ FDBFA6960E893CCE4F766E3C4DDD49B4 ] \Device\Harddisk0\DR0\Partition2
14:35:55.0409 0x04ac \Device\Harddisk0\DR0\Partition2 - ok
14:35:55.0417 0x04ac [ 9D3F577D9A7B55A4BD930EFAC37285F0 ] \Device\Harddisk2\DR2\Partition1
14:35:55.0421 0x04ac \Device\Harddisk2\DR2\Partition1 - ok
14:35:55.0428 0x04ac [ 551890D3CD7FE2166E325A222D9DF100 ] \Device\Harddisk3\DR3\Partition1
14:35:55.0434 0x04ac \Device\Harddisk3\DR3\Partition1 - ok
14:35:55.0441 0x04ac [ D4A877D365A6BFE46CEB6D81DB4600B3 ] \Device\Harddisk4\DR4\Partition1
14:35:55.0458 0x04ac \Device\Harddisk4\DR4\Partition1 - ok
14:35:55.0467 0x04ac [ 1D8C0576A5DF011DBE4BF9D524C1CC35 ] \Device\Harddisk5\DR5\Partition1
14:35:55.0469 0x04ac \Device\Harddisk5\DR5\Partition1 - ok
14:35:55.0469 0x04ac ================ Scan generic autorun ======================
14:35:55.0545 0x04ac [ 2AA5DD75EA1281432C40D22B5FD87D3A, 9868D4176C8F08EB72B0B992D3E2A480C587930CA025B4FDF3212F99B79C3017 ] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
14:35:55.0564 0x04ac avgnt - ok
14:35:55.0614 0x04ac [ 22DA0DDAF1BF9E0FB5C705319024429B, EC2C086FF784B06E4FF05243164DDB768B81EE32096AFED6D5E574FF350B619E ] C:\Program Files\uTorrent\uTorrent.exe
14:35:55.0624 0x04ac uTorrent - ok
14:35:55.0783 0x04ac [ 8B574E954166B812D30F44ECAAC1E99C, 912C29E48AAC75457E6ADDFF4DF160CB787A83A115BFE5CEE2D5F63D04FE567B ] C:\Program Files\Internet Download Manager\IDMan.exe
14:35:55.0871 0x04ac IDMan - ok
14:35:55.0969 0x04ac [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:35:55.0998 0x04ac Sidebar - ok
14:35:56.0034 0x04ac [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:35:56.0038 0x04ac mctadmin - ok
14:35:56.0048 0x04ac AV detected via SS2: Avira Desktop, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 14.0.6.548 ), 0x40000 ( disabled : updated )
14:35:56.0052 0x04ac Win FW state via NFP2: enabled
14:35:58.0695 0x04ac ============================================================
14:35:58.0695 0x04ac Scan finished
14:35:58.0695 0x04ac ============================================================
14:35:58.0708 0x0b7c Detected object count: 0
14:35:58.0708 0x0b7c Actual detected object count: 0

Toto je OK. A co nový ComboFix?

Sorry bol som mimo, posielam ten nový sken z Comba

ComboFix 14-09-11.01 - PC . 09. 2014 11:32:56.4.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2943.2071 [GMT 2:00]
Running from: c:\users\PC\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2014-08-11 to 2014-09-11 )))))))))))))))))))))))))))))))
.
.
2014-09-11 09:41 . 2014-09-11 09:41 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-09-11 09:41 . 2014-09-11 09:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-11 06:33 . 2012-07-25 10:03 17136 ----a-w- c:\windows\system32\sasnative32.exe
2014-09-11 06:30 . 2014-09-11 06:38 -------- d-----w- c:\program files\Zrychlenie PC
2014-09-08 03:58 . 2014-09-08 03:58 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2014-09-08 03:58 . 2014-09-08 03:58 1060864 ----a-w- c:\windows\system32\mfc71.dll
2014-09-07 19:41 . 2014-09-07 19:41 -------- d-----w- c:\users\PC\AppData\Roaming\WebExtend
2014-09-07 13:55 . 2014-09-07 13:55 -------- d-----w- c:\users\PC\AppData\Local\Comodo
2014-09-07 13:55 . 2014-09-07 13:55 -------- d-----w- c:\program files\Comodo
2014-09-07 13:54 . 2014-09-08 03:59 -------- d-----w- c:\program files\The KMPlayer
2014-09-07 13:50 . 2014-09-07 13:50 -------- d-----w- c:\users\PC\AppData\Roaming\rmi
2014-09-07 11:10 . 2014-09-07 11:11 -------- d-----w- c:\windows\system32\C2MP
2014-09-07 10:35 . 2014-09-07 12:35 -------- d-----w- c:\program files\MPC-HC
2014-09-07 10:02 . 2014-09-07 10:02 -------- d-----w- c:\users\PC\AppData\Local\ElevatedDiagnostics
2014-09-05 11:18 . 2014-09-06 00:19 -------- d-----w- C:\turner
2014-08-23 22:21 . 2014-08-23 22:21 -------- d-----w- c:\programdata\McAfee
2014-08-23 22:21 . 2014-08-23 22:23 -------- d-----w- c:\program files\McAfee Security Scan
2014-08-20 22:39 . 2014-08-20 22:39 -------- d-----w- C:\The.Garden.Of.Eden.2008.DVDRip.XviD-VoMiT.[UsaBit.com]
2014-08-20 13:33 . 2014-08-20 13:33 -------- d-----w- C:\Seduction
2014-08-20 02:20 . 2014-09-11 09:41 -------- d-----w- c:\users\PC\AppData\Local\temp
2014-08-20 00:53 . 2014-08-20 11:38 -------- d-----w- C:\ženská
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- C:\rsit
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- c:\program files\trend micro
2014-08-16 23:47 . 2014-08-16 23:47 -------- d-----w- c:\program files\Custom Technology
2014-08-16 23:20 . 2014-08-16 23:20 -------- d-----w- c:\program files\Common Files\Skype
2014-08-15 13:19 . 2014-08-15 13:19 -------- d-----w- c:\users\PC\AppData\Roaming\dlg
2014-08-14 18:28 . 2014-08-14 18:28 -------- d-----w- C:\Cas pred explozi
2014-08-14 18:05 . 2014-08-14 18:05 -------- d-----w- c:\program files\VeryPDF PDF2Word v3.1
2014-08-13 17:15 . 2014-08-13 17:15 45384 ----a-w- c:\windows\system32\DiscHandler.exe
2014-08-12 10:31 . 2014-08-15 13:39 -------- d-----w- c:\programdata\Package Cache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-11 08:37 . 2014-07-11 06:56 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-09-05 00:15 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 22:24 . 2014-04-14 14:37 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-08-23 22:24 . 2014-04-14 14:37 699568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-08-12 02:30 . 2014-08-12 02:30 3916288 ----a-w- c:\windows\system32\ffmpeg.dll
2014-08-12 02:30 . 2014-08-12 02:30 112640 ----a-w- c:\windows\system32\ff_vfw.dll
2014-08-12 02:30 . 2014-08-12 02:30 3502080 ----a-w- c:\windows\system32\ffdshow.ax
2014-08-12 02:29 . 2014-08-12 02:29 271360 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2014-08-12 02:29 . 2014-08-12 02:29 99840 ----a-w- c:\windows\system32\ff_wmv9.dll
2014-08-12 02:29 . 2014-08-12 02:29 157184 ----a-w- c:\windows\system32\ff_unrar.dll
2014-08-12 02:29 . 2014-08-12 02:29 211968 ----a-w- c:\windows\system32\ff_libdts.dll
2014-08-12 02:29 . 2014-08-12 02:29 1525760 ----a-w- c:\windows\system32\ff_samplerate.dll
2014-08-12 02:29 . 2014-08-12 02:29 147456 ----a-w- c:\windows\system32\ff_libmad.dll
2014-08-12 02:29 . 2014-08-12 02:29 114688 ----a-w- c:\windows\system32\ff_liba52.dll
2014-08-12 02:29 . 2014-08-12 02:29 136704 ----a-w- c:\windows\system32\libmpeg2_ff.dll
2014-08-04 17:51 . 2014-06-27 11:49 29 ----a-w- c:\windows\system32\TempWmicBatchFile.bat
2014-07-17 10:52 . 2014-04-14 22:56 35848 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-05 08:13 . 2014-07-05 08:13 368376 ----a-w- c:\windows\system32\cdxareader.ax
2014-07-01 12:12 . 2014-04-14 22:56 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2005-09-04 15:25 307712 --sha-w- c:\windows\System32\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\System32\AVSredirect.dll
2011-06-15 21:00 163328 --sha-r- c:\windows\System32\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\System32\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\System32\nbDX.dll
2010-01-06 21:00 107520 --sha-r- c:\windows\System32\TAKDSDecoder.dll
2012-10-05 17:54 188416 --sha-r- c:\windows\System32\winDCE32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2014-04-15 3595856]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2014-04-15 399224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-08-12 751184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CodecPackUpdateChecker.lnk - c:\windows\System32\C2MP\UpdateChecker.exe [2014-8-13 48680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVDIdle Pro\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2014-08-12 10:29 751184 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 17:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
2014-05-09 07:47 844976 ----a-w- c:\windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2014-04-15 10:51 3595856 ----a-w- c:\program files\Internet Download Manager\IDMan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2014-04-11 19:51 4390912 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2014-04-11 19:51 1822720 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"IDMan"=c:\program files\Internet Download Manager\IDMan.exe /onboot
"uTorrent"="c:\program files\uTorrent\uTorrent.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Wondershare Helper Compact.exe"=c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" /min
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-06 108032]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2014-04-14 1343400]
R4 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-08-12 1021520]
R4 CronService;Cron Service for Prey;c:\prey\platform\windows\cronsvc.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-02-14 37352]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-08-12 430160]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2013-05-25 102344]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-05 05:47 1096520 ----a-w- c:\program files\Google\Chrome\Application\37.0.2062.103\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-09-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 22:24]
.
2014-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
2014-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = about:blank
IE: Stiahnuť s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stiahnuť s IDM všetky prepojenia - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: DhcpNameServer = 195.146.132.58 192.168.0.1
FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c7eukp8s.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.zoznam.sk/
.
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: WDC_WD50 rev.01.0 -> Harddisk0\DR0 -> \Device\0000005d
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
error: Read Nedostatok systémových prostriedkov na dokončenie požadovanej služby.
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):f0,b2,a4,4f,10,67,da,de,b8,50,94,50,94,6b,c8,af,5d,79,32,d1,90,
50,d9,98,97,08,c2,59,68,dc,ac,90,7d,8a,65,f9,4f,6c,ab,3d,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{a67e6c00-98e7-4fe7-891a-6f3b84153b92}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e2
"Therad"=dword:0000001e
"SpecVersion"=dword:000000e1
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-09-11 11:43:05
ComboFix-quarantined-files.txt 2014-09-11 09:43
ComboFix2.txt 2014-09-11 07:09
ComboFix3.txt 2014-08-21 12:25
ComboFix4.txt 2014-08-20 02:20
.
Pre-Run: 7 073 562 624 bytes free
Post-Run: 7 157 616 640 bytes free
.
- - End Of File - - 4AB9630429A6A402BB465C71399D9870
8F558EB6672622401DA993E1E865C861

Ještě jednou budeme dočišťovat. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\system32\sasnative32.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files\McAfee Security Scan

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spsutí a vykoná příkazy ze skriptu.

Log z Combo Fix


ComboFix 14-09-12.01 - PC . 09. 2014 7:04.5.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2943.1962 [GMT 2:00]
Running from: c:\users\PC\Desktop\ComboFix.exe
Command switches used :: c:\users\PC\Desktop\CFScript.txt..txt
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\windows\system32\sasnative32.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\McAfee Security Scan
.
.
((((((((((((((((((((((((( Files Created from 2014-08-12 to 2014-09-12 )))))))))))))))))))))))))))))))
.
.
2014-09-12 05:13 . 2014-09-12 05:13 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-09-12 05:13 . 2014-09-12 05:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-11 12:51 . 2014-09-11 12:51 -------- d-----w- C:\Založky FF
2014-09-11 06:33 . 2012-07-25 10:03 17136 ----a-w- c:\windows\system32\sasnative32.exe
2014-09-11 06:30 . 2014-09-11 06:38 -------- d-----w- c:\program files\Zrychlenie PC
2014-09-08 03:58 . 2014-09-08 03:58 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2014-09-08 03:58 . 2014-09-08 03:58 1060864 ----a-w- c:\windows\system32\mfc71.dll
2014-09-07 19:41 . 2014-09-07 19:41 -------- d-----w- c:\users\PC\AppData\Roaming\WebExtend
2014-09-07 13:55 . 2014-09-07 13:55 -------- d-----w- c:\users\PC\AppData\Local\Comodo
2014-09-07 13:55 . 2014-09-07 13:55 -------- d-----w- c:\program files\Comodo
2014-09-07 13:54 . 2014-09-08 03:59 -------- d-----w- c:\program files\The KMPlayer
2014-09-07 13:50 . 2014-09-07 13:50 -------- d-----w- c:\users\PC\AppData\Roaming\rmi
2014-09-07 11:10 . 2014-09-07 11:11 -------- d-----w- c:\windows\system32\C2MP
2014-09-07 10:35 . 2014-09-07 12:35 -------- d-----w- c:\program files\MPC-HC
2014-09-07 10:02 . 2014-09-07 10:02 -------- d-----w- c:\users\PC\AppData\Local\ElevatedDiagnostics
2014-09-05 11:18 . 2014-09-06 00:19 -------- d-----w- C:\turner
2014-08-23 22:21 . 2014-08-23 22:21 -------- d-----w- c:\programdata\McAfee
2014-08-20 22:39 . 2014-08-20 22:39 -------- d-----w- C:\The.Garden.Of.Eden.2008.DVDRip.XviD-VoMiT.[UsaBit.com]
2014-08-20 13:33 . 2014-08-20 13:33 -------- d-----w- C:\Seduction
2014-08-20 02:20 . 2014-09-12 05:15 -------- d-----w- c:\users\PC\AppData\Local\temp
2014-08-20 00:53 . 2014-08-20 11:38 -------- d-----w- C:\ženská
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- C:\rsit
2014-08-18 10:17 . 2014-08-18 10:27 -------- d-----w- c:\program files\trend micro
2014-08-16 23:47 . 2014-08-16 23:47 -------- d-----w- c:\program files\Custom Technology
2014-08-16 23:20 . 2014-08-16 23:20 -------- d-----w- c:\program files\Common Files\Skype
2014-08-15 13:19 . 2014-08-15 13:19 -------- d-----w- c:\users\PC\AppData\Roaming\dlg
2014-08-14 18:28 . 2014-08-14 18:28 -------- d-----w- C:\Cas pred explozi
2014-08-14 18:05 . 2014-08-14 18:05 -------- d-----w- c:\program files\VeryPDF PDF2Word v3.1
2014-08-13 17:15 . 2014-08-13 17:15 45384 ----a-w- c:\windows\system32\DiscHandler.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-12 04:15 . 2014-07-11 06:56 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-09-05 00:15 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 22:24 . 2014-04-14 14:37 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-08-23 22:24 . 2014-04-14 14:37 699568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-08-12 02:30 . 2014-08-12 02:30 3916288 ----a-w- c:\windows\system32\ffmpeg.dll
2014-08-12 02:30 . 2014-08-12 02:30 112640 ----a-w- c:\windows\system32\ff_vfw.dll
2014-08-12 02:30 . 2014-08-12 02:30 3502080 ----a-w- c:\windows\system32\ffdshow.ax
2014-08-12 02:29 . 2014-08-12 02:29 271360 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2014-08-12 02:29 . 2014-08-12 02:29 99840 ----a-w- c:\windows\system32\ff_wmv9.dll
2014-08-12 02:29 . 2014-08-12 02:29 157184 ----a-w- c:\windows\system32\ff_unrar.dll
2014-08-12 02:29 . 2014-08-12 02:29 211968 ----a-w- c:\windows\system32\ff_libdts.dll
2014-08-12 02:29 . 2014-08-12 02:29 1525760 ----a-w- c:\windows\system32\ff_samplerate.dll
2014-08-12 02:29 . 2014-08-12 02:29 147456 ----a-w- c:\windows\system32\ff_libmad.dll
2014-08-12 02:29 . 2014-08-12 02:29 114688 ----a-w- c:\windows\system32\ff_liba52.dll
2014-08-12 02:29 . 2014-08-12 02:29 136704 ----a-w- c:\windows\system32\libmpeg2_ff.dll
2014-08-04 17:51 . 2014-06-27 11:49 29 ----a-w- c:\windows\system32\TempWmicBatchFile.bat
2014-07-17 10:52 . 2014-04-14 22:56 35848 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-05 08:13 . 2014-07-05 08:13 368376 ----a-w- c:\windows\system32\cdxareader.ax
2014-07-01 12:12 . 2014-04-14 22:56 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2005-09-04 15:25 307712 --sha-w- c:\windows\System32\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\System32\AVSredirect.dll
2011-06-15 21:00 163328 --sha-r- c:\windows\System32\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\System32\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\System32\nbDX.dll
2010-01-06 21:00 107520 --sha-r- c:\windows\System32\TAKDSDecoder.dll
2012-10-05 17:54 188416 --sha-r- c:\windows\System32\winDCE32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2014-04-15 3595856]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2014-04-15 399224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-08-12 751184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CodecPackUpdateChecker.lnk - c:\windows\System32\C2MP\UpdateChecker.exe [2014-8-13 48680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVDIdle Pro\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2014-08-12 10:29 751184 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 17:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
2014-05-09 07:47 844976 ----a-w- c:\windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2014-04-15 10:51 3595856 ----a-w- c:\program files\Internet Download Manager\IDMan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2014-04-11 19:51 4390912 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2014-04-11 19:51 1822720 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"IDMan"=c:\program files\Internet Download Manager\IDMan.exe /onboot
"uTorrent"="c:\program files\uTorrent\uTorrent.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Wondershare Helper Compact.exe"=c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" /min
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-06 108032]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2014-04-14 1343400]
R4 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-08-12 1021520]
R4 CronService;Cron Service for Prey;c:\prey\platform\windows\cronsvc.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-02-14 37352]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-08-12 430160]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2013-05-25 102344]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-11 12:46 1096520 ----a-w- c:\program files\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-14 22:24]
.
2014-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
2014-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-05-16 20:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = about:blank
IE: Stiahnuť s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stiahnuť s IDM všetky prepojenia - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: DhcpNameServer = 195.146.132.58 192.168.0.1
.
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: WDC_WD50 rev.01.0 -> Harddisk0\DR0 -> \Device\0000005d
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
error: Read Nedostatok systémových prostriedkov na dokončenie požadovanej služby.
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):f0,b2,a4,4f,10,67,da,de,b8,50,94,50,94,6b,c8,af,5d,79,32,d1,90,
50,d9,98,97,08,c2,59,68,dc,ac,90,7d,8a,65,f9,4f,6c,ab,3d,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-4182955959-1364875425-3391226843-1000_Classes\CLSID\{a67e6c00-98e7-4fe7-891a-6f3b84153b92}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e2
"Therad"=dword:0000001e
"SpecVersion"=dword:000000e1
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Completion time: 2014-09-12 07:19:01 - machine was rebooted
ComboFix-quarantined-files.txt 2014-09-12 05:19
ComboFix2.txt 2014-09-11 09:43
ComboFix3.txt 2014-09-11 07:09
ComboFix4.txt 2014-08-21 12:25
ComboFix5.txt 2014-09-12 05:01
.
Pre-Run: 2 422 624 256 bytes free
Post-Run: 2 358 665 216 bytes free
.
- - End Of File - - 0AFC04E906C0D2ABDA29599EE49B99CF
8F558EB6672622401DA993E1E865C861

Na Firefoxe sa mi myš nezobrazuje ako šípka ale ako ruka. nedá sa s ňou nič robiť. Nie je vadný FF? Dík.

Smazáno. CF odinstalujte pomocí T-Cleaneru: http://vyosek.tym.cz/pro_usery/T-Cleaner.exe . K té šipce: Je to ve FF zcela normální. Mně to dělá také a nijak se tím nevzrušuji. Myxlím, že toto nastavení měnit nelze. Nastala nějaká změna?