Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

много зъл вирус

knelly
в Премахване на зловреден софтуер

Featured Replies

  • Автор

сега сканира,ще му трябва поне 1/2 час,като спре пращам,ако като снощи не направи лог файл пускам пак....:)

  • Отговори 83
  • Прегледи 9,7k
  • Създадено
  • Последен отговор
  • Автор

още стои на на синия екран с сканирането и не зацепва само премигва лентичката за писане и надписа че сканира и ще трябват десет минути ,двойно за по заразени компютри......

  • Автор

ComboFix 12-04-03.02 - kalin2 04/04/2012 17.42.27.3.4 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.39.1040.18.3325.2084 [GMT 2:00] Eseguito da: c:\users\kalin2\Desktop\ComboFix.exe Opzioni usate :: c:\users\kalin2\Desktop\CFScript.txt.txt AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\programdata\ke4lFKAs8O4Ngz.exe" "c:\programdata\mfgEBbCeYwo.exe" . . ((((((((((((((((((((((((((((((((((((( Altre eliminazioni ))))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\ke4lFKAs8O4Ngz.exe c:\programdata\mfgEBbCeYwo.exe c:\users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe c:\windows\XSxS . . ((((((((((((((((((((((((( Files Creati Da 2012-03-04 al 2012-04-04 ))))))))))))))))))))))))))))))))))) . . 2012-04-04 16:19 . 2012-04-04 16:19 8782 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS 2012-04-04 16:19 . 2012-04-04 16:19 7271 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS 2012-04-04 16:19 . 2012-04-04 16:19 23327 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\COMBOBOX.JS 2012-04-04 16:19 . 2012-04-04 16:19 20719 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\DIVWRAPPER.JS 2012-04-04 16:16 . 2012-04-04 16:22 -------- d-----w- c:\users\kalin2\AppData\Local\temp 2012-04-04 16:16 . 2012-04-04 16:16 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2012-04-04 16:16 . 2012-04-04 16:16 -------- d-----w- c:\users\mimo\AppData\Local\temp 2012-04-04 16:16 . 2012-04-04 16:16 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-04-03 16:13 . 2011-07-06 17:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2012-04-03 16:13 . 2012-04-03 16:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-04-03 16:13 . 2011-07-06 17:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-04-02 17:40 . 2012-04-02 17:52 -------- d-----w- c:\program files\GridinSoft Trojan Killer 2012-04-02 15:25 . 2012-04-02 15:25 -------- d-----w- c:\program files\Lavalys 2012-03-30 17:25 . 2012-03-30 17:25 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll 2012-03-30 17:25 . 2012-03-30 17:25 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll 2012-03-27 12:23 . 2012-03-14 02:15 6582328 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92A68AB1-8BB2-4064-A0EA-440FC1BEC5B1}\mpengine.dll 2012-03-14 10:29 . 2012-03-14 10:29 -------- d-----w- c:\programdata\WindowsSearch 2012-03-13 19:34 . 2012-02-02 15:16 2044416 ----a-w- c:\windows\system32\win32k.sys 2012-03-13 19:34 . 2012-02-13 13:44 1068544 ----a-w- c:\windows\system32\DWrite.dll 2012-03-13 19:34 . 2012-02-14 15:45 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2012-03-13 19:34 . 2012-02-13 14:12 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2012-03-13 19:34 . 2012-02-13 13:47 683008 ----a-w- c:\windows\system32\d2d1.dll 2012-03-13 19:34 . 2012-02-14 15:45 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2012-03-13 19:33 . 2012-01-31 10:59 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2012-03-13 19:27 . 2012-01-09 15:54 613376 ----a-w- c:\windows\system32\rdpencom.dll 2012-03-13 19:27 . 2012-01-09 13:58 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-02-23 08:18 . 2009-10-03 07:15 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-03-30 17:25 . 2012-02-27 07:00 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll 2011-10-08 09:26 . 2011-10-05 09:11 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll . . ((((((((((((((((((((((((((((( SnapShot@2012-04-03_20.24.43 ))))))))))))))))))))))))))))))))))))))))) . + 2008-01-21 01:58 . 2012-04-04 16:21 97558 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2008-12-08 11:12 . 2012-04-04 16:19 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-12-08 11:12 . 2012-04-03 20:22 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-12-08 11:12 . 2012-04-04 16:19 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-12-08 11:12 . 2012-04-03 20:22 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-10-24 11:16 . 2012-04-04 16:21 8258 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4093764374-3757577921-2126884727-1001_UserData.bin - 2012-04-03 20:21 . 2012-04-03 20:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-04-04 16:19 . 2012-04-04 16:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-04-04 16:19 . 2012-04-04 16:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-04-03 20:21 . 2012-04-03 20:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2006-11-02 13:05 . 2012-04-04 16:21 108582 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-09-24 13:10 . 2012-04-04 15:32 685974 c:\windows\System32\perfh010.dat + 2006-11-02 10:33 . 2012-04-04 15:32 600294 c:\windows\System32\perfh009.dat + 2008-09-24 13:10 . 2012-04-04 15:32 128130 c:\windows\System32\perfc010.dat + 2006-11-02 10:33 . 2012-04-04 15:32 108176 c:\windows\System32\perfc009.dat + 2009-08-09 16:08 . 2012-04-04 15:41 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2009-08-09 16:08 . 2012-04-03 18:45 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2008-12-08 11:12 . 2012-04-03 20:22 163840 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2008-12-08 11:12 . 2012-04-04 16:19 163840 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2011-02-13 02:23 . 2012-04-04 16:18 208148 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2011-02-13 02:23 . 2012-03-30 17:33 208148 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-04-15 09:19 . 2012-04-04 16:18 3667336 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4093764374-3757577921-2126884727-1001-8192.dat . ((((((((((((((((((((((((((((((((((((( Punti Reg Caricati )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* i valori vuoti & legittimi/default non sono visualizzati. REGEDIT4 . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}] 2011-06-01 18:28 1236400 ----a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}] 2011-05-30 13:48 87480 ----a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] c:\program files\Ask.com\GenericAskToolbar.dll [bU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [bU] "{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}"= "c:\progra~1\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll" [2011-05-30 87480] . [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] . [HKEY_CLASSES_ROOT\clsid\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-11-28 18:01 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] "Praetorian"="c:\users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe" [bU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-04-24 6111232] "toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 28672] "ACTIVBOARD"="c:\program files\Packard Bell\FIJI\aboard.exe" [2007-01-18 79416] "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 563984] "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 2027792] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2011-07-11 74752] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 937920] "avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-11-28 3744552] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-10-08 30192] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208] "Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568] "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-07-06 1047656] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584] . c:\users\mimo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ uTorrent Ultra Accelerator.lnk - c:\program files\uTorrent Ultra Accelerator\uTorrent Ultra Accelerator.exe [N/A] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-11-15 113664] Firefox Preloader.lnk - c:\program files\FirefoxPreloader\FirefoxPreloader.exe [2010-6-3 98304] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-4093764374-3757577921-2126884727-1001] "EnableNotificationsRef"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contenuto della cartella 'Scheduled Tasks' . 2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 09:50] . 2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 09:50] . 2012-04-04 c:\windows\Tasks\User_Feed_Synchronization-{4328DEAD-54F5-4FD6-B2D0-57A888F68C5D}.job - c:\windows\system32\msfeedssync.exe [2011-04-12 06:17] . . ------- Scansione supplementare ------- . uStart Page = hxxp://www.yandex.ru/?clid=133922 uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s IE: Add to AMV/AVI Video Converter... - c:\program files\Media Player Utilities 4.29\AMVConverter\grab.html IE: Free YouTube Download - c:\users\kalin2\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\users\kalin2\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html TCP: DhcpNameServer = 192.168.178.1 FF - ProfilePath - c:\users\kalin2\AppData\Roaming\Mozilla\Firefox\Profiles\i6nqjf42.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2851640&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=330&systemid=2&q= FF - user.js: yahoo.ytff.general.dontshowhpoffer - true . - - - - CHIAVI ORFANE RIMOSSE - - - - . URLSearchHooks-{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1} - (no file) Toolbar-10 - (no file) Toolbar-{91397D20-1446-11D4-8AF4-0040CA1127B6} - (no file) WebBrowser-{4AE0C3D6-F713-4EED-BC65-25DC3FFDAAC1} - (no file) HKLM-Run-mfgEBbCeYwo.exe - c:\programdata\mfgEBbCeYwo.exe AddRemove-Counter-Strike 1.6: New Era - k:\games\cs\uninst.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-04-04 18:21 Windows 6.0.6002 Service Pack 2 NTFS . scansione processi nascosti ... . scansione entrate autostart nascoste ... . Scansione files nascosti ... . Scansione completata con successo Files nascosti: 0 . ************************************************************************** . --------------------- Dlls caricate dai processi in esecuzione --------------------- . - - - - - - - > 'Explorer.exe'(11912) c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll . ------------------------ Altri processi in esecuzione ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe c:\program files\NVIDIA Corporation\Display\nvxdsync.exe c:\windows\system32\nvvsvc.exe c:\program files\NVIDIA Corporation\Display\nvtray.exe c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe c:\program files\Common Files\Motive\McciCMService.exe c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\windows\system32\WUDFHost.exe c:\windows\system32\conime.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe . ************************************************************************** . Ora fine scansione: 2012-04-04 18:41:38 - Il pc и stato riavviato ComboFix-quarantined-files.txt 2012-04-04 16:41 ComboFix2.txt 2012-04-03 22:18 . Pre-Run: 78.513.586.176 byte disponibili Post-Run: 78.519.463.936 byte disponibili . - - End Of File - - 44D8FEFA64D762EE40DD46832719B382

  • Автор

ами още не смея нищо да пипам.....иначе ще ми се скараш.....:) екрана е още черен,не смея да обновя с десен бутон че тогава излизаше оня наслоения прозорец ....,и не смея да рестартирам че всеки път изчезваха иконите ,които сега са тук...харда е налице.отваря всичко програми още не съм отварял и в мрежата не съм влизал

..ами пробвай болния компютър,включи го към интернет ....наблюдаваш ли някъкви проблеми..? Не сме свършили още....!:)

  • Автор

сега смених черния екран с нов скрийн....засега е както преди...:))))))))))) сега ще го включа към рутера icotonev,страшен си !!!! всичко работи перфектно(засега) ЕВАЛА!!!благодаря ти много!!!само ако може да ми кажеш какъв тип гадина съм хванал и как да се пазя да не ми зарази машината отново? докато бя в нета с firefox съм изписа че java console създава проблеми и ми затвори браузъра.да деинсталирам ли java?

Чакай сега...бързаш ..имаме още мако работа ..още няколко сканирания..!:)

Публикувано изображение Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

  • Автор

icotonev malwarebytes си я имах на компа но я деинсталирах преди малко защото ми даваше всичко на маймуница,после я изтеглих от твоя линк,инсталирах но виж за какво става дума сега е още по зле,всичко е на ???????между другото пуснах 1 филм от харда с gom player,субтитрите също са на маймуница.... да не е от настройките за езика защото преди вируса беше наред... icotonev,разбутах настроиките ???? въпросителните,де :) и намерих езиково меню,избрах английски и сега сканира,нещо ми е станало с българския ама на това ще му намеря цаката.като завърши ти пращам репорта.....:)

post-231402-0-52002200-1333560951_thumb.

  • Автор

пращам,след като копирах ме накара да рестартирам Malwarebytes Anti-Malware (Trial) 1.60.1.1000 www.malwarebytes.org Database version: v2012.04.04.07 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 kalin2 :: KALIN [administrator] Protection: Disabled 04/04/2012 19.54.55 mbam-log-2012-04-04 (19-54-55).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 392454 Time elapsed: 49 minute(s), 9 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 3 C:\Qoobox\Quarantine\C\ProgramData\ke4lFKAs8O4Ngz.exe.vir (Rogue.FakeHDD) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\ProgramData\mfgEBbCeYwo.exe.vir (Trojan.Fakealert) -> Quarantined and deleted successfully. C:\Users\kalin2\Desktop\programi\FlvPlayerSetup.exe (Adware.Agent) -> Quarantined and deleted successfully. (end) освен това още снощи беше прав че е FAKE програма(вирус).тука го изписа ......:(post-231402-0-33128000-1333564974_thumb.

Супер....! :)

Останаха още няколко неща..но тях утре...ще имам възможност да пиша след 17:00 часа..!

  • Изтеглете RogueKiller.exe и го запазете на десктопа.
  • Стартирайте приложението и натиснете бутона SCAN.
Публикувано изображение
  • Ще се създаде лог файл на десктопа с името RKreport.txt на десктопа.
  • Публикувайте лог файла в следващия си пост.

освен това още снощи беше прав че е FAKE програма(вирус).тука го изписа .....

Ако трябва да бъда по точен - беше заразен с Rogue.FakeHDD.....! :)

  • Автор

RogueKiller V7.3.2 [03/20/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Started in : Normal mode User: kalin2 [Admin rights] Mode: Scan -- Date: 04/04/2012 21:28:45 ¤¤¤ Bad processes: 1 ¤¤¤ [bLACKLIST] d3d10_1.dll -- C:\Windows\system32\d3d10_1.dll -> UNLOADED ¤¤¤ Registry Entries: 12 ¤¤¤ [sUSP PATH] HKCU\[...]\Run : Praetorian (C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe) -> FOUND [sUSP PATH] HKUS\S-1-5-21-4093764374-3757577921-2126884727-1001[...]\Run : Praetorian (C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe) -> FOUND [HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> FOUND [HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND [HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> FOUND [HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND [HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: WDC WD64 00AAKS-22A7B SCSI Disk Device +++++ --- User --- [MBR] 58e2181c8466cc708430ca1f1dbf05cf [bSP] 241514e03b6fbc0a24f1c98101a82820 : Windows Vista MBR Code Partition table: 0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 12291 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 25173855 | Size: 364945 Mo 2 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 772581915 | Size: 172737 Mo 3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1126349280 | Size: 60502 Mo User = LL1 ... OK! Error reading LL2 MBR! Finished : << RKreport[1].txt >> RKreport[1].txt

  • Автор

може би сгреших ама натиснах delete на откритите файлове от rogue killer.....освен това не успях да стартирам аваст,деинсталирах го,изтеглих го пак но ми прекъсна инсталацията....сега го изключих заразеният компютър,да не се заразява повече до утре че след като rogue killer приключи,отворих директорията на вируса,дето уж изтрихме с комбофикс и си беше там в Ц/УИНДОУС C\ProgramData\ke4lFKAs8O4Ngz.exe.vir и го изтрих в кошчето.......знам че греша да действам на моя глава,ама..............инат....дразни ме.... лека вечер ицо...:)....поболях се от нерви с този проблем.....мерси и приятна почивка. ;)

  • Автор

здравей Ицо,сега се връщам от работа и видях че rogue killer е направил 2 репорта,може би защото съм трил... сега ще го пратя.а сега пак го пуснах,пращам и 3ия RogueKiller V7.3.2 [03/20/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Started in : Normal mode User: kalin2 [Admin rights] Mode: Remove -- Date: 04/04/2012 21:30:00 ¤¤¤ Bad processes: 1 ¤¤¤ [bLACKLIST] d3d10_1.dll -- C:\Windows\system32\d3d10_1.dll -> UNLOADED ¤¤¤ Registry Entries: 11 ¤¤¤ [sUSP PATH] HKCU\[...]\Run : Praetorian (C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe) -> DELETED [HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> REPLACED (1) [HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1) [HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> REPLACED (1) [HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> REPLACED (1) [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0) [HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0) [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0) [HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0) [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0) [HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0) ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: WDC WD64 00AAKS-22A7B SCSI Disk Device +++++ --- User --- [MBR] 58e2181c8466cc708430ca1f1dbf05cf [bSP] 241514e03b6fbc0a24f1c98101a82820 : Windows Vista MBR Code Partition table: 0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 12291 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 25173855 | Size: 364945 Mo 2 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 772581915 | Size: 172737 Mo 3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1126349280 | Size: 60502 Mo User = LL1 ... OK! Error reading LL2 MBR! Finished : << RKreport[2].txt >> RKreport[1].txt ; RKreport[2].txt RogueKiller V7.3.2 [03/20/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Started in : Normal mode User: kalin2 [Admin rights] Mode: Scan -- Date: 04/05/2012 16:10:37 ¤¤¤ Bad processes: 1 ¤¤¤ [bLACKLIST] d3d10_1.dll -- C:\Windows\system32\d3d10_1.dll -> UNLOADED ¤¤¤ Registry Entries: 0 ¤¤¤ ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: WDC WD64 00AAKS-22A7B SCSI Disk Device +++++ --- User --- [MBR] 58e2181c8466cc708430ca1f1dbf05cf [bSP] 241514e03b6fbc0a24f1c98101a82820 : Windows Vista MBR Code Partition table: 0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 12291 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 25173855 | Size: 364945 Mo 2 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 772581915 | Size: 172737 Mo 3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 1126349280 | Size: 60502 Mo User = LL1 ... OK! Error reading LL2 MBR! Finished : << RKreport[3].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

Здравей..да така е станало....но не е проблем ..! Сега искам да ми кажеш какво е положението със компютъра...и имаме още едно ..всъщност две сканирания,после ще вървим към приключване....!:)

  • Автор

ами,бива ама проблема е че не мога да задействам аваста...изтрих и преинсталирах ама ми казва че ми е изтекъл лиценза.....:( може и да съм пропуснал да подновя безплатния лиценз и не иска да работи,дава ми х върху иконата му...да търся ли да слагам друга програма,защото така мисля да направя да си изтегля някоя с безплатен лиценз...? а и съм го включил към рутера...а без вирусна си е риск сега видях че имам на десктопа и фаил на rogue killer Rk Quarantine вътре са Time : 04/04/2012 21:28:45 -------------------------- [d3d10_1.dll.vir] -> C:\Windows\system32\d3d10_1.dll ERROR [praetorian.exe.vir] -> C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe ERROR [praetorian.exe.vir] -> C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe Time : 04/04/2012 21:30:00 -------------------------- [d3d10_1.dll.vir] -> C:\Windows\system32\d3d10_1.dll ERROR [praetorian.exe.vir] -> C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe ERROR [praetorian.exe.vir] -> C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe ERROR [praetorian.exe.vir] -> C:\Users\kalin2\AppData\Local\Yandex\Updater\praetorian.exe Time : 05/04/2012 16:10:37 -------------------------- [d3d10_1.dll.vir] -> C:\Windows\system32\d3d10_1.dll а това Yandex от 2 седмици,жена ми се оплаква че и излиза като главен браузър на модзилата,търсих от цонтролен панел да я деинсталирам,но не я намерих в списъка...... преди да се зарази де,търсих сега си спомням името и от репорта

Добре..!Сега искам да направим и едно такова сканиране:

Публикувано изображение Моля,изтрийте изтрийте вашата версия на TDSSKiller , изтеглете последната версия на TDSSKiller - оттук и я запазете на вашия декстоп.

  • Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

    Публикувано изображение

  • Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

    Публикувано изображение

  • Натиснете бутона Start Scan.

    Публикувано изображение

  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

    Публикувано изображение

  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

    Публикувано изображение

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

  • Лог файл ще бъде създаден в свободната директория на дял C:\ . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.
  • Автор

17:32:59.0984 5980 TDSS rootkit removing tool 2.7.26.0 Apr 4 2012 19:52:02 17:33:00.0012 5980 ============================================================ 17:33:00.0013 5980 Current date / time: 2012/04/05 17:33:00.0012 17:33:00.0013 5980 SystemInfo: 17:33:00.0013 5980 17:33:00.0013 5980 OS Version: 6.0.6002 ServicePack: 2.0 17:33:00.0013 5980 Product type: Workstation 17:33:00.0013 5980 ComputerName: KALIN 17:33:00.0013 5980 UserName: kalin2 17:33:00.0013 5980 Windows directory: C:\Windows 17:33:00.0013 5980 System windows directory: C:\Windows 17:33:00.0013 5980 Processor architecture: Intel x86 17:33:00.0013 5980 Number of processors: 4 17:33:00.0013 5980 Page size: 0x1000 17:33:00.0013 5980 Boot type: Normal boot 17:33:00.0013 5980 ============================================================ 17:33:00.0344 5980 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 17:33:00.0356 5980 Drive \Device\Harddisk5\DR5 - Size: 0xEF000000 (3.73 Gb), SectorSize: 0x200, Cylinders: 0x1E7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 17:33:00.0357 5980 \Device\Harddisk0\DR0: 17:33:00.0357 5980 MBR used 17:33:00.0357 5980 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1801F5F, BlocksNum 0x2C8C8ABC 17:33:00.0357 5980 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2E0CAA1B, BlocksNum 0x15160FC5 17:33:00.0374 5980 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x4322BA1F, BlocksNum 0x762B4A2 17:33:00.0374 5980 \Device\Harddisk5\DR5: 17:33:00.0375 5980 MBR used 17:33:00.0375 5980 \Device\Harddisk5\DR5\Partition0: MBR, Type 0xB, StartLBA 0x1F80, BlocksNum 0x776080 17:33:00.0431 5980 Initialize success 17:33:00.0431 5980 ============================================================ 17:33:14.0710 4868 ============================================================ 17:33:14.0710 4868 Scan started 17:33:14.0710 4868 Mode: Manual; SigCheck; TDLFS; 17:33:14.0710 4868 ============================================================ 17:33:15.0028 4868 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 17:33:15.0116 4868 ACPI - ok 17:33:15.0157 4868 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 17:33:15.0174 4868 adp94xx - ok 17:33:15.0196 4868 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 17:33:15.0209 4868 adpahci - ok 17:33:15.0241 4868 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 17:33:15.0251 4868 adpu160m - ok 17:33:15.0272 4868 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 17:33:15.0282 4868 adpu320 - ok 17:33:15.0310 4868 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll 17:33:15.0329 4868 AeLookupSvc - ok 17:33:15.0374 4868 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys 17:33:15.0388 4868 AFD - ok 17:33:15.0404 4868 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 17:33:15.0413 4868 agp440 - ok 17:33:15.0426 4868 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 17:33:15.0437 4868 aic78xx - ok 17:33:15.0456 4868 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe 17:33:15.0478 4868 ALG - ok 17:33:15.0490 4868 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 17:33:15.0498 4868 aliide - ok 17:33:15.0514 4868 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 17:33:15.0523 4868 amdagp - ok 17:33:15.0539 4868 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 17:33:15.0547 4868 amdide - ok 17:33:15.0565 4868 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 17:33:15.0587 4868 AmdK7 - ok 17:33:15.0602 4868 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys 17:33:15.0625 4868 AmdK8 - ok 17:33:15.0639 4868 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll 17:33:15.0651 4868 Appinfo - ok 17:33:15.0687 4868 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 17:33:15.0696 4868 arc - ok 17:33:15.0713 4868 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 17:33:15.0722 4868 arcsas - ok 17:33:15.0745 4868 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 17:33:15.0766 4868 AsyncMac - ok 17:33:15.0785 4868 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 17:33:15.0795 4868 atapi - ok 17:33:15.0823 4868 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 17:33:15.0844 4868 AudioEndpointBuilder - ok 17:33:15.0857 4868 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 17:33:15.0877 4868 Audiosrv - ok 17:33:15.0905 4868 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 17:33:15.0927 4868 Beep - ok 17:33:15.0950 4868 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll 17:33:15.0982 4868 BFE - ok 17:33:16.0031 4868 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\system32\qmgr.dll 17:33:16.0060 4868 BITS - ok 17:33:16.0082 4868 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 17:33:16.0105 4868 blbdrive - ok 17:33:16.0125 4868 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 17:33:16.0137 4868 bowser - ok 17:33:16.0156 4868 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 17:33:16.0173 4868 BrFiltLo - ok 17:33:16.0187 4868 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 17:33:16.0204 4868 BrFiltUp - ok 17:33:16.0225 4868 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll 17:33:16.0248 4868 Browser - ok 17:33:16.0263 4868 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 17:33:16.0301 4868 Brserid - ok 17:33:16.0316 4868 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 17:33:16.0355 4868 BrSerWdm - ok 17:33:16.0374 4868 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 17:33:16.0412 4868 BrUsbMdm - ok 17:33:16.0425 4868 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 17:33:16.0462 4868 BrUsbSer - ok 17:33:16.0478 4868 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 17:33:16.0517 4868 BTHMODEM - ok 17:33:16.0622 4868 catchme - ok 17:33:16.0641 4868 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 17:33:16.0663 4868 cdfs - ok 17:33:16.0686 4868 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 17:33:16.0704 4868 cdrom - ok 17:33:16.0725 4868 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 17:33:16.0742 4868 CertPropSvc - ok 17:33:16.0761 4868 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys 17:33:16.0783 4868 circlass - ok 17:33:16.0807 4868 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 17:33:16.0819 4868 CLFS - ok 17:33:16.0870 4868 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 17:33:16.0879 4868 clr_optimization_v2.0.50727_32 - ok 17:33:16.0933 4868 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 17:33:16.0944 4868 clr_optimization_v4.0.30319_32 - ok 17:33:16.0957 4868 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 17:33:16.0966 4868 cmdide - ok 17:33:16.0978 4868 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\drivers\compbatt.sys 17:33:16.0987 4868 Compbatt - ok 17:33:16.0994 4868 COMSysApp - ok 17:33:17.0013 4868 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 17:33:17.0022 4868 crcdisk - ok 17:33:17.0038 4868 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 17:33:17.0059 4868 Crusoe - ok 17:33:17.0081 4868 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll 17:33:17.0101 4868 CryptSvc - ok 17:33:17.0139 4868 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 17:33:17.0164 4868 DcomLaunch - ok 17:33:17.0201 4868 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys 17:33:17.0213 4868 DfsC - ok 17:33:17.0265 4868 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe 17:33:17.0331 4868 DFSR - ok 17:33:17.0356 4868 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll 17:33:17.0376 4868 Dhcp - ok 17:33:17.0402 4868 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 17:33:17.0412 4868 disk - ok 17:33:17.0433 4868 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll 17:33:17.0445 4868 Dnscache - ok 17:33:17.0468 4868 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll 17:33:17.0487 4868 dot3svc - ok 17:33:17.0528 4868 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys 17:33:17.0550 4868 Dot4 - ok 17:33:17.0568 4868 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys 17:33:17.0590 4868 Dot4Print - ok 17:33:17.0615 4868 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys 17:33:17.0637 4868 dot4usb - ok 17:33:17.0653 4868 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll 17:33:17.0677 4868 DPS - ok 17:33:17.0702 4868 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 17:33:17.0720 4868 drmkaud - ok 17:33:17.0756 4868 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 17:33:17.0777 4868 DXGKrnl - ok 17:33:17.0838 4868 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 17:33:17.0861 4868 E1G60 - ok 17:33:17.0880 4868 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll 17:33:17.0898 4868 EapHost - ok 17:33:17.0911 4868 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 17:33:17.0923 4868 Ecache - ok 17:33:17.0964 4868 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe 17:33:17.0977 4868 ehRecvr - ok 17:33:17.0991 4868 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe 17:33:18.0002 4868 ehSched - ok 17:33:18.0017 4868 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll 17:33:18.0027 4868 ehstart - ok 17:33:18.0048 4868 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 17:33:18.0063 4868 elxstor - ok 17:33:18.0102 4868 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll 17:33:18.0130 4868 EMDMgmt - ok 17:33:18.0179 4868 epmntdrv (539ca34fbc74ec366a0d751028c32a08) C:\Windows\system32\epmntdrv.sys 17:33:18.0203 4868 epmntdrv ( UnsignedFile.Multi.Generic ) - warning 17:33:18.0203 4868 epmntdrv - detected UnsignedFile.Multi.Generic (1) 17:33:18.0223 4868 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 17:33:18.0234 4868 ErrDev - ok 17:33:18.0253 4868 EuGdiDrv (1f2f4ab15ce03ecc257feb2f6dc5a013) C:\Windows\system32\EuGdiDrv.sys 17:33:18.0259 4868 EuGdiDrv ( UnsignedFile.Multi.Generic ) - warning 17:33:18.0259 4868 EuGdiDrv - detected UnsignedFile.Multi.Generic (1) 17:33:18.0302 4868 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll 17:33:18.0322 4868 EventSystem - ok 17:33:18.0390 4868 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 17:33:18.0402 4868 exfat - ok 17:33:18.0439 4868 ezSharedSvc (42f721c52eef2d6df9372a53813a83ef) C:\Windows\System32\ezsvc7.dll 17:33:18.0446 4868 ezSharedSvc ( UnsignedFile.Multi.Generic ) - warning 17:33:18.0446 4868 ezSharedSvc - detected UnsignedFile.Multi.Generic (1) 17:33:18.0473 4868 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 17:33:18.0491 4868 fastfat - ok 17:33:18.0506 4868 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 17:33:18.0528 4868 fdc - ok 17:33:18.0552 4868 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll 17:33:18.0574 4868 fdPHost - ok 17:33:18.0587 4868 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll 17:33:18.0626 4868 FDResPub - ok 17:33:18.0639 4868 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 17:33:18.0648 4868 FileInfo - ok 17:33:18.0660 4868 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 17:33:18.0683 4868 Filetrace - ok 17:33:18.0694 4868 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 17:33:18.0717 4868 flpydisk - ok 17:33:18.0747 4868 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 17:33:18.0759 4868 FltMgr - ok 17:33:18.0805 4868 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll 17:33:18.0828 4868 FontCache - ok 17:33:18.0889 4868 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 17:33:18.0897 4868 FontCache3.0.0.0 - ok 17:33:18.0908 4868 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 17:33:18.0926 4868 Fs_Rec - ok 17:33:18.0943 4868 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 17:33:18.0953 4868 gagp30kx - ok 17:33:19.0026 4868 GoogleDesktopManager-051210-111108 (9f5f2f0fb0a7f5aa9f16b9a7b6dad89f) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 17:33:19.0034 4868 GoogleDesktopManager-051210-111108 - ok 17:33:19.0056 4868 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll 17:33:19.0094 4868 gpsvc - ok 17:33:19.0139 4868 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 17:33:19.0146 4868 gupdate - ok 17:33:19.0164 4868 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 17:33:19.0172 4868 gupdatem - ok 17:33:19.0207 4868 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 17:33:19.0243 4868 HDAudBus - ok 17:33:19.0264 4868 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 17:33:19.0301 4868 HidBth - ok 17:33:19.0315 4868 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 17:33:19.0353 4868 HidIr - ok 17:33:19.0374 4868 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\System32\hidserv.dll 17:33:19.0386 4868 hidserv - ok 17:33:19.0414 4868 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 17:33:19.0431 4868 HidUsb - ok 17:33:19.0459 4868 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll 17:33:19.0483 4868 hkmsvc - ok 17:33:19.0501 4868 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 17:33:19.0509 4868 HpCISSs - ok 17:33:19.0538 4868 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 17:33:19.0555 4868 HTTP - ok 17:33:19.0570 4868 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 17:33:19.0578 4868 i2omp - ok 17:33:19.0594 4868 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 17:33:19.0612 4868 i8042prt - ok 17:33:19.0629 4868 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 17:33:19.0640 4868 iaStorV - ok 17:33:19.0708 4868 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 17:33:19.0733 4868 idsvc - ok 17:33:19.0754 4868 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 17:33:19.0762 4868 iirsp - ok 17:33:19.0788 4868 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll 17:33:19.0811 4868 IKEEXT - ok 17:33:19.0872 4868 IntcAzAudAddService (2deb2538c9372568bb67b5fdf2359790) C:\Windows\system32\drivers\RTKVHDA.sys 17:33:19.0921 4868 IntcAzAudAddService - ok 17:33:19.0935 4868 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 17:33:19.0944 4868 intelide - ok 17:33:19.0960 4868 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 17:33:19.0983 4868 intelppm - ok 17:33:20.0002 4868 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll 17:33:20.0025 4868 IPBusEnum - ok 17:33:20.0039 4868 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 17:33:20.0061 4868 IpFilterDriver - ok 17:33:20.0081 4868 iphlpsvc (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll 17:33:20.0096 4868 iphlpsvc - ok 17:33:20.0104 4868 IpInIp - ok 17:33:20.0120 4868 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 17:33:20.0142 4868 IPMIDRV - ok 17:33:20.0161 4868 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 17:33:20.0183 4868 IPNAT - ok 17:33:20.0203 4868 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 17:33:20.0225 4868 IRENUM - ok 17:33:20.0238 4868 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 17:33:20.0246 4868 isapnp - ok 17:33:20.0272 4868 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 17:33:20.0284 4868 iScsiPrt - ok 17:33:20.0299 4868 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 17:33:20.0308 4868 iteatapi - ok 17:33:20.0326 4868 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 17:33:20.0334 4868 iteraid - ok 17:33:20.0346 4868 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 17:33:20.0355 4868 kbdclass - ok 17:33:20.0368 4868 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\drivers\kbdhid.sys 17:33:20.0390 4868 kbdhid - ok 17:33:20.0419 4868 KeyIso (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 17:33:20.0431 4868 KeyIso - ok 17:33:20.0449 4868 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys 17:33:20.0467 4868 KSecDD - ok 17:33:20.0496 4868 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll 17:33:20.0534 4868 KtmRm - ok 17:33:20.0583 4868 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\System32\srvsvc.dll 17:33:20.0597 4868 LanmanServer - ok 17:33:20.0629 4868 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll 17:33:20.0644 4868 LanmanWorkstation - ok 17:33:20.0660 4868 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 17:33:20.0682 4868 lltdio - ok 17:33:20.0715 4868 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll 17:33:20.0739 4868 lltdsvc - ok 17:33:20.0752 4868 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll 17:33:20.0791 4868 lmhosts - ok 17:33:20.0813 4868 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 17:33:20.0823 4868 LSI_FC - ok 17:33:20.0843 4868 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 17:33:20.0852 4868 LSI_SAS - ok 17:33:20.0870 4868 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 17:33:20.0880 4868 LSI_SCSI - ok 17:33:20.0894 4868 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 17:33:20.0917 4868 luafv - ok 17:33:20.0975 4868 LVcKap (fb548ff809634bfa866312b37d8a18ae) C:\Windows\system32\DRIVERS\LVcKap.sys 17:33:21.0024 4868 LVcKap - ok 17:33:21.0079 4868 LVCOMSer (14e4cc4d46169759d874f57604ea6be5) C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe 17:33:21.0090 4868 LVCOMSer - ok 17:33:21.0139 4868 LVMVDrv (fe3fb994f8702d9e37648927819b74b8) C:\Windows\system32\DRIVERS\LVMVDrv.sys 17:33:21.0213 4868 LVMVDrv - ok 17:33:21.0233 4868 LVPr2Mon (c7ea51f1ab10b0b2b443f4d5589fc1a5) C:\Windows\system32\DRIVERS\LVPr2Mon.sys 17:33:21.0241 4868 LVPr2Mon - ok 17:33:21.0253 4868 LVPrcSrv (b2d04e813ba12ab179daf0b9fdecba3d) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe 17:33:21.0263 4868 LVPrcSrv - ok 17:33:21.0280 4868 LVSrvLauncher (a7a2ef5000007ca361da1e2b99df8c57) C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe 17:33:21.0290 4868 LVSrvLauncher - ok 17:33:21.0297 4868 LVUSBSta - ok 17:33:21.0368 4868 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys 17:33:21.0377 4868 MBAMProtector - ok 17:33:21.0404 4868 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 17:33:21.0423 4868 MBAMService - ok 17:33:21.0462 4868 McciCMService (f8b823414a22dbf3bec10dcaa5f93cd8) C:\Program Files\Common Files\Motive\McciCMService.exe 17:33:21.0470 4868 McciCMService ( UnsignedFile.Multi.Generic ) - warning 17:33:21.0470 4868 McciCMService - detected UnsignedFile.Multi.Generic (1) 17:33:21.0498 4868 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll 17:33:21.0509 4868 Mcx2Svc - ok 17:33:21.0533 4868 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 17:33:21.0542 4868 megasas - ok 17:33:21.0569 4868 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 17:33:21.0584 4868 MegaSR - ok 17:33:21.0614 4868 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 17:33:21.0638 4868 MMCSS - ok 17:33:21.0658 4868 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 17:33:21.0680 4868 Modem - ok 17:33:21.0695 4868 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 17:33:21.0718 4868 monitor - ok 17:33:21.0734 4868 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 17:33:21.0743 4868 mouclass - ok 17:33:21.0758 4868 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\drivers\mouhid.sys 17:33:21.0780 4868 mouhid - ok 17:33:21.0798 4868 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 17:33:21.0807 4868 MountMgr - ok 17:33:21.0822 4868 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 17:33:21.0832 4868 mpio - ok 17:33:21.0846 4868 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 17:33:21.0864 4868 mpsdrv - ok 17:33:21.0888 4868 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll 17:33:21.0912 4868 MpsSvc - ok 17:33:21.0931 4868 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 17:33:21.0940 4868 Mraid35x - ok 17:33:21.0999 4868 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 17:33:22.0003 4868 MREMP50 ( UnsignedFile.Multi.Generic ) - warning 17:33:22.0003 4868 MREMP50 - detected UnsignedFile.Multi.Generic (1) 17:33:22.0007 4868 MREMPR5 - ok 17:33:22.0013 4868 MRENDIS5 - ok 17:33:22.0029 4868 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 17:33:22.0032 4868 MRESP50 ( UnsignedFile.Multi.Generic ) - warning 17:33:22.0032 4868 MRESP50 - detected UnsignedFile.Multi.Generic (1) 17:33:22.0057 4868 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 17:33:22.0070 4868 MRxDAV - ok 17:33:22.0103 4868 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys 17:33:22.0115 4868 mrxsmb - ok 17:33:22.0142 4868 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys 17:33:22.0156 4868 mrxsmb10 - ok 17:33:22.0168 4868 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 17:33:22.0180 4868 mrxsmb20 - ok 17:33:22.0199 4868 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys 17:33:22.0208 4868 msahci - ok 17:33:22.0225 4868 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 17:33:22.0234 4868 msdsm - ok 17:33:22.0263 4868 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe 17:33:22.0287 4868 MSDTC - ok 17:33:22.0308 4868 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 17:33:22.0331 4868 Msfs - ok 17:33:22.0338 4868 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 17:33:22.0347 4868 msisadrv - ok 17:33:22.0375 4868 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll 17:33:22.0398 4868 MSiSCSI - ok 17:33:22.0405 4868 msiserver - ok 17:33:22.0421 4868 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 17:33:22.0443 4868 MSKSSRV - ok 17:33:22.0460 4868 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 17:33:22.0484 4868 MSPCLOCK - ok 17:33:22.0491 4868 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 17:33:22.0514 4868 MSPQM - ok 17:33:22.0540 4868 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 17:33:22.0551 4868 MsRPC - ok 17:33:22.0569 4868 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 17:33:22.0578 4868 mssmbios - ok 17:33:22.0597 4868 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 17:33:22.0619 4868 MSTEE - ok 17:33:22.0627 4868 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 17:33:22.0638 4868 Mup - ok 17:33:22.0655 4868 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll 17:33:22.0676 4868 napagent - ok 17:33:22.0710 4868 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 17:33:22.0725 4868 NativeWifiP - ok 17:33:22.0753 4868 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 17:33:22.0772 4868 NDIS - ok 17:33:22.0835 4868 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 17:33:22.0852 4868 NdisTapi - ok 17:33:22.0862 4868 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 17:33:22.0884 4868 Ndisuio - ok 17:33:22.0898 4868 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 17:33:22.0917 4868 NdisWan - ok 17:33:22.0929 4868 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 17:33:22.0947 4868 NDProxy - ok 17:33:22.0996 4868 Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll 17:33:23.0001 4868 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 17:33:23.0001 4868 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 17:33:23.0015 4868 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 17:33:23.0037 4868 NetBIOS - ok 17:33:23.0060 4868 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 17:33:23.0078 4868 netbt - ok 17:33:23.0110 4868 Netlogon (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 17:33:23.0122 4868 Netlogon - ok 17:33:23.0147 4868 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll 17:33:23.0173 4868 Netman - ok 17:33:23.0189 4868 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll 17:33:23.0214 4868 netprofm - ok 17:33:23.0264 4868 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 17:33:23.0276 4868 NetTcpPortSharing - ok 17:33:23.0307 4868 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 17:33:23.0316 4868 nfrd960 - ok 17:33:23.0365 4868 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll 17:33:23.0389 4868 NlaSvc - ok 17:33:23.0414 4868 NMIndexingService - ok 17:33:23.0440 4868 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 17:33:23.0457 4868 Npfs - ok 17:33:23.0473 4868 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll 17:33:23.0496 4868 nsi - ok 17:33:23.0514 4868 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 17:33:23.0536 4868 nsiproxy - ok 17:33:23.0568 4868 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 17:33:23.0597 4868 Ntfs - ok 17:33:23.0615 4868 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 17:33:23.0653 4868 ntrigdigi - ok 17:33:23.0664 4868 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 17:33:23.0686 4868 Null - ok 17:33:23.0733 4868 NVENETFD (b896fb556b4dc1e1d2943559ea79c5c5) C:\Windows\system32\DRIVERS\nvmfdx32.sys 17:33:23.0774 4868 NVENETFD - ok 17:33:24.0002 4868 nvlddmkm (4152708c0c24e30dae7fa87d5afe1d7b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 17:33:24.0266 4868 nvlddmkm - ok 17:33:24.0279 4868 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 17:33:24.0289 4868 nvraid - ok 17:33:24.0319 4868 nvrd32 (f2abab0c99237ce4e97478af2e0438a0) C:\Windows\system32\drivers\nvrd32.sys 17:33:24.0328 4868 nvrd32 - ok 17:33:24.0344 4868 nvsmu (7ec12a73067baca25a8e3e2a58ae83d8) C:\Windows\system32\drivers\nvsmu.sys 17:33:24.0353 4868 nvsmu - ok 17:33:24.0373 4868 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 17:33:24.0382 4868 nvstor - ok 17:33:24.0401 4868 nvstor32 (3fce358f5845ccbaa2e877cc74a5c729) C:\Windows\system32\drivers\nvstor32.sys 17:33:24.0411 4868 nvstor32 - ok 17:33:24.0438 4868 nvsvc (26db28b32e8d2f57cb5065a4a053801a) C:\Windows\system32\nvvsvc.exe 17:33:24.0458 4868 nvsvc - ok 17:33:24.0556 4868 nvUpdatusService (a19bbe1e3e3fef50b94ca07dcc0fb776) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe 17:33:24.0619 4868 nvUpdatusService - ok 17:33:24.0643 4868 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 17:33:24.0653 4868 nv_agp - ok 17:33:24.0660 4868 NwlnkFlt - ok 17:33:24.0670 4868 NwlnkFwd - ok 17:33:24.0703 4868 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 17:33:24.0721 4868 ohci1394 - ok 17:33:24.0755 4868 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 17:33:24.0778 4868 p2pimsvc - ok 17:33:24.0806 4868 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 17:33:24.0828 4868 p2psvc - ok 17:33:24.0854 4868 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 17:33:24.0892 4868 Parport - ok 17:33:24.0917 4868 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 17:33:24.0927 4868 partmgr - ok 17:33:24.0940 4868 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 17:33:24.0977 4868 Parvdm - ok 17:33:24.0990 4868 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll 17:33:25.0003 4868 PcaSvc - ok 17:33:25.0029 4868 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 17:33:25.0040 4868 pci - ok 17:33:25.0052 4868 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys 17:33:25.0061 4868 pciide - ok 17:33:25.0081 4868 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 17:33:25.0092 4868 pcmcia - ok 17:33:25.0121 4868 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 17:33:25.0189 4868 PEAUTH - ok 17:33:25.0208 4868 PID_PEPI - ok 17:33:25.0252 4868 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll 17:33:25.0307 4868 pla - ok 17:33:25.0355 4868 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll 17:33:25.0376 4868 PlugPlay - ok 17:33:25.0430 4868 Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll 17:33:25.0435 4868 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 17:33:25.0435 4868 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 17:33:25.0450 4868 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 17:33:25.0482 4868 PNRPAutoReg - ok 17:33:25.0493 4868 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 17:33:25.0532 4868 PNRPsvc - ok 17:33:25.0573 4868 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll 17:33:25.0605 4868 PolicyAgent - ok 17:33:25.0646 4868 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 17:33:25.0668 4868 PptpMiniport - ok 17:33:25.0681 4868 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 17:33:25.0703 4868 Processor - ok 17:33:25.0729 4868 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll 17:33:25.0749 4868 ProfSvc - ok 17:33:25.0777 4868 ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 17:33:25.0789 4868 ProtectedStorage - ok 17:33:25.0814 4868 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 17:33:25.0832 4868 PSched - ok 17:33:25.0853 4868 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\Windows\system32\Drivers\PxHelp20.sys 17:33:25.0862 4868 PxHelp20 - ok 17:33:25.0902 4868 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 17:33:25.0933 4868 ql2300 - ok 17:33:25.0951 4868 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 17:33:25.0960 4868 ql40xx - ok 17:33:25.0983 4868 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll 17:33:25.0998 4868 QWAVE - ok 17:33:26.0010 4868 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 17:33:26.0022 4868 QWAVEdrv - ok 17:33:26.0040 4868 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 17:33:26.0062 4868 RasAcd - ok 17:33:26.0082 4868 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll 17:33:26.0108 4868 RasAuto - ok 17:33:26.0126 4868 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 17:33:26.0149 4868 Rasl2tp - ok 17:33:26.0173 4868 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll 17:33:26.0194 4868 RasMan - ok 17:33:26.0218 4868 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 17:33:26.0235 4868 RasPppoe - ok 17:33:26.0256 4868 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 17:33:26.0268 4868 RasSstp - ok 17:33:26.0296 4868 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 17:33:26.0315 4868 rdbss - ok 17:33:26.0337 4868 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 17:33:26.0358 4868 RDPCDD - ok 17:33:26.0384 4868 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 17:33:26.0408 4868 rdpdr - ok 17:33:26.0424 4868 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 17:33:26.0446 4868 RDPENCDD - ok 17:33:26.0494 4868 RDPWD (79c6df8477250f5c54f7c5ae1d6b814e) C:\Windows\system32\drivers\RDPWD.sys 17:33:26.0507 4868 RDPWD - ok 17:33:26.0537 4868 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll 17:33:26.0559 4868 RemoteAccess - ok 17:33:26.0586 4868 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll 17:33:26.0605 4868 RemoteRegistry - ok 17:33:26.0623 4868 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe 17:33:26.0634 4868 RpcLocator - ok 17:33:26.0655 4868 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 17:33:26.0681 4868 RpcSs - ok 17:33:26.0700 4868 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 17:33:26.0723 4868 rspndr - ok 17:33:26.0752 4868 SamSs (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 17:33:26.0764 4868 SamSs - ok 17:33:26.0784 4868 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 17:33:26.0793 4868 sbp2port - ok 17:33:26.0822 4868 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll 17:33:26.0841 4868 SCardSvr - ok 17:33:26.0889 4868 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll 17:33:26.0911 4868 Schedule - ok 17:33:26.0934 4868 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 17:33:26.0951 4868 SCPolicySvc - ok 17:33:26.0976 4868 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll 17:33:26.0989 4868 SDRSVC - ok 17:33:27.0004 4868 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 17:33:27.0043 4868 secdrv - ok 17:33:27.0061 4868 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll 17:33:27.0084 4868 seclogon - ok 17:33:27.0097 4868 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\system32\sens.dll 17:33:27.0121 4868 SENS - ok 17:33:27.0135 4868 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 17:33:27.0172 4868 Serenum - ok 17:33:27.0186 4868 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 17:33:27.0225 4868 Serial - ok 17:33:27.0239 4868 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 17:33:27.0262 4868 sermouse - ok 17:33:27.0284 4868 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll 17:33:27.0308 4868 SessionEnv - ok 17:33:27.0324 4868 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 17:33:27.0342 4868 sffdisk - ok 17:33:27.0354 4868 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 17:33:27.0375 4868 sffp_mmc - ok 17:33:27.0387 4868 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 17:33:27.0409 4868 sffp_sd - ok 17:33:27.0426 4868 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 17:33:27.0465 4868 sfloppy - ok 17:33:27.0491 4868 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll 17:33:27.0516 4868 SharedAccess - ok 17:33:27.0540 4868 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll 17:33:27.0555 4868 ShellHWDetection - ok 17:33:27.0571 4868 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 17:33:27.0580 4868 sisagp - ok 17:33:27.0592 4868 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 17:33:27.0601 4868 SiSRaid2 - ok 17:33:27.0620 4868 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 17:33:27.0629 4868 SiSRaid4 - ok 17:33:27.0712 4868 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe 17:33:27.0817 4868 slsvc - ok 17:33:27.0846 4868 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll 17:33:27.0865 4868 SLUINotify - ok 17:33:27.0886 4868 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 17:33:27.0903 4868 Smb - ok 17:33:27.0929 4868 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe 17:33:27.0941 4868 SNMPTRAP - ok 17:33:27.0956 4868 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 17:33:27.0965 4868 spldr - ok 17:33:27.0998 4868 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe 17:33:28.0012 4868 Spooler - ok 17:33:28.0048 4868 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys 17:33:28.0048 4868 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 17:33:28.0050 4868 sptd ( LockedFile.Multi.Generic ) - warning 17:33:28.0050 4868 sptd - detected LockedFile.Multi.Generic (1) 17:33:28.0083 4868 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 17:33:28.0099 4868 srv - ok 17:33:28.0130 4868 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys 17:33:28.0143 4868 srv2 - ok 17:33:28.0181 4868 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys 17:33:28.0194 4868 srvnet - ok 17:33:28.0208 4868 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll 17:33:28.0233 4868 SSDPSRV - ok 17:33:28.0252 4868 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll 17:33:28.0266 4868 SstpSvc - ok 17:33:28.0342 4868 Stereo Service (9bf7e58d9113ce15cf4f1e1b18ceff83) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 17:33:28.0356 4868 Stereo Service - ok 17:33:28.0477 4868 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll 17:33:28.0497 4868 stisvc - ok 17:33:28.0526 4868 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 17:33:28.0535 4868 swenum - ok 17:33:28.0561 4868 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll 17:33:28.0583 4868 swprv - ok 17:33:28.0598 4868 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 17:33:28.0607 4868 Symc8xx - ok 17:33:28.0621 4868 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 17:33:28.0629 4868 Sym_hi - ok 17:33:28.0648 4868 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 17:33:28.0657 4868 Sym_u3 - ok 17:33:28.0691 4868 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll 17:33:28.0717 4868 SysMain - ok 17:33:28.0743 4868 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll 17:33:28.0757 4868 TabletInputService - ok 17:33:28.0782 4868 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll 17:33:28.0802 4868 TapiSrv - ok 17:33:28.0815 4868 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll 17:33:28.0839 4868 TBS - ok 17:33:28.0888 4868 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys 17:33:28.0915 4868 Tcpip - ok 17:33:28.0946 4868 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys 17:33:28.0988 4868 Tcpip6 - ok 17:33:29.0026 4868 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 17:33:29.0038 4868 tcpipreg - ok 17:33:29.0051 4868 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 17:33:29.0073 4868 TDPIPE - ok 17:33:29.0090 4868 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 17:33:29.0112 4868 TDTCP - ok 17:33:29.0141 4868 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 17:33:29.0159 4868 tdx - ok 17:33:29.0183 4868 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 17:33:29.0193 4868 TermDD - ok 17:33:29.0229 4868 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll 17:33:29.0253 4868 TermService - ok 17:33:29.0290 4868 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll 17:33:29.0305 4868 Themes - ok 17:33:29.0323 4868 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 17:33:29.0346 4868 THREADORDER - ok 17:33:29.0356 4868 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll 17:33:29.0380 4868 TrkWks - ok 17:33:29.0423 4868 TrojanKillerDriver (113384367c3999e084fe156b18c7625e) C:\Windows\system32\DRIVERS\gtkdrv.sys 17:33:29.0431 4868 TrojanKillerDriver - ok 17:33:29.0458 4868 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe 17:33:29.0476 4868 TrustedInstaller - ok 17:33:29.0490 4868 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 17:33:29.0512 4868 tssecsrv - ok 17:33:29.0524 4868 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 17:33:29.0536 4868 tunmp - ok 17:33:29.0550 4868 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 17:33:29.0562 4868 tunnel - ok 17:33:29.0583 4868 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 17:33:29.0592 4868 uagp35 - ok 17:33:29.0623 4868 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 17:33:29.0642 4868 udfs - ok 17:33:29.0661 4868 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe 17:33:29.0685 4868 UI0Detect - ok 17:33:29.0698 4868 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 17:33:29.0708 4868 uliagpkx - ok 17:33:29.0727 4868 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 17:33:29.0739 4868 uliahci - ok 17:33:29.0756 4868 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 17:33:29.0766 4868 UlSata - ok 17:33:29.0785 4868 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 17:33:29.0794 4868 ulsata2 - ok 17:33:29.0808 4868 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 17:33:29.0830 4868 umbus - ok 17:33:29.0849 4868 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll 17:33:29.0875 4868 upnphost - ok 17:33:29.0902 4868 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys 17:33:29.0919 4868 usbaudio - ok 17:33:29.0939 4868 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 17:33:29.0957 4868 usbccgp - ok 17:33:29.0970 4868 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 17:33:30.0008 4868 usbcir - ok 17:33:30.0021 4868 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 17:33:30.0039 4868 usbehci - ok 17:33:30.0055 4868 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 17:33:30.0074 4868 usbhub - ok 17:33:30.0090 4868 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys 17:33:30.0108 4868 usbohci - ok 17:33:30.0126 4868 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 17:33:30.0149 4868 usbprint - ok 17:33:30.0172 4868 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 17:33:30.0189 4868 usbscan - ok 17:33:30.0203 4868 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 17:33:30.0221 4868 USBSTOR - ok 17:33:30.0237 4868 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 17:33:30.0254 4868 usbuhci - ok 17:33:30.0283 4868 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys 17:33:30.0306 4868 usbvideo - ok 17:33:30.0333 4868 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll 17:33:30.0352 4868 UxSms - ok 17:33:30.0381 4868 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe 17:33:30.0404 4868 vds - ok 17:33:30.0470 4868 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 17:33:30.0493 4868 vga - ok 17:33:30.0508 4868 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 17:33:30.0531 4868 VgaSave - ok 17:33:30.0556 4868 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 17:33:30.0565 4868 viaagp - ok 17:33:30.0581 4868 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 17:33:30.0604 4868 ViaC7 - ok 17:33:30.0619 4868 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 17:33:30.0628 4868 viaide - ok 17:33:30.0642 4868 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 17:33:30.0650 4868 volmgr - ok 17:33:30.0680 4868 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 17:33:30.0694 4868 volmgrx - ok 17:33:30.0720 4868 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 17:33:30.0732 4868 volsnap - ok 17:33:30.0748 4868 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 17:33:30.0758 4868 vsmraid - ok 17:33:30.0791 4868 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe 17:33:30.0825 4868 VSS - ok 17:33:30.0860 4868 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll 17:33:30.0882 4868 W32Time - ok 17:33:30.0900 4868 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 17:33:30.0939 4868 WacomPen - ok 17:33:30.0954 4868 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 17:33:30.0972 4868 Wanarp - ok 17:33:30.0976 4868 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 17:33:30.0995 4868 Wanarpv6 - ok 17:33:31.0016 4868 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll 17:33:31.0036 4868 wcncsvc - ok 17:33:31.0066 4868 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll 17:33:31.0085 4868 WcsPlugInService - ok 17:33:31.0100 4868 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 17:33:31.0109 4868 Wd - ok 17:33:31.0132 4868 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 17:33:31.0149 4868 Wdf01000 - ok 17:33:31.0164 4868 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 17:33:31.0188 4868 WdiServiceHost - ok 17:33:31.0192 4868 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 17:33:31.0216 4868 WdiSystemHost - ok 17:33:31.0234 4868 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll 17:33:31.0249 4868 WebClient - ok 17:33:31.0272 4868 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll 17:33:31.0287 4868 Wecsvc - ok 17:33:31.0299 4868 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll 17:33:31.0319 4868 wercplsupport - ok 17:33:31.0339 4868 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll 17:33:31.0358 4868 WerSvc - ok 17:33:31.0413 4868 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll 17:33:31.0425 4868 WinDefend - ok 17:33:31.0431 4868 WinHttpAutoProxySvc - ok 17:33:31.0453 4868 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll 17:33:31.0473 4868 Winmgmt - ok 17:33:31.0517 4868 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll 17:33:31.0557 4868 WinRM - ok 17:33:31.0601 4868 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll 17:33:31.0621 4868 Wlansvc - ok 17:33:31.0688 4868 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 17:33:31.0725 4868 wlidsvc - ok 17:33:31.0774 4868 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 17:33:31.0784 4868 WmiAcpi - ok 17:33:31.0815 4868 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe 17:33:31.0834 4868 wmiApSrv - ok 17:33:31.0863 4868 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe 17:33:31.0887 4868 WMPNetworkSvc - ok 17:33:31.0909 4868 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll 17:33:31.0923 4868 WPCSvc - ok 17:33:31.0945 4868 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll 17:33:31.0959 4868 WPDBusEnum - ok 17:33:32.0040 4868 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 17:33:32.0061 4868 WPFFontCache_v0400 - ok 17:33:32.0076 4868 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 17:33:32.0099 4868 ws2ifsl - ok 17:33:32.0126 4868 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\system32\wscsvc.dll 17:33:32.0140 4868 wscsvc - ok 17:33:32.0148 4868 WSearch - ok 17:33:32.0206 4868 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll 17:33:32.0252 4868 wuauserv - ok 17:33:32.0275 4868 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 17:33:32.0297 4868 WUDFRd - ok 17:33:32.0321 4868 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll 17:33:32.0345 4868 wudfsvc - ok 17:33:32.0369 4868 MBR (0x1B8) (3445151d084715ce5d153ca9ae5cb9f1) \Device\Harddisk0\DR0 17:33:32.0389 4868 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - infected 17:33:32.0389 4868 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.a (0) 17:33:32.0454 4868 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk5\DR5 17:33:32.0549 4868 \Device\Harddisk5\DR5 - ok 17:33:32.0572 4868 Boot (0x1200) (19dc900314afbbd18537291ca3f8ce7e) \Device\Harddisk0\DR0\Partition0 17:33:32.0573 4868 \Device\Harddisk0\DR0\Partition0 - ok 17:33:32.0588 4868 Boot (0x1200) (70b48f1e5fcff6407e2cac97a4e94d32) \Device\Harddisk0\DR0\Partition1 17:33:32.0589 4868 \Device\Harddisk0\DR0\Partition1 - ok 17:33:32.0592 4868 Boot (0x1200) (f417462a5f49055c932203112258d5fa) \Device\Harddisk0\DR0\Partition2 17:33:32.0594 4868 \Device\Harddisk0\DR0\Partition2 - ok 17:33:32.0600 4868 Boot (0x1200) (863545acab6eacf7a59b28d21cd0d038) \Device\Harddisk5\DR5\Partition0 17:33:32.0601 4868 \Device\Harddisk5\DR5\Partition0 - ok 17:33:32.0602 4868 ============================================================ 17:33:32.0602 4868 Scan finished 17:33:32.0602 4868 ============================================================ 17:33:32.0613 5132 Detected object count: 10 17:33:32.0614 5132 Actual detected object count: 10 17:37:25.0795 5132 epmntdrv ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0795 5132 epmntdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0798 5132 EuGdiDrv ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0798 5132 EuGdiDrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0801 5132 ezSharedSvc ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0801 5132 ezSharedSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0803 5132 McciCMService ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0803 5132 McciCMService ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0805 5132 MREMP50 ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0805 5132 MREMP50 ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0807 5132 MRESP50 ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0807 5132 MRESP50 ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0809 5132 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0809 5132 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0811 5132 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user 17:37:25.0811 5132 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:37:25.0813 5132 sptd ( LockedFile.Multi.Generic ) - skipped by user 17:37:25.0813 5132 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 17:37:25.0907 5132 \Device\Harddisk0\DR0\# - copied to quarantine 17:37:25.0907 5132 \Device\Harddisk0\DR0 - copied to quarantine 17:37:25.0972 5132 \Device\Harddisk0\DR0 - processing error 17:46:56.0052 5132 \Device\Harddisk0\DR0 - will be restored on reboot 17:46:56.0095 5132 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.a ) - User select action: Cure Restore 17:46:59.0727 4264 Deinitialize success

Изчакай че логът не ми харесва...има данни за зараза..малко трябва да помисля...! :)

През това време може да деинсталираш твоята версия на Аваст и да изтеглиш нова от тук..

http://avast.kaldata...ast-free-pro-is

Преди да инсталираш новата почисти със този инструмент:http://www.avast.com/uninstall-utility

Описано е как да си регистрираш версията...!

  • Автор

мерси много за аваста,ама нали ти казах,че съм си малко припрян.....:)....набарах си exe/то в другия комп имам папка инстал,ако преинсталирам уиндоус,свалих си го на флашката и взе че тръгна сега сканирам,и регистрация съм направил,с нов потребител...;) а иначе от заразеният комп 3 пъти деинсталирам и свалям и все не тръгваше....

  • Автор

19:26:36.0204 5796 TDSS rootkit removing tool 2.7.26.0 Apr 4 2012 19:52:02 19:26:37.0257 5796 ============================================================ 19:26:37.0258 5796 Current date / time: 2012/04/05 19:26:37.0257 19:26:37.0258 5796 SystemInfo: 19:26:37.0258 5796 19:26:37.0258 5796 OS Version: 6.0.6002 ServicePack: 2.0 19:26:37.0258 5796 Product type: Workstation 19:26:37.0258 5796 ComputerName: KALIN 19:26:37.0258 5796 UserName: kalin2 19:26:37.0258 5796 Windows directory: C:\Windows 19:26:37.0258 5796 System windows directory: C:\Windows 19:26:37.0258 5796 Processor architecture: Intel x86 19:26:37.0258 5796 Number of processors: 4 19:26:37.0258 5796 Page size: 0x1000 19:26:37.0258 5796 Boot type: Normal boot 19:26:37.0258 5796 ============================================================ 19:26:37.0634 5796 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 19:26:37.0647 5796 Drive \Device\Harddisk5\DR6 - Size: 0xEF000000 (3.73 Gb), SectorSize: 0x200, Cylinders: 0x1E7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 19:26:37.0648 5796 \Device\Harddisk0\DR0: 19:26:37.0648 5796 MBR used 19:26:37.0648 5796 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1801F5F, BlocksNum 0x2C8C8ABC 19:26:37.0648 5796 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2E0CAA1B, BlocksNum 0x15160FC5 19:26:37.0689 5796 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x4322BA1F, BlocksNum 0x762B4A2 19:26:37.0689 5796 \Device\Harddisk5\DR6: 19:26:37.0690 5796 MBR used 19:26:37.0690 5796 \Device\Harddisk5\DR6\Partition0: MBR, Type 0xB, StartLBA 0x1F80, BlocksNum 0x776080 19:26:37.0754 5796 Initialize success 19:26:37.0755 5796 ============================================================ 19:26:49.0662 5656 ============================================================ 19:26:49.0662 5656 Scan started 19:26:49.0662 5656 Mode: Manual; SigCheck; TDLFS; 19:26:49.0662 5656 ============================================================ 19:26:51.0174 5656 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 19:26:51.0276 5656 ACPI - ok 19:26:51.0314 5656 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 19:26:51.0335 5656 adp94xx - ok 19:26:51.0429 5656 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 19:26:51.0450 5656 adpahci - ok 19:26:51.0506 5656 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 19:26:51.0518 5656 adpu160m - ok 19:26:51.0537 5656 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 19:26:51.0558 5656 adpu320 - ok 19:26:51.0574 5656 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll 19:26:51.0656 5656 AeLookupSvc - ok 19:26:51.0698 5656 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys 19:26:51.0758 5656 AFD - ok 19:26:51.0778 5656 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 19:26:51.0788 5656 agp440 - ok 19:26:51.0800 5656 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 19:26:51.0812 5656 aic78xx - ok 19:26:51.0829 5656 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe 19:26:51.0910 5656 ALG - ok 19:26:51.0929 5656 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 19:26:51.0939 5656 aliide - ok 19:26:51.0953 5656 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 19:26:51.0963 5656 amdagp - ok 19:26:51.0979 5656 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 19:26:51.0988 5656 amdide - ok 19:26:52.0005 5656 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 19:26:52.0058 5656 AmdK7 - ok 19:26:52.0076 5656 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys 19:26:52.0108 5656 AmdK8 - ok 19:26:52.0129 5656 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll 19:26:52.0162 5656 Appinfo - ok 19:26:52.0235 5656 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 19:26:52.0247 5656 arc - ok 19:26:52.0261 5656 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 19:26:52.0273 5656 arcsas - ok 19:26:52.0300 5656 aswFsBlk (1b6ed99291ddf5d2501554cc5757aab6) C:\Windows\system32\drivers\aswFsBlk.sys 19:26:52.0333 5656 aswFsBlk - ok 19:26:52.0364 5656 aswMonFlt (58254e06b36b984e33ae314c0ea8f1a5) C:\Windows\system32\drivers\aswMonFlt.sys 19:26:52.0374 5656 aswMonFlt - ok 19:26:52.0393 5656 aswRdr (3e2b6112d2766f87eda8466fde86a986) C:\Windows\system32\drivers\aswRdr.sys 19:26:52.0401 5656 aswRdr - ok 19:26:52.0454 5656 aswSP (d78b644816db540e103d0b0766fd9967) C:\Windows\system32\drivers\aswSP.sys 19:26:52.0464 5656 aswSP - ok 19:26:52.0526 5656 aswTdi (606d731008d98b6ef946730c597c1642) C:\Windows\system32\drivers\aswTdi.sys 19:26:52.0534 5656 aswTdi - ok 19:26:52.0585 5656 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 19:26:52.0637 5656 AsyncMac - ok 19:26:52.0659 5656 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 19:26:52.0681 5656 atapi - ok 19:26:52.0780 5656 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 19:26:52.0811 5656 AudioEndpointBuilder - ok 19:26:52.0818 5656 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 19:26:52.0841 5656 Audiosrv - ok 19:26:52.0926 5656 avast! Antivirus (ae28ba1361d8040d8850f21cacfccce9) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 19:26:52.0936 5656 avast! Antivirus - ok 19:26:52.0941 5656 avast! Mail Scanner (ae28ba1361d8040d8850f21cacfccce9) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 19:26:52.0950 5656 avast! Mail Scanner - ok 19:26:52.0956 5656 avast! Web Scanner (ae28ba1361d8040d8850f21cacfccce9) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 19:26:52.0965 5656 avast! Web Scanner - ok 19:26:53.0012 5656 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 19:26:53.0052 5656 Beep - ok 19:26:53.0089 5656 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll 19:26:53.0144 5656 BFE - ok 19:26:53.0212 5656 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\system32\qmgr.dll 19:26:53.0285 5656 BITS - ok 19:26:53.0297 5656 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 19:26:53.0321 5656 blbdrive - ok 19:26:53.0340 5656 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 19:26:53.0364 5656 bowser - ok 19:26:53.0379 5656 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 19:26:53.0409 5656 BrFiltLo - ok 19:26:53.0435 5656 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 19:26:53.0463 5656 BrFiltUp - ok 19:26:53.0490 5656 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll 19:26:53.0551 5656 Browser - ok 19:26:53.0570 5656 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 19:26:53.0706 5656 Brserid - ok 19:26:53.0781 5656 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 19:26:53.0822 5656 BrSerWdm - ok 19:26:53.0839 5656 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 19:26:53.0889 5656 BrUsbMdm - ok 19:26:53.0923 5656 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 19:26:53.0969 5656 BrUsbSer - ok 19:26:53.0993 5656 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 19:26:54.0040 5656 BTHMODEM - ok 19:26:54.0163 5656 catchme - ok 19:26:54.0206 5656 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 19:26:54.0238 5656 cdfs - ok 19:26:54.0267 5656 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 19:26:54.0299 5656 cdrom - ok 19:26:54.0324 5656 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 19:26:54.0363 5656 CertPropSvc - ok 19:26:54.0376 5656 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys 19:26:54.0399 5656 circlass - ok 19:26:54.0447 5656 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 19:26:54.0463 5656 CLFS - ok 19:26:54.0560 5656 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 19:26:54.0571 5656 clr_optimization_v2.0.50727_32 - ok 19:26:54.0657 5656 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 19:26:54.0669 5656 clr_optimization_v4.0.30319_32 - ok 19:26:54.0688 5656 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 19:26:54.0698 5656 cmdide - ok 19:26:54.0710 5656 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\drivers\compbatt.sys 19:26:54.0720 5656 Compbatt - ok 19:26:54.0726 5656 COMSysApp - ok 19:26:54.0753 5656 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 19:26:54.0764 5656 crcdisk - ok 19:26:54.0786 5656 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 19:26:54.0821 5656 Crusoe - ok 19:26:54.0854 5656 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll 19:26:54.0881 5656 CryptSvc - ok 19:26:54.0920 5656 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 19:26:54.0983 5656 DcomLaunch - ok 19:26:55.0016 5656 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys 19:26:55.0048 5656 DfsC - ok 19:26:55.0105 5656 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe 19:26:55.0210 5656 DFSR - ok 19:26:55.0237 5656 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll 19:26:55.0265 5656 Dhcp - ok 19:26:55.0325 5656 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 19:26:55.0337 5656 disk - ok 19:26:55.0381 5656 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll 19:26:55.0404 5656 Dnscache - ok 19:26:55.0433 5656 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll 19:26:55.0461 5656 dot3svc - ok 19:26:55.0501 5656 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys 19:26:55.0548 5656 Dot4 - ok 19:26:55.0583 5656 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys 19:26:55.0607 5656 Dot4Print - ok 19:26:55.0647 5656 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys 19:26:55.0682 5656 dot4usb - ok 19:26:55.0698 5656 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll 19:26:55.0724 5656 DPS - ok 19:26:55.0751 5656 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 19:26:55.0779 5656 drmkaud - ok 19:26:55.0829 5656 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 19:26:55.0863 5656 DXGKrnl - ok 19:26:55.0911 5656 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 19:26:55.0942 5656 E1G60 - ok 19:26:55.0954 5656 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll 19:26:55.0982 5656 EapHost - ok 19:26:56.0012 5656 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 19:26:56.0025 5656 Ecache - ok 19:26:56.0103 5656 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe 19:26:56.0129 5656 ehRecvr - ok 19:26:56.0139 5656 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe 19:26:56.0177 5656 ehSched - ok 19:26:56.0198 5656 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll 19:26:56.0214 5656 ehstart - ok 19:26:56.0238 5656 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 19:26:56.0256 5656 elxstor - ok 19:26:56.0308 5656 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll 19:26:56.0375 5656 EMDMgmt - ok 19:26:56.0443 5656 epmntdrv (539ca34fbc74ec366a0d751028c32a08) C:\Windows\system32\epmntdrv.sys 19:26:56.0459 5656 epmntdrv ( UnsignedFile.Multi.Generic ) - warning 19:26:56.0459 5656 epmntdrv - detected UnsignedFile.Multi.Generic (1) 19:26:56.0472 5656 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 19:26:56.0500 5656 ErrDev - ok 19:26:56.0518 5656 EuGdiDrv (1f2f4ab15ce03ecc257feb2f6dc5a013) C:\Windows\system32\EuGdiDrv.sys 19:26:56.0529 5656 EuGdiDrv ( UnsignedFile.Multi.Generic ) - warning 19:26:56.0529 5656 EuGdiDrv - detected UnsignedFile.Multi.Generic (1) 19:26:56.0550 5656 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll 19:26:56.0588 5656 EventSystem - ok 19:26:56.0613 5656 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 19:26:56.0643 5656 exfat - ok 19:26:56.0679 5656 ezSharedSvc (42f721c52eef2d6df9372a53813a83ef) C:\Windows\System32\ezsvc7.dll 19:26:56.0695 5656 ezSharedSvc ( UnsignedFile.Multi.Generic ) - warning 19:26:56.0695 5656 ezSharedSvc - detected UnsignedFile.Multi.Generic (1) 19:26:56.0728 5656 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 19:26:56.0764 5656 fastfat - ok 19:26:56.0813 5656 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 19:26:56.0846 5656 fdc - ok 19:26:56.0867 5656 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll 19:26:56.0891 5656 fdPHost - ok 19:26:56.0919 5656 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll 19:26:56.0959 5656 FDResPub - ok 19:26:56.0979 5656 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 19:26:56.0989 5656 FileInfo - ok 19:26:57.0009 5656 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 19:26:57.0042 5656 Filetrace - ok 19:26:57.0059 5656 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 19:26:57.0089 5656 flpydisk - ok 19:26:57.0128 5656 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 19:26:57.0142 5656 FltMgr - ok 19:26:57.0186 5656 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll 19:26:57.0285 5656 FontCache - ok 19:26:57.0354 5656 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 19:26:57.0363 5656 FontCache3.0.0.0 - ok 19:26:57.0373 5656 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 19:26:57.0404 5656 Fs_Rec - ok 19:26:57.0417 5656 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 19:26:57.0427 5656 gagp30kx - ok 19:26:57.0499 5656 GoogleDesktopManager-051210-111108 (9f5f2f0fb0a7f5aa9f16b9a7b6dad89f) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 19:26:57.0508 5656 GoogleDesktopManager-051210-111108 - ok 19:26:57.0530 5656 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll 19:26:57.0598 5656 gpsvc - ok 19:26:57.0645 5656 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 19:26:57.0667 5656 gupdate - ok 19:26:57.0679 5656 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 19:26:57.0688 5656 gupdatem - ok 19:26:57.0722 5656 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 19:26:57.0805 5656 HDAudBus - ok 19:26:57.0820 5656 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 19:26:57.0860 5656 HidBth - ok 19:26:57.0880 5656 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 19:26:57.0928 5656 HidIr - ok 19:26:57.0947 5656 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\System32\hidserv.dll 19:26:57.0980 5656 hidserv - ok 19:26:58.0021 5656 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 19:26:58.0046 5656 HidUsb - ok 19:26:58.0082 5656 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll 19:26:58.0113 5656 hkmsvc - ok 19:26:58.0124 5656 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 19:26:58.0134 5656 HpCISSs - ok 19:26:58.0161 5656 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 19:26:58.0236 5656 HTTP - ok 19:26:58.0268 5656 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 19:26:58.0278 5656 i2omp - ok 19:26:58.0317 5656 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 19:26:58.0349 5656 i8042prt - ok 19:26:58.0368 5656 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 19:26:58.0382 5656 iaStorV - ok 19:26:58.0473 5656 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 19:26:58.0551 5656 idsvc - ok 19:26:58.0577 5656 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 19:26:58.0587 5656 iirsp - ok 19:26:58.0611 5656 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll 19:26:58.0661 5656 IKEEXT - ok 19:26:58.0737 5656 IntcAzAudAddService (2deb2538c9372568bb67b5fdf2359790) C:\Windows\system32\drivers\RTKVHDA.sys 19:26:58.0797 5656 IntcAzAudAddService - ok 19:26:58.0825 5656 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 19:26:58.0835 5656 intelide - ok 19:26:58.0850 5656 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 19:26:58.0877 5656 intelppm - ok 19:26:58.0917 5656 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll 19:26:58.0950 5656 IPBusEnum - ok 19:26:58.0970 5656 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 19:26:59.0001 5656 IpFilterDriver - ok 19:26:59.0021 5656 iphlpsvc (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll 19:26:59.0062 5656 iphlpsvc - ok 19:26:59.0069 5656 IpInIp - ok 19:26:59.0084 5656 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 19:26:59.0115 5656 IPMIDRV - ok 19:26:59.0134 5656 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 19:26:59.0159 5656 IPNAT - ok 19:26:59.0176 5656 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 19:26:59.0202 5656 IRENUM - ok 19:26:59.0219 5656 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 19:26:59.0230 5656 isapnp - ok 19:26:59.0278 5656 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 19:26:59.0292 5656 iScsiPrt - ok 19:26:59.0306 5656 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 19:26:59.0316 5656 iteatapi - ok 19:26:59.0332 5656 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 19:26:59.0342 5656 iteraid - ok 19:26:59.0353 5656 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 19:26:59.0363 5656 kbdclass - ok 19:26:59.0382 5656 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\drivers\kbdhid.sys 19:26:59.0415 5656 kbdhid - ok 19:26:59.0442 5656 KeyIso (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 19:26:59.0473 5656 KeyIso - ok 19:26:59.0514 5656 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys 19:26:59.0534 5656 KSecDD - ok 19:26:59.0610 5656 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll 19:26:59.0670 5656 KtmRm - ok 19:26:59.0723 5656 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\System32\srvsvc.dll 19:26:59.0750 5656 LanmanServer - ok 19:26:59.0777 5656 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll 19:26:59.0810 5656 LanmanWorkstation - ok 19:26:59.0825 5656 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 19:26:59.0854 5656 lltdio - ok 19:26:59.0880 5656 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll 19:26:59.0913 5656 lltdsvc - ok 19:26:59.0925 5656 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll 19:26:59.0965 5656 lmhosts - ok 19:26:59.0994 5656 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 19:27:00.0006 5656 LSI_FC - ok 19:27:00.0033 5656 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 19:27:00.0044 5656 LSI_SAS - ok 19:27:00.0060 5656 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 19:27:00.0071 5656 LSI_SCSI - ok 19:27:00.0092 5656 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 19:27:00.0123 5656 luafv - ok 19:27:00.0215 5656 LVcKap (fb548ff809634bfa866312b37d8a18ae) C:\Windows\system32\DRIVERS\LVcKap.sys 19:27:00.0290 5656 LVcKap - ok 19:27:00.0377 5656 LVCOMSer (14e4cc4d46169759d874f57604ea6be5) C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe 19:27:00.0389 5656 LVCOMSer - ok 19:27:00.0463 5656 LVMVDrv (fe3fb994f8702d9e37648927819b74b8) C:\Windows\system32\DRIVERS\LVMVDrv.sys 19:27:00.0520 5656 LVMVDrv - ok 19:27:00.0540 5656 LVPr2Mon (c7ea51f1ab10b0b2b443f4d5589fc1a5) C:\Windows\system32\DRIVERS\LVPr2Mon.sys 19:27:00.0549 5656 LVPr2Mon - ok 19:27:00.0560 5656 LVPrcSrv (b2d04e813ba12ab179daf0b9fdecba3d) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe 19:27:00.0569 5656 LVPrcSrv - ok 19:27:00.0587 5656 LVSrvLauncher (a7a2ef5000007ca361da1e2b99df8c57) C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe 19:27:00.0597 5656 LVSrvLauncher - ok 19:27:00.0604 5656 LVUSBSta - ok 19:27:00.0733 5656 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys 19:27:00.0742 5656 MBAMProtector - ok 19:27:00.0768 5656 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 19:27:00.0789 5656 MBAMService - ok 19:27:00.0852 5656 McciCMService (f8b823414a22dbf3bec10dcaa5f93cd8) C:\Program Files\Common Files\Motive\McciCMService.exe 19:27:00.0883 5656 McciCMService ( UnsignedFile.Multi.Generic ) - warning 19:27:00.0883 5656 McciCMService - detected UnsignedFile.Multi.Generic (1) 19:27:00.0904 5656 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll 19:27:00.0930 5656 Mcx2Svc - ok 19:27:00.0948 5656 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 19:27:00.0959 5656 megasas - ok 19:27:00.0984 5656 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 19:27:01.0002 5656 MegaSR - ok 19:27:01.0021 5656 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 19:27:01.0057 5656 MMCSS - ok 19:27:01.0081 5656 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 19:27:01.0111 5656 Modem - ok 19:27:01.0126 5656 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 19:27:01.0156 5656 monitor - ok 19:27:01.0182 5656 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 19:27:01.0192 5656 mouclass - ok 19:27:01.0206 5656 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\drivers\mouhid.sys 19:27:01.0230 5656 mouhid - ok 19:27:01.0246 5656 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 19:27:01.0256 5656 MountMgr - ok 19:27:01.0270 5656 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 19:27:01.0282 5656 mpio - ok 19:27:01.0294 5656 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 19:27:01.0322 5656 mpsdrv - ok 19:27:01.0345 5656 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll 19:27:01.0386 5656 MpsSvc - ok 19:27:01.0404 5656 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 19:27:01.0432 5656 Mraid35x - ok 19:27:01.0489 5656 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 19:27:01.0501 5656 MREMP50 ( UnsignedFile.Multi.Generic ) - warning 19:27:01.0501 5656 MREMP50 - detected UnsignedFile.Multi.Generic (1) 19:27:01.0505 5656 MREMPR5 - ok 19:27:01.0510 5656 MRENDIS5 - ok 19:27:01.0544 5656 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 19:27:01.0549 5656 MRESP50 ( UnsignedFile.Multi.Generic ) - warning 19:27:01.0549 5656 MRESP50 - detected UnsignedFile.Multi.Generic (1) 19:27:01.0572 5656 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 19:27:01.0591 5656 MRxDAV - ok 19:27:01.0626 5656 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys 19:27:01.0649 5656 mrxsmb - ok 19:27:01.0682 5656 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys 19:27:01.0707 5656 mrxsmb10 - ok 19:27:01.0724 5656 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 19:27:01.0738 5656 mrxsmb20 - ok 19:27:01.0756 5656 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys 19:27:01.0765 5656 msahci - ok 19:27:01.0781 5656 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 19:27:01.0792 5656 msdsm - ok 19:27:01.0820 5656 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe 19:27:01.0867 5656 MSDTC - ok 19:27:01.0880 5656 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 19:27:01.0910 5656 Msfs - ok 19:27:01.0920 5656 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 19:27:01.0931 5656 msisadrv - ok 19:27:01.0956 5656 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll 19:27:01.0993 5656 MSiSCSI - ok 19:27:02.0000 5656 msiserver - ok 19:27:02.0019 5656 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 19:27:02.0049 5656 MSKSSRV - ok 19:27:02.0067 5656 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 19:27:02.0095 5656 MSPCLOCK - ok 19:27:02.0103 5656 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 19:27:02.0126 5656 MSPQM - ok 19:27:02.0163 5656 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 19:27:02.0176 5656 MsRPC - ok 19:27:02.0193 5656 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 19:27:02.0203 5656 mssmbios - ok 19:27:02.0245 5656 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 19:27:02.0269 5656 MSTEE - ok 19:27:02.0277 5656 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 19:27:02.0288 5656 Mup - ok 19:27:02.0320 5656 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll 19:27:02.0355 5656 napagent - ok 19:27:02.0392 5656 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 19:27:02.0413 5656 NativeWifiP - ok 19:27:02.0443 5656 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 19:27:02.0473 5656 NDIS - ok 19:27:02.0491 5656 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 19:27:02.0515 5656 NdisTapi - ok 19:27:02.0535 5656 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 19:27:02.0559 5656 Ndisuio - ok 19:27:02.0580 5656 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 19:27:02.0625 5656 NdisWan - ok 19:27:02.0644 5656 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 19:27:02.0668 5656 NDProxy - ok 19:27:02.0753 5656 Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll 19:27:02.0769 5656 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 19:27:02.0769 5656 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 19:27:02.0780 5656 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 19:27:02.0804 5656 NetBIOS - ok 19:27:02.0866 5656 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 19:27:02.0888 5656 netbt - ok 19:27:02.0925 5656 Netlogon (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 19:27:02.0942 5656 Netlogon - ok 19:27:02.0970 5656 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll 19:27:03.0008 5656 Netman - ok 19:27:03.0045 5656 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll 19:27:03.0083 5656 netprofm - ok 19:27:03.0129 5656 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 19:27:03.0141 5656 NetTcpPortSharing - ok 19:27:03.0172 5656 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 19:27:03.0182 5656 nfrd960 - ok 19:27:03.0196 5656 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll 19:27:03.0224 5656 NlaSvc - ok 19:27:03.0245 5656 NMIndexingService - ok 19:27:03.0271 5656 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 19:27:03.0292 5656 Npfs - ok 19:27:03.0305 5656 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll 19:27:03.0337 5656 nsi - ok 19:27:03.0354 5656 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 19:27:03.0387 5656 nsiproxy - ok 19:27:03.0432 5656 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 19:27:03.0491 5656 Ntfs - ok 19:27:03.0513 5656 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 19:27:03.0553 5656 ntrigdigi - ok 19:27:03.0571 5656 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 19:27:03.0594 5656 Null - ok 19:27:03.0640 5656 NVENETFD (b896fb556b4dc1e1d2943559ea79c5c5) C:\Windows\system32\DRIVERS\nvmfdx32.sys 19:27:03.0734 5656 NVENETFD - ok 19:27:03.0991 5656 nvlddmkm (4152708c0c24e30dae7fa87d5afe1d7b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 19:27:04.0263 5656 nvlddmkm - ok 19:27:04.0286 5656 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 19:27:04.0297 5656 nvraid - ok 19:27:04.0325 5656 nvrd32 (f2abab0c99237ce4e97478af2e0438a0) C:\Windows\system32\drivers\nvrd32.sys 19:27:04.0343 5656 nvrd32 - ok 19:27:04.0358 5656 nvsmu (7ec12a73067baca25a8e3e2a58ae83d8) C:\Windows\system32\drivers\nvsmu.sys 19:27:04.0386 5656 nvsmu - ok 19:27:04.0405 5656 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 19:27:04.0415 5656 nvstor - ok 19:27:04.0433 5656 nvstor32 (3fce358f5845ccbaa2e877cc74a5c729) C:\Windows\system32\drivers\nvstor32.sys 19:27:04.0442 5656 nvstor32 - ok 19:27:04.0494 5656 nvsvc (26db28b32e8d2f57cb5065a4a053801a) C:\Windows\system32\nvvsvc.exe 19:27:04.0524 5656 nvsvc - ok 19:27:04.0675 5656 nvUpdatusService (a19bbe1e3e3fef50b94ca07dcc0fb776) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe 19:27:04.0769 5656 nvUpdatusService - ok 19:27:04.0791 5656 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 19:27:04.0805 5656 nv_agp - ok 19:27:04.0813 5656 NwlnkFlt - ok 19:27:04.0824 5656 NwlnkFwd - ok 19:27:04.0854 5656 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 19:27:04.0881 5656 ohci1394 - ok 19:27:04.0912 5656 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 19:27:05.0000 5656 p2pimsvc - ok 19:27:05.0015 5656 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 19:27:05.0053 5656 p2psvc - ok 19:27:05.0069 5656 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 19:27:05.0115 5656 Parport - ok 19:27:05.0141 5656 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 19:27:05.0152 5656 partmgr - ok 19:27:05.0188 5656 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 19:27:05.0240 5656 Parvdm - ok 19:27:05.0266 5656 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll 19:27:05.0298 5656 PcaSvc - ok 19:27:05.0327 5656 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 19:27:05.0344 5656 pci - ok 19:27:05.0358 5656 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys 19:27:05.0370 5656 pciide - ok 19:27:05.0387 5656 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 19:27:05.0400 5656 pcmcia - ok 19:27:05.0427 5656 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 19:27:05.0492 5656 PEAUTH - ok 19:27:05.0523 5656 PID_PEPI - ok 19:27:05.0575 5656 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll 19:27:05.0686 5656 pla - ok 19:27:05.0712 5656 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll 19:27:05.0737 5656 PlugPlay - ok 19:27:05.0812 5656 Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll 19:27:05.0818 5656 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 19:27:05.0818 5656 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 19:27:05.0854 5656 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 19:27:05.0890 5656 PNRPAutoReg - ok 19:27:05.0929 5656 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 19:27:05.0971 5656 PNRPsvc - ok 19:27:06.0055 5656 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll 19:27:06.0131 5656 PolicyAgent - ok 19:27:06.0153 5656 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 19:27:06.0189 5656 PptpMiniport - ok 19:27:06.0204 5656 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 19:27:06.0228 5656 Processor - ok 19:27:06.0261 5656 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll 19:27:06.0300 5656 ProfSvc - ok 19:27:06.0334 5656 ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 19:27:06.0347 5656 ProtectedStorage - ok 19:27:06.0371 5656 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 19:27:06.0401 5656 PSched - ok 19:27:06.0443 5656 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\Windows\system32\Drivers\PxHelp20.sys 19:27:06.0455 5656 PxHelp20 - ok 19:27:06.0494 5656 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 19:27:06.0558 5656 ql2300 - ok 19:27:06.0574 5656 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 19:27:06.0585 5656 ql40xx - ok 19:27:06.0606 5656 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll 19:27:06.0636 5656 QWAVE - ok 19:27:06.0667 5656 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 19:27:06.0685 5656 QWAVEdrv - ok 19:27:06.0713 5656 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 19:27:06.0745 5656 RasAcd - ok 19:27:06.0764 5656 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll 19:27:06.0796 5656 RasAuto - ok 19:27:06.0816 5656 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 19:27:06.0843 5656 Rasl2tp - ok 19:27:06.0905 5656 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll 19:27:06.0940 5656 RasMan - ok 19:27:06.0966 5656 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 19:27:06.0993 5656 RasPppoe - ok 19:27:07.0013 5656 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 19:27:07.0028 5656 RasSstp - ok 19:27:07.0061 5656 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 19:27:07.0088 5656 rdbss - ok 19:27:07.0118 5656 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 19:27:07.0147 5656 RDPCDD - ok 19:27:07.0174 5656 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 19:27:07.0201 5656 rdpdr - ok 19:27:07.0214 5656 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 19:27:07.0238 5656 RDPENCDD - ok 19:27:07.0283 5656 RDPWD (79c6df8477250f5c54f7c5ae1d6b814e) C:\Windows\system32\drivers\RDPWD.sys 19:27:07.0315 5656 RDPWD - ok 19:27:07.0343 5656 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll 19:27:07.0381 5656 RemoteAccess - ok 19:27:07.0418 5656 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll 19:27:07.0452 5656 RemoteRegistry - ok 19:27:07.0471 5656 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe 19:27:07.0494 5656 RpcLocator - ok 19:27:07.0520 5656 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 19:27:07.0547 5656 RpcSs - ok 19:27:07.0581 5656 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 19:27:07.0618 5656 rspndr - ok 19:27:07.0659 5656 SamSs (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 19:27:07.0673 5656 SamSs - ok 19:27:07.0690 5656 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 19:27:07.0709 5656 sbp2port - ok 19:27:07.0737 5656 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll 19:27:07.0758 5656 SCardSvr - ok 19:27:07.0804 5656 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll 19:27:07.0858 5656 Schedule - ok 19:27:07.0890 5656 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 19:27:07.0909 5656 SCPolicySvc - ok 19:27:07.0932 5656 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll 19:27:07.0963 5656 SDRSVC - ok 19:27:07.0986 5656 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 19:27:08.0033 5656 secdrv - ok 19:27:08.0051 5656 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll 19:27:08.0076 5656 seclogon - ok 19:27:08.0103 5656 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\system32\sens.dll 19:27:08.0139 5656 SENS - ok 19:27:08.0158 5656 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 19:27:08.0205 5656 Serenum - ok 19:27:08.0226 5656 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 19:27:08.0272 5656 Serial - ok 19:27:08.0288 5656 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 19:27:08.0311 5656 sermouse - ok 19:27:08.0332 5656 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll 19:27:08.0358 5656 SessionEnv - ok 19:27:08.0372 5656 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 19:27:08.0401 5656 sffdisk - ok 19:27:08.0418 5656 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 19:27:08.0458 5656 sffp_mmc - ok 19:27:08.0469 5656 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 19:27:08.0492 5656 sffp_sd - ok 19:27:08.0508 5656 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 19:27:08.0553 5656 sfloppy - ok 19:27:08.0590 5656 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll 19:27:08.0619 5656 SharedAccess - ok 19:27:08.0647 5656 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll 19:27:08.0683 5656 ShellHWDetection - ok 19:27:08.0711 5656 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 19:27:08.0721 5656 sisagp - ok 19:27:08.0757 5656 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 19:27:08.0767 5656 SiSRaid2 - ok 19:27:08.0785 5656 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 19:27:08.0796 5656 SiSRaid4 - ok 19:27:08.0901 5656 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe 19:27:09.0082 5656 slsvc - ok 19:27:09.0111 5656 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll 19:27:09.0136 5656 SLUINotify - ok 19:27:09.0159 5656 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 19:27:09.0183 5656 Smb - ok 19:27:09.0211 5656 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe 19:27:09.0225 5656 SNMPTRAP - ok 19:27:09.0254 5656 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 19:27:09.0264 5656 spldr - ok 19:27:09.0288 5656 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe 19:27:09.0320 5656 Spooler - ok 19:27:09.0354 5656 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys 19:27:09.0355 5656 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 19:27:09.0357 5656 sptd ( LockedFile.Multi.Generic ) - warning 19:27:09.0357 5656 sptd - detected LockedFile.Multi.Generic (1) 19:27:09.0389 5656 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 19:27:09.0425 5656 srv - ok 19:27:09.0462 5656 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys 19:27:09.0495 5656 srv2 - ok 19:27:09.0538 5656 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys 19:27:09.0560 5656 srvnet - ok 19:27:09.0573 5656 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll 19:27:09.0606 5656 SSDPSRV - ok 19:27:09.0626 5656 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll 19:27:09.0642 5656 SstpSvc - ok 19:27:09.0715 5656 Stereo Service (9bf7e58d9113ce15cf4f1e1b18ceff83) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 19:27:09.0759 5656 Stereo Service - ok 19:27:09.0800 5656 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll 19:27:09.0856 5656 stisvc - ok 19:27:09.0874 5656 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 19:27:09.0884 5656 swenum - ok 19:27:09.0909 5656 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll 19:27:09.0938 5656 swprv - ok 19:27:09.0955 5656 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 19:27:09.0965 5656 Symc8xx - ok 19:27:09.0978 5656 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 19:27:09.0988 5656 Sym_hi - ok 19:27:10.0004 5656 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 19:27:10.0014 5656 Sym_u3 - ok 19:27:10.0064 5656 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll 19:27:10.0095 5656 SysMain - ok 19:27:10.0116 5656 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll 19:27:10.0139 5656 TabletInputService - ok 19:27:10.0172 5656 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll 19:27:10.0202 5656 TapiSrv - ok 19:27:10.0222 5656 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll 19:27:10.0247 5656 TBS - ok 19:27:10.0295 5656 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys 19:27:10.0333 5656 Tcpip - ok 19:27:10.0353 5656 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys 19:27:10.0381 5656 Tcpip6 - ok 19:27:10.0408 5656 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 19:27:10.0433 5656 tcpipreg - ok 19:27:10.0449 5656 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 19:27:10.0480 5656 TDPIPE - ok 19:27:10.0497 5656 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 19:27:10.0521 5656 TDTCP - ok 19:27:10.0556 5656 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 19:27:10.0583 5656 tdx - ok 19:27:10.0606 5656 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 19:27:10.0617 5656 TermDD - ok 19:27:10.0660 5656 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll 19:27:10.0699 5656 TermService - ok 19:27:10.0739 5656 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll 19:27:10.0762 5656 Themes - ok 19:27:10.0796 5656 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 19:27:10.0820 5656 THREADORDER - ok 19:27:10.0846 5656 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll 19:27:10.0872 5656 TrkWks - ok 19:27:10.0913 5656 TrojanKillerDriver (113384367c3999e084fe156b18c7625e) C:\Windows\system32\DRIVERS\gtkdrv.sys 19:27:10.0922 5656 TrojanKillerDriver - ok 19:27:10.0948 5656 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe 19:27:10.0970 5656 TrustedInstaller - ok 19:27:10.0997 5656 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 19:27:11.0020 5656 tssecsrv - ok 19:27:11.0047 5656 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 19:27:11.0070 5656 tunmp - ok 19:27:11.0090 5656 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 19:27:11.0112 5656 tunnel - ok 19:27:11.0131 5656 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 19:27:11.0141 5656 uagp35 - ok 19:27:11.0188 5656 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 19:27:11.0210 5656 udfs - ok 19:27:11.0234 5656 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe 19:27:11.0270 5656 UI0Detect - ok 19:27:11.0296 5656 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 19:27:11.0316 5656 uliagpkx - ok 19:27:11.0333 5656 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 19:27:11.0347 5656 uliahci - ok 19:27:11.0363 5656 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 19:27:11.0374 5656 UlSata - ok 19:27:11.0392 5656 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 19:27:11.0404 5656 ulsata2 - ok 19:27:11.0422 5656 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 19:27:11.0446 5656 umbus - ok 19:27:11.0480 5656 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll 19:27:11.0519 5656 upnphost - ok 19:27:11.0550 5656 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys 19:27:11.0580 5656 usbaudio - ok 19:27:11.0621 5656 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 19:27:11.0651 5656 usbccgp - ok 19:27:11.0668 5656 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 19:27:11.0715 5656 usbcir - ok 19:27:11.0728 5656 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 19:27:11.0769 5656 usbehci - ok 19:27:11.0787 5656 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 19:27:11.0816 5656 usbhub - ok 19:27:11.0830 5656 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys 19:27:11.0858 5656 usbohci - ok 19:27:11.0875 5656 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 19:27:11.0899 5656 usbprint - ok 19:27:11.0920 5656 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 19:27:11.0950 5656 usbscan - ok 19:27:11.0976 5656 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 19:27:11.0996 5656 USBSTOR - ok 19:27:12.0010 5656 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 19:27:12.0036 5656 usbuhci - ok 19:27:12.0065 5656 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys 19:27:12.0102 5656 usbvideo - ok 19:27:12.0123 5656 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll 19:27:12.0159 5656 UxSms - ok 19:27:12.0187 5656 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe 19:27:12.0215 5656 vds - ok 19:27:12.0244 5656 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 19:27:12.0276 5656 vga - ok 19:27:12.0290 5656 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 19:27:12.0314 5656 VgaSave - ok 19:27:12.0337 5656 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 19:27:12.0348 5656 viaagp - ok 19:27:12.0362 5656 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 19:27:12.0386 5656 ViaC7 - ok 19:27:12.0401 5656 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 19:27:12.0411 5656 viaide - ok 19:27:12.0431 5656 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 19:27:12.0442 5656 volmgr - ok 19:27:12.0470 5656 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 19:27:12.0486 5656 volmgrx - ok 19:27:12.0518 5656 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 19:27:12.0533 5656 volsnap - ok 19:27:12.0562 5656 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 19:27:12.0575 5656 vsmraid - ok 19:27:12.0606 5656 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe 19:27:12.0668 5656 VSS - ok 19:27:12.0808 5656 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll 19:27:12.0833 5656 W32Time - ok 19:27:12.0857 5656 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 19:27:12.0913 5656 WacomPen - ok 19:27:12.0927 5656 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 19:27:12.0960 5656 Wanarp - ok 19:27:12.0963 5656 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 19:27:12.0983 5656 Wanarpv6 - ok 19:27:13.0006 5656 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll 19:27:13.0038 5656 wcncsvc - ok 19:27:13.0064 5656 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll 19:27:13.0085 5656 WcsPlugInService - ok 19:27:13.0098 5656 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 19:27:13.0108 5656 Wd - ok 19:27:13.0146 5656 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 19:27:13.0177 5656 Wdf01000 - ok 19:27:13.0195 5656 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 19:27:13.0229 5656 WdiServiceHost - ok 19:27:13.0233 5656 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 19:27:13.0258 5656 WdiSystemHost - ok 19:27:13.0316 5656 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll 19:27:13.0348 5656 WebClient - ok 19:27:13.0379 5656 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll 19:27:13.0410 5656 Wecsvc - ok 19:27:13.0431 5656 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll 19:27:13.0452 5656 wercplsupport - ok 19:27:13.0479 5656 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll 19:27:13.0504 5656 WerSvc - ok 19:27:13.0573 5656 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll 19:27:13.0589 5656 WinDefend - ok 19:27:13.0595 5656 WinHttpAutoProxySvc - ok 19:27:13.0652 5656 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll 19:27:13.0673 5656 Winmgmt - ok 19:27:13.0731 5656 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll 19:27:13.0828 5656 WinRM - ok 19:27:13.0908 5656 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll 19:27:13.0968 5656 Wlansvc - ok 19:27:14.0036 5656 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 19:27:14.0120 5656 wlidsvc - ok 19:27:14.0172 5656 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 19:27:14.0200 5656 WmiAcpi - ok 19:27:14.0238 5656 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe 19:27:14.0266 5656 wmiApSrv - ok 19:27:14.0352 5656 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe 19:27:14.0421 5656 WMPNetworkSvc - ok 19:27:14.0457 5656 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll 19:27:14.0479 5656 WPCSvc - ok 19:27:14.0502 5656 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll 19:27:14.0536 5656 WPDBusEnum - ok 19:27:14.0630 5656 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 19:27:14.0672 5656 WPFFontCache_v0400 - ok 19:27:14.0708 5656 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 19:27:14.0732 5656 ws2ifsl - ok 19:27:14.0757 5656 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\system32\wscsvc.dll 19:27:14.0786 5656 wscsvc - ok 19:27:14.0793 5656 WSearch - ok 19:27:14.0845 5656 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll 19:27:14.0966 5656 wuauserv - ok 19:27:14.0990 5656 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 19:27:15.0023 5656 WUDFRd - ok 19:27:15.0069 5656 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll 19:27:15.0106 5656 wudfsvc - ok 19:27:15.0134 5656 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 19:27:15.0406 5656 \Device\Harddisk0\DR0 - ok 19:27:15.0411 5656 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk5\DR6 19:27:15.0512 5656 \Device\Harddisk5\DR6 - ok 19:27:15.0545 5656 Boot (0x1200) (19dc900314afbbd18537291ca3f8ce7e) \Device\Harddisk0\DR0\Partition0 19:27:15.0546 5656 \Device\Harddisk0\DR0\Partition0 - ok 19:27:15.0550 5656 Boot (0x1200) (70b48f1e5fcff6407e2cac97a4e94d32) \Device\Harddisk0\DR0\Partition1 19:27:15.0551 5656 \Device\Harddisk0\DR0\Partition1 - ok 19:27:15.0581 5656 Boot (0x1200) (f417462a5f49055c932203112258d5fa) \Device\Harddisk0\DR0\Partition2 19:27:15.0598 5656 \Device\Harddisk0\DR0\Partition2 - ok 19:27:15.0602 5656 Boot (0x1200) (d464419e385ad214cb198956d8aaa39c) \Device\Harddisk5\DR6\Partition0 19:27:15.0603 5656 \Device\Harddisk5\DR6\Partition0 - ok 19:27:15.0604 5656 ============================================================ 19:27:15.0604 5656 Scan finished 19:27:15.0604 5656 ============================================================ 19:27:15.0619 5992 Detected object count: 9 19:27:15.0620 5992 Actual detected object count: 9 19:27:49.0598 5992 C:\Windows\system32\epmntdrv.sys - copied to quarantine 19:27:49.0599 5992 epmntdrv ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0640 5992 C:\Windows\system32\EuGdiDrv.sys - copied to quarantine 19:27:49.0640 5992 EuGdiDrv ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0676 5992 C:\Windows\System32\ezsvc7.dll - copied to quarantine 19:27:49.0677 5992 ezSharedSvc ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0759 5992 C:\Program Files\Common Files\Motive\McciCMService.exe - copied to quarantine 19:27:49.0759 5992 McciCMService ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0793 5992 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS - copied to quarantine 19:27:49.0794 5992 MREMP50 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0814 5992 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS - copied to quarantine 19:27:49.0815 5992 MRESP50 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0857 5992 C:\Windows\system32\HPZinw12.dll - copied to quarantine 19:27:49.0858 5992 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0883 5992 C:\Windows\system32\HPZipm12.dll - copied to quarantine 19:27:49.0884 5992 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 19:27:49.0996 5992 C:\Windows\system32\Drivers\sptd.sys - copied to quarantine 19:27:49.0997 5992 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine 19:28:02.0645 0384 Deinitialize success

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.