Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

HiJackThis логове [решен]

20 април 201214 г.

Здравейте! Използвам Windows7. Имам съмнения, че компютъра ми е заразен защото: 1. Не се отваряше антивирусната програма(Microsoft Essentials). Единствено се вижда в Старт=> Програми и при двойно кликване не се случва нищо. 2. Windows Defender също не стартира. В момента съм инсталирал антивирусна AVAST и при сканиране не е открила нищо нередно. Прилагам двата файла DDS и Attach. Благодаря предварително. DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31 Run by pavka07 at 18:22:10 on 2012-04-20 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.1016.148 [GMT 3:00] . AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\VM305_STI.EXE C:\Program Files\Winamp\winampa.exe C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\System32\spoolsv.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files\DAEMON Tools Pro\DTAgent.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\taskhost.exe C:\Windows\System32\rundll32.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Windows\system32\IoctlSvc.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\Skype\Phone\Skype.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\pavka07\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k secsvcs . ============== Pseudo HJT Report =============== . uSearch Bar = hxxp://www.google.com/ie uSearch Page = hxxp://www.google.com uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll uRun: [Google Update] "c:\users\pavka07\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [DAEMON Tools Pro Agent] "c:\program files\daemon tools pro\DTAgent.exe" -autorun uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe" uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [Etoiwob] rundll32 "c:\users\pavka07\appdata\roaming\C_28591K.dll",VCQCMADQNL mRun: [bigDog305] c:\windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305) mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\micros~3\office14\ONBttnIE.dll/105 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab TCP: NameServer = 172.16.1.1 TCP: Interfaces\{7C14D6CA-17F8-45DF-9E31-B6576573EBA4} : DHCPNameServer = 172.16.1.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll SSODL: WebCheck - <orphaned> SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\users\pavka07\appdata\roaming\mozilla\firefox\profiles\2aut1y1t.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - plugin: c:\progra~1\micros~3\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~3\office14\NPSPWRAP.DLL FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\google\picasa3\npPicasa3.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\users\pavka07\appdata\local\google\update\1.3.21.99\npGoogleUpdate3.dll . ============= SERVICES / DRIVERS =============== . R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-4-20 612184] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-4-20 337880] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-11-29 232512] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-4-20 20696] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-4-20 57688] R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-4-20 44768] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-11 139776] R3 ZSMC0305;A4 TECH PC Camera V;c:\windows\system32\drivers\usbVM305.sys [2006-5-8 391688] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-2-15 158856] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880] S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 15872] S3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\Synth3dVsc.sys [2010-11-21 77184] S3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 25600] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-21 52224] S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 27264] S3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 112640] S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;c:\windows\system32\wat\WatAdminSvc.exe [2011-11-24 1343400] . =============== Created Last 30 ================ . 2012-04-20 15:13:30 56200 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{f584a2aa-5f56-41d2-a74e-cfdd5e68baec}\offreg.dll 2012-04-20 11:45:06 6734704 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{f584a2aa-5f56-41d2-a74e-cfdd5e68baec}\mpengine.dll 2012-04-20 11:32:16 44376 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2012-04-20 11:32:14 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-04-20 11:32:11 57688 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-04-20 11:31:33 41184 ----a-w- c:\windows\avastSS.scr 2012-04-20 11:31:13 -------- d-----w- c:\programdata\AVAST Software 2012-04-20 11:31:13 -------- d-----w- c:\program files\AVAST Software 2012-04-11 17:56:00 5120 ----a-w- c:\windows\system32\wmi.dll 2012-04-11 17:56:00 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-04-11 17:55:59 172544 ----a-w- c:\windows\system32\wintrust.dll 2012-04-11 17:55:59 159232 ----a-w- c:\windows\system32\imagehlp.dll 2012-04-11 17:54:27 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-11 17:54:26 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-04 05:53:56 182160 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll 2012-04-04 05:53:56 182160 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll 2012-03-29 09:48:55 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2012-03-29 09:48:55 -------- d-----w- c:\program files\Spybot - Search & Destroy 2012-03-22 19:12:12 4435968 ----a-w- c:\windows\system32\GPhotos.scr . ==================== Find3M ==================== . 2012-03-15 08:28:35 89088 --sha-r- c:\users\pavka07\appdata\roaming\C_28591K.dll 2012-02-28 01:18:55 1799168 ----a-w- c:\windows\system32\jscript9.dll 2012-02-28 01:11:21 1427456 ----a-w- c:\windows\system32\inetcpl.cpl 2012-02-28 01:11:07 1127424 ----a-w- c:\windows\system32\wininet.dll 2012-02-28 01:03:16 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-02-27 17:00:30 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-02-23 07:18:36 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-02-17 05:34:22 919040 ----a-w- c:\windows\system32\rdpcorets.dll 2012-02-17 05:34:22 826880 ----a-w- c:\windows\system32\rdpcore.dll 2012-02-17 04:14:08 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-02-17 04:13:22 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-02-14 09:09:44 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX 2012-02-10 05:38:43 1077248 ----a-w- c:\windows\system32\DWrite.dll 2012-02-03 03:54:27 2343424 ----a-w- c:\windows\system32\win32k.sys 2012-01-25 05:32:35 58880 ----a-w- c:\windows\system32\rdpwsx.dll 2012-01-25 05:32:34 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-01-25 05:27:51 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe . ============= FINISH: 18:22:36,94 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 24.11.2011 г. 10:26:18 System Uptime: 20.4.2012 г. 16:59:29 (2 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. | | 945GZM-S2 Processor: Intel® Celeron® CPU 430 @ 1.80GHz | Socket 775 | 1808/200mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 95 GiB total, 64,911 GiB free. D: is FIXED (NTFS) - 4 GiB total, 3,947 GiB free. E: is CDROM () F: is FIXED (NTFS) - 49 GiB total, 34,895 GiB free. G: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP83: 11.4.2012 г. 20:53:13 - Windows Update RP84: 16.4.2012 г. 10:33:23 - Windows Update RP85: 20.4.2012 г. 08:53:51 - Windows Update RP86: 20.4.2012 г. 14:30:52 - avast! Free Antivirus Инсталация . ==== Installed Programs ====================== . µTorrent Adobe AIR Adobe Flash Player 11 Plugin Adobe Reader X (10.1.3) AIM 7 Apple Application Support avast! Free Antivirus DAEMON Tools Pro Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition ETKA F1 2002 FileZilla Client 3.5.2 Google Chrome Java Auto Updater Java 6 Update 31 Microsoft .NET Framework 4 Client Profile Microsoft Office 2010 Language Pack Service Pack 1 (SP1) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (Bulgarian) 2010 Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Excel MUI (Bulgarian) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Groove MUI (Bulgarian) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office InfoPath MUI (Bulgarian) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office Language Pack 2010 - Bulgarian/български Microsoft Office O MUI (Bulgarian) 2010 Microsoft Office OneNote MUI (Bulgarian) 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook MUI (Bulgarian) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (Bulgarian) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (Bulgarian) 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proof (Russian) 2010 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proofing (Bulgarian) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Publisher MUI (Bulgarian) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared MUI (Bulgarian) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Word MUI (Bulgarian) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Office X MUI (Bulgarian) 2010 Microsoft Silverlight Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mozilla Firefox 8.0.1 (x86 bg) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Nero 7 Premium neroxml Nokia Connectivity Cable Driver Picasa 3 Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft Office 2010 (KB2553091) Security Update for Microsoft Office 2010 (KB2553096) Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2598039) 32-Bit Edition Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) Security Update for Microsoft Visio Viewer 2010 (KB2597170) 32-Bit Edition Skype Click to Call Skype™ 5.8 The KMPlayer (remove only) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Winamp Windows Media Player Firefox Plugin WinRAR 4.01 (32-битова версия) . ==== Event Viewer Messages From Past Week ======== . 18.4.2012 г. 16:52:50, Error: Microsoft Antimalware [3002] - 14.4.2012 г. 11:55:02, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - Компютърът е рестартиран от проверка за грешки. Проверката е: 0x0000009f (0x00000004, 0x00000258, 0x84199d48, 0x82b35b24). Разтоварването е записано в: C:\Windows\MEMORY.DMP. ИД на доклада: 041412-15537-01. 14.4.2012 г. 11:43:14, Error: Service Control Manager [7011] - Изтекъл период на изчакване (30000 милисекунди) при изчакване на отговор за транзакция от услуга lmhosts. . ==== End Of File ===========================

20 април 201214 г.

1. Изтеглете ComboFix от BleepingComputer

и го запазете (бутон Save -> Save as) ComboFix на вашия десктоп:

След приключване на изтеглянето на ComboFix, иконката на програмата би трябвало да изглежда така:

2. Затворете всички работещи приложения, отворени прозорци и програми работещи във фонов режим. Спрете временно защитата в реално време на антивирусната програма и на другите програми за сигурност, ако има такива.

3. Стартирайте с двоен клик Combofix.exe. Изберете YES, за да се съгласите с условията за използване на програмата. Важно: По време на работата на ComboFix не бива да се движи мишката и да се натискат клавиши от клавиатурата. Просто търпеливо оставете ComboFix да си свърши работата, без да използвате компютъра за други цели.

4. Ако получите предупреждение от UAC, съгласете се.

5 ComboFix ще спре временно Интернет връзката, но след като приключи работата на програмата тази връзка ще бъде възстановена автоматично. ComboFix ще сканира за проблеми и за заразени файлове, като това може да отнеме известно време. Моля да бъдете търпеливи. Ако има проблем с Интернет връзката след приключване на работата на Combofix, моля да прочетете това: Manually restoring the Internet connection section.

6 Когато работата на ComboFix приключи, ще се появи текстов документ (log) в Notepad:

Копирайте с (Copy) и поставете с (Paste) съдържанието на лога в следващия си коментар.

Забележка: Ако се появи следното съобщение при отварянето на различни програми след завършване на сканирането с Combofix - "illegal operation on a registry key that has been marked for deletion." просто рестартирайте компютъра още веднъж и то ще изчезне.

По време на сканирането не използвайте компютъра си !

24 април 201214 г.

Автор

Това е log-а който успях да направя. ComboFix 12-04-23.03 - pavka07 04.2012 г. 10:44:16.2.1 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1026.18.1016.307 [GMT 3:00] Running from: c:userspavka07DesktopComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:userspavka07AppDataRoamingC_28591K.dll c:userspavka07AppDataRoamingMozillaFirefoxProfiles2aut1y1t.defaultweavetoFetch . . ((((((((((((((((((((((((( Files Created from 2012-03-24 to 2012-04-24 ))))))))))))))))))))))))))))))) . . 2012-04-24 07:53 . 2012-04-24 07:54 -------- d-----w- c:userspavka07AppDataLocaltemp 2012-04-24 07:53 . 2012-04-24 07:53 -------- d-----w- c:usersDefaultAppDataLocaltemp 2012-04-24 07:22 . 2012-04-24 07:22 56200 ----a-w- c:programdataMicrosoftWindows DefenderDefinition Updates{5ABF9CD7-BF34-4529-A402-B99F4B9A32AB}offreg.dll 2012-04-24 07:21 . 2012-04-18 00:06 6734704 ----a-w- c:programdataMicrosoftWindows DefenderDefinition Updates{5ABF9CD7-BF34-4529-A402-B99F4B9A32AB}mpengine.dll 2012-04-20 11:32 . 2012-03-06 23:03 337880 ----a-w- c:windowssystem32driversaswSP.sys 2012-04-20 11:32 . 2012-03-06 23:01 20696 ----a-w- c:windowssystem32driversaswFsBlk.sys 2012-04-20 11:32 . 2012-03-06 23:02 44376 ----a-w- c:windowssystem32driversaswRdr2.sys 2012-04-20 11:32 . 2012-03-06 23:01 53848 ----a-w- c:windowssystem32driversaswTdi.sys 2012-04-20 11:32 . 2012-03-06 23:03 612184 ----a-w- c:windowssystem32driversaswSnx.sys 2012-04-20 11:32 . 2012-03-06 23:01 57688 ----a-w- c:windowssystem32driversaswMonFlt.sys 2012-04-20 11:31 . 2012-03-06 23:15 41184 ----a-w- c:windowsavastSS.scr 2012-04-20 11:31 . 2012-03-06 23:15 201352 ----a-w- c:windowssystem32aswBoot.exe 2012-04-20 11:31 . 2012-04-20 11:31 -------- d-----w- c:programdataAVAST Software 2012-04-20 11:31 . 2012-04-20 11:31 -------- d-----w- c:program filesAVAST Software 2012-04-11 17:56 . 2012-03-01 05:46 19824 ----a-w- c:windowssystem32driversfs_rec.sys 2012-04-11 17:56 . 2012-03-01 05:29 5120 ----a-w- c:windowssystem32wmi.dll 2012-04-11 17:55 . 2012-03-01 05:37 172544 ----a-w- c:windowssystem32wintrust.dll 2012-04-11 17:55 . 2012-03-01 05:33 159232 ----a-w- c:windowssystem32imagehlp.dll 2012-04-11 17:54 . 2012-03-06 05:59 3968368 ----a-w- c:windowssystem32ntkrnlpa.exe 2012-04-11 17:54 . 2012-03-06 05:59 3913072 ----a-w- c:windowssystem32ntoskrnl.exe 2012-04-04 05:53 . 2012-04-04 05:53 182160 ----a-w- c:program filesMozilla Firefoxpluginsnppdf32.dll 2012-04-04 05:53 . 2012-04-04 05:53 182160 ----a-w- c:program filesInternet ExplorerPluginsnppdf32.dll 2012-03-29 09:48 . 2012-04-20 11:01 -------- d-----w- c:program filesSpybot - Search & Destroy 2012-03-29 09:48 . 2012-04-20 10:58 -------- d-----w- c:programdataSpybot - Search & Destroy . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:windowssystem32GPhotos.scr 2012-02-27 17:00 . 2011-11-27 15:45 472808 ----a-w- c:windowssystem32deployJava1.dll 2012-02-23 07:18 . 2011-11-24 08:45 237072 ------w- c:windowssystem32MpSigStub.exe 2012-02-17 05:34 . 2012-03-14 08:01 919040 ----a-w- c:windowssystem32rdpcorets.dll 2012-02-17 05:34 . 2012-03-14 08:01 826880 ----a-w- c:windowssystem32rdpcore.dll 2012-02-17 04:14 . 2012-03-14 08:01 183808 ----a-w- c:windowssystem32driversrdpwd.sys 2012-02-17 04:13 . 2012-03-14 08:01 24576 ----a-w- c:windowssystem32driverstdtcp.sys 2012-02-14 09:09 . 2012-02-14 09:09 1070352 ----a-w- c:windowssystem32MSCOMCTL.OCX 2012-02-10 05:38 . 2012-03-14 08:02 1077248 ----a-w- c:windowssystem32DWrite.dll 2012-02-03 03:54 . 2012-03-14 08:02 2343424 ----a-w- c:windowssystem32win32k.sys 2011-11-21 04:17 . 2011-11-24 09:55 134104 ----a-w- c:program filesmozilla firefoxcomponentsbrowsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOTCLSID{472083B0-C522-11CF-8763-00608CC02F24}] 2012-03-06 23:15 123536 ----a-w- c:program filesAVAST SoftwareAvastashShell.dll . [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun] "DAEMON Tools Pro Agent"="c:program filesDAEMON Tools ProDTAgent.exe" [2011-08-17 4527424] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:program filesCommon FilesAheadLibNMBgMonitor.exe" [2008-01-22 152872] "Sidebar"="c:program filesWindows Sidebarsidebar.exe" [2010-11-20 1174016] . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "BigDog305"="c:windowsVM305_STI.EXE" [2005-08-05 61440] "WinampAgent"="c:program filesWinampwinampa.exe" [2011-12-09 74752] "Adobe ARM"="c:program filesCommon FilesAdobeARM1.0AdobeARM.exe" [2012-01-03 843712] "BCSSync"="c:program filesMicrosoft OfficeOffice14BCSSync.exe" [2010-03-13 91520] "NeroFilterCheck"="c:program filesCommon FilesAheadLibNeroCheck.exe" [2008-05-28 570664] "APSDaemon"="c:program filesCommon FilesAppleApple Application SupportAPSDaemon.exe" [2011-09-27 59240] "SunJavaUpdateSched"="c:program filesCommon FilesJavaJava Updatejusched.exe" [2012-01-18 254696] "avast"="c:program filesAVAST SoftwareAvastavastUI.exe" [2012-03-06 4241512] . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32] "aux"=wdmaud.drv . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-03-18 130384] R2 SkypeUpdate;Skype Updater;c:program filesSkypeUpdaterUpdater.exe [2012-02-15 158856] R3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-20 62464] R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:program filesMicrosoft OfficeOffice14GROOVE.EXE [2011-06-12 31125880] R3 osppsvc;Office Software Protection Platform;c:program filesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2010-01-09 4640000] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-20 15872] R3 Synth3dVsc;Synth3dVsc;c:windowssystem32driverssynth3dvsc.sys [2010-11-20 77184] R3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-20 25600] R3 TsUsbFlt;TsUsbFlt;c:windowssystem32driverstsusbflt.sys [2010-11-20 52224] R3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-20 27264] R3 tsusbhub;tsusbhub;c:windowssystem32driverstsusbhub.sys [2010-11-20 112640] R3 VGPU;VGPU;c:windowssystem32driversrdvgkmd.sys [x] R3 WatAdminSvc;Услуга на технологиите за активиране на Windows;c:windowssystem32WatWatAdminSvc.exe [2011-11-24 1343400] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32DRIVERSdtsoftbus01.sys [2011-11-29 232512] S2 AdobeARMservice;Adobe Acrobat Update Service;c:program filesCommon FilesAdobeARM1.0armsvc.exe [2012-01-03 63928] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:windowssystem32driversaswMonFlt.sys [2012-03-06 57688] S3 RTL8167;Realtek 8167 NT Driver;c:windowssystem32DRIVERSRt86win7.sys [2009-07-13 139776] S3 ZSMC0305;A4 TECH PC Camera V;c:windowssystem32DriversusbVM305.sys [2006-05-08 391688] . . Contents of the 'Scheduled Tasks' folder . 2012-04-23 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-742778881-1708021441-367267367-1000Core.job - c:userspavka07AppDataLocalGoogleUpdateGoogleUpdate.exe [2011-11-24 08:56] . 2012-04-24 c:windowsTasksGoogleUpdateTaskUserS-1-5-21-742778881-1708021441-367267367-1000UA.job - c:userspavka07AppDataLocalGoogleUpdateGoogleUpdate.exe [2011-11-24 08:56] . . ------- Supplementary Scan ------- . uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:windowssystem32GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:progra~1MICROS~3Office14EXCEL.EXE/3000 IE: Se&nd to OneNote - c:progra~1MICROS~3Office14ONBttnIE.dll/105 TCP: DhcpNameServer = 172.16.1.1 FF - ProfilePath - c:userspavka07AppDataRoamingMozillaFirefoxProfiles2aut1y1t.default FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ . - - - - ORPHANS REMOVED - - - - . HKCU-Run-Etoiwob - c:userspavka07AppDataRoamingC_28591K.dll . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}0000AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity] @Denied: (Full) (Everyone) . Completion time: 2012-04-24 10:59:05 ComboFix-quarantined-files.txt 2012-04-24 07:59 . Pre-Run: 68 700 356 608 bytes free Post-Run: 68 604 493 824 bytes free . - - End Of File - - 73516AFDA2C83CCA2F0CBD782161F1C1

24 април 201214 г.

Сега има ли някакви проблеми с Windows ?

Combofix е разкарал проблемния ред:

uRun: [Etoiwob] rundll32 "c:userspavka07appdataroamingC_28591K.dll",VCQCMADQNL

Да направим още малко проверки;

СТЪПКА 1

Изтеглете Malwarebytes' Anti-Malware Free от тук
Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
Ако има намерени обновявания, тя ще ги изтегли и инсталира.
Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan.
Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

СТЪПКА 2

Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.
Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.
Натиснете бутона Start Scan.
Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.
Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.
Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

СТЪПКА 3

Моля, изтеглете aswMBR и го запазете на вашия десктоп.

Кликнете с двоен клин на мишката върху файла aswMBR.exe за да го стартирате.
Изчакайте да изтегли дефинициите на avast!
От падащото меню посочете дял C: както е на снимката:

Изберете Scan бутона, за да започне проверката.
Когато проверката завърши, натиснете бутона save log, запазете съдържанието на лог файла на десктопа и публикувайте съдържанието му в следващия си коментар.

Поздрави !

25 април 201214 г.

Автор

Много благодаря за помощта!!! Мисля, че вече всичко е наред. Сканирах системата с Malwabytes и нищо не откри. Компютъра сега работи нормално, без да се "замисля" като преди. Windows Defender вече се отваря и сканира. Незнайно защо съм решил, че антивирусната Microsoft Essentials е добра и сега отново я инсталирах и си работи нормално. Страхотно е, че помагате на такива като мен

25 април 201214 г.

Ще може ли все пак да видя и последните два лога от TDSSKiller и aswMBR за да съм сигурен, че всичко е наред?

26 април 201214 г.

Автор

Направих двата лог-а и ги публикувам. 15:41:33.0352 2704 15:41:34.0937 2704 15:41:34.0937 2704 15:41:34.0937 2704 SystemInfo: 15:41:34.0937 2704 15:41:34.0937 2704 15:41:34.0937 2704 15:41:34.0937 2704 15:41:34.0947 2704 UserName: pavka07 15:41:34.0947 2704 15:41:34.0947 2704 15:41:34.0947 2704 15:41:34.0947 2704 15:41:34.0947 2704 Page size: 0x1000 15:41:34.0947 2704 15:41:34.0947 2704 15:41:39.0588 2704 15:41:39.0735 2704 15:41:39.0735 2704 DeviceHarddisk0DR0: 15:41:39.0772 2704 MBR partitions: 15:41:39.0772 2704 15:41:39.0799 2704 15:41:39.0813 2704 15:41:39.0813 2704 15:41:39.0858 2704 15:41:39.0894 2704 15:41:39.0928 2704 15:41:39.0928 2704 15:41:39.0928 2704 Initialize success 15:41:39.0928 2704 15:41:45.0878 0832 15:41:45.0893 0832 Scan started 15:41:45.0893 0832 15:41:45.0893 0832 15:41:47.0340 0832 1394ohci 15:41:47.0593 0832 1394ohci - ok 15:41:47.0831 0832 ACPI 15:41:47.0860 0832 ACPI - ok 15:41:47.0929 0832 AcpiPmi 15:41:48.0393 0832 AcpiPmi - ok 15:41:48.0689 0832 15:41:48.0718 0832 AdobeARMservice - ok 15:41:48.0918 0832 adp94xx 15:41:48.0973 0832 adp94xx - ok 15:41:49.0248 0832 adpahci 15:41:49.0319 0832 adpahci - ok 15:41:49.0455 0832 adpu320 15:41:49.0504 0832 adpu320 - ok 15:41:49.0615 0832 AeLookupSvc 15:41:50.0517 0832 AeLookupSvc - ok 15:41:50.0924 0832 AFD 15:41:51.0284 0832 AFD - ok 15:41:51.0385 0832 agp440 15:41:51.0417 0832 agp440 - ok 15:41:51.0513 0832 aic78xx 15:41:51.0533 0832 aic78xx - ok 15:41:51.0668 0832 ALG 15:41:52.0081 0832 ALG - ok 15:41:52.0210 0832 aliide 15:41:52.0236 0832 aliide - ok 15:41:52.0301 0832 amdagp 15:41:52.0343 0832 amdagp - ok 15:41:52.0398 0832 amdide 15:41:52.0437 0832 amdide - ok 15:41:52.0524 0832 AmdK8 15:41:52.0629 0832 AmdK8 - ok 15:41:52.0665 0832 AmdPPM 15:41:52.0762 0832 AmdPPM - ok 15:41:52.0919 0832 amdsata 15:41:52.0940 0832 amdsata - ok 15:41:52.0994 0832 amdsbs 15:41:53.0021 0832 amdsbs - ok 15:41:53.0058 0832 amdxata 15:41:53.0077 0832 amdxata - ok 15:41:53.0136 0832 AppID 15:41:53.0238 0832 AppID - ok 15:41:53.0353 0832 AppIDSvc 15:41:53.0511 0832 AppIDSvc - ok 15:41:53.0661 0832 Appinfo 15:41:53.0832 0832 Appinfo - ok 15:41:53.0880 0832 AppMgmt 15:41:54.0051 0832 AppMgmt - ok 15:41:54.0086 0832 arc 15:41:54.0110 0832 arc - ok 15:41:54.0155 0832 arcsas 15:41:54.0178 0832 arcsas - ok 15:41:54.0212 0832 AsyncMac 15:41:54.0359 0832 AsyncMac - ok 15:41:54.0418 0832 atapi 15:41:54.0436 0832 atapi - ok 15:41:54.0525 0832 15:41:54.0687 0832 15:41:54.0703 0832 Audiosrv 15:41:54.0749 0832 Audiosrv - ok 15:41:54.0805 0832 AxInstSV 15:41:54.0974 0832 AxInstSV - ok 15:41:55.0042 0832 b06bdrv 15:41:55.0215 0832 b06bdrv - ok 15:41:55.0271 0832 b57nd60x 15:41:55.0459 0832 b57nd60x - ok 15:41:55.0540 0832 BDESVC 15:41:55.0623 0832 BDESVC - ok 15:41:55.0668 0832 Beep 15:41:55.0740 0832 Beep - ok 15:41:55.0829 0832 BFE 15:41:55.0943 0832 BFE - ok 15:41:56.0071 0832 BITS 15:41:56.0192 0832 BITS - ok 15:41:56.0230 0832 blbdrive 15:41:56.0309 0832 blbdrive - ok 15:41:56.0359 0832 bowser 15:41:56.0461 0832 bowser - ok 15:41:56.0526 0832 BrFiltLo 15:41:56.0606 0832 BrFiltLo - ok 15:41:56.0643 0832 BrFiltUp 15:41:56.0715 0832 BrFiltUp - ok 15:41:56.0779 0832 BridgeMP 15:41:56.0851 0832 BridgeMP - ok 15:41:56.0895 0832 Browser 15:41:56.0976 0832 Browser - ok 15:41:57.0082 0832 Brserid 15:41:57.0307 0832 Brserid - ok 15:41:57.0332 0832 BrSerWdm 15:41:57.0428 0832 BrSerWdm - ok 15:41:57.0445 0832 BrUsbMdm 15:41:57.0488 0832 BrUsbMdm - ok 15:41:57.0538 0832 BrUsbSer 15:41:57.0578 0832 BrUsbSer - ok 15:41:57.0605 0832 BTHMODEM 15:41:57.0731 0832 BTHMODEM - ok 15:41:57.0803 0832 bthserv 15:41:57.0889 0832 bthserv - ok 15:41:57.0957 0832 catchme - ok 15:41:58.0008 0832 cdfs 15:41:58.0128 0832 cdfs - ok 15:41:58.0192 0832 cdrom 15:41:58.0249 0832 cdrom - ok 15:41:58.0288 0832 CertPropSvc 15:41:58.0400 0832 CertPropSvc - ok 15:41:58.0439 0832 circlass 15:41:58.0508 0832 circlass - ok 15:41:58.0962 0832 CLFS 15:41:58.0988 0832 CLFS - ok 15:41:59.0138 0832 15:41:59.0178 0832 15:41:59.0543 0832 15:41:59.0581 0832 15:41:59.0656 0832 CmBatt 15:41:59.0731 0832 CmBatt - ok 15:41:59.0835 0832 cmdide 15:41:59.0869 0832 cmdide - ok 15:42:00.0096 0832 CNG 15:42:00.0137 0832 CNG - ok 15:42:00.0201 0832 Compbatt 15:42:00.0212 0832 Compbatt - ok 15:42:00.0265 0832 CompositeBus 15:42:00.0350 0832 CompositeBus - ok 15:42:00.0371 0832 COMSysApp - ok 15:42:00.0403 0832 crcdisk 15:42:00.0421 0832 crcdisk - ok 15:42:00.0470 0832 CryptSvc 15:42:00.0569 0832 CryptSvc - ok 15:42:00.0631 0832 CSC 15:42:00.0734 0832 CSC - ok 15:42:00.0947 0832 CscService 15:42:01.0069 0832 CscService - ok 15:42:01.0324 0832 DcomLaunch 15:42:01.0395 0832 DcomLaunch - ok 15:42:01.0698 0832 defragsvc 15:42:01.0800 0832 defragsvc - ok 15:42:01.0912 0832 DfsC 15:42:02.0033 0832 DfsC - ok 15:42:02.0090 0832 Dhcp 15:42:02.0221 0832 Dhcp - ok 15:42:02.0255 0832 discache 15:42:02.0343 0832 discache - ok 15:42:02.0395 0832 Disk 15:42:02.0414 0832 Disk - ok 15:42:02.0464 0832 dmvsc 15:42:02.0573 0832 dmvsc - ok 15:42:02.0646 0832 Dnscache 15:42:02.0764 0832 Dnscache - ok 15:42:02.0814 0832 dot3svc 15:42:02.0944 0832 dot3svc - ok 15:42:02.0994 0832 DPS 15:42:03.0114 0832 DPS - ok 15:42:03.0154 0832 drmkaud 15:42:03.0214 0832 drmkaud - ok 15:42:03.0304 0832 dtsoftbus01 15:42:03.0497 0832 dtsoftbus01 - ok 15:42:03.0730 0832 DXGKrnl 15:42:03.0780 0832 DXGKrnl - ok 15:42:03.0827 0832 EapHost 15:42:03.0933 0832 EapHost - ok 15:42:04.0481 0832 ebdrv 15:42:04.0655 0832 ebdrv - ok 15:42:04.0790 0832 EFS 15:42:04.0899 0832 EFS - ok 15:42:04.0986 0832 ehRecvr 15:42:05.0148 0832 ehRecvr - ok 15:42:05.0193 0832 ehSched 15:42:05.0287 0832 ehSched - ok 15:42:05.0364 0832 elxstor 15:42:05.0402 0832 elxstor - ok 15:42:05.0427 0832 ErrDev 15:42:05.0467 0832 ErrDev - ok 15:42:05.0549 0832 EventSystem 15:42:05.0648 0832 EventSystem - ok 15:42:05.0682 0832 exfat 15:42:05.0781 0832 exfat - ok 15:42:05.0809 0832 fastfat 15:42:05.0897 0832 fastfat - ok 15:42:05.0970 0832 Fax 15:42:06.0188 0832 Fax - ok 15:42:06.0219 0832 fdc 15:42:06.0291 0832 fdc - ok 15:42:06.0324 0832 fdPHost 15:42:06.0408 0832 fdPHost - ok 15:42:06.0445 0832 FDResPub 15:42:06.0518 0832 FDResPub - ok 15:42:06.0596 0832 FileInfo 15:42:06.0621 0832 FileInfo - ok 15:42:06.0652 0832 Filetrace 15:42:06.0714 0832 Filetrace - ok 15:42:06.0736 0832 flpydisk 15:42:06.0788 0832 flpydisk - ok 15:42:06.0836 0832 FltMgr 15:42:06.0865 0832 FltMgr - ok 15:42:06.0938 0832 FontCache 15:42:07.0123 0832 FontCache - ok 15:42:07.0193 0832 15:42:07.0211 0832 15:42:07.0236 0832 FsDepends 15:42:07.0261 0832 FsDepends - ok 15:42:07.0302 0832 Fs_Rec 15:42:07.0320 0832 Fs_Rec - ok 15:42:07.0377 0832 fvevol 15:42:07.0411 0832 fvevol - ok 15:42:07.0450 0832 gagp30kx 15:42:07.0469 0832 gagp30kx - ok 15:42:07.0533 0832 gpsvc 15:42:07.0656 0832 gpsvc - ok 15:42:07.0871 0832 gusvc 15:42:07.0901 0832 gusvc - ok 15:42:08.0000 0832 Hardlock 15:42:08.0538 0832 Hardlock - ok 15:42:08.0582 0832 hcw85cir 15:42:08.0659 0832 hcw85cir - ok 15:42:08.0711 0832 15:42:08.0764 0832 HdAudAddService - ok 15:42:08.0824 0832 HDAudBus 15:42:08.0874 0832 HDAudBus - ok 15:42:08.0894 0832 HidBatt 15:42:08.0944 0832 HidBatt - ok 15:42:08.0984 0832 HidBth 15:42:09.0034 0832 HidBth - ok 15:42:09.0064 0832 HidIr 15:42:09.0124 0832 HidIr - ok 15:42:09.0164 0832 hidserv 15:42:09.0294 0832 hidserv - ok 15:42:09.0384 0832 HidUsb 15:42:09.0484 0832 HidUsb - ok 15:42:09.0514 0832 hkmsvc 15:42:09.0594 0832 hkmsvc - ok 15:42:09.0634 0832 15:42:09.0714 0832 15:42:09.0764 0832 15:42:09.0844 0832 15:42:09.0874 0832 HpSAMD 15:42:09.0894 0832 HpSAMD - ok 15:42:09.0954 0832 HTTP 15:42:10.0084 0832 HTTP - ok 15:42:10.0114 0832 hwpolicy 15:42:10.0134 0832 hwpolicy - ok 15:42:10.0174 0832 i8042prt 15:42:10.0264 0832 i8042prt - ok 15:42:10.0324 0832 iaStorV 15:42:10.0354 0832 iaStorV - ok 15:42:10.0464 0832 idsvc 15:42:10.0504 0832 idsvc - ok 15:42:10.0774 0832 igfx 15:42:11.0044 0832 igfx - ok 15:42:11.0174 0832 iirsp 15:42:11.0194 0832 iirsp - ok 15:42:11.0264 0832 IKEEXT 15:42:11.0414 0832 IKEEXT - ok 15:42:11.0464 0832 intelide 15:42:11.0484 0832 intelide - ok 15:42:11.0524 0832 intelppm 15:42:11.0604 0832 intelppm - ok 15:42:11.0654 0832 IPBusEnum 15:42:11.0734 0832 IPBusEnum - ok 15:42:11.0777 0832 IpFilterDriver 15:42:11.0862 0832 IpFilterDriver - ok 15:42:11.0921 0832 iphlpsvc 15:42:12.0085 0832 iphlpsvc - ok 15:42:12.0130 0832 IPMIDRV 15:42:12.0198 0832 IPMIDRV - ok 15:42:12.0229 0832 IPNAT 15:42:12.0303 0832 IPNAT - ok 15:42:12.0357 0832 IRENUM 15:42:12.0409 0832 IRENUM - ok 15:42:12.0440 0832 isapnp 15:42:12.0461 0832 isapnp - ok 15:42:12.0499 0832 iScsiPrt 15:42:12.0530 0832 iScsiPrt - ok 15:42:12.0562 0832 kbdclass 15:42:12.0592 0832 kbdclass - ok 15:42:12.0679 0832 kbdhid 15:42:12.0736 0832 kbdhid - ok 15:42:12.0779 0832 KeyIso 15:42:12.0799 0832 KeyIso - ok 15:42:12.0819 0832 KSecDD 15:42:12.0839 0832 KSecDD - ok 15:42:12.0879 0832 KSecPkg 15:42:12.0909 0832 KSecPkg - ok 15:42:12.0959 0832 KtmRm 15:42:13.0079 0832 KtmRm - ok 15:42:13.0139 0832 LanmanServer 15:42:13.0229 0832 LanmanServer - ok 15:42:13.0269 0832 15:42:13.0349 0832 15:42:13.0419 0832 lltdio 15:42:13.0489 0832 lltdio - ok 15:42:13.0539 0832 lltdsvc 15:42:13.0639 0832 lltdsvc - ok 15:42:13.0669 0832 lmhosts 15:42:13.0739 0832 lmhosts - ok 15:42:13.0789 0832 LSI_FC 15:42:13.0819 0832 LSI_FC - ok 15:42:13.0849 0832 LSI_SAS 15:42:13.0869 0832 LSI_SAS - ok 15:42:13.0899 0832 LSI_SAS2 15:42:13.0919 0832 LSI_SAS2 - ok 15:42:13.0949 0832 LSI_SCSI 15:42:13.0979 0832 LSI_SCSI - ok 15:42:14.0019 0832 luafv 15:42:14.0129 0832 luafv - ok 15:42:14.0189 0832 MBAMProtector 15:42:14.0209 0832 MBAMProtector - ok 15:42:14.0519 0832 MBAMService 15:42:14.0549 0832 MBAMService - ok 15:42:14.0659 0832 Mcx2Svc 15:42:14.0739 0832 Mcx2Svc - ok 15:42:14.0789 0832 megasas 15:42:14.0799 0832 megasas - ok 15:42:14.0849 0832 MegaSR 15:42:14.0879 0832 MegaSR - ok 15:42:14.0949 0832 15:42:14.0989 0832 MMCSS 15:42:15.0049 0832 MMCSS - ok 15:42:15.0079 0832 Modem 15:42:15.0169 0832 Modem - ok 15:42:15.0209 0832 monitor 15:42:15.0269 0832 monitor - ok 15:42:15.0299 0832 mouclass 15:42:15.0319 0832 mouclass - ok 15:42:15.0359 0832 mouhid 15:42:15.0429 0832 mouhid - ok 15:42:15.0449 0832 mountmgr 15:42:15.0469 0832 mountmgr - ok 15:42:15.0549 0832 MpFilter 15:42:15.0569 0832 MpFilter - ok 15:42:15.0609 0832 mpio 15:42:15.0639 0832 mpio - ok 15:42:15.0749 0832 MpKsl4e167c40 - ok 15:42:15.0779 0832 mpsdrv 15:42:15.0869 0832 mpsdrv - ok 15:42:15.0919 0832 MpsSvc 15:42:16.0049 0832 MpsSvc - ok 15:42:16.0089 0832 MRxDAV 15:42:16.0159 0832 MRxDAV - ok 15:42:16.0209 0832 mrxsmb 15:42:16.0309 0832 mrxsmb - ok 15:42:16.0339 0832 mrxsmb10 15:42:16.0419 0832 mrxsmb10 - ok 15:42:16.0449 0832 mrxsmb20 15:42:16.0559 0832 mrxsmb20 - ok 15:42:16.0599 0832 msahci 15:42:16.0619 0832 msahci - ok 15:42:16.0649 0832 msdsm 15:42:16.0669 0832 msdsm - ok 15:42:16.0719 0832 MSDTC 15:42:16.0829 0832 MSDTC - ok 15:42:16.0859 0832 Msfs 15:42:16.0959 0832 Msfs - ok 15:42:16.0989 0832 mshidkmdf 15:42:17.0049 0832 mshidkmdf - ok 15:42:17.0079 0832 msisadrv 15:42:17.0099 0832 msisadrv - ok 15:42:17.0149 0832 MSiSCSI 15:42:17.0239 0832 MSiSCSI - ok 15:42:17.0259 0832 msiserver - ok 15:42:17.0299 0832 MSKSSRV 15:42:17.0359 0832 MSKSSRV - ok 15:42:17.0449 0832 MsMpSvc 15:42:17.0479 0832 MsMpSvc - ok 15:42:17.0519 0832 MSPCLOCK 15:42:17.0579 0832 MSPCLOCK - ok 15:42:17.0599 0832 MSPQM 15:42:17.0659 0832 MSPQM - ok 15:42:17.0699 0832 MsRPC 15:42:17.0739 0832 MsRPC - ok 15:42:17.0769 0832 mssmbios 15:42:17.0789 0832 mssmbios - ok 15:42:17.0829 0832 MSTEE 15:42:17.0889 0832 MSTEE - ok 15:42:17.0909 0832 MTConfig 15:42:17.0949 0832 MTConfig - ok 15:42:17.0979 0832 Mup 15:42:17.0999 0832 Mup - ok 15:42:18.0039 0832 napagent 15:42:18.0129 0832 napagent - ok 15:42:18.0189 0832 NativeWifiP 15:42:18.0249 0832 NativeWifiP - ok 15:42:18.0379 0832 NBService 15:42:18.0419 0832 NBService - ok 15:42:18.0489 0832 NDIS 15:42:18.0539 0832 NDIS - ok 15:42:18.0579 0832 NdisCap 15:42:18.0639 0832 NdisCap - ok 15:42:18.0679 0832 NdisTapi 15:42:18.0749 0832 NdisTapi - ok 15:42:18.0779 0832 Ndisuio 15:42:18.0849 0832 Ndisuio - ok 15:42:18.0879 0832 NdisWan 15:42:18.0959 0832 NdisWan - ok 15:42:18.0979 0832 NDProxy 15:42:19.0049 0832 NDProxy - ok 15:42:19.0099 0832 NetBIOS 15:42:19.0169 0832 NetBIOS - ok 15:42:19.0209 0832 NetBT 15:42:19.0309 0832 NetBT - ok 15:42:19.0359 0832 Netlogon 15:42:19.0379 0832 Netlogon - ok 15:42:19.0429 0832 Netman 15:42:19.0519 0832 Netman - ok 15:42:19.0559 0832 netprofm 15:42:19.0709 0832 netprofm - ok 15:42:19.0779 0832 15:42:19.0799 0832 15:42:19.0849 0832 nfrd960 15:42:19.0869 0832 nfrd960 - ok 15:42:19.0929 0832 NisDrv 15:42:19.0949 0832 NisDrv - ok 15:42:20.0039 0832 NisSrv 15:42:20.0069 0832 NisSrv - ok 15:42:20.0109 0832 NlaSvc 15:42:20.0219 0832 NlaSvc - ok 15:42:20.0329 0832 15:42:20.0359 0832 15:42:20.0399 0832 nmwcd 15:42:20.0479 0832 nmwcd - ok 15:42:20.0499 0832 nmwcdc 15:42:20.0569 0832 nmwcdc - ok 15:42:20.0609 0832 Npfs 15:42:20.0689 0832 Npfs - ok 15:42:20.0739 0832 nsi 15:42:20.0809 0832 nsi - ok 15:42:20.0839 0832 nsiproxy 15:42:20.0889 0832 nsiproxy - ok 15:42:20.0989 0832 Ntfs 15:42:21.0049 0832 Ntfs - ok 15:42:21.0079 0832 Null 15:42:21.0139 0832 Null - ok 15:42:21.0179 0832 nvraid 15:42:21.0209 0832 nvraid - ok 15:42:21.0239 0832 nvstor 15:42:21.0269 0832 nvstor - ok 15:42:21.0359 0832 nv_agp 15:42:21.0419 0832 nv_agp - ok 15:42:21.0439 0832 ohci1394 15:42:21.0569 0832 ohci1394 - ok 15:42:21.0819 0832 ose 15:42:21.0839 0832 ose - ok 15:42:22.0359 0832 osppsvc 15:42:22.0559 0832 osppsvc - ok 15:42:22.0779 0832 p2pimsvc 15:42:22.0889 0832 p2pimsvc - ok 15:42:22.0939 0832 p2psvc 15:42:23.0119 0832 p2psvc - ok 15:42:23.0439 0832 Parport 15:42:23.0589 0832 Parport - ok 15:42:23.0609 0832 partmgr 15:42:23.0679 0832 partmgr - ok 15:42:23.0729 0832 Parvdm 15:42:23.0799 0832 Parvdm - ok 15:42:23.0849 0832 PcaSvc 15:42:24.0039 0832 PcaSvc - ok 15:42:24.0069 0832 pci 15:42:24.0109 0832 pci - ok 15:42:24.0139 0832 pciide 15:42:24.0169 0832 pciide - ok 15:42:24.0229 0832 pcmcia 15:42:24.0259 0832 pcmcia - ok 15:42:24.0299 0832 pcw 15:42:24.0339 0832 pcw - ok 15:42:24.0399 0832 PEAUTH 15:42:24.0559 0832 PEAUTH - ok 15:42:24.0649 0832 PeerDistSvc 15:42:24.0849 0832 PeerDistSvc - ok 15:42:25.0329 0832 pla 15:42:25.0569 0832 pla - ok 15:42:25.0859 0832 15:42:25.0939 0832 15:42:25.0939 0832 15:42:26.0009 0832 PlugPlay 15:42:26.0139 0832 PlugPlay - ok 15:42:26.0199 0832 PNRPAutoReg 15:42:26.0289 0832 PNRPAutoReg - ok 15:42:26.0389 0832 PNRPsvc 15:42:26.0409 0832 PNRPsvc - ok 15:42:26.0669 0832 PolicyAgent 15:42:26.0849 0832 PolicyAgent - ok 15:42:26.0899 0832 Power 15:42:27.0149 0832 Power - ok 15:42:27.0209 0832 PptpMiniport 15:42:27.0379 0832 PptpMiniport - ok 15:42:27.0409 0832 Processor 15:42:27.0479 0832 Processor - ok 15:42:27.0529 0832 ProfSvc 15:42:27.0619 0832 ProfSvc - ok 15:42:27.0659 0832 15:42:27.0679 0832 15:42:27.0729 0832 Psched 15:42:27.0839 0832 Psched - ok 15:42:27.0919 0832 ql2300 15:42:27.0989 0832 ql2300 - ok 15:42:28.0149 0832 ql40xx 15:42:28.0179 0832 ql40xx - ok 15:42:28.0219 0832 QWAVE 15:42:28.0329 0832 QWAVE - ok 15:42:28.0359 0832 QWAVEdrv 15:42:28.0449 0832 QWAVEdrv - ok 15:42:28.0469 0832 RasAcd 15:42:28.0579 0832 RasAcd - ok 15:42:28.0629 0832 RasAgileVpn 15:42:28.0699 0832 RasAgileVpn - ok 15:42:28.0739 0832 RasAuto 15:42:28.0839 0832 RasAuto - ok 15:42:28.0889 0832 Rasl2tp 15:42:28.0989 0832 Rasl2tp - ok 15:42:29.0049 0832 RasMan 15:42:29.0149 0832 RasMan - ok 15:42:29.0179 0832 RasPppoe 15:42:29.0239 0832 RasPppoe - ok 15:42:29.0289 0832 RasSstp 15:42:29.0379 0832 RasSstp - ok 15:42:29.0409 0832 rdbss 15:42:29.0509 0832 rdbss - ok 15:42:29.0539 0832 rdpbus 15:42:29.0579 0832 rdpbus - ok 15:42:29.0609 0832 RDPCDD 15:42:29.0669 0832 RDPCDD - ok 15:42:29.0719 0832 RDPDR 15:42:29.0799 0832 RDPDR - ok 15:42:29.0829 0832 RDPENCDD 15:42:29.0889 0832 RDPENCDD - ok 15:42:29.0919 0832 RDPREFMP 15:42:29.0969 0832 RDPREFMP - ok 15:42:30.0079 0832 15:42:30.0239 0832 15:42:30.0299 0832 RDPWD 15:42:30.0429 0832 RDPWD - ok 15:42:30.0489 0832 rdyboost 15:42:30.0539 0832 rdyboost - ok 15:42:30.0589 0832 RemoteAccess 15:42:30.0679 0832 RemoteAccess - ok 15:42:30.0769 0832 RemoteRegistry 15:42:30.0849 0832 RemoteRegistry - ok 15:42:30.0919 0832 RpcEptMapper 15:42:30.0989 0832 RpcEptMapper - ok 15:42:31.0049 0832 RpcLocator 15:42:31.0159 0832 RpcLocator - ok 15:42:31.0209 0832 RpcSs 15:42:31.0269 0832 RpcSs - ok 15:42:31.0309 0832 rspndr 15:42:31.0399 0832 rspndr - ok 15:42:31.0439 0832 RTL8167 15:42:31.0539 0832 RTL8167 - ok 15:42:31.0569 0832 s3cap 15:42:31.0609 0832 s3cap - ok 15:42:31.0649 0832 SamSs 15:42:31.0669 0832 SamSs - ok 15:42:31.0719 0832 sbp2port 15:42:31.0749 0832 sbp2port - ok 15:42:31.0789 0832 SCardSvr 15:42:31.0879 0832 SCardSvr - ok 15:42:31.0899 0832 scfilter 15:42:31.0969 0832 scfilter - ok 15:42:32.0049 0832 Schedule 15:42:32.0199 0832 Schedule - ok 15:42:32.0229 0832 SCPolicySvc 15:42:32.0269 0832 SCPolicySvc - ok 15:42:32.0309 0832 SDRSVC 15:42:32.0379 0832 SDRSVC - ok 15:42:32.0419 0832 secdrv 15:42:32.0489 0832 secdrv - ok 15:42:32.0519 0832 seclogon 15:42:32.0599 0832 seclogon - ok 15:42:32.0629 0832 SENS 15:42:32.0699 0832 SENS - ok 15:42:32.0729 0832 SensrSvc 15:42:32.0819 0832 SensrSvc - ok 15:42:32.0869 0832 Serenum 15:42:32.0909 0832 Serenum - ok 15:42:32.0949 0832 Serial 15:42:33.0079 0832 Serial - ok 15:42:33.0109 0832 sermouse 15:42:33.0149 0832 sermouse - ok 15:42:33.0219 0832 SessionEnv 15:42:33.0309 0832 SessionEnv - ok 15:42:33.0329 0832 sffdisk 15:42:33.0379 0832 sffdisk - ok 15:42:33.0419 0832 sffp_mmc 15:42:33.0459 0832 sffp_mmc - ok 15:42:33.0469 0832 sffp_sd 15:42:33.0519 0832 sffp_sd - ok 15:42:33.0549 0832 sfloppy 15:42:33.0609 0832 sfloppy - ok 15:42:33.0659 0832 SharedAccess 15:42:33.0809 0832 SharedAccess - ok 15:42:33.0989 0832 15:42:34.0119 0832 15:42:34.0139 0832 sisagp 15:42:34.0169 0832 sisagp - ok 15:42:34.0219 0832 SiSRaid2 15:42:34.0239 0832 SiSRaid2 - ok 15:42:34.0415 0832 SiSRaid4 15:42:34.0472 0832 SiSRaid4 - ok 15:42:34.0605 0832 SkypeUpdate 15:42:34.0629 0832 SkypeUpdate - ok 15:42:34.0701 0832 Smb 15:42:34.0795 0832 Smb - ok 15:42:34.0860 0832 SNMPTRAP 15:42:34.0925 0832 SNMPTRAP - ok 15:42:34.0974 0832 spldr 15:42:34.0996 0832 spldr - ok 15:42:35.0041 0832 Spooler 15:42:35.0181 0832 Spooler - ok 15:42:35.0647 0832 sppsvc 15:42:36.0277 0832 sppsvc - ok 15:42:36.0377 0832 sppuinotify 15:42:36.0447 0832 sppuinotify - ok 15:42:36.0517 0832 srv 15:42:36.0597 0832 srv - ok 15:42:36.0647 0832 srv2 15:42:36.0727 0832 srv2 - ok 15:42:36.0757 0832 srvnet 15:42:36.0827 0832 srvnet - ok 15:42:36.0867 0832 SSDPSRV 15:42:36.0957 0832 SSDPSRV - ok 15:42:36.0987 0832 SstpSvc 15:42:37.0057 0832 SstpSvc - ok 15:42:37.0097 0832 stexstor 15:42:37.0127 0832 stexstor - ok 15:42:37.0197 0832 StiSvc 15:42:37.0287 0832 StiSvc - ok 15:42:37.0317 0832 storflt 15:42:37.0337 0832 storflt - ok 15:42:37.0367 0832 storvsc 15:42:37.0387 0832 storvsc - ok 15:42:37.0417 0832 swenum 15:42:37.0437 0832 swenum - ok 15:42:37.0487 0832 swprv 15:42:37.0597 0832 swprv - ok 15:42:37.0627 0832 Synth3dVsc 15:42:37.0647 0832 Synth3dVsc - ok 15:42:37.0727 0832 SysMain 15:42:37.0867 0832 SysMain - ok 15:42:37.0907 0832 15:42:37.0987 0832 15:42:38.0017 0832 TapiSrv 15:42:38.0117 0832 TapiSrv - ok 15:42:38.0157 0832 TBS 15:42:38.0247 0832 TBS - ok 15:42:38.0377 0832 Tcpip 15:42:38.0437 0832 Tcpip - ok 15:42:38.0477 0832 TCPIP6 15:42:38.0517 0832 TCPIP6 - ok 15:42:38.0557 0832 tcpipreg 15:42:38.0627 0832 tcpipreg - ok 15:42:38.0667 0832 TDPIPE 15:42:38.0707 0832 TDPIPE - ok 15:42:38.0737 0832 TDTCP 15:42:38.0777 0832 TDTCP - ok 15:42:38.0827 0832 tdx 15:42:38.0917 0832 tdx - ok 15:42:38.0947 0832 TermDD 15:42:38.0967 0832 TermDD - ok 15:42:38.0997 0832 terminpt 15:42:39.0067 0832 terminpt - ok 15:42:39.0137 0832 TermService 15:42:39.0247 0832 TermService - ok 15:42:39.0277 0832 Themes 15:42:39.0347 0832 Themes - ok 15:42:39.0387 0832 THREADORDER 15:42:39.0417 0832 THREADORDER - ok 15:42:39.0457 0832 TrkWks 15:42:39.0537 0832 TrkWks - ok 15:42:39.0597 0832 15:42:39.0747 0832 15:42:39.0777 0832 tssecsrv 15:42:39.0857 0832 tssecsrv - ok 15:42:39.0887 0832 TsUsbFlt 15:42:39.0977 0832 TsUsbFlt - ok 15:42:39.0997 0832 TsUsbGD 15:42:40.0047 0832 TsUsbGD - ok 15:42:40.0087 0832 tsusbhub 15:42:40.0157 0832 tsusbhub - ok 15:42:40.0217 0832 tunnel 15:42:40.0297 0832 tunnel - ok 15:42:40.0317 0832 uagp35 15:42:40.0337 0832 uagp35 - ok 15:42:40.0377 0832 udfs 15:42:40.0457 0832 udfs - ok 15:42:40.0687 0832 UI0Detect 15:42:40.0757 0832 UI0Detect - ok 15:42:40.0787 0832 uliagpkx 15:42:40.0797 0832 uliagpkx - ok 15:42:40.0877 0832 umbus 15:42:40.0927 0832 umbus - ok 15:42:40.0957 0832 UmPass 15:42:40.0997 0832 UmPass - ok 15:42:41.0037 0832 UmRdpService 15:42:41.0117 0832 UmRdpService - ok 15:42:41.0157 0832 upnphost 15:42:41.0247 0832 upnphost - ok 15:42:41.0297 0832 upperdev 15:42:41.0357 0832 upperdev - ok 15:42:41.0397 0832 usbccgp 15:42:41.0497 0832 usbccgp - ok 15:42:41.0537 0832 usbcir 15:42:41.0597 0832 usbcir - ok 15:42:41.0647 0832 usbehci 15:42:41.0707 0832 usbehci - ok 15:42:41.0757 0832 usbhub 15:42:41.0817 0832 usbhub - ok 15:42:41.0847 0832 usbohci 15:42:41.0897 0832 usbohci - ok 15:42:41.0927 0832 usbprint 15:42:41.0977 0832 usbprint - ok 15:42:42.0027 0832 usbser 15:42:42.0067 0832 usbser - ok 15:42:42.0087 0832 UsbserFilt 15:42:42.0167 0832 UsbserFilt - ok 15:42:42.0207 0832 USBSTOR 15:42:42.0327 0832 USBSTOR - ok 15:42:42.0367 0832 usbuhci 15:42:42.0407 0832 usbuhci - ok 15:42:42.0437 0832 UxSms 15:42:42.0507 0832 UxSms - ok 15:42:42.0547 0832 VaultSvc 15:42:42.0567 0832 VaultSvc - ok 15:42:42.0607 0832 vdrvroot 15:42:42.0627 0832 vdrvroot - ok 15:42:42.0677 0832 vds 15:42:42.0787 0832 vds - ok 15:42:42.0827 0832 vga 15:42:42.0887 0832 vga - ok 15:42:42.0907 0832 VgaSave 15:42:42.0967 0832 VgaSave - ok 15:42:42.0987 0832 VGPU - ok 15:42:43.0027 0832 vhdmp 15:42:43.0057 0832 vhdmp - ok 15:42:43.0097 0832 viaagp 15:42:43.0117 0832 viaagp - ok 15:42:43.0147 0832 ViaC7 15:42:43.0217 0832 ViaC7 - ok 15:42:43.0247 0832 viaide 15:42:43.0267 0832 viaide - ok 15:42:43.0307 0832 vmbus 15:42:43.0337 0832 vmbus - ok 15:42:43.0377 0832 VMBusHID 15:42:43.0417 0832 VMBusHID - ok 15:42:43.0457 0832 volmgr 15:42:43.0477 0832 volmgr - ok 15:42:43.0527 0832 volmgrx 15:42:43.0567 0832 volmgrx - ok 15:42:43.0607 0832 volsnap 15:42:43.0647 0832 volsnap - ok 15:42:43.0687 0832 vsmraid 15:42:43.0707 0832 vsmraid - ok 15:42:43.0787 0832 VSS 15:42:43.0977 0832 VSS - ok 15:42:44.0007 0832 vwifibus 15:42:44.0057 0832 vwifibus - ok 15:42:44.0097 0832 W32Time 15:42:44.0197 0832 W32Time - ok 15:42:44.0237 0832 WacomPen 15:42:44.0287 0832 WacomPen - ok 15:42:44.0327 0832 WANARP 15:42:44.0427 0832 WANARP - ok 15:42:44.0437 0832 Wanarpv6 15:42:44.0477 0832 Wanarpv6 - ok 15:42:44.0587 0832 WatAdminSvc 15:42:44.0657 0832 WatAdminSvc - ok 15:42:44.0747 0832 wbengine 15:42:44.0967 0832 wbengine - ok 15:42:45.0007 0832 WbioSrvc 15:42:45.0077 0832 WbioSrvc - ok 15:42:45.0127 0832 wcncsvc 15:42:45.0197 0832 wcncsvc - ok 15:42:45.0217 0832 15:42:45.0287 0832 15:42:45.0357 0832 Wd 15:42:45.0377 0832 Wd - ok 15:42:45.0427 0832 Wdf01000 15:42:45.0467 0832 Wdf01000 - ok 15:42:45.0497 0832 WdiServiceHost 15:42:45.0587 0832 WdiServiceHost - ok 15:42:45.0597 0832 WdiSystemHost 15:42:45.0627 0832 WdiSystemHost - ok 15:42:45.0657 0832 WebClient 15:42:45.0737 0832 WebClient - ok 15:42:45.0777 0832 Wecsvc 15:42:45.0847 0832 Wecsvc - ok 15:42:45.0877 0832 wercplsupport 15:42:45.0927 0832 wercplsupport - ok 15:42:45.0957 0832 WerSvc 15:42:46.0027 0832 WerSvc - ok 15:42:46.0067 0832 WfpLwf 15:42:46.0137 0832 WfpLwf - ok 15:42:46.0157 0832 WIMMount 15:42:46.0187 0832 WIMMount - ok 15:42:46.0287 0832 WinDefend 15:42:46.0427 0832 WinDefend - ok 15:42:46.0447 0832 15:42:46.0507 0832 Winmgmt 15:42:46.0597 0832 Winmgmt - ok 15:42:46.0687 0832 WinRM 15:42:46.0867 0832 WinRM - ok 15:42:46.0977 0832 WinUsb 15:42:47.0027 0832 WinUsb - ok 15:42:47.0097 0832 Wlansvc 15:42:47.0217 0832 Wlansvc - ok 15:42:47.0257 0832 WmiAcpi 15:42:47.0307 0832 WmiAcpi - ok 15:42:47.0377 0832 wmiApSrv 15:42:47.0477 0832 wmiApSrv - ok 15:42:47.0587 0832 WMPNetworkSvc 15:42:47.0907 0832 WMPNetworkSvc - ok 15:42:47.0947 0832 WPCSvc 15:42:47.0997 0832 WPCSvc - ok 15:42:48.0027 0832 WPDBusEnum 15:42:48.0117 0832 WPDBusEnum - ok 15:42:48.0187 0832 ws2ifsl 15:42:48.0237 0832 ws2ifsl - ok 15:42:48.0277 0832 wscsvc 15:42:48.0387 0832 wscsvc - ok 15:42:48.0407 0832 WSearch - ok 15:42:48.0527 0832 wuauserv 15:42:48.0627 0832 wuauserv - ok 15:42:48.0755 0832 WudfPf 15:42:48.0854 0832 WudfPf - ok 15:42:48.0892 0832 WUDFRd 15:42:48.0962 0832 WUDFRd - ok 15:42:49.0007 0832 wudfsvc 15:42:49.0087 0832 wudfsvc - ok 15:42:49.0123 0832 WwanSvc 15:42:49.0194 0832 WwanSvc - ok 15:42:49.0264 0832 ZSMC0305 15:42:49.0345 0832 ZSMC0305 - ok 15:42:49.0373 0832 MBR (0x1B8) 15:42:49.0458 0832 15:42:49.0473 0832 Boot (0x1200) 15:42:49.0474 0832 15:42:49.0518 0832 Boot (0x1200) 15:42:49.0520 0832 15:42:49.0548 0832 Boot (0x1200) 15:42:49.0550 0832 15:42:49.0555 0832 15:42:49.0555 0832 Scan finished 15:42:49.0555 0832 15:42:49.0582 0844 15:42:49.0583 0844 15:42:58.0898 0844 15:42:58.0898 0844 15:43:46.0141 2768 Deinitialize success И сега втория. aswMBR version 0.9.9.1665 Run date: 2012-04-26 15:44:17 ----------------------------- 15:44:17.980 OS 15:44:17.980 Number 15:44:17.986 ComputerName: 15:44:31.272 Initialize success 15:45:28.311 Disk 15:45:28.321 Disk 15:45:28.341 Disk 15:45:28.341 Disk 0 MBR scan 15:45:28.353 Disk 15:45:28.361 Disk 15:45:28.367 Disk 0 Partition - 00 15:45:28.403 Disk 0 Partition 2 00 15:45:28.411 Disk 0 Partition - 00 15:45:28.442 Disk 0 Partition 3 00 15:45:28.476 Disk 15:45:28.532 Disk 15:45:34.888 Service scanning 15:45:43.394 Service 15:46:37.965 Modules scanning 15:46:49.490 Disk 15:46:49.520 ntkrnlpa.exe 15:46:49.532 1 15:46:49.542 3 15:46:49.555 5 15:46:49.567 Scan 15:47:39.084 Disk 15:47:39.102 The TDSS rootkit removing tool 2.7.33.0 Apr 24 2012 18:43:43 ============================================================ Current date / time: 2012/04/26 15:41:34.0937 OS Version: 6.1.7601 ServicePack: 1.0 Product type: Workstation ComputerName: PAVKA07-PC Windows directory: C:Windows System windows directory: C:Windows Processor architecture: Intel x86 Number of processors: 1 Boot type: Normal boot ============================================================ Drive DeviceHarddisk0DR0 - Size: 0x25432CDE00 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 ============================================================ DeviceHarddisk0DR0Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xBE603CB DeviceHarddisk0DR0Partition1: MBR, Type 0x7, StartLBA 0xBE60800, BlocksNum 0x61A8000 DeviceHarddisk0DR0Partition2: MBR, Type 0x7, StartLBA 0x122156B5, BlocksNum 0x7FF54B ============================================================ C: <-> DeviceHarddisk0DR0Partition0 D: <-> DeviceHarddisk0DR0Partition2 F: <-> DeviceHarddisk0DR0Partition1 ============================================================ ============================================================ ============================================================ Mode: Manual; SigCheck; TDLFS; ============================================================ (1b133875b8aa8ac48969bd3458afe9f5) C:Windowssystem32drivers1394ohci.sys (cea80c80bed809aa0da6febc04733349) C:Windowssystem32driversACPI.sys (1efbc664abff416d1d07db115dcb264f) C:Windowssystem32driversacpipmi.sys AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:Program FilesCommon FilesAdobeARM1.0armsvc.exe (21e785ebd7dc90a06391141aac7892fb) C:Windowssystem32driversadp94xx.sys (0c676bc278d5b59ff5abd57bbe9123f2) C:Windowssystem32driversadpahci.sys (7c7b5ee4b7b822ec85321fe23a27db33) C:Windowssystem32driversadpu320.sys (8b5eefeec1e6d1a72a06c526628ad161) C:WindowsSystem32aelupsvc.dll (9ebbba55060f786f0fcaa3893bfa2806) C:Windowssystem32driversafd.sys (507812c3054c21cef746b6ee3d04dd6e) C:Windowssystem32driversagp440.sys (8b30250d573a8f6b4bd23195160d8707) C:Windowssystem32driversdjsvs.sys (18a54e132947cd98fea9accc57f98f13) C:WindowsSystem32alg.exe (0d40bcf52ea90fc7df2aeab6503dea44) C:Windowssystem32driversaliide.sys (3c6600a0696e90a463771c7422e23ab5) C:Windowssystem32driversamdagp.sys (cd5914170297126b6266860198d1d4f0) C:Windowssystem32driversamdide.sys (00dda200d71bac534bf56a9db5dfd666) C:Windowssystem32driversamdk8.sys (3cbf30f5370fda40dd3e87df38ea53b6) C:Windowssystem32driversamdppm.sys (d320bf87125326f996d4904fe24300fc) C:Windowssystem32driversamdsata.sys (ea43af0c423ff267355f74e7a53bdaba) C:Windowssystem32driversamdsbs.sys (46387fb17b086d16dea267d5be23a2f2) C:Windowssystem32driversamdxata.sys (aea177f783e20150ace5383ee368da19) C:Windowssystem32driversappid.sys (62a9c86cb6085e20db4823e4e97826f5) C:WindowsSystem32appidsvc.dll (fb1959012294d6ad43e5304df65e3c26) C:WindowsSystem32appinfo.dll (a45d184df6a8803da13a0b329517a64a) C:WindowsSystem32appmgmts.dll (2932004f49677bd84dbc72edb754ffb3) C:Windowssystem32driversarc.sys (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:Windowssystem32driversarcsas.sys (add2ade1c2b285ab8378d2daaf991481) C:Windowssystem32DRIVERSasyncmac.sys (338c86357871c167a96ab976519bf59e) C:Windowssystem32driversatapi.sys AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:WindowsSystem32Audiosrv.dll AudioEndpointBuilder - ok (ce3b4e731638d2ef62fcb419be0d39f0) C:WindowsSystem32Audiosrv.dll (6e30d02aac9cac84f421622e3a2f6178) C:WindowsSystem32AxInstSV.dll (1a231abec60fd316ec54c66715543cec) C:Windowssystem32driversbxvbdx.sys (bd8869eb9cde6bbe4508d869929869ee) C:Windowssystem32DRIVERSb57nd60x.sys (ee1e9c3bb8228ae423dd38db69128e71) C:WindowsSystem32bdesvc.dll (505506526a9d467307b3c393dedaf858) C:Windowssystem32driversBeep.sys (1e2bac209d184bb851e1a187d8a29136) C:WindowsSystem32bfe.dll (e585445d5021971fae10393f0f1c3961) C:Windowssystem32qmgr.dll (2287078ed48fcfc477b05b20cf38f36f) C:Windowssystem32DRIVERSblbdrive.sys (8f2da3028d5fcbd1a060a3de64cd6506) C:Windowssystem32DRIVERSbowser.sys (9f9acc7f7ccde8a15c282d3f88b43309) C:Windowssystem32driversBrFiltLo.sys (56801ad62213a41f6497f96dee83755a) C:Windowssystem32driversBrFiltUp.sys (77361d72a04f18809d0efb6cceb74d4b) C:Windowssystem32DRIVERSbridge.sys (6e11f33d14d020f58d5e02e4d67dfa19) C:WindowsSystem32browser.dll (845b8ce732e67f3b4133164868c666ea) C:WindowsSystem32DriversBrserid.sys (203f0b1e73adadbbb7b7b1fabd901f6b) C:WindowsSystem32DriversBrSerWdm.sys (bd456606156ba17e60a04e18016ae54b) C:WindowsSystem32DriversBrUsbMdm.sys (af72ed54503f717a43268b3cc5faec2e) C:WindowsSystem32DriversBrUsbSer.sys (ed3df7c56ce0084eb2034432fc56565a) C:Windowssystem32driversbthmodem.sys (1df19c96eef6c29d1c3e1a8678e07190) C:Windowssystem32bthserv.dll (77ea11b065e0a8ab902d78145ca51e10) C:Windowssystem32DRIVERScdfs.sys (be167ed0fdb9c1fa1133953c18d5a6c9) C:Windowssystem32DRIVERScdrom.sys (319c6b309773d063541d01df8ac6f55f) C:WindowsSystem32certprop.dll (3fe3fe94a34df6fb06e6418d0f6a0060) C:Windowssystem32driverscirclass.sys (635181e0e9bbf16871bf5380d71db02d) C:Windowssystem32CLFS.sys clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe clr_optimization_v2.0.50727_32 - ok clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe clr_optimization_v4.0.30319_32 - ok (dea805815e587dad1dd2c502220b5616) C:Windowssystem32driversCmBatt.sys (c537b1db64d495b9b4717b4d6d9edbf2) C:Windowssystem32driverscmdide.sys (6427525d76f61d0c519b008d3680e8e7) C:Windowssystem32Driverscng.sys (a6023d3823c37043986713f118a89bee) C:Windowssystem32driverscompbatt.sys (cbe8c58a8579cfe5fccf809e6f114e89) C:Windowssystem32DRIVERSCompositeBus.sys (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:Windowssystem32driverscrcdisk.sys (a585bebf7d054bd9618eda0922d5484a) C:Windowssystem32cryptsvc.dll (3c2177a897b4ca2788c6fb0c3fd81d4b) C:Windowssystem32driverscsc.sys (15f93b37f6801943360d9eb42485d5d3) C:WindowsSystem32cscsvc.dll (7660f01d3b38aca1747e397d21d790af) C:Windowssystem32rpcss.dll (8d6e10a2d9a5eed59562d9b82cf804e1) C:WindowsSystem32defragsvc.dll (f024449c97ec1e464aaffda18593db88) C:Windowssystem32Driversdfsc.sys (e9e01eb683c132f7fa27cd607b8a2b63) C:Windowssystem32dhcpcore.dll (1a050b0274bfb3890703d490f330c0da) C:Windowssystem32driversdiscache.sys (565003f326f99802e68ca78f2a68e9ff) C:Windowssystem32driversdisk.sys (2a958ef85db1b61ffca65044fa4bce9e) C:Windowssystem32driversdmvsc.sys (33ef4861f19a0736b11314aad9ae28d0) C:WindowsSystem32dnsrslvr.dll (366ba8fb4b7bb7435e3b9eacb3843f67) C:WindowsSystem32dot3svc.dll (8ec04ca86f1d68da9e11952eb85973d6) C:Windowssystem32dps.dll (b918e7c5f9bf77202f89e1a9539f2eb4) C:Windowssystem32driversdrmkaud.sys (c8eb60a182bee9afd6b394c0145a1732) C:Windowssystem32DRIVERSdtsoftbus01.sys (23f5d28378a160352ba8f817bd8c71cb) C:WindowsSystem32driversdxgkrnl.sys (8600142fa91c1b96367d3300ad0f3f3a) C:WindowsSystem32eapsvc.dll (024e1b5cac09731e4d868e64dbfb4ab0) C:Windowssystem32driversevbdx.sys (81951f51e318aecc2d68559e47485cc4) C:WindowsSystem32lsass.exe (a8c362018efc87beb013ee28f29c0863) C:WindowsehomeehRecvr.exe (d389bff34f80caede417bf9d1507996a) C:Windowsehomeehsched.exe (0ed67910c8c326796faa00b2bf6d9d3c) C:Windowssystem32driverselxstor.sys (8fc3208352dd3912c94367a206ab3f11) C:Windowssystem32driverserrdev.sys (f6916efc29d9953d5d0df06882ae8e16) C:Windowssystem32es.dll (2dc9108d74081149cc8b651d3a26207f) C:Windowssystem32driversexfat.sys (7e0ab74553476622fb6ae36f73d97d35) C:Windowssystem32driversfastfat.sys (967ea5b213e9984cbe270205df37755b) C:Windowssystem32fxssvc.exe (e817a017f82df2a1f8cfdbda29388b29) C:Windowssystem32DRIVERSfdc.sys (f3222c893bd2f5821a0179e5c71e88fb) C:Windowssystem32fdPHost.dll (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:Windowssystem32fdrespub.dll (6cf00369c97f3cf563be99be983d13d8) C:Windowssystem32driversfileinfo.sys (42c51dc94c91da21cb9196eb64c45db9) C:Windowssystem32driversfiletrace.sys (87907aa70cb3c56600f1c2fb8841579b) C:Windowssystem32DRIVERSflpydisk.sys (7520ec808e0c35e0ee6f841294316653) C:Windowssystem32driversfltmgr.sys (b3a5ec6b6b6673db7e87c2bcdbddc074) C:Windowssystem32FntCache.dll FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:WindowsMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe FontCache3.0.0.0 - ok (1a16b57943853e598cff37fe2b8cbf1d) C:Windowssystem32driversFsDepends.sys (7dae5ebcc80e45d3253f4923dc424d05) C:Windowssystem32driversFs_Rec.sys (8a73e79089b282100b9393b644cb853b) C:Windowssystem32DRIVERSfvevol.sys (65ee0c7a58b65e74ae05637418153938) C:Windowssystem32driversgagp30kx.sys (e897eaf5ed6ba41e081060c9b447a673) C:WindowsSystem32gpsvc.dll (c1b577b2169900f4cf7190c39f085794) C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe (c1cc0c9742b881c42f1cc628e6f9ebd1) C:Windowssystem32drivershardlock.sys (c44e3c2bab6837db337ddee7544736db) C:Windowssystem32drivershcw85cir.sys HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:Windowssystem32driversHdAudio.sys (9036377b8a6c15dc2eec53e489d159b5) C:Windowssystem32DRIVERSHDAudBus.sys (1d58a7f3e11a9731d0eaaaa8405acc36) C:Windowssystem32driversHidBatt.sys (89448f40e6df260c206a193a4683ba78) C:Windowssystem32drivershidbth.sys (cf50b4cf4a4f229b9f3c08351f99ca5e) C:Windowssystem32drivershidir.sys (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:WindowsSystem32hidserv.dll (10c19f8290891af023eaec0832e1eb4d) C:Windowssystem32DRIVERShidusb.sys (196b4e3f4cccc24af836ce58facbb699) C:Windowssystem32kmsvc.dll HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:Windowssystem32ListSvc.dll HomeGroupListener - ok HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:Windowssystem32provsvc.dll HomeGroupProvider - ok (295fdc419039090eb8b49ffdbb374549) C:Windowssystem32driversHpSAMD.sys (871917b07a141bff43d76d8844d48106) C:Windowssystem32driversHTTP.sys (0c4e035c7f105f1299258c90886c64c5) C:Windowssystem32drivershwpolicy.sys (f151f0bdc47f4a28b1b20a0818ea36d6) C:Windowssystem32DRIVERSi8042prt.sys (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:Windowssystem32driversiaStorV.sys (c521d7eb6497bb1af6afa89e322fb43c) C:WindowsMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe (ad626f6964f4d364d226c39e06872dd3) C:Windowssystem32DRIVERSigdkmd32.sys (4173ff5708f3236cf25195fecd742915) C:Windowssystem32driversiirsp.sys (f95622f161474511b8d80d6b093aa610) C:WindowsSystem32ikeext.dll (a0f12f2c9ba6c72f3987ce780e77c130) C:Windowssystem32driversintelide.sys (3b514d27bfc4accb4037bc6685f766e0) C:Windowssystem32DRIVERSintelppm.sys (acb364b9075a45c0736e5c47be5cae19) C:Windowssystem32ipbusenum.dll (709d1761d3b19a932ff0238ea6d50200) C:Windowssystem32DRIVERSipfltdrv.sys (4d65a07b795d6674312f879d09aa7663) C:WindowsSystem32iphlpsvc.dll (4bd7134618c1d2a27466a099062547bf) C:Windowssystem32driversIPMIDrv.sys (a5fa468d67abcdaa36264e463a7bb0cd) C:Windowssystem32driversipnat.sys (42996cff20a3084a56017b7902307e9f) C:Windowssystem32driversirenum.sys (1f32bb6b38f62f7df1a7ab7292638a35) C:Windowssystem32driversisapnp.sys (cb7a9abb12b8415bce5d74994c7ba3ae) C:Windowssystem32driversmsiscsi.sys (adef52ca1aeae82b50df86b56413107e) C:Windowssystem32DRIVERSkbdclass.sys (9e3ced91863e6ee98c24794d05e27a71) C:Windowssystem32DRIVERSkbdhid.sys (81951f51e318aecc2d68559e47485cc4) C:Windowssystem32lsass.exe (f4647bb23db9038a7536cf6b68f4207f) C:Windowssystem32Driversksecdd.sys (e73cae53bbb72ba26918492c6b4c229d) C:Windowssystem32Driversksecpkg.sys (89a7b9cc98d0d80c6f31b91c0a310fcd) C:Windowssystem32msdtckrm.dll (d64af876d53eca3668bb97b51b4e70ab) C:WindowsSystem32srvsvc.dll LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:WindowsSystem32wkssvc.dll LanmanWorkstation - ok (f7611ec07349979da9b0ae1f18ccc7a6) C:Windowssystem32DRIVERSlltdio.sys (5700673e13a2117fa3b9020c852c01e2) C:WindowsSystem32lltdsvc.dll (55ca01ba19d0006c8f2639b6c045e08b) C:WindowsSystem32lmhsvc.dll (eb119a53ccf2acc000ac71b065b78fef) C:Windowssystem32driverslsi_fc.sys (8ade1c877256a22e49b75d1cc9161f9c) C:Windowssystem32driverslsi_sas.sys (dc9dc3d3daa0e276fd2ec262e38b11e9) C:Windowssystem32driverslsi_sas2.sys (0a036c7d7cab643a7f07135ac47e0524) C:Windowssystem32driverslsi_scsi.sys (6703e366cc18d3b6e534f5cf7df39cee) C:Windowssystem32driversluafv.sys (fb097bbc1a18f044bd17bd2fccf97865) C:Windowssystem32driversmbam.sys (ba400ed640bca1eae5c727ae17c10207) C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe (bfb9ee8ee977efe85d1a3105abef6dd1) C:Windowssystem32Mcx2Svc.dll (0fff5b045293002ab38eb1fd1fc2fb74) C:Windowssystem32driversmegasas.sys (dcbab2920c75f390caf1d29f675d03d6) C:Windowssystem32driversMegaSR.sys Microsoft SharePoint Workspace Audit Service - ok (146b6f43a673379a3c670e86d89be5ea) C:Windowssystem32mmcss.dll (f001861e5700ee84e2d4e52c712f4964) C:Windowssystem32driversmodem.sys (79d10964de86b292320e9dfe02282a23) C:Windowssystem32DRIVERSmonitor.sys (fb18cc1d4c2e716b6b903b0ac0cc0609) C:Windowssystem32DRIVERSmouclass.sys (2c388d2cd01c9042596cf3c8f3c7b24d) C:Windowssystem32DRIVERSmouhid.sys (fc8771f45ecccfd89684e38842539b9b) C:Windowssystem32driversmountmgr.sys (d993bea500e7382dc4e760bf4f35efcb) C:Windowssystem32DRIVERSMpFilter.sys (2d699fb6e89ce0d8da14ecc03b3edfe0) C:Windowssystem32driversmpio.sys (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:Windowssystem32driversmpsdrv.sys (9835584e999d25004e1ee8e5f3e3b881) C:Windowssystem32mpssvc.dll (ceb46ab7c01c9f825f8cc6babc18166a) C:Windowssystem32driversmrxdav.sys (5d16c921e3671636c0eba3bbaac5fd25) C:Windowssystem32DRIVERSmrxsmb.sys (6d17a4791aca19328c685d256349fefc) C:Windowssystem32DRIVERSmrxsmb10.sys (b81f204d146000be76651a50670a5e9e) C:Windowssystem32DRIVERSmrxsmb20.sys (012c5f4e9349e711e11e0f19a8589f0a) C:Windowssystem32driversmsahci.sys (55055f8ad8be27a64c831322a780a228) C:Windowssystem32driversmsdsm.sys (e1bce74a3bd9902b72599c0192a07e27) C:WindowsSystem32msdtc.exe (daefb28e3af5a76abcc2c3078c07327f) C:Windowssystem32driversMsfs.sys (3e1e5767043c5af9367f0056295e9f84) C:WindowsSystem32driversmshidkmdf.sys (0a4e5757ae09fa9622e3158cc1aef114) C:Windowssystem32driversmsisadrv.sys (90f7d9e6b6f27e1a707d4a297f077828) C:Windowssystem32iscsiexe.dll (8c0860d6366aaffb6c5bb9df9448e631) C:Windowssystem32driversMSKSSRV.sys (24516bf4e12a46cb67302e2cdcb8cddf) c:Program FilesMicrosoft Security ClientMsMpEng.exe (3ea8b949f963562cedbb549eac0c11ce) C:Windowssystem32driversMSPCLOCK.sys (f456e973590d663b1073e9c463b40932) C:Windowssystem32driversMSPQM.sys (0e008fc4819d238c51d7c93e7b41e560) C:Windowssystem32driversMsRPC.sys (fc6b9ff600cc585ea38b12589bd4e246) C:Windowssystem32DRIVERSmssmbios.sys (b42c6b921f61a6e55159b8be6cd54a36) C:Windowssystem32driversMSTEE.sys (33599130f44e1f34631cea241de8ac84) C:Windowssystem32driversMTConfig.sys (159fad02f64e6381758c990f753bcc80) C:Windowssystem32Driversmup.sys (61d57a5d7c6d9afe10e77dae6e1b445e) C:Windowssystem32qagentRT.dll (26384429fcd85d83746f63e798ab1480) C:Windowssystem32DRIVERSnwifi.sys (3bae2bfcb6d69e19c8373f635dd544dc) C:Program FilesNeroNero 7Nero BackItUpNBService.exe (e7c54812a2aaf43316eb6930c1ffa108) C:Windowssystem32driversndis.sys (0e1787aa6c9191d3d319e8bafe86f80c) C:Windowssystem32DRIVERSndiscap.sys (e4a8aec125a2e43a9e32afeea7c9c888) C:Windowssystem32DRIVERSndistapi.sys (d8a65dafb3eb41cbb622745676fcd072) C:Windowssystem32DRIVERSndisuio.sys (38fbe267e7e6983311179230facb1017) C:Windowssystem32DRIVERSndiswan.sys (a4bdc541e69674fbff1a8ff00be913f2) C:Windowssystem32driversNDProxy.sys (80b275b1ce3b0e79909db7b39af74d51) C:Windowssystem32DRIVERSnetbios.sys (280122ddcf04b378edd1ad54d71c1e54) C:Windowssystem32DRIVERSnetbt.sys (81951f51e318aecc2d68559e47485cc4) C:Windowssystem32lsass.exe (7cccfca7510684768da22092d1fa4db2) C:WindowsSystem32netman.dll (8c338238c16777a802d6a9211eb2ba50) C:WindowsSystem32netprofm.dll NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:WindowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe NetTcpPortSharing - ok (1d85c4b390b0ee09c7a46b91efb2c097) C:Windowssystem32driversnfrd960.sys (b52f26bade7d7e4a79706e3fd91834cd) C:Windowssystem32DRIVERSNisDrvWFP.sys (290c0d4c4889398797f8df3be00b9698) c:Program FilesMicrosoft Security ClientNisSrv.exe (912084381d30d8b89ec4e293053f4710) C:WindowsSystem32nlasvc.dll NMIndexingService (193fa51dddd0bffded1c340f0434999a) C:Program FilesCommon FilesAheadLibNMIndexingService.exe NMIndexingService - ok (b0a67de1a128389aea4d42c5a56215fd) C:Windowssystem32driversccdcmb.sys (025c54f9f8c8bc1894ea38529c742c54) C:Windowssystem32driversccdcmbo.sys (1db262a9f8c087e8153d89bef3d2235f) C:Windowssystem32driversNpfs.sys (ba387e955e890c8a88306d9b8d06bf17) C:Windowssystem32nsisvc.dll (e9a0a4d07e53d8fea2bb8387a3293c58) C:Windowssystem32driversnsiproxy.sys (81189c3d7763838e55c397759d49007a) C:Windowssystem32driversNtfs.sys (f9756a98d69098dca8945d62858a812c) C:Windowssystem32driversNull.sys (b3e25ee28883877076e0e1ff877d02e0) C:Windowssystem32driversnvraid.sys (4380e59a170d88c4f1022eff6719a8a4) C:Windowssystem32driversnvstor.sys (5a0983915f02bae73267cc2a041f717d) C:Windowssystem32driversnv_agp.sys (08a70a1f2cdde9bb49b885cb817a66eb) C:Windowssystem32driversohci1394.sys (9d10f99a6712e28f8acd5641e3a7ea6b) C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE (358a9cca612c68eb2f07ddad4ce1d8d7) C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE (82a8521ddc60710c3d3d3e7325209bec) C:Windowssystem32pnrpsvc.dll (59c3ddd501e39e006dac31bf55150d91) C:Windowssystem32p2psvc.dll (2ea877ed5dd9713c5ac74e8ea7348d14) C:Windowssystem32DRIVERSparport.sys (bf8f6af06da75b336f07e23aef97d93b) C:Windowssystem32driverspartmgr.sys (eb0a59f29c19b86479d36b35983daadc) C:Windowssystem32DRIVERSparvdm.sys (358ab7956d3160000726574083dfc8a6) C:WindowsSystem32pcasvc.dll (673e55c3498eb970088e812ea820aa8f) C:Windowssystem32driverspci.sys (afe86f419014db4e5593f69ffe26ce0a) C:Windowssystem32driverspciide.sys (f396431b31693e71e8a80687ef523506) C:Windowssystem32driverspcmcia.sys (250f6b43d2b613172035c6747aeeb19f) C:Windowssystem32driverspcw.sys (9e0104ba49f4e6973749a02bf41344ed) C:Windowssystem32driverspeauth.sys (af4d64d2a57b9772cf3801950b8058a6) C:Windowssystem32peerdistsvc.dll (414bba67a3ded1d28437eb66aeb8a720) C:Windowssystem32pla.dll PLFlash DeviceIoControl Service (875e4e0661f3a5994df9e5e3a0a4f96b) C:Windowssystem32IoctlSvc.exe PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - warning PLFlash DeviceIoControl Service - detected UnsignedFile.Multi.Generic (1) (ec7bc28d207da09e79b3e9faf8b232ca) C:Windowssystem32umpnpmgr.dll (63ff8572611249931eb16bb8eed6afc8) C:Windowssystem32pnrpauto.dll (82a8521ddc60710c3d3d3e7325209bec) C:Windowssystem32pnrpsvc.dll (53946b69ba0836bd95b03759530c81ec) C:WindowsSystem32ipsecsvc.dll (f87d30e72e03d579a5199ccb3831d6ea) C:Windowssystem32umpo.dll (631e3e205ad6d86f2aed6a4a8e69f2db) C:Windowssystem32DRIVERSraspptp.sys (85b1e3a0c7585bc4aae6899ec6fcf011) C:Windowssystem32driversprocessr.sys (43ca4ccc22d52fb58e8988f0198851d0) C:Windowssystem32profsvc.dll ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:Windowssystem32lsass.exe ProtectedStorage - ok (6270ccae2a86de6d146529fe55b3246a) C:Windowssystem32DRIVERSpacer.sys (ab95ecf1f6659a60ddc166d8315b0751) C:Windowssystem32driversql2300.sys (b4dd51dd25182244b86737dc51af2270) C:Windowssystem32driversql40xx.sys (31ac809e7707eb580b2bdb760390765a) C:Windowssystem32qwave.dll (584078ca1b95ca72df2a27c336f9719d) C:Windowssystem32driversqwavedrv.sys (30a81b53c766d0133bb86d234e5556ab) C:Windowssystem32DRIVERSrasacd.sys (57ec4aef73660166074d8f7f31c0d4fd) C:Windowssystem32DRIVERSAgileVpn.sys (a60f1839849c0c00739787fd5ec03f13) C:WindowsSystem32rasauto.dll (d9f91eafec2815365cbe6d167e4e332a) C:Windowssystem32DRIVERSrasl2tp.sys (cb9e04dc05eacf5b9a36ca276d475006) C:WindowsSystem32rasmans.dll (0fe8b15916307a6ac12bfb6a63e45507) C:Windowssystem32DRIVERSraspppoe.sys (44101f495a83ea6401d886e7fd70096b) C:Windowssystem32DRIVERSrassstp.sys (d528bc58a489409ba40334ebf96a311b) C:Windowssystem32DRIVERSrdbss.sys (0d8f05481cb76e70e1da06ee9f0da9df) C:Windowssystem32DRIVERSrdpbus.sys (23dae03f29d253ae74c44f99e515f9a1) C:Windowssystem32DRIVERSRDPCDD.sys (b973fcfc50dc1434e1970a146f7e3885) C:Windowssystem32driversrdpdr.sys (5a53ca1598dd4156d44196d200c94b8a) C:Windowssystem32driversrdpencdd.sys (44b0a53cd4f27d50ed461dae0c0b4e1f) C:Windowssystem32driversrdprefmp.sys RdpVideoMiniport (68a0387f58e226deee23d9715955572a) C:Windowssystem32driversrdpvideominiport.sys RdpVideoMiniport - ok (244c83332f44589ae98fc347f11b2693) C:Windowssystem32driversRDPWD.sys (518395321dc96fe2c9f0e96ac743b656) C:Windowssystem32driversrdyboost.sys (7b5e1419717fac363a31cc302895217a) C:WindowsSystem32mprdim.dll (cb9a8683f4ef2bf99e123d79950d7935) C:Windowssystem32regsvc.dll (78d072f35bc45d9e4e1b61895c152234) C:WindowsSystem32RpcEpMap.dll (94d36c0e44677dd26981d2bfeef2a29d) C:Windowssystem32locator.exe (7660f01d3b38aca1747e397d21d790af) C:Windowssystem32rpcss.dll (032b0d36ad92b582d869879f5af5b928) C:Windowssystem32DRIVERSrspndr.sys (7dfd48e24479b68b258d8770121155a0) C:Windowssystem32DRIVERSRt86win7.sys (7fa7f2e249a5dcbb7970630e15e1f482) C:Windowssystem32driversvms3cap.sys (81951f51e318aecc2d68559e47485cc4) C:Windowssystem32lsass.exe (05d860da1040f111503ac416ccef2bca) C:Windowssystem32driverssbp2port.sys (8fc518ffe9519c2631d37515a68009c4) C:WindowsSystem32SCardSvr.dll (0693b5ec673e34dc147e195779a4dcf6) C:Windowssystem32DRIVERSscfilter.sys (a04bb13f8a72f8b6e8b4071723e4e336) C:Windowssystem32schedsvc.dll (319c6b309773d063541d01df8ac6f55f) C:WindowsSystem32certprop.dll (08236c4bce5edd0a0318a438af28e0f7) C:WindowsSystem32SDRSVC.dll (90a3935d05b494a5a39d37e71f09a677) C:Windowssystem32driverssecdrv.sys (a59b3a4442c52060cc7a85293aa3546f) C:Windowssystem32seclogon.dll (dcb7fcdcc97f87360f75d77425b81737) C:Windowssystem32sens.dll (50087fe1ee447009c9cc2997b90de53f) C:Windowssystem32sensrsvc.dll (9ad8b8b515e3df6acd4212ef465de2d1) C:Windowssystem32DRIVERSserenum.sys (5fb7fcea0490d821f26f39cc5ea3d1e2) C:Windowssystem32DRIVERSserial.sys (79bffb520327ff916a582dfea17aa813) C:Windowssystem32driverssermouse.sys (4ae380f39a0032eab7dd953030b26d28) C:Windowssystem32sessenv.dll (9f976e1eb233df46fce808d9dea3eb9c) C:Windowssystem32driverssffdisk.sys (932a68ee27833cfd57c1639d375f2731) C:Windowssystem32driverssffp_mmc.sys (6d4ccaedc018f1cf52866bbbaa235982) C:Windowssystem32driverssffp_sd.sys (db96666cc8312ebc45032f30b007a547) C:Windowssystem32driverssfloppy.sys (d1a079a0de2ea524513b6930c24527a2) C:WindowsSystem32ipnathlp.dll ShellHWDetection (414da952a35bf5d50192e28263b40577) C:WindowsSystem32shsvcs.dll ShellHWDetection - ok (2565cac0dc9fe0371bdce60832582b2e) C:Windowssystem32driverssisagp.sys (a9f0486851becb6dda1d89d381e71055) C:Windowssystem32driversSiSRaid2.sys (3727097b55738e2f554972c3be5bc1aa) C:Windowssystem32driverssisraid4.sys (db0405d9aad62f0762e0876ac142b7e1) C:Program FilesSkypeUpdaterUpdater.exe (3e21c083b8a01cb70ba1f09303010fce) C:Windowssystem32DRIVERSsmb.sys (6a984831644eca1a33ffeae4126f4f37) C:WindowsSystem32snmptrap.exe (95cf1ae7527fb70f7816563cbc09d942) C:Windowssystem32driversspldr.sys (866a43013535dc8587c258e43579c764) C:WindowsSystem32spoolsv.exe (cf87a1de791347e75b98885214ced2b8) C:Windowssystem32sppsvc.exe (b0180b20b065d89232a78a40fe56eaa6) C:Windowssystem32sppuinotify.dll (e4c2764065d66ea1d2d3ebc28fe99c46) C:Windowssystem32DRIVERSsrv.sys (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:Windowssystem32DRIVERSsrv2.sys (be6bd660caa6f291ae06a718a4fa8abc) C:Windowssystem32DRIVERSsrvnet.sys (d887c9fd02ac9fa880f6e5027a43e118) C:WindowsSystem32ssdpsrv.dll (d318f23be45d5e3a107469eb64815b50) C:Windowssystem32sstpsvc.dll (db32d325c192b801df274bfd12a7e72b) C:Windowssystem32driversstexstor.sys (e1fb3706030fb4578a0d72c2fc3689e4) C:WindowsSystem32wiaservc.dll (472af0311073dceceaa8fa18ba2bdf89) C:Windowssystem32driversvmstorfl.sys (dcaffd62259e0bdb433dd67b5bb37619) C:Windowssystem32driversstorvsc.sys (e58c78a848add9610a4db6d214af5224) C:Windowssystem32DRIVERSswenum.sys (a28bd92df340e57b024ba433165d34d7) C:WindowsSystem32swprv.dll (f2ad8960812fd111e20e84659ef19d43) C:Windowssystem32driverssynth3dvsc.sys (36650d618ca34c9d357dfd3d89b2c56f) C:Windowssystem32sysmain.dll TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:WindowsSystem32TabSvc.dll TabletInputService - ok (613bf4820361543956909043a265c6ac) C:WindowsSystem32tapisrv.dll (b799d9fdb26111737f58288d8dc172d9) C:WindowsSystem32tbssvc.dll (65d10b191c59c5501a1263fc33f6894b) C:Windowssystem32driverstcpip.sys (65d10b191c59c5501a1263fc33f6894b) C:Windowssystem32DRIVERStcpip.sys (cca24162e055c3714ce5a88b100c64ed) C:Windowssystem32driverstcpipreg.sys (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:Windowssystem32driverstdpipe.sys (2c2c5afe7ee4f620d69c23c0617651a8) C:Windowssystem32driverstdtcp.sys (b459575348c20e8121d6039da063c704) C:Windowssystem32DRIVERStdx.sys (04dbf4b01ea4bf25a9a3e84affac9b20) C:Windowssystem32DRIVERStermdd.sys (052306fd76793d5d5ab5d9891fd1adbb) C:Windowssystem32driversterminpt.sys (382c804c92811be57829d8e550a900e2) C:WindowsSystem32termsrv.dll (42fb6afd6b79d9fe07381609172e7ca4) C:Windowssystem32themeservice.dll (146b6f43a673379a3c670e86d89be5ea) C:Windowssystem32mmcss.dll (4792c0378db99a9bc2ae2de6cfff0c3a) C:WindowsSystem32trkwks.dll TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:WindowsservicingTrustedInstaller.exe TrustedInstaller - ok (254bb140eee3c59d6114c1a86b636877) C:Windowssystem32DRIVERStssecsrv.sys (fd1d6c73e6333be727cbcc6054247654) C:Windowssystem32driverstsusbflt.sys (01246f0baad7b68ec0f472aa41e33282) C:Windowssystem32driversTsUsbGD.sys (045acb987c650d8186c6b4a692223860) C:Windowssystem32driverstsusbhub.sys (b2fa25d9b17a68bb93d58b0556e8c90d) C:Windowssystem32DRIVERStunnel.sys (750fbcb269f4d7dd2e420c56b795db6d) C:Windowssystem32driversuagp35.sys (ee43346c7e4b5e63e54f927babbb32ff) C:Windowssystem32DRIVERSudfs.sys (8344fd4fce927880aa1aa7681d4927e5) C:Windowssystem32UI0Detect.exe (44e8048ace47befbfdc2e9be4cbc8880) C:Windowssystem32driversuliagpkx.sys (d295bed4b898f0fd999fcfa9b32b071b) C:Windowssystem32DRIVERSumbus.sys (7550ad0c6998ba1cb4843e920ee0feac) C:Windowssystem32driversumpass.sys (409994a8eaceee4e328749c0353527a0) C:WindowsSystem32umrdp.dll (833fbb672460efce8011d262175fad33) C:WindowsSystem32upnphost.dll (78b74af8727a28c128e164e9b53a5413) C:Windowssystem32DRIVERSusbser_lowerflt.sys (bd9c55d7023c5de374507acc7a14e2ac) C:Windowssystem32DRIVERSusbccgp.sys (04ec7cec62ec3b6d9354eee93327fc82) C:Windowssystem32driversusbcir.sys (f92de757e4b7ce9c07c5e65423f3ae3b) C:Windowssystem32DRIVERSusbehci.sys (8dc94aec6a7e644a06135ae7506dc2e9) C:Windowssystem32DRIVERSusbhub.sys (e185d44fac515a18d9deddc23c2cdf44) C:Windowssystem32driversusbohci.sys (797d862fe0875e75c7cc4c1ad7b30252) C:Windowssystem32driversusbprint.sys (31181de6190b39fc8007dffd1a48ffd6) C:Windowssystem32driversusbser.sys (4f8fbc51a1c0a17310846b417a447f91) C:Windowssystem32DRIVERSusbser_lowerfltj.sys (f991ab9cc6b908db552166768176896a) C:Windowssystem32DRIVERSUSBSTOR.SYS (68df884cf41cdada664beb01daf67e3d) C:Windowssystem32DRIVERSusbuhci.sys (081e6e1c91aec36758902a9f727cd23c) C:WindowsSystem32uxsms.dll (81951f51e318aecc2d68559e47485cc4) C:Windowssystem32lsass.exe (a059c4c3edb09e07d21a8e5c0aabd3cb) C:Windowssystem32driversvdrvroot.sys (c3cd30495687c2a2f66a65ca6fd89be9) C:WindowsSystem32vds.exe (17c408214ea61696cec9c66e388b14f3) C:Windowssystem32DRIVERSvgapnp.sys (8e38096ad5c8570a6f1570a61e251561) C:WindowsSystem32driversvga.sys (5461686cca2fda57b024547733ab42e3) C:Windowssystem32driversvhdmp.sys (c829317a37b4bea8f39735d4b076e923) C:Windowssystem32driversviaagp.sys (e02f079a6aa107f06b16549c6e5c7b74) C:Windowssystem32driversviac7.sys (e43574f6a56a0ee11809b48c09e4fd3c) C:Windowssystem32driversviaide.sys (c2f2911156fdc7817c52829c86da494e) C:Windowssystem32driversvmbus.sys (d4d77455211e204f370d08f4963063ce) C:Windowssystem32driversVMBusHID.sys (4c63e00f2f4b5f86ab48a58cd990f212) C:Windowssystem32driversvolmgr.sys (b5bb72067ddddbbfb04b2f89ff8c3c87) C:Windowssystem32driversvolmgrx.sys (f497f67932c6fa693d7de2780631cfe7) C:Windowssystem32driversvolsnap.sys (9dfa0cc2f8855a04816729651175b631) C:Windowssystem32driversvsmraid.sys (209a3b1901b83aeb8527ed211cce9e4c) C:Windowssystem32vssvc.exe (90567b1e658001e79d7c8bbd3dde5aa6) C:WindowsSystem32driversvwifibus.sys (55187fd710e27d5095d10a472c8baf1c) C:Windowssystem32w32time.dll (de3721e89c653aa281428c8a69745d90) C:Windowssystem32driverswacompen.sys (3c3c78515f5ab448b022bdf5b8ffdd2e) C:Windowssystem32DRIVERSwanarp.sys (3c3c78515f5ab448b022bdf5b8ffdd2e) C:Windowssystem32DRIVERSwanarp.sys (353a04c273ec58475d8633e75ccd5604) C:Windowssystem32WatWatAdminSvc.exe (691e3285e53dca558e1a84667f13e15a) C:Windowssystem32wbengine.exe (9614b5d29dc76ac3c29f6d2d3aa70e67) C:WindowsSystem32wbiosrvc.dll (34eee0dfaadb4f691d6d5308a51315dc) C:WindowsSystem32wcncsvc.dll WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:WindowsSystem32WcsPlugInService.dll WcsPlugInService - ok (1112a9badacb47b7c0bb0392e3158dff) C:Windowssystem32driverswd.sys (9950e3d0f08141c7e89e64456ae7dc73) C:Windowssystem32driversWdf01000.sys (46ef9dc96265fd0b423db72e7c38c2a5) C:Windowssystem32wdi.dll (46ef9dc96265fd0b423db72e7c38c2a5) C:Windowssystem32wdi.dll (a9d880f97530d5b8fee278923349929d) C:WindowsSystem32webclnt.dll (760f0afe937a77cff27153206534f275) C:Windowssystem32wecsvc.dll (ac804569bb2364fb6017370258a4091b) C:WindowsSystem32wercplsupport.dll (08e420d873e4fd85241ee2421b02c4a4) C:WindowsSystem32WerSvc.dll (8b9a943f3b53861f2bfaf6c186168f79) C:Windowssystem32DRIVERSwfplwf.sys (5cf95b35e59e2a38023836fff31be64c) C:Windowssystem32driverswimmount.sys (3fae8f94296001c32eab62cd7d82e0fd) C:Program FilesWindows Defendermpsvc.dll WinHttpAutoProxySvc - ok (f62e510b6ad4c21eb9fe8668ed251826) C:Windowssystem32wbemWMIsvc.dll (1b91cd34ea3a90ab6a4ef0550174f4cc) C:Windowssystem32WsmSvc.dll (a67e5f9a400f3bd1be3d80613b45f708) C:Windowssystem32DRIVERSWinUsb.sys (16935c98ff639d185086a3529b1f2067) C:WindowsSystem32wlansvc.dll (0217679b8fca58714c3bf2726d2ca84e) C:Windowssystem32driverswmiacpi.sys (6eb6b66517b048d87dc1856ddf1f4c3f) C:Windowssystem32wbemWmiApSrv.exe (3b40d3a61aa8c21b88ae57c58ab3122e) C:Program FilesWindows Media Playerwmpnetwk.exe (a2f0ec770a92f2b3f9de6d518e11409c) C:WindowsSystem32wpcsvc.dll (aa53356d60af47eacc85bc617a4f3f66) C:Windowssystem32wpdbusenum.dll (6db3276587b853bf886b69528fdb048c) C:Windowssystem32driversws2ifsl.sys (6f5d49efe0e7164e03ae773a3fe25340) C:Windowssystem32wscsvc.dll (3026418a50c5b4761befa632cedb7406) C:Windowssystem32wuaueng.dll (e714a1c0354636837e20ccbf00888ee7) C:Windowssystem32driversWudfPf.sys (1023ee888c9b47178c5293ed5336ab69) C:Windowssystem32DRIVERSWUDFRd.sys (8d1e1e529a2c9e9b6a85b55a345f7629) C:WindowsSystem32WUDFSvc.dll (ff2d745b560f7c71b31f30f4d49f73d2) C:WindowsSystem32wwansvc.dll (c53cb6b30e8d7fe6d950707508aacfb9) C:Windowssystem32DriversusbVM305.sys (a36c5e4f47e84449ff07ed3517b43a31) DeviceHarddisk0DR0 DeviceHarddisk0DR0 - ok (0e32f0ce5dbc45d749f1d77b219423dd) DeviceHarddisk0DR0Partition0 DeviceHarddisk0DR0Partition0 - ok (49e87d068d2d1afe1ffb539ff53b6ab5) DeviceHarddisk0DR0Partition1 DeviceHarddisk0DR0Partition1 - ok (85353fc8fd95f9da1649ed886f996c48) DeviceHarddisk0DR0Partition2 DeviceHarddisk0DR0Partition2 - ok ============================================================ ============================================================ Detected object count: 1 Actual detected object count: 1 PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - skipped by user PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - User select action: Skip Copyright© 2011 AVAST Software Version: Windows 6.1.7601 Service Pack 1 of processors: 1 586 0x1601 PAVKA07-PC UserName: pavka07 0 (boot) DeviceHarddisk0DR0 -> DeviceIdeIdeDeviceP0T0L0-0 0 Vendor: ST3160815AS 3.AAD Size: 152626MB BusType: 3 0 MBR read successfully 0 Windows 7 default MBR code 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 97472 MB offset 63 0F Extended LBA 55144 MB offset 199623690 07 HPFS/NTFS NTFS 50000 MB offset 199624704 05 Extended 5144 MB offset 302024704 07 HPFS/NTFS NTFS 4094 MB offset 304174773 0 scanning sectors +312560640 0 scanning C:Windowssystem32drivers MpKsl4e167c40 c:ProgramDataMicrosoftMicrosoft AntimalwareDefinition Updates{A4872F78-512E-4A15-8679-6DF201B16283}MpKsl4e167c40.sys **LOCKED** 32 0 trace - called modules: CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys nt!IofCallDriver -> DeviceHarddisk0DR0[0x84ee0530] CLASSPNP.SYS[8719759e] -> nt!IofCallDriver -> [0x84a63918] ACPI.sys[86c903d4] -> nt!IofCallDriver -> DeviceIdeIdeDeviceP0T0L0-0[0x84a61030] finished successfully 0 MBR has been saved successfully to "C:MBR.dat" log file has been saved successfully to "C:aswMBR.txt"

26 април 201214 г.

Лог файловете са чисти. Деинсталирайте Combofix с командата: Старт меню => в полето за търсене въведете Combofix /Uninstall и натиснете Enter. Изтрийте използваните от нас неща и техните логове. Маркирам случая като [решен].Поздрави и приятно сърфиране.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.