Trojaner-Board - Computer wurde gesperrt zahlen sie 100€ bei Ukash

Hallo, habe mir den Virus eingefangen wo ich an einer Tankstelle 100€ bezahlen soll um dann die Codes eingeben zu können.
Habe dies natürlich nicht gemacht.
Habe die OTL.exe runtergeladen und den Scan durchgeführt.
Hier sind die OTL Logfiles:

Code:

OTL logfile created on: 2012-10-19 10:32:18 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Media Expert\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

 

3,48 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,64% Memory free

6,95 Gb Paging File | 5,19 Gb Available in Paging File | 74,68% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 683,89 Gb Total Space | 636,63 Gb Free Space | 93,09% Space Free | Partition Type: NTFS

Drive E: | 14,93 Gb Total Space | 8,08 Gb Free Space | 54,11% Space Free | Partition Type: FAT32

 

Computer Name: MEDIAEXPERT | User Name: Media Expert | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Users\Media Expert\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\ProgramData\lsass.exe (Microsoft Corporation)

PRC - C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)

PRC - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\AVG Secure Search\vprot.exe ()

PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)

PRC - C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)

PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE (SoftThinks - Dell)

PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE ()

PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks SAS)

PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (SoftThinks - Dell)

PRC - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)

PRC - C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe ()

PRC - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()

PRC - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()

PRC - C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe ()

PRC - C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe ()

PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)

PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)

 

 
 ========== Modules (No Company Name) ==========

 

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll ()

MOD - C:\Program Files (x86)\ipla\MediaFileScanner.dll ()

MOD - C:\Program Files (x86)\ipla\jabberoo.dll ()

MOD - C:\Program Files (x86)\ipla\lua.dll ()

MOD - C:\Program Files (x86)\ipla\ziplib.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()

MOD - C:\Program Files (x86)\AVG Secure Search\vprot.exe ()

MOD - C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll ()

MOD - C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\DataService.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\en-US\UI\ManagerUI.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll ()

MOD - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()

MOD - C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe ()

MOD - C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe ()

MOD - C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll ()

MOD - C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll ()

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - (wltrysvc) -- C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (Dell Inc.)

SRV:64bit: - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)

SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)

SRV:64bit: - (STacSV) -- C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)

SRV:64bit: - (btwdins) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)

SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)

SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SRV:64bit: - (AESTFilters) -- C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)

SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)

SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)

SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)

SRV - (AVG Security Toolbar Service) -- C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe ()

SRV - (SftService) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks SAS)

SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)

SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - (PCDSRVC{1E208CE0-FB7451FF-06020200}_0) -- c:\Program Files\Dell Support Center\pcdsrvc_x64.pkms (PC-Doctor, Inc.)

DRV:64bit: - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)

DRV:64bit: - (BCM42RLY) -- C:\Windows\SysNative\drivers\bcm42rly.sys (Broadcom Corporation)

DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)

DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )

DRV:64bit: - (amdxhc) -- C:\Windows\SysNative\drivers\amdxhc.sys (Advanced Micro Devices, INC.)

DRV:64bit: - (amdhub30) -- C:\Windows\SysNative\drivers\amdhub30.sys (Advanced Micro Devices, INC.)

DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)

DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)

DRV:64bit: - (amd_xata) -- C:\Windows\SysNative\drivers\amd_xata.sys (Advanced Micro Devices)

DRV:64bit: - (amd_sata) -- C:\Windows\SysNative\drivers\amd_sata.sys (Advanced Micro Devices)

DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )

DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)

DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)

DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)

DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)

DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)

DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (AVGIDSEH) -- C:\Windows\SysNative\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )

DRV:64bit: - (BTWAMPFL) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)

DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)

DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)

DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)

DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)

DRV:64bit: - (AVGIDSFilter) -- C:\Windows\SysNative\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )

DRV:64bit: - (CtClsFlt) -- C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)

DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)

DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)

DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)

DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)

DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)

DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)

DRV:64bit: - (amdiox64) -- C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices)

DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)

DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)

DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)

DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)

DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)

DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)

DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)

DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)

DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE:64bit: - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000&st=18&barid={764B5734-49B4-11E1-A455-1803737F6D3C}

IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)

IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={764B5734-49B4-11E1-A455-1803737F6D3C}

IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111126102622150&tb_oid=26-11-2011&tb_mrud=26-11-2011

 

 

IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.wp.pl/ [binary data]

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes\{00B8222B-3D95-4A0C-9941-32B95A1C0AA8}: "URL" = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={sear

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={38AF3E46-E556-4953-B89A-2360B7A2D0D0}&mid=11c35f73da164b23bd77b1561ed19818-94bb305a3a87b8a6d212ca46d0f8856b893e96e3&lang=pl&ds=AVG&pr=fr&d=2011-12-12 16:21:06&v=10.0.0.7&sap=dsp&q={searchTerms}

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={764B5734-49B4-11E1-A455-1803737F6D3C}

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111126102622150&tb_oid=26-11-2011&tb_mrud=26-11-2011

IE - HKU\S-1-5-21-1265808342-323366298-159849674-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 
 ========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG10\Firefox4\ [2012-09-17 18:53:14 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\10.0.0.7\ [2012-01-16 21:59:54 | 000,000,000 | ---D | M]

 

 

O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll (AVG Technologies CZ, s.r.o.)

O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)

O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)

O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()

O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)

O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)

O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()

O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)

O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)

O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE (Dell Inc.)

O4:64bit: - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()

O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)

O4:64bit: - HKLM..\Run: [Stage Remote] C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe (Dell, Inc.)

O4 - HKLM..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()

O4 - HKLM..\Run: [ROC_roc_dec12] C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe ()

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)

O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()

O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)

O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-1265808342-323366298-159849674-1001..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe ()

O4 - HKU\S-1-5-21-1265808342-323366298-159849674-1001..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - Startup: C:\Users\Media Expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk = C:\ProgramData\lsass.exe (Microsoft Corporation)

O4 - Startup: C:\Users\Media Expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:64bit: - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..Trusted Domains: sharepoint.com ([vermittlung] https in Trusted sites)

O15 - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..Trusted Domains: sharepoint.com ([vermittlung-admin] https in Trusted sites)

O15 - HKU\S-1-5-21-1265808342-323366298-159849674-1001\..Trusted Domains: sharepoint.com ([vermittlung-my] https in Trusted sites)

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/PL/Core/Player/2020PlayerAX_IKEA_Win32.cab (20-20 3D Viewer for IKEA)

O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab (Creative Software AutoUpdate)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1A7F8C31-4E71-4143-AFB7-70233A3F2667}: DhcpNameServer = 172.7.1.161

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{62B10C3C-51DB-4CF3-A9D9-B2C8BF137FA3}: DhcpNameServer = 192.168.178.1

O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll ()

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O30:64bit: - LSA: Security Packages - (msoidssp) - C:\windows\SysNative\msoidssp.dll (Microsoft Corp.)

O30 - LSA: Security Packages - (msoidssp) - C:\windows\SysWow64\msoidssp.dll (Microsoft Corp.)

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync)

O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012-10-19 10:31:21 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Media Expert\Desktop\OTL.exe

[2012-10-14 12:58:46 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe

[2012-10-10 22:34:52 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe

[2012-10-10 22:34:51 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe

[2012-10-10 22:34:49 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe

[2012-10-10 22:34:42 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\KernelBase.dll

[2012-10-10 22:34:41 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\kernel32.dll

[2012-10-10 22:34:41 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64win.dll

[2012-10-10 22:34:41 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\conhost.exe

[2012-10-10 22:34:41 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64.dll

[2012-10-10 22:34:41 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\winsrv.dll

[2012-10-10 22:34:41 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\setup16.exe

[2012-10-10 22:34:41 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntvdm64.dll

[2012-10-10 22:34:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntvdm64.dll

[2012-10-10 22:34:41 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64cpu.dll

[2012-10-10 22:34:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\instnm.exe

[2012-10-10 22:34:41 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll

[2012-10-10 22:34:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wow32.dll

[2012-10-10 22:34:41 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll

[2012-10-10 22:34:41 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll

[2012-10-10 22:34:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll

[2012-10-10 22:34:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll

[2012-10-10 22:34:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll

[2012-10-10 22:34:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-memory-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-profile-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll

[2012-10-10 22:34:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll

[2012-10-10 22:34:40 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

[2012-10-10 22:34:40 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-security-base-l1-1-0.dll

[2012-10-10 22:34:40 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-file-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-synch-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

[2012-10-10 22:34:40 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-localization-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-misc-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-heap-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-util-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-string-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-io-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-handle-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-debug-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

[2012-10-10 22:34:40 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-console-l1-1-0.dll

[2012-10-10 22:34:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\user.exe

[2012-10-10 22:34:30 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wintrust.dll

[2012-10-10 22:34:13 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\crypt32.dll

[2012-10-10 22:34:13 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cryptnet.dll

[2012-09-26 18:19:01 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\OxpsConverter.exe

[2012-09-24 21:29:16 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll

[2012-09-24 21:29:16 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll

[2012-09-24 21:29:14 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll

[2012-09-24 21:29:14 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll

[2012-09-24 21:29:14 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll

[2012-09-24 21:29:14 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe

[2012-09-24 21:29:14 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe

[2012-09-24 21:29:13 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl

[2012-09-24 21:29:13 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl

[2012-09-24 21:29:13 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll

[2012-09-24 21:29:12 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll

[2012-09-24 21:29:12 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll

[2012-09-24 21:29:10 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll

[2012-09-24 21:29:10 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll

[2012-09-24 21:29:09 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll

 
 ========== Files - Modified Within 30 Days ==========

 

[2012-10-19 10:34:21 | 000,020,928 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012-10-19 10:34:21 | 000,020,928 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012-10-19 10:30:56 | 001,662,556 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI

[2012-10-19 10:30:56 | 000,737,980 | ---- | M] () -- C:\windows\SysNative\perfh015.dat

[2012-10-19 10:30:56 | 000,652,148 | ---- | M] () -- C:\windows\SysNative\perfh009.dat

[2012-10-19 10:30:56 | 000,154,636 | ---- | M] () -- C:\windows\SysNative\perfc015.dat

[2012-10-19 10:30:56 | 000,121,080 | ---- | M] () -- C:\windows\SysNative\perfc009.dat

[2012-10-19 10:28:49 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat

[2012-10-19 10:24:37 | 2799,648,768 | -HS- | M] () -- C:\hiberfil.sys

[2012-10-19 10:24:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Media Expert\Desktop\OTL.exe

[2012-10-19 06:30:58 | 083,023,306 | ---- | M] () -- C:\ProgramData\epyks.pad

[2012-10-18 17:59:23 | 097,701,046 | ---- | M] () -- C:\windows\SysNative\drivers\AVG\incavi.avm

[2012-10-17 18:52:25 | 000,292,059 | ---- | M] () -- C:\windows\SysNative\drivers\AVG\iavichjg.avm

[2012-10-14 12:58:48 | 000,000,812 | ---- | M] () -- C:\Users\Media Expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk

[2012-10-14 12:58:46 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe

 
 ========== Files Created - No Company Name ==========

 

[2012-10-14 12:58:48 | 000,000,812 | ---- | C] () -- C:\Users\Media Expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk

[2012-10-14 12:58:47 | 083,023,306 | ---- | C] () -- C:\ProgramData\epyks.pad

[2012-01-28 15:49:05 | 000,005,504 | ---- | C] () -- C:\Users\Media Expert\buw32.lc

[2012-01-28 15:35:37 | 000,000,010 | ---- | C] () -- C:\Users\Media Expert\AppData\Roaming\hhxprot5

[2011-11-06 19:59:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2011-10-31 21:39:38 | 000,003,584 | ---- | C] () -- C:\Users\Media Expert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-10-31 19:04:52 | 000,258,048 | ---- | C] () -- C:\windows\SysWow64\libFLAC.dll

[2011-10-31 19:02:49 | 000,165,376 | ---- | C] () -- C:\windows\SysWow64\unrar.dll

[2011-10-31 19:02:48 | 000,000,038 | ---- | C] () -- C:\windows\avisplitter.ini

[2011-10-31 19:02:47 | 000,810,496 | ---- | C] () -- C:\windows\SysWow64\xvidcore.dll

[2011-10-31 19:02:47 | 000,183,808 | ---- | C] () -- C:\windows\SysWow64\xvidvfw.dll

[2011-10-31 19:02:47 | 000,080,896 | ---- | C] () -- C:\windows\SysWow64\ff_vfw.dll

[2011-09-11 17:55:19 | 000,003,155 | ---- | C] () -- C:\windows\SysWow64\atipblag.dat

[2011-09-11 17:54:06 | 000,000,096 | ---- | C] () -- C:\windows\LaunApp.ini

[2011-09-11 17:54:01 | 000,000,324 | ---- | C] () -- C:\windows\Prelaunch.ini

[2011-09-11 17:54:01 | 000,000,271 | ---- | C] () -- C:\windows\WisPriority.ini

[2011-09-11 17:54:01 | 000,000,032 | ---- | C] () -- C:\windows\WisHWDest.ini

[2011-09-11 17:54:01 | 000,000,028 | ---- | C] () -- C:\windows\WisLangCode.ini

[2011-09-11 17:54:01 | 000,000,023 | ---- | C] () -- C:\windows\WisSysInfo.ini

[2011-09-11 15:58:09 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin

[2011-09-11 15:53:11 | 000,017,776 | ---- | C] () -- C:\windows\EvtMessage.dll

[2011-09-11 15:43:17 | 001,638,694 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI

[2011-07-29 13:40:44 | 000,000,035 | ---- | C] () -- C:\windows\DELL_LANGCODE.ini

[2011-07-29 13:40:44 | 000,000,033 | ---- | C] () -- C:\windows\DELL_OSTYPE.ini

[2011-07-14 01:55:06 | 000,053,760 | ---- | C] () -- C:\windows\SysWow64\OVDecode.dll

 
 ========== ZeroAccess Check ==========

 

[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2012-01-28 15:38:02 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\103.gif

[2011-10-31 18:57:02 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\AVG10

[2011-10-31 18:42:05 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\Fingertapps

[2011-11-07 22:49:17 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\foobar2000

[2011-11-20 20:11:38 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\IDT

[2012-10-19 10:25:14 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\ipla

[2011-10-31 18:41:46 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\Leadertech

[2012-09-16 20:18:16 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\OpenOffice.org

[2011-11-07 21:40:01 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\PCDr

[2011-11-21 22:26:05 | 000,000,000 | ---D | M] -- C:\Users\Media Expert\AppData\Roaming\ZinioReader4

 
 ========== Purity Check ==========

 

 
 

< End of report >

hier die OTL extra logfiles:

Code:

OTL Extras logfile created on: 2012-10-19 10:32:18 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Media Expert\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

 

3,48 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,64% Memory free

6,95 Gb Paging File | 5,19 Gb Available in Paging File | 74,68% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 683,89 Gb Total Space | 636,63 Gb Free Space | 93,09% Space Free | Partition Type: NTFS

Drive E: | 14,93 Gb Total Space | 8,08 Gb Free Space | 54,11% Space Free | Partition Type: FAT32

 

Computer Name: MEDIAEXPERT | User Name: Media Expert | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0C760500-1532-4CFC-93F3-C2B9ED34B026}" = lport=9700 | protocol=17 | dir=in | name=syncup_udp_9700 |

"{101A08E8-168B-47D1-BDDA-C424A644C862}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{15BA5428-5D26-453D-9CF2-FA55599CC9C1}" = rport=137 | protocol=17 | dir=out | app=system |

"{19663210-1A5C-4527-B4C8-278B118C9D52}" = rport=138 | protocol=17 | dir=out | app=system |

"{210CA8B4-42BD-4C4B-B593-7170093B5AF3}" = lport=9702 | protocol=6 | dir=in | name=syncup_tcp_9702 |

"{30031780-956B-48FC-871E-B88DD0DB7867}" = rport=139 | protocol=6 | dir=out | app=system |

"{353F5D08-26D7-4BCD-B825-ECCB44205F23}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{366AAC81-74C9-4AD5-A4DD-663DA89D77D4}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |

"{3A8690AD-855E-4538-A62B-7400E3554AE6}" = lport=9701 | protocol=6 | dir=in | name=syncup_tcp_9701 |

"{54C7C7DE-25E0-4616-9423-3BC415F7DE4D}" = lport=137 | protocol=17 | dir=in | app=system |

"{5DD89AFE-5A7D-4B29-84E8-CCBE37F7D3B9}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |

"{64CFD763-9A5A-4B97-BCF1-99C01D29D2BA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{740459A7-45CF-4D98-80BB-7CBFE18599F0}" = rport=445 | protocol=6 | dir=out | app=system |

"{76FC40F5-0F59-4FC4-BFD3-6D6EE2BDA07A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{7D48C048-D529-4B4C-9AE6-72ECD24BB64B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{879613F2-354C-4029-B1B4-07F70FF764A7}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{9F3E2142-BD5B-4ED6-9258-B67DD64BA0BA}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |

"{ABDC8D97-6D9F-4B21-BD6B-913C56867D29}" = rport=10243 | protocol=6 | dir=out | app=system |

"{BE1644D6-52F8-4729-9FD7-CA661D1C8F8B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{C042057F-CF20-456E-BD38-92DC2DE1C7B2}" = lport=138 | protocol=17 | dir=in | app=system |

"{CF40A9C6-D0FB-4047-B5A7-80259329F5D4}" = lport=9700 | protocol=6 | dir=in | name=syncup_tcp_9700 |

"{DCDF8793-98B5-405E-8206-B9D1C753CE86}" = lport=139 | protocol=6 | dir=in | app=system |

"{E26353AC-472F-4DD1-B7AE-256CC2EF027E}" = lport=2869 | protocol=6 | dir=in | app=system |

"{E6A09882-E5B8-490A-B23B-4B22834CEE02}" = lport=10243 | protocol=6 | dir=in | app=system |

"{F1195302-6A2A-41DC-A071-E02CBE21CD4A}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{F506C586-9C37-4846-9357-158FFAA3A126}" = lport=445 | protocol=6 | dir=in | app=system |

"{F69787F0-4C1C-4457-9385-7F054C1442D1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{FD6DD6AB-027D-4BE6-97D5-F3176A5AEA9C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{03C1CEE8-ACBB-4982-A9A2-24232CC3CDEB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{0BA4F21F-E978-42D2-BCED-C0758523EC25}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |

"{0F8E5726-61EE-4924-A741-A16877B9C66E}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |

"{1093E6AA-A704-4DB6-9666-13FB3EC6195F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{1A529711-124F-4A32-B947-07A9E5BAA4A0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{25E20A3D-3B22-4DD7-8315-4DE1C745441B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{277EF518-725F-4EFB-A7F7-2AF3F8CF8D8D}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{2BFF59EC-5F53-420E-9AC3-31A71E74A6C2}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgdiagex.exe |

"{2D67E90B-11F5-4E57-9833-6E0CE061D2D3}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |

"{30B5E40F-7F68-45E3-B09C-DB039324F9EE}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |

"{3123AF27-D563-405A-B7A6-773068AA924E}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |

"{31E4D2AC-2D47-456C-B82E-1FD0EA53F61F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{34746852-8CA5-4FD4-8B88-B25AB8901411}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |

"{36C4FB06-4CCE-4C4A-B1F3-03333D8674A6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{3E2B3DFC-9DE7-464E-88F5-4C622BBDAC5D}" = dir=in | app=c:\program files\dell stage\dell stage\stage_primary.exe |

"{40477E9F-042B-443D-A21A-F18BBE47EEB3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{40EDCDCD-3803-4499-811F-935F8B93E400}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{50C35CCB-FA04-4674-8BA7-2EFB5CC6CB9B}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgdiagex.exe |

"{560DF3CB-B225-44B8-8BCF-FFC815586A45}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |

"{5690CD98-04D3-479E-8633-7972174B7435}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |

"{57A31417-2499-4485-9916-A43DBF5BF566}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{5B936A23-B3D6-41C8-816C-472770A253A0}" = dir=in | app=c:\program files\dell stage\dell stage\accuweather\accuweather.exe |

"{6C98C141-A3C3-4EDE-A55A-1B779089127F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{6DEA6AE0-D298-4CD5-A0A1-52F66965A3DC}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |

"{9201E638-DE62-4060-AF6C-356C45FD55CC}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |

"{94153CE5-54F4-4DA8-AC03-9722E4523AB2}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |

"{96BF7FA1-9EB9-4B5A-961C-CBC84CAB56A2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{9ADF8C4E-5B92-4908-9317-E960FDA36879}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{9D7059AC-15F0-4CC0-A2D8-6C4855CF4032}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |

"{9E9FE66B-BCDB-44CA-97E3-28BC40B1D50D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{AAC77ADD-CB59-4AB4-9AAC-519C529D3ADD}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |

"{AB158467-A597-4EC2-928D-146C3A343533}" = dir=in | app=c:\program files\dell stage\musicstage\musicstageengine.exe |

"{AE01A798-47AA-4C8C-83AC-A53FF87A29F2}" = dir=in | app=c:\program files (x86)\dell\videostage\videostage.exe |

"{B1909AB8-31A9-4B87-AC0E-B656E16171D4}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |

"{B2B661E9-06A2-4E91-AACA-C2095858C227}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgdiagex.exe |

"{B59EE2E0-FDDD-4BAD-AFB0-091387AB50EF}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |

"{BAD220AF-B577-4B67-A81C-64D6E251D972}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |

"{C28C4D5A-50FF-4F73-B503-57B599D85CCF}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |

"{C786F085-44E5-4046-AAA5-C40E884923C6}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgdiagex.exe |

"{CC9B835F-5767-4189-BD9D-FBC4BF2602D2}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{D19F7526-AE55-4BC3-BF71-A1C28134EE4B}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |

"{D7BB98BB-84FE-4A13-9EFE-735CF1365D7F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"{DA42381B-64DB-424B-B121-8E70384D3894}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |

"{DCB64EC3-D253-4289-AD9F-10F7AC2D9CA0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{DF8441E6-C5E9-4A9E-85A8-E8D4FADCD260}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{EB7AFD3B-DA83-4E05-A8F6-9A7AD5AB803B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{EBE384D8-CE34-436D-B9C4-294A7C58406B}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |

"{EF3E7459-0E82-46F4-950B-B3F52696E719}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |

"{F0BF2516-70FE-4F18-80DB-0ECB151347CF}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |

"{FCB4E1DF-728F-4C63-8512-25069D8EFBB2}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |

"{FEEDC8C1-93E8-4475-8D30-1935B55E4EC1}" = protocol=6 | dir=out | app=system |

"TCP Query User{9F004744-8E0F-44E4-A49F-BCF2EB82CB96}C:\program files (x86)\k-lite codec pack\media player classic\mpc-hc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\k-lite codec pack\media player classic\mpc-hc.exe |

"UDP Query User{FB45340B-AB8A-4553-A32E-FFF92C2C3E6A}C:\program files (x86)\k-lite codec pack\media player classic\mpc-hc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\k-lite codec pack\media player classic\mpc-hc.exe |

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{122CFA16-E9CF-488D-9D4E-60D81F619724}" = AVG 2011

"{183292C5-5F6B-A5D5-50E8-97AC1BF1EA18}" = AMD Catalyst Install Manager

"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant

"{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources

"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)

"{3CDD044C-70DD-6275-488B-67695A2616A8}" = AMD AVIVO64 Codecs

"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software

"{46E637E2-AC34-4B45-B5DF-D20903A3DB61}" = Asystent logowania w witrynie Microsoft Online Services

"{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer

"{902DCF72-EB95-4154-A81B-81000969927E}" = AVG 2011

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector

"{D4627D4B-E3E5-B7ED-68CD-AE400B05E22F}" = AMD Media Foundation Decoders

"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter

"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client

"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service

"{EBCB2E77-396F-2A4D-0AED-5D3709FF3AE5}" = ccc-utility64

"{F3C0A3DE-C927-95F0-85B2-19BCF27698E8}" = AMD Fuel

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"AVG" = AVG 2011

"DW WLAN Card Utility" = DW WLAN Card Utility

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"PC-Doctor for Windows" = Dell Support Center

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{025951D6-A0AE-9CBE-7D93-A45FF838736A}" = CCC Help Norwegian

"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack

"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup

"{16FB82E9-1208-81F4-22BC-A4D57367D42A}" = CCC Help Polish

"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319

"{1AD32757-4B94-1A7C-AC10-C05DC5F12121}" = CCC Help Finnish

"{1D7653C8-63CF-5717-3F65-79317727E64D}" = Catalyst Control Center Profiles Mobile

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{2220B74A-8F67-2E6D-8F00-08068479101E}" = CCC Help Dutch

"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback

"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10

"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22

"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27

"{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources

"{28139736-EB4B-0406-BF5C-B607A5A6912F}" = CCC Help Korean

"{2A0F2CC5-3065-492C-8380-B03AA7106B1A}" = Dell Product Registration

"{2AE5650F-9FBF-A048-9B3B-039F7D681EEC}" = Catalyst Control Center InstallProxy

"{2B4E3318-B04B-32FD-E68E-0836B628CF0B}" = Catalyst Control Center Graphics Previews Common

"{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger

"{2D3C5C1C-352E-C942-B9C8-68DDA42F6983}" = CCC Help Portuguese

"{2F2FDC0B-A4E7-1EBB-91C3-B0C49943793B}" = CCC Help Spanish

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}" = SyncUP

"{42B0407C-7A58-24AC-5352-3F3229AD886B}" = CCC Help Chinese Traditional

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module

"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)

"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries

"{5A25E35A-9025-90A3-AE2F-C3711F1A4233}" = CCC Help Danish

"{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live

"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module

"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live

"{7D05FE31-B45D-3CC7-EC55-56B1F1D13760}" = CCC Help Hungarian

"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide

"{7FB00B6B-6843-97EC-EED6-78BD6D35370A}" = Zinio Reader 4

"{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

"{821E3745-8275-6FD7-04E9-1F7FBC392DDD}" = CCC Help German

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8B234375-EFB1-4024-8B53-EA7C745A6687}" = Adobe Flash Player 10 Plugin

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{8FEA5690-C23C-7873-89CB-A2D6A0818D0B}" = CCC Help Japanese

"{9027AE90-8FD3-5520-20D4-D33BE2FC71C9}" = AMD VISION Engine Control Center

"{91AF2672-F5BC-42CF-8037-A9D2F92BBCC0}" = Dell MusicStage

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader

"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9B1F9129-0667-418E-7051-C005C472359A}" = CCC Help French

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{A0329934-5FE2-F341-5EB9-960154093EAA}" = CCC Help Russian

"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175

"{A5D24600-DD2C-1EE5-7EFE-61F13153DD29}" = CCC Help Swedish

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}" = SweetIM Toolbar for Internet Explorer 4.2

"{A81A974F-8A22-43E6-9243-5198FF758DA1}" = SweetIM for Messenger 3.6

"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X MUI

"{AF4D3C63-009B-4A17-B02E-D395065DD3F0}" = Dell Stage Remote

"{AFEA7544-6B97-4867-A94D-1C39BA61B64F}" = Catalyst Control Center - Branding

"{AFF57A60-FA41-1102-6643-D183DB80779D}" = CCC Help English

"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR

"{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych

"{B5EBBA47-C7CB-0556-7A76-3F8A7A3C8663}" = CCC Help Italian

"{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh

"{C8A6CA2A-18E4-36E9-7EB7-C920FDB96C7D}" = CCC Help Greek

"{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live

"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86

"{CE1B6AD5-3841-BD60-550A-380F2CBBFD79}" = CCC Help Czech

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{D92C9CCE-E5F0-4125-977A-0590F3225B74}" = SyncUP

"{DBC79257-1A1B-7145-D5E7-807B521EADD0}" = CCC Help Thai

"{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E2EBA7C0-8072-447F-856D-FFEE8D15B23B}" = Dell Stage

"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio

"{E40FFD57-E1B2-6216-1B40-8A8FA37D5D27}" = Catalyst Control Center Localization All

"{E4335E82-17B3-460F-9E70-39D9BC269DB3}" = Dell PhotoStage

"{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer

"{E7310F2E-C551-4FAB-BA07-EAC2E158B1BB}" = IKEA Home Planner

"{EB25124D-732E-2BC7-351E-227E544C74E9}" = CCC Help Chinese Standard

"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger

"{EB87675F-5281-4767-A54B-31931794C23D}" = OpenOffice.org 3.3

"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module

"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F15D3C58-F2A4-8B94-0CD9-3A449C60B895}" = CCC Help Turkish

"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic

"{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker

"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Advanced Audio FX Engine" = Advanced Audio FX Engine

"ALLPlayer_is1" = ALLPlayer V4.X

"Dell Webcam Central" = Dell Webcam Central

"eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!

"foobar2000" = foobar2000 v0.9.6.9

"InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage

"ipla" = ipla 2.3.5

"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic)

"Picasa 3" = Picasa 3

"SoftwareUpdUtility" = Download Updater (AOL LLC)

"Super Kulki_is1" = Super Kulki

"Winamp" = Winamp

"Winamp Toolbar" = Winamp Toolbar

"WinLiveSuite" = Podstawowe programy Windows Live

"ZinioReader4" = Zinio Reader 4

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-21-1265808342-323366298-159849674-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Winamp Detect" = Detektor Winampa

"Winamp Toolbar" = Winamp Toolbar

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 2012-09-05 10:33:16 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-05 14:51:17 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-06 12:01:39 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-06 14:21:17 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-07 10:39:32 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-07 14:09:50 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-08 10:19:56 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-08 14:30:08 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-09 03:46:37 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

Error - 2012-09-10 14:03:38 | Computer Name = MediaExpert | Source = WinMgmt | ID = 10

Description =

 

[ Broadcom Wireless LAN Events ]

Error - 2012-09-24 15:24:33 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 21:24:33, Mon, Sep 24, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-09-25 12:03:37 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 18:03:37, Tue, Sep 25, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-09-25 16:11:12 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 22:11:12, Tue, Sep 25, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-09-26 12:13:03 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 18:13:03, Wed, Sep 26, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-10-03 15:39:04 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 21:39:03, Wed, Oct 03, 12 Error - Unable to gain access to user store
 

 

Error - 2012-10-07 04:27:48 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 10:27:47, Sun, Oct 07, 12 Error - Unable to gain access to user store
 

 

Error - 2012-10-11 12:29:25 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 18:29:25, Thu, Oct 11, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-10-16 12:02:06 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 18:02:06, Tue, Oct 16, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-10-18 11:53:58 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 17:53:58, Thu, Oct 18, 12 Error - Unable to set enhanced country code
 

 

Error - 2012-10-19 00:29:34 | Computer Name = MediaExpert | Source = WLAN-Tray | ID = 0

Description = 06:29:34, Fri, Oct 19, 12 Error - Unable to set enhanced country code
 

 

[ System Events ]

Error - 2012-10-14 06:54:44 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-17 10:38:01 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-18 11:54:12 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-18 11:54:42 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 00:29:18 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 00:29:48 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 03:59:16 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 03:59:46 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 04:25:25 | Computer Name = MediaExpert | Source = Service Control Manager | ID = 7011

Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji

 z usługi SftService.

 

Error - 2012-10-19 04:29:50 | Computer Name = MediaExpert | Source = Disk | ID = 262155

Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1.

 

 

< End of report >

Ist der PC jetzt bereinigt oder was muss ich weiter tun??

Danke!

hier ist die aswMBR.txt:

Code:

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software

Run date: 2012-11-09 09:54:27

-----------------------------

09:54:27.997    OS Version: Windows x64 6.1.7601 Service Pack 1

09:54:27.997    Number of processors: 2 586 0x100

09:54:27.999    ComputerName: MEDIAEXPERT  UserName: 

09:54:34.191    Initialize success

10:00:39.931    AVAST engine defs: 12110801

10:02:15.471    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000069

10:02:15.476    Disk 0 Vendor: WDC_WD75 01.0 Size: 715404MB BusType: 11

10:02:15.491    Disk 0 MBR read successfully

10:02:15.494    Disk 0 MBR scan

10:02:15.527    Disk 0 Windows 7 default MBR code

10:02:15.531    Disk 0 Partition 1 00     DE Dell Utility Dell 8.0      100 MB offset 2048

10:02:15.545    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        15000 MB offset 206848

10:02:15.567    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       700302 MB offset 30926848

10:02:15.621    Disk 0 scanning C:\windows\system32\drivers

10:02:25.222    Service scanning

10:02:50.135    Modules scanning

10:02:50.154    Disk 0 trace - called modules:

10:02:50.177    ntoskrnl.exe CLASSPNP.SYS disk.sys amd_xata.sys storport.sys hal.dll amd_sata.sys 

10:02:50.185    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004dee060]

10:02:50.191    3 CLASSPNP.SYS[fffff8800194f43f] -> nt!IofCallDriver -> [0xfffffa8004c81ac0]

10:02:50.197    5 amd_xata.sys[fffff88001064b3f] -> nt!IofCallDriver -> \Device\00000069[0xfffffa8004c8f420]

10:02:53.210    AVAST engine scan C:\windows

10:02:57.699    AVAST engine scan C:\windows\system32

10:06:30.194    AVAST engine scan C:\windows\system32\drivers

10:06:45.548    AVAST engine scan C:\Users\Media Expert

10:32:53.154    AVAST engine scan C:\ProgramData

10:35:14.442    Scan finished successfully

10:43:51.046    Disk 0 MBR has been saved successfully to "C:\Users\Media Expert\Desktop\MBR.dat"

10:43:51.052    The log file has been saved successfully to "C:\Users\Media Expert\Desktop\aswMBR.txt"

und hier das Log vom TDSS-Killer:

Code:

11:06:03.0384 11592  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

11:06:03.0621 11592  ============================================================

11:06:03.0621 11592  Current date / time: 2012/11/09 11:06:03.0621

11:06:03.0621 11592  SystemInfo:

11:06:03.0621 11592  

11:06:03.0621 11592  OS Version: 6.1.7601 ServicePack: 1.0

11:06:03.0621 11592  Product type: Workstation

11:06:03.0621 11592  ComputerName: MEDIAEXPERT

11:06:03.0621 11592  UserName: Media Expert

11:06:03.0621 11592  Windows directory: C:\windows

11:06:03.0621 11592  System windows directory: C:\windows

11:06:03.0621 11592  Running under WOW64

11:06:03.0621 11592  Processor architecture: Intel x64

11:06:03.0621 11592  Number of processors: 2

11:06:03.0621 11592  Page size: 0x1000

11:06:03.0621 11592  Boot type: Normal boot

11:06:03.0621 11592  ============================================================

11:06:04.0203 11592  Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:06:04.0278 11592  ============================================================

11:06:04.0278 11592  \Device\Harddisk0\DR0:

11:06:04.0279 11592  MBR partitions:

11:06:04.0279 11592  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D4C000

11:06:04.0279 11592  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7E800, BlocksNum 0x557C76F0

11:06:04.0279 11592  ============================================================

11:06:04.0341 11592  C: <-> \Device\Harddisk0\DR0\Partition2

11:06:04.0341 11592  ============================================================

11:06:04.0341 11592  Initialize success

11:06:04.0341 11592  ============================================================

11:06:25.0695 11468  ============================================================

11:06:25.0695 11468  Scan started

11:06:25.0695 11468  Mode: Manual; SigCheck; TDLFS; 

11:06:25.0695 11468  ============================================================

11:06:26.0153 11468  ================ Scan system memory ========================

11:06:26.0153 11468  System memory - ok

11:06:26.0154 11468  ================ Scan services =============================

11:06:26.0394 11468  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys

11:06:26.0509 11468  1394ohci - ok

11:06:26.0566 11468  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\windows\system32\drivers\ACPI.sys

11:06:26.0614 11468  ACPI - ok

11:06:26.0644 11468  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\windows\system32\drivers\acpipmi.sys

11:06:26.0705 11468  AcpiPmi - ok

11:06:26.0732 11468  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\windows\system32\drivers\adp94xx.sys

11:06:26.0759 11468  adp94xx - ok

11:06:26.0768 11468  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\windows\system32\drivers\adpahci.sys

11:06:26.0795 11468  adpahci - ok

11:06:26.0802 11468  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\windows\system32\drivers\adpu320.sys

11:06:26.0822 11468  adpu320 - ok

11:06:26.0878 11468  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\windows\System32\aelupsvc.dll

11:06:26.0965 11468  AeLookupSvc - ok

11:06:27.0076 11468  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Program Files\IDT\WDM\AESTSr64.exe

11:06:27.0122 11468  AESTFilters - ok

11:06:27.0217 11468  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\windows\system32\drivers\afd.sys

11:06:27.0306 11468  AFD - ok

11:06:27.0374 11468  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\windows\system32\drivers\agp440.sys

11:06:27.0399 11468  agp440 - ok

11:06:27.0451 11468  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\windows\System32\alg.exe

11:06:27.0506 11468  ALG - ok

11:06:27.0522 11468  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\windows\system32\drivers\aliide.sys

11:06:27.0539 11468  aliide - ok

11:06:27.0596 11468  [ 8D99E7EF02F8E2CAE176F76CBE6DE242 ] AMD External Events Utility C:\windows\system32\atiesrxx.exe

11:06:27.0634 11468  AMD External Events Utility - ok

11:06:27.0669 11468  AMD FUEL Service - ok

11:06:27.0687 11468  [ F1A84D67A03F7536EBDA9DB426EF0E00 ] amdhub30        C:\windows\system32\DRIVERS\amdhub30.sys

11:06:27.0726 11468  amdhub30 - ok

11:06:27.0763 11468  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\windows\system32\drivers\amdide.sys

11:06:27.0778 11468  amdide - ok

11:06:27.0809 11468  [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64        C:\windows\system32\DRIVERS\amdiox64.sys

11:06:27.0824 11468  amdiox64 - ok

11:06:27.0839 11468  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\windows\system32\drivers\amdk8.sys

11:06:27.0873 11468  AmdK8 - ok

11:06:28.0073 11468  [ C7B1CF8162E0960EC239C1A4695B839A ] amdkmdag        C:\windows\system32\DRIVERS\atikmdag.sys

11:06:28.0375 11468  amdkmdag - ok

11:06:28.0415 11468  [ 9204E6FD4CA15522FDF27E3454FDCEBF ] amdkmdap        C:\windows\system32\DRIVERS\atikmpag.sys

11:06:28.0451 11468  amdkmdap - ok

11:06:28.0487 11468  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys

11:06:28.0529 11468  AmdPPM - ok

11:06:28.0556 11468  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\windows\system32\drivers\amdsata.sys

11:06:28.0591 11468  amdsata - ok

11:06:28.0599 11468  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\windows\system32\drivers\amdsbs.sys

11:06:28.0619 11468  amdsbs - ok

11:06:28.0625 11468  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\windows\system32\drivers\amdxata.sys

11:06:28.0641 11468  amdxata - ok

11:06:28.0660 11468  [ D8C25FF90E2E8FC7CBE26E2203EC4757 ] amdxhc          C:\windows\system32\DRIVERS\amdxhc.sys

11:06:28.0677 11468  amdxhc - ok

11:06:28.0701 11468  [ BB4FE7889DB9CBBE61A308E99697F53C ] amd_sata        C:\windows\system32\DRIVERS\amd_sata.sys

11:06:28.0714 11468  amd_sata - ok

11:06:28.0741 11468  [ 5631CBA53F1CBEA3F9E88348E6723391 ] amd_xata        C:\windows\system32\DRIVERS\amd_xata.sys

11:06:28.0755 11468  amd_xata - ok

11:06:28.0801 11468  [ 24ED0EB2B2558970176ECEE680F8F806 ] ApfiltrService  C:\windows\system32\DRIVERS\Apfiltr.sys

11:06:28.0827 11468  ApfiltrService - ok

11:06:28.0862 11468  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\windows\system32\drivers\appid.sys

11:06:28.0912 11468  AppID - ok

11:06:28.0938 11468  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\windows\System32\appidsvc.dll

11:06:29.0006 11468  AppIDSvc - ok

11:06:29.0020 11468  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\windows\System32\appinfo.dll

11:06:29.0077 11468  Appinfo - ok

11:06:29.0093 11468  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\windows\system32\drivers\arc.sys

11:06:29.0111 11468  arc - ok

11:06:29.0131 11468  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\windows\system32\drivers\arcsas.sys

11:06:29.0148 11468  arcsas - ok

11:06:29.0262 11468  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

11:06:29.0307 11468  aspnet_state - ok

11:06:29.0320 11468  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys

11:06:29.0376 11468  AsyncMac - ok

11:06:29.0454 11468  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\windows\system32\drivers\atapi.sys

11:06:29.0487 11468  atapi - ok

11:06:29.0541 11468  [ CBD14F698DEF12EE3557604B726CB8EB ] AtiHDAudioService C:\windows\system32\drivers\AtihdW76.sys

11:06:29.0574 11468  AtiHDAudioService - ok

11:06:29.0650 11468  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll

11:06:29.0727 11468  AudioEndpointBuilder - ok

11:06:29.0740 11468  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\windows\System32\Audiosrv.dll

11:06:29.0790 11468  AudioSrv - ok

11:06:29.0836 11468  AVG Security Toolbar Service - ok

11:06:29.0888 11468  [ 3D1FFAA3358CA0D8A298DEA8BECFC468 ] Avgfwfd         C:\windows\system32\DRIVERS\avgfwd6a.sys

11:06:29.0914 11468  Avgfwfd - ok

11:06:30.0112 11468  [ 733D86815BEB34E2982BC7F561C35AE3 ] avgfws          C:\Program Files (x86)\AVG\AVG2013\avgfws.exe

11:06:30.0157 11468  avgfws - ok

11:06:30.0293 11468  [ 56C73C5BC1656656CAC38A23B4310466 ] AVGIDSAgent     C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe

11:06:30.0496 11468  AVGIDSAgent - ok

11:06:30.0529 11468  [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver    C:\windows\system32\DRIVERS\avgidsdrivera.sys

11:06:30.0555 11468  AVGIDSDriver - ok

11:06:30.0593 11468  [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA        C:\windows\system32\DRIVERS\avgidsha.sys

11:06:30.0620 11468  AVGIDSHA - ok

11:06:30.0648 11468  [ 5989592A91A17587799792A81E1541D4 ] Avgldx64        C:\windows\system32\DRIVERS\avgldx64.sys

11:06:30.0668 11468  Avgldx64 - ok

11:06:30.0733 11468  [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga         C:\windows\system32\DRIVERS\avgloga.sys

11:06:30.0761 11468  Avgloga - ok

11:06:30.0786 11468  [ 767B4A485FB22AA0FC0BF5EEF00572B9 ] Avgmfx64        C:\windows\system32\DRIVERS\avgmfx64.sys

11:06:30.0805 11468  Avgmfx64 - ok

11:06:30.0826 11468  [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64        C:\windows\system32\DRIVERS\avgrkx64.sys

11:06:30.0844 11468  Avgrkx64 - ok

11:06:30.0876 11468  [ 6E634525613D48A1D1657FB21F21F3B2 ] Avgtdia         C:\windows\system32\DRIVERS\avgtdia.sys

11:06:30.0897 11468  Avgtdia - ok

11:06:30.0931 11468  [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd           C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe

11:06:30.0953 11468  avgwd - ok

11:06:31.0010 11468  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\windows\System32\AxInstSV.dll

11:06:31.0044 11468  AxInstSV - ok

11:06:31.0096 11468  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\windows\system32\drivers\bxvbda.sys

11:06:31.0162 11468  b06bdrv - ok

11:06:31.0211 11468  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\windows\system32\DRIVERS\b57nd60a.sys

11:06:31.0253 11468  b57nd60a - ok

11:06:31.0289 11468  [ 801CE1CDF383492B927821C05CB6E8D5 ] BCM42RLY        C:\windows\system32\drivers\BCM42RLY.sys

11:06:31.0315 11468  BCM42RLY - ok

11:06:31.0419 11468  [ 783F1C7ED6B39454A8D1028D4F30768D ] BCM43XX         C:\windows\system32\DRIVERS\bcmwl664.sys

11:06:31.0585 11468  BCM43XX - ok

11:06:31.0648 11468  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\windows\System32\bdesvc.dll

11:06:31.0714 11468  BDESVC - ok

11:06:31.0749 11468  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\windows\system32\drivers\Beep.sys

11:06:31.0806 11468  Beep - ok

11:06:31.0849 11468  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\windows\System32\bfe.dll

11:06:31.0922 11468  BFE - ok

11:06:31.0969 11468  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\windows\System32\qmgr.dll

11:06:32.0052 11468  BITS - ok

11:06:32.0099 11468  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys

11:06:32.0136 11468  blbdrive - ok

11:06:32.0171 11468  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\windows\system32\DRIVERS\bowser.sys

11:06:32.0199 11468  bowser - ok

11:06:32.0233 11468  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\windows\system32\drivers\BrFiltLo.sys

11:06:32.0276 11468  BrFiltLo - ok

11:06:32.0286 11468  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\windows\system32\drivers\BrFiltUp.sys

11:06:32.0318 11468  BrFiltUp - ok

11:06:32.0344 11468  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\windows\System32\browser.dll

11:06:32.0381 11468  Browser - ok

11:06:32.0390 11468  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\windows\System32\Drivers\Brserid.sys

11:06:32.0465 11468  Brserid - ok

11:06:32.0474 11468  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys

11:06:32.0512 11468  BrSerWdm - ok

11:06:32.0517 11468  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys

11:06:32.0546 11468  BrUsbMdm - ok

11:06:32.0564 11468  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys

11:06:32.0604 11468  BrUsbSer - ok

11:06:32.0676 11468  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\windows\system32\drivers\BthEnum.sys

11:06:32.0735 11468  BthEnum - ok

11:06:32.0754 11468  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\windows\system32\drivers\bthmodem.sys

11:06:32.0788 11468  BTHMODEM - ok

11:06:32.0817 11468  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys

11:06:32.0859 11468  BthPan - ok

11:06:32.0922 11468  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\windows\System32\Drivers\BTHport.sys

11:06:32.0987 11468  BTHPORT - ok

11:06:33.0022 11468  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\windows\system32\bthserv.dll

11:06:33.0087 11468  bthserv - ok

11:06:33.0121 11468  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\windows\System32\Drivers\BTHUSB.sys

11:06:33.0162 11468  BTHUSB - ok

11:06:33.0202 11468  [ A0DFB69ADE3444C78B17636FCF28E898 ] BTWAMPFL        C:\windows\system32\DRIVERS\btwampfl.sys

11:06:33.0222 11468  BTWAMPFL - ok

11:06:33.0256 11468  [ 7CF028CE78696882B327FF13D2DFA534 ] btwaudio        C:\windows\system32\drivers\btwaudio.sys

11:06:33.0271 11468  btwaudio - ok

11:06:33.0285 11468  [ 3DEF2370E414B4E299673558BA171A51 ] btwavdt         C:\windows\system32\drivers\btwavdt.sys

11:06:33.0300 11468  btwavdt - ok

11:06:33.0375 11468  [ 3D5E7FB2CB69A6186C7954C0859173F4 ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

11:06:33.0414 11468  btwdins - ok

11:06:33.0428 11468  [ 346B4051B3D7FF70E8F027869B8ECA6E ] btwl2cap        C:\windows\system32\DRIVERS\btwl2cap.sys

11:06:33.0442 11468  btwl2cap - ok

11:06:33.0461 11468  [ 9937E0E4DFC0030560A6DFE9D3A94B39 ] btwrchid        C:\windows\system32\DRIVERS\btwrchid.sys

11:06:33.0473 11468  btwrchid - ok

11:06:33.0492 11468  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys

11:06:33.0561 11468  cdfs - ok

11:06:33.0608 11468  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\windows\system32\DRIVERS\cdrom.sys

11:06:33.0641 11468  cdrom - ok

11:06:33.0671 11468  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\windows\System32\certprop.dll

11:06:33.0750 11468  CertPropSvc - ok

11:06:33.0773 11468  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\windows\system32\drivers\circlass.sys

11:06:33.0809 11468  circlass - ok

11:06:33.0833 11468  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\windows\system32\CLFS.sys

11:06:33.0861 11468  CLFS - ok

11:06:33.0928 11468  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

11:06:33.0959 11468  clr_optimization_v2.0.50727_32 - ok

11:06:33.0987 11468  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

11:06:34.0020 11468  clr_optimization_v2.0.50727_64 - ok

11:06:34.0110 11468  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

11:06:34.0201 11468  clr_optimization_v4.0.30319_32 - ok

11:06:34.0219 11468  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

11:06:34.0236 11468  clr_optimization_v4.0.30319_64 - ok

11:06:34.0264 11468  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys

11:06:34.0305 11468  CmBatt - ok

11:06:34.0319 11468  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\windows\system32\drivers\cmdide.sys

11:06:34.0336 11468  cmdide - ok

11:06:34.0401 11468  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\windows\system32\Drivers\cng.sys

11:06:34.0506 11468  CNG - ok

11:06:34.0553 11468  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\windows\system32\drivers\compbatt.sys

11:06:34.0570 11468  Compbatt - ok

11:06:34.0581 11468  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\windows\system32\DRIVERS\CompositeBus.sys

11:06:34.0634 11468  CompositeBus - ok

11:06:34.0655 11468  COMSysApp - ok

11:06:34.0675 11468  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\windows\system32\drivers\crcdisk.sys

11:06:34.0694 11468  crcdisk - ok

11:06:34.0735 11468  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\windows\system32\cryptsvc.dll

11:06:34.0815 11468  CryptSvc - ok

11:06:34.0866 11468  [ BC3D4F90978CD7C8EABD1BAF3BF7873A ] CtClsFlt        C:\windows\system32\DRIVERS\CtClsFlt.sys

11:06:34.0909 11468  CtClsFlt - ok

11:06:34.0960 11468  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\windows\system32\rpcss.dll

11:06:35.0069 11468  DcomLaunch - ok

11:06:35.0104 11468  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\windows\System32\defragsvc.dll

11:06:35.0173 11468  defragsvc - ok

11:06:35.0186 11468  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\windows\system32\Drivers\dfsc.sys

11:06:35.0244 11468  DfsC - ok

11:06:35.0285 11468  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\windows\system32\dhcpcore.dll

11:06:35.0421 11468  Dhcp - ok

11:06:35.0492 11468  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\windows\system32\drivers\discache.sys

11:06:35.0555 11468  discache - ok

11:06:35.0587 11468  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\windows\system32\drivers\disk.sys

11:06:35.0616 11468  Disk - ok

11:06:35.0650 11468  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\windows\System32\dnsrslvr.dll

11:06:35.0714 11468  Dnscache - ok

11:06:35.0736 11468  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\windows\System32\dot3svc.dll

11:06:35.0794 11468  dot3svc - ok

11:06:35.0802 11468  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\windows\system32\dps.dll

11:06:35.0857 11468  DPS - ok

11:06:35.0900 11468  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\windows\system32\drivers\drmkaud.sys

11:06:35.0933 11468  drmkaud - ok

11:06:35.0963 11468  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys

11:06:36.0016 11468  DXGKrnl - ok

11:06:36.0033 11468  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\windows\System32\eapsvc.dll

11:06:36.0095 11468  EapHost - ok

11:06:36.0166 11468  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\windows\system32\drivers\evbda.sys

11:06:36.0271 11468  ebdrv - ok

11:06:36.0298 11468  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\windows\System32\lsass.exe

11:06:36.0359 11468  EFS - ok

11:06:36.0432 11468  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\windows\ehome\ehRecvr.exe

11:06:36.0492 11468  ehRecvr - ok

11:06:36.0503 11468  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\windows\ehome\ehsched.exe

11:06:36.0536 11468  ehSched - ok

11:06:36.0565 11468  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\windows\system32\drivers\elxstor.sys

11:06:36.0593 11468  elxstor - ok

11:06:36.0599 11468  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\windows\system32\drivers\errdev.sys

11:06:36.0624 11468  ErrDev - ok

11:06:36.0658 11468  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\windows\system32\es.dll

11:06:36.0715 11468  EventSystem - ok

11:06:36.0751 11468  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\windows\system32\drivers\exfat.sys

11:06:36.0820 11468  exfat - ok

11:06:36.0846 11468  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\windows\system32\drivers\fastfat.sys

11:06:36.0909 11468  fastfat - ok

11:06:36.0960 11468  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\windows\system32\fxssvc.exe

11:06:37.0009 11468  Fax - ok

11:06:37.0032 11468  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\windows\system32\drivers\fdc.sys

11:06:37.0076 11468  fdc - ok

11:06:37.0110 11468  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\windows\system32\fdPHost.dll

11:06:37.0173 11468  fdPHost - ok

11:06:37.0193 11468  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\windows\system32\fdrespub.dll

11:06:37.0238 11468  FDResPub - ok

11:06:37.0268 11468  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys

11:06:37.0284 11468  FileInfo - ok

11:06:37.0298 11468  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\windows\system32\drivers\filetrace.sys

11:06:37.0397 11468  Filetrace - ok

11:06:37.0411 11468  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\windows\system32\drivers\flpydisk.sys

11:06:37.0428 11468  flpydisk - ok

11:06:37.0454 11468  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys

11:06:37.0477 11468  FltMgr - ok

11:06:37.0519 11468  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache       C:\windows\system32\FntCache.dll

11:06:37.0584 11468  FontCache - ok

11:06:37.0626 11468  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

11:06:37.0652 11468  FontCache3.0.0.0 - ok

11:06:37.0672 11468  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\windows\system32\drivers\FsDepends.sys

11:06:37.0689 11468  FsDepends - ok

11:06:37.0728 11468  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys

11:06:37.0748 11468  Fs_Rec - ok

11:06:37.0781 11468  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys

11:06:37.0816 11468  fvevol - ok

11:06:37.0849 11468  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys

11:06:37.0866 11468  gagp30kx - ok

11:06:37.0902 11468  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\windows\System32\gpsvc.dll

11:06:37.0958 11468  gpsvc - ok

11:06:38.0010 11468  [ C1B577B2169900F4CF7190C39F085794 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

11:06:38.0043 11468  gusvc - ok

11:06:38.0061 11468  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys

11:06:38.0109 11468  hcw85cir - ok

11:06:38.0141 11468  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys

11:06:38.0188 11468  HdAudAddService - ok

11:06:38.0213 11468  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\windows\system32\DRIVERS\HDAudBus.sys

11:06:38.0245 11468  HDAudBus - ok

11:06:38.0251 11468  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\windows\system32\drivers\HidBatt.sys

11:06:38.0268 11468  HidBatt - ok

11:06:38.0284 11468  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\windows\system32\drivers\hidbth.sys

11:06:38.0311 11468  HidBth - ok

11:06:38.0319 11468  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\windows\system32\drivers\hidir.sys

11:06:38.0348 11468  HidIr - ok

11:06:38.0374 11468  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\windows\system32\hidserv.dll

11:06:38.0430 11468  hidserv - ok

11:06:38.0463 11468  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys

11:06:38.0480 11468  HidUsb - ok

11:06:38.0513 11468  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\windows\system32\kmsvc.dll

11:06:38.0600 11468  hkmsvc - ok

11:06:38.0624 11468  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll

11:06:38.0665 11468  HomeGroupListener - ok

11:06:38.0700 11468  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll

11:06:38.0738 11468  HomeGroupProvider - ok

11:06:38.0757 11468  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys

11:06:38.0774 11468  HpSAMD - ok

11:06:38.0805 11468  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\windows\system32\drivers\HTTP.sys

11:06:38.0868 11468  HTTP - ok

11:06:38.0888 11468  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys

11:06:38.0903 11468  hwpolicy - ok

11:06:38.0933 11468  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\windows\system32\DRIVERS\i8042prt.sys

11:06:38.0967 11468  i8042prt - ok

11:06:38.0986 11468  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\windows\system32\drivers\iaStorV.sys

11:06:39.0011 11468  iaStorV - ok

11:06:39.0078 11468  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

11:06:39.0116 11468  idsvc - ok

11:06:39.0123 11468  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\windows\system32\drivers\iirsp.sys

11:06:39.0140 11468  iirsp - ok

11:06:39.0197 11468  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\windows\System32\ikeext.dll

11:06:39.0276 11468  IKEEXT - ok

11:06:39.0286 11468  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\windows\system32\drivers\intelide.sys

11:06:39.0302 11468  intelide - ok

11:06:39.0317 11468  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\windows\system32\drivers\intelppm.sys

11:06:39.0344 11468  intelppm - ok

11:06:39.0366 11468  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\windows\system32\ipbusenum.dll

11:06:39.0427 11468  IPBusEnum - ok

11:06:39.0442 11468  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys

11:06:39.0487 11468  IpFilterDriver - ok

11:06:39.0517 11468  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\windows\System32\iphlpsvc.dll

11:06:39.0595 11468  iphlpsvc - ok

11:06:39.0613 11468  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\windows\system32\drivers\IPMIDrv.sys

11:06:39.0631 11468  IPMIDRV - ok

11:06:39.0643 11468  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\windows\system32\drivers\ipnat.sys

11:06:39.0702 11468  IPNAT - ok

11:06:39.0734 11468  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\windows\system32\drivers\irenum.sys

11:06:39.0755 11468  IRENUM - ok

11:06:39.0761 11468  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\windows\system32\drivers\isapnp.sys

11:06:39.0778 11468  isapnp - ok

11:06:39.0796 11468  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys

11:06:39.0818 11468  iScsiPrt - ok

11:06:39.0836 11468  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys

11:06:39.0853 11468  kbdclass - ok

11:06:39.0859 11468  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys

11:06:39.0893 11468  kbdhid - ok

11:06:39.0910 11468  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\windows\system32\lsass.exe

11:06:39.0927 11468  KeyIso - ok

11:06:39.0963 11468  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys

11:06:39.0981 11468  KSecDD - ok

11:06:40.0007 11468  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys

11:06:40.0026 11468  KSecPkg - ok

11:06:40.0043 11468  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\windows\system32\drivers\ksthunk.sys

11:06:40.0105 11468  ksthunk - ok

11:06:40.0138 11468  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\windows\system32\msdtckrm.dll

11:06:40.0211 11468  KtmRm - ok

11:06:40.0286 11468  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\windows\system32\srvsvc.dll

11:06:40.0356 11468  LanmanServer - ok

11:06:40.0384 11468  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll

11:06:40.0462 11468  LanmanWorkstation - ok

11:06:40.0505 11468  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys

11:06:40.0588 11468  lltdio - ok

11:06:40.0619 11468  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\windows\System32\lltdsvc.dll

11:06:40.0687 11468  lltdsvc - ok

11:06:40.0703 11468  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\windows\System32\lmhsvc.dll

11:06:40.0761 11468  lmhosts - ok

11:06:40.0796 11468  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\windows\system32\drivers\lsi_fc.sys

11:06:40.0836 11468  LSI_FC - ok

11:06:40.0854 11468  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\windows\system32\drivers\lsi_sas.sys

11:06:40.0872 11468  LSI_SAS - ok

11:06:40.0879 11468  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys

11:06:40.0898 11468  LSI_SAS2 - ok

11:06:40.0906 11468  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys

11:06:40.0924 11468  LSI_SCSI - ok

11:06:40.0951 11468  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\windows\system32\drivers\luafv.sys

11:06:41.0008 11468  luafv - ok

11:06:41.0068 11468  [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector   C:\windows\system32\drivers\mbam.sys

11:06:41.0106 11468  MBAMProtector - ok

11:06:41.0148 11468  [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

11:06:41.0171 11468  MBAMScheduler - ok

11:06:41.0210 11468  [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

11:06:41.0241 11468  MBAMService - ok

11:06:41.0269 11468  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\windows\system32\Mcx2Svc.dll

11:06:41.0307 11468  Mcx2Svc - ok

11:06:41.0327 11468  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\windows\system32\drivers\megasas.sys

11:06:41.0344 11468  megasas - ok

11:06:41.0358 11468  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys

11:06:41.0381 11468  MegaSR - ok

11:06:41.0435 11468  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\windows\system32\mmcss.dll

11:06:41.0496 11468  MMCSS - ok

11:06:41.0521 11468  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\windows\system32\drivers\modem.sys

11:06:41.0577 11468  Modem - ok

11:06:41.0605 11468  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\windows\system32\DRIVERS\monitor.sys

11:06:41.0647 11468  monitor - ok

11:06:41.0662 11468  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys

11:06:41.0679 11468  mouclass - ok

11:06:41.0700 11468  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys

11:06:41.0730 11468  mouhid - ok

11:06:41.0745 11468  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\windows\system32\drivers\mountmgr.sys

11:06:41.0763 11468  mountmgr - ok

11:06:41.0786 11468  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\windows\system32\drivers\mpio.sys

11:06:41.0806 11468  mpio - ok

11:06:41.0812 11468  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys

11:06:41.0858 11468  mpsdrv - ok

11:06:41.0907 11468  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\windows\system32\mpssvc.dll

11:06:42.0004 11468  MpsSvc - ok

11:06:42.0012 11468  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys

11:06:42.0053 11468  MRxDAV - ok

11:06:42.0077 11468  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys

11:06:42.0122 11468  mrxsmb - ok

11:06:42.0159 11468  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys

11:06:42.0189 11468  mrxsmb10 - ok

11:06:42.0218 11468  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys

11:06:42.0234 11468  mrxsmb20 - ok

11:06:42.0264 11468  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\windows\system32\drivers\msahci.sys

11:06:42.0292 11468  msahci - ok

11:06:42.0310 11468  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\windows\system32\drivers\msdsm.sys

11:06:42.0329 11468  msdsm - ok

11:06:42.0345 11468  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\windows\System32\msdtc.exe

11:06:42.0378 11468  MSDTC - ok

11:06:42.0391 11468  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\windows\system32\drivers\Msfs.sys

11:06:42.0436 11468  Msfs - ok

11:06:42.0453 11468  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys

11:06:42.0507 11468  mshidkmdf - ok

11:06:42.0525 11468  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\windows\system32\drivers\msisadrv.sys

11:06:42.0541 11468  msisadrv - ok

11:06:42.0586 11468  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\windows\system32\iscsiexe.dll

11:06:42.0696 11468  MSiSCSI - ok

11:06:42.0702 11468  msiserver - ok

11:06:42.0739 11468  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\windows\system32\drivers\MSKSSRV.sys

11:06:42.0805 11468  MSKSSRV - ok

11:06:42.0961 11468  [ 47A616802531735DF88CD331739D6E97 ] msoidsvc        C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE

11:06:43.0044 11468  msoidsvc - ok

11:06:43.0075 11468  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys

11:06:43.0141 11468  MSPCLOCK - ok

11:06:43.0191 11468  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\windows\system32\drivers\MSPQM.sys

11:06:43.0258 11468  MSPQM - ok

11:06:43.0295 11468  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\windows\system32\drivers\MsRPC.sys

11:06:43.0331 11468  MsRPC - ok

11:06:43.0360 11468  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\windows\system32\DRIVERS\mssmbios.sys

11:06:43.0377 11468  mssmbios - ok

11:06:43.0436 11468  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\windows\system32\drivers\MSTEE.sys

11:06:43.0497 11468  MSTEE - ok

11:06:43.0513 11468  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\windows\system32\drivers\MTConfig.sys

11:06:43.0542 11468  MTConfig - ok

11:06:43.0548 11468  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\windows\system32\Drivers\mup.sys

11:06:43.0566 11468  Mup - ok

11:06:43.0597 11468  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\windows\system32\qagentRT.dll

11:06:43.0665 11468  napagent - ok

11:06:43.0715 11468  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys

11:06:43.0767 11468  NativeWifiP - ok

11:06:43.0915 11468  [ 934BB0D23A25C8C136570800A5A149B6 ] NAUpdate        C:\Program Files (x86)\Nero\Update\NASvc.exe

11:06:43.0957 11468  NAUpdate - ok

11:06:44.0014 11468  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\windows\system32\drivers\ndis.sys

11:06:44.0063 11468  NDIS - ok

11:06:44.0100 11468  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\windows\system32\DRIVERS\ndiscap.sys

11:06:44.0164 11468  NdisCap - ok

11:06:44.0189 11468  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys

11:06:44.0232 11468  NdisTapi - ok

11:06:44.0238 11468  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\windows\system32\DRIVERS\ndisuio.sys

11:06:44.0292 11468  Ndisuio - ok

11:06:44.0299 11468  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\windows\system32\DRIVERS\ndiswan.sys

11:06:44.0363 11468  NdisWan - ok

11:06:44.0371 11468  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\windows\system32\drivers\NDProxy.sys

11:06:44.0414 11468  NDProxy - ok

11:06:44.0431 11468  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\windows\system32\DRIVERS\netbios.sys

11:06:44.0489 11468  NetBIOS - ok

11:06:44.0498 11468  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\windows\system32\DRIVERS\netbt.sys

11:06:44.0544 11468  NetBT - ok

11:06:44.0565 11468  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\windows\system32\lsass.exe

11:06:44.0581 11468  Netlogon - ok

11:06:44.0650 11468  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\windows\System32\netman.dll

11:06:44.0710 11468  Netman - ok

11:06:44.0739 11468  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:44.0756 11468  NetMsmqActivator - ok

11:06:44.0762 11468  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:44.0777 11468  NetPipeActivator - ok

11:06:44.0788 11468  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\windows\System32\netprofm.dll

11:06:44.0848 11468  netprofm - ok

11:06:44.0854 11468  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:44.0869 11468  NetTcpActivator - ok

11:06:44.0876 11468  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:44.0892 11468  NetTcpPortSharing - ok

11:06:44.0919 11468  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\windows\system32\drivers\nfrd960.sys

11:06:44.0936 11468  nfrd960 - ok

11:06:44.0954 11468  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\windows\System32\nlasvc.dll

11:06:45.0013 11468  NlaSvc - ok

11:06:45.0029 11468  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\windows\system32\drivers\Npfs.sys

11:06:45.0073 11468  Npfs - ok

11:06:45.0086 11468  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\windows\system32\nsisvc.dll

11:06:45.0132 11468  nsi - ok

11:06:45.0138 11468  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys

11:06:45.0183 11468  nsiproxy - ok

11:06:45.0240 11468  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys

11:06:45.0326 11468  Ntfs - ok

11:06:45.0343 11468  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\windows\system32\drivers\Null.sys

11:06:45.0387 11468  Null - ok

11:06:45.0411 11468  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\windows\system32\drivers\nvraid.sys

11:06:45.0430 11468  nvraid - ok

11:06:45.0441 11468  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\windows\system32\drivers\nvstor.sys

11:06:45.0462 11468  nvstor - ok

11:06:45.0469 11468  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\windows\system32\drivers\nv_agp.sys

11:06:45.0487 11468  nv_agp - ok

11:06:45.0494 11468  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys

11:06:45.0537 11468  ohci1394 - ok

11:06:45.0559 11468  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\windows\system32\pnrpsvc.dll

11:06:45.0609 11468  p2pimsvc - ok

11:06:45.0655 11468  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\windows\system32\p2psvc.dll

11:06:45.0694 11468  p2psvc - ok

11:06:45.0714 11468  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\windows\system32\drivers\parport.sys

11:06:45.0744 11468  Parport - ok

11:06:45.0770 11468  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\windows\system32\drivers\partmgr.sys

11:06:45.0786 11468  partmgr - ok

11:06:45.0794 11468  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\windows\System32\pcasvc.dll

11:06:45.0832 11468  PcaSvc - ok

11:06:45.0951 11468  [ 4B5F5774FF1C577B9515FDD2B5C535C5 ] PCDSRVC{1E208CE0-FB7451FF-06020200}_0 c:\program files\dell support center\pcdsrvc_x64.pkms

11:06:45.0993 11468  PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - ok

11:06:46.0027 11468  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\windows\system32\drivers\pci.sys

11:06:46.0061 11468  pci - ok

11:06:46.0077 11468  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\windows\system32\drivers\pciide.sys

11:06:46.0093 11468  pciide - ok

11:06:46.0114 11468  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\windows\system32\drivers\pcmcia.sys

11:06:46.0135 11468  pcmcia - ok

11:06:46.0142 11468  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\windows\system32\drivers\pcw.sys

11:06:46.0158 11468  pcw - ok

11:06:46.0171 11468  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\windows\system32\drivers\peauth.sys

11:06:46.0235 11468  PEAUTH - ok

11:06:46.0343 11468  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\windows\SysWow64\perfhost.exe

11:06:46.0386 11468  PerfHost - ok

11:06:46.0453 11468  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\windows\system32\pla.dll

11:06:46.0579 11468  pla - ok

11:06:46.0645 11468  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\windows\system32\umpnpmgr.dll

11:06:46.0694 11468  PlugPlay - ok

11:06:46.0726 11468  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll

11:06:46.0768 11468  PNRPAutoReg - ok

11:06:46.0792 11468  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\windows\system32\pnrpsvc.dll

11:06:46.0813 11468  PNRPsvc - ok

11:06:46.0843 11468  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\windows\System32\ipsecsvc.dll

11:06:46.0899 11468  PolicyAgent - ok

11:06:46.0932 11468  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\windows\system32\umpo.dll

11:06:46.0993 11468  Power - ok

11:06:47.0028 11468  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys

11:06:47.0080 11468  PptpMiniport - ok

11:06:47.0093 11468  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\windows\system32\drivers\processr.sys

11:06:47.0126 11468  Processor - ok

11:06:47.0162 11468  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\windows\system32\profsvc.dll

11:06:47.0208 11468  ProfSvc - ok

11:06:47.0220 11468  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe

11:06:47.0236 11468  ProtectedStorage - ok

11:06:47.0301 11468  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\windows\system32\DRIVERS\pacer.sys

11:06:47.0360 11468  Psched - ok

11:06:47.0410 11468  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\windows\system32\drivers\ql2300.sys

11:06:47.0470 11468  ql2300 - ok

11:06:47.0494 11468  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\windows\system32\drivers\ql40xx.sys

11:06:47.0512 11468  ql40xx - ok

11:06:47.0534 11468  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\windows\system32\qwave.dll

11:06:47.0562 11468  QWAVE - ok

11:06:47.0573 11468  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys

11:06:47.0617 11468  QWAVEdrv - ok

11:06:47.0654 11468  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys

11:06:47.0725 11468  RasAcd - ok

11:06:47.0752 11468  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\windows\system32\DRIVERS\AgileVpn.sys

11:06:47.0817 11468  RasAgileVpn - ok

11:06:47.0844 11468  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\windows\System32\rasauto.dll

11:06:47.0914 11468  RasAuto - ok

11:06:47.0948 11468  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\windows\system32\DRIVERS\rasl2tp.sys

11:06:48.0000 11468  Rasl2tp - ok

11:06:48.0016 11468  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\windows\System32\rasmans.dll

11:06:48.0071 11468  RasMan - ok

11:06:48.0078 11468  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys

11:06:48.0137 11468  RasPppoe - ok

11:06:48.0144 11468  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\windows\system32\DRIVERS\rassstp.sys

11:06:48.0198 11468  RasSstp - ok

11:06:48.0208 11468  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys

11:06:48.0255 11468  rdbss - ok

11:06:48.0273 11468  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\windows\system32\drivers\rdpbus.sys

11:06:48.0302 11468  rdpbus - ok

11:06:48.0322 11468  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys

11:06:48.0365 11468  RDPCDD - ok

11:06:48.0389 11468  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys

11:06:48.0444 11468  RDPENCDD - ok

11:06:48.0463 11468  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys

11:06:48.0506 11468  RDPREFMP - ok

11:06:48.0534 11468  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\windows\system32\drivers\RDPWD.sys

11:06:48.0574 11468  RDPWD - ok

11:06:48.0629 11468  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys

11:06:48.0667 11468  rdyboost - ok

11:06:48.0713 11468  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\windows\System32\mprdim.dll

11:06:48.0778 11468  RemoteAccess - ok

11:06:48.0796 11468  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\windows\system32\regsvc.dll

11:06:48.0845 11468  RemoteRegistry - ok

11:06:48.0892 11468  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys

11:06:48.0938 11468  RFCOMM - ok

11:06:48.0960 11468  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll

11:06:49.0022 11468  RpcEptMapper - ok

11:06:49.0048 11468  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\windows\system32\locator.exe

11:06:49.0088 11468  RpcLocator - ok

11:06:49.0113 11468  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\windows\system32\rpcss.dll

11:06:49.0163 11468  RpcSs - ok

11:06:49.0200 11468  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys

11:06:49.0260 11468  rspndr - ok

11:06:49.0305 11468  [ 135A64530D7699AD48F29D73A658DD11 ] RSUSBSTOR       C:\windows\system32\Drivers\RtsUStor.sys

11:06:49.0336 11468  RSUSBSTOR - ok

11:06:49.0375 11468  [ 9140DB0911DE035FED0A9A77A2D156EA ] RTL8167         C:\windows\system32\DRIVERS\Rt64win7.sys

11:06:49.0419 11468  RTL8167 - ok

11:06:49.0431 11468  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\windows\system32\lsass.exe

11:06:49.0446 11468  SamSs - ok

11:06:49.0464 11468  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\windows\system32\drivers\sbp2port.sys

11:06:49.0482 11468  sbp2port - ok

11:06:49.0503 11468  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\windows\System32\SCardSvr.dll

11:06:49.0555 11468  SCardSvr - ok

11:06:49.0577 11468  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys

11:06:49.0637 11468  scfilter - ok

11:06:49.0678 11468  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\windows\system32\schedsvc.dll

11:06:49.0750 11468  Schedule - ok

11:06:49.0769 11468  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\windows\System32\certprop.dll

11:06:49.0812 11468  SCPolicySvc - ok

11:06:49.0840 11468  [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus           C:\windows\system32\DRIVERS\sdbus.sys

11:06:49.0874 11468  sdbus - ok

11:06:49.0891 11468  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\windows\System32\SDRSVC.dll

11:06:49.0937 11468  SDRSVC - ok

11:06:49.0977 11468  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\windows\system32\drivers\secdrv.sys

11:06:50.0037 11468  secdrv - ok

11:06:50.0053 11468  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\windows\system32\seclogon.dll

11:06:50.0106 11468  seclogon - ok

11:06:50.0121 11468  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\windows\System32\sens.dll

11:06:50.0180 11468  SENS - ok

11:06:50.0208 11468  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\windows\system32\sensrsvc.dll

11:06:50.0250 11468  SensrSvc - ok

11:06:50.0290 11468  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\windows\system32\drivers\serenum.sys

11:06:50.0327 11468  Serenum - ok

11:06:50.0335 11468  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\windows\system32\drivers\serial.sys

11:06:50.0399 11468  Serial - ok

11:06:50.0406 11468  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\windows\system32\drivers\sermouse.sys

11:06:50.0427 11468  sermouse - ok

11:06:50.0471 11468  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\windows\system32\sessenv.dll

11:06:50.0523 11468  SessionEnv - ok

11:06:50.0529 11468  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\windows\system32\drivers\sffdisk.sys

11:06:50.0552 11468  sffdisk - ok

11:06:50.0558 11468  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys

11:06:50.0584 11468  sffp_mmc - ok

11:06:50.0590 11468  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\windows\system32\drivers\sffp_sd.sys

11:06:50.0636 11468  sffp_sd - ok

11:06:50.0642 11468  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\windows\system32\drivers\sfloppy.sys

11:06:50.0658 11468  sfloppy - ok

11:06:50.0741 11468  [ 74EC60E20516AAA573BE74F31175270F ] SftService      C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

11:06:50.0845 11468  SftService - ok

11:06:50.0873 11468  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\windows\System32\ipnathlp.dll

11:06:50.0943 11468  SharedAccess - ok

11:06:50.0983 11468  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll

11:06:51.0037 11468  ShellHWDetection - ok

11:06:51.0063 11468  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys

11:06:51.0079 11468  SiSRaid2 - ok

11:06:51.0099 11468  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys

11:06:51.0117 11468  SiSRaid4 - ok

11:06:51.0180 11468  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

11:06:51.0212 11468  SkypeUpdate - ok

11:06:51.0240 11468  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\windows\system32\DRIVERS\smb.sys

11:06:51.0306 11468  Smb - ok

11:06:51.0349 11468  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\windows\System32\snmptrap.exe

11:06:51.0392 11468  SNMPTRAP - ok

11:06:51.0423 11468  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\windows\system32\drivers\spldr.sys

11:06:51.0439 11468  spldr - ok

11:06:51.0478 11468  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\windows\System32\spoolsv.exe

11:06:51.0527 11468  Spooler - ok

11:06:51.0629 11468  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\windows\system32\sppsvc.exe

11:06:51.0853 11468  sppsvc - ok

11:06:51.0870 11468  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\windows\system32\sppuinotify.dll

11:06:51.0916 11468  sppuinotify - ok

11:06:51.0953 11468  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\windows\system32\DRIVERS\srv.sys

11:06:51.0999 11468  srv - ok

11:06:52.0019 11468  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\windows\system32\DRIVERS\srv2.sys

11:06:52.0058 11468  srv2 - ok

11:06:52.0080 11468  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys

11:06:52.0105 11468  srvnet - ok

11:06:52.0141 11468  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\windows\System32\ssdpsrv.dll

11:06:52.0210 11468  SSDPSRV - ok

11:06:52.0219 11468  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\windows\system32\sstpsvc.dll

11:06:52.0265 11468  SstpSvc - ok

11:06:52.0336 11468  [ BD4C956A46A017B647D3A634230B39C4 ] STacSV          C:\Program Files\IDT\WDM\STacSV64.exe

11:06:52.0362 11468  STacSV - ok

11:06:52.0385 11468  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\windows\system32\drivers\stexstor.sys

11:06:52.0401 11468  stexstor - ok

11:06:52.0430 11468  [ 03D7E6AC7953F2BE24073327CBEDBB85 ] STHDA           C:\windows\system32\DRIVERS\stwrt64.sys

11:06:52.0467 11468  STHDA - ok

11:06:52.0513 11468  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\windows\System32\wiaservc.dll

11:06:52.0569 11468  stisvc - ok

11:06:52.0613 11468  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\windows\system32\DRIVERS\swenum.sys

11:06:52.0638 11468  swenum - ok

11:06:52.0676 11468  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\windows\System32\swprv.dll

11:06:52.0753 11468  swprv - ok

11:06:52.0809 11468  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\windows\system32\sysmain.dll

11:06:52.0910 11468  SysMain - ok

11:06:52.0924 11468  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll

11:06:52.0949 11468  TabletInputService - ok

11:06:52.0969 11468  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\windows\System32\tapisrv.dll

11:06:53.0031 11468  TapiSrv - ok

11:06:53.0052 11468  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\windows\System32\tbssvc.dll

11:06:53.0107 11468  TBS - ok

11:06:53.0197 11468  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip           C:\windows\system32\drivers\tcpip.sys

11:06:53.0307 11468  Tcpip - ok

11:06:53.0370 11468  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys

11:06:53.0420 11468  TCPIP6 - ok

11:06:53.0489 11468  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys

11:06:53.0550 11468  tcpipreg - ok

11:06:53.0564 11468  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys

11:06:53.0609 11468  TDPIPE - ok

11:06:53.0655 11468  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\windows\system32\drivers\tdtcp.sys

11:06:53.0700 11468  TDTCP - ok

11:06:53.0718 11468  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\windows\system32\DRIVERS\tdx.sys

11:06:53.0762 11468  tdx - ok

11:06:53.0768 11468  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\windows\system32\DRIVERS\termdd.sys

11:06:53.0785 11468  TermDD - ok

11:06:53.0826 11468  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\windows\System32\termsrv.dll

11:06:53.0898 11468  TermService - ok

11:06:53.0923 11468  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\windows\system32\themeservice.dll

11:06:53.0946 11468  Themes - ok

11:06:53.0978 11468  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\windows\system32\mmcss.dll

11:06:54.0022 11468  THREADORDER - ok

11:06:54.0033 11468  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\windows\System32\trkwks.dll

11:06:54.0086 11468  TrkWks - ok

11:06:54.0137 11468  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe

11:06:54.0223 11468  TrustedInstaller - ok

11:06:54.0242 11468  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys

11:06:54.0297 11468  tssecsrv - ok

11:06:54.0307 11468  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys

11:06:54.0333 11468  TsUsbFlt - ok

11:06:54.0366 11468  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD         C:\windows\system32\drivers\TsUsbGD.sys

11:06:54.0394 11468  TsUsbGD - ok

11:06:54.0420 11468  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys

11:06:54.0470 11468  tunnel - ok

11:06:54.0477 11468  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\windows\system32\drivers\uagp35.sys

11:06:54.0494 11468  uagp35 - ok

11:06:54.0503 11468  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\windows\system32\DRIVERS\udfs.sys

11:06:54.0569 11468  udfs - ok

11:06:54.0620 11468  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\windows\system32\UI0Detect.exe

11:06:54.0659 11468  UI0Detect - ok

11:06:54.0666 11468  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys

11:06:54.0683 11468  uliagpkx - ok

11:06:54.0701 11468  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\windows\system32\DRIVERS\umbus.sys

11:06:54.0734 11468  umbus - ok

11:06:54.0740 11468  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\windows\system32\drivers\umpass.sys

11:06:54.0766 11468  UmPass - ok

11:06:54.0790 11468  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\windows\System32\upnphost.dll

11:06:54.0851 11468  upnphost - ok

11:06:54.0858 11468  [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp         C:\windows\system32\DRIVERS\usbccgp.sys

11:06:54.0893 11468  usbccgp - ok

11:06:54.0906 11468  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\windows\system32\drivers\usbcir.sys

11:06:54.0929 11468  usbcir - ok

11:06:54.0935 11468  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\windows\system32\DRIVERS\usbehci.sys

11:06:54.0959 11468  usbehci - ok

11:06:55.0000 11468  [ 573D192E268F0C5B486B7E96F661E538 ] usbfilter       C:\windows\system32\DRIVERS\usbfilter.sys

11:06:55.0027 11468  usbfilter - ok

11:06:55.0062 11468  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys

11:06:55.0096 11468  usbhub - ok

11:06:55.0102 11468  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\windows\system32\DRIVERS\usbohci.sys

11:06:55.0119 11468  usbohci - ok

11:06:55.0134 11468  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\windows\system32\drivers\usbprint.sys

11:06:55.0154 11468  usbprint - ok

11:06:55.0169 11468  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\windows\system32\DRIVERS\USBSTOR.SYS

11:06:55.0207 11468  USBSTOR - ok

11:06:55.0215 11468  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\windows\system32\drivers\usbuhci.sys

11:06:55.0242 11468  usbuhci - ok

11:06:55.0274 11468  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\windows\system32\Drivers\usbvideo.sys

11:06:55.0296 11468  usbvideo - ok

11:06:55.0317 11468  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\windows\System32\uxsms.dll

11:06:55.0365 11468  UxSms - ok

11:06:55.0397 11468  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\windows\system32\lsass.exe

11:06:55.0421 11468  VaultSvc - ok

11:06:55.0446 11468  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys

11:06:55.0463 11468  vdrvroot - ok

11:06:55.0533 11468  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\windows\System32\vds.exe

11:06:55.0644 11468  vds - ok

11:06:55.0665 11468  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\windows\system32\DRIVERS\vgapnp.sys

11:06:55.0684 11468  vga - ok

11:06:55.0691 11468  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\windows\System32\drivers\vga.sys

11:06:55.0743 11468  VgaSave - ok

11:06:55.0751 11468  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\windows\system32\drivers\vhdmp.sys

11:06:55.0772 11468  vhdmp - ok

11:06:55.0779 11468  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\windows\system32\drivers\viaide.sys

11:06:55.0796 11468  viaide - ok

11:06:55.0803 11468  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\windows\system32\drivers\volmgr.sys

11:06:55.0820 11468  volmgr - ok

11:06:55.0830 11468  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\windows\system32\drivers\volmgrx.sys

11:06:55.0853 11468  volmgrx - ok

11:06:55.0863 11468  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\windows\system32\drivers\volsnap.sys

11:06:55.0885 11468  volsnap - ok

11:06:55.0912 11468  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\windows\system32\drivers\vsmraid.sys

11:06:55.0931 11468  vsmraid - ok

11:06:55.0981 11468  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\windows\system32\vssvc.exe

11:06:56.0089 11468  VSS - ok

11:06:56.0095 11468  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys

11:06:56.0123 11468  vwifibus - ok

11:06:56.0135 11468  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys

11:06:56.0172 11468  vwififlt - ok

11:06:56.0208 11468  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\windows\system32\w32time.dll

11:06:56.0260 11468  W32Time - ok

11:06:56.0280 11468  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\windows\system32\drivers\wacompen.sys

11:06:56.0303 11468  WacomPen - ok

11:06:56.0329 11468  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys

11:06:56.0386 11468  WANARP - ok

11:06:56.0402 11468  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys

11:06:56.0445 11468  Wanarpv6 - ok

11:06:56.0517 11468  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\windows\system32\Wat\WatAdminSvc.exe

11:06:56.0597 11468  WatAdminSvc - ok

11:06:56.0658 11468  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\windows\system32\wbengine.exe

11:06:56.0780 11468  wbengine - ok

11:06:56.0811 11468  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll

11:06:56.0838 11468  WbioSrvc - ok

11:06:56.0861 11468  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\windows\System32\wcncsvc.dll

11:06:56.0894 11468  wcncsvc - ok

11:06:56.0912 11468  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll

11:06:56.0948 11468  WcsPlugInService - ok

11:06:56.0971 11468  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\windows\system32\drivers\wd.sys

11:06:57.0004 11468  Wd - ok

11:06:57.0028 11468  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys

11:06:57.0059 11468  Wdf01000 - ok

11:06:57.0080 11468  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\windows\system32\wdi.dll

11:06:57.0187 11468  WdiServiceHost - ok

11:06:57.0192 11468  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\windows\system32\wdi.dll

11:06:57.0223 11468  WdiSystemHost - ok

11:06:57.0268 11468  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\windows\System32\webclnt.dll

11:06:57.0318 11468  WebClient - ok

11:06:57.0335 11468  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\windows\system32\wecsvc.dll

11:06:57.0394 11468  Wecsvc - ok

11:06:57.0409 11468  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\windows\System32\wercplsupport.dll

11:06:57.0455 11468  wercplsupport - ok

11:06:57.0470 11468  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\windows\System32\WerSvc.dll

11:06:57.0517 11468  WerSvc - ok

11:06:57.0548 11468  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys

11:06:57.0593 11468  WfpLwf - ok

11:06:57.0639 11468  [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr         C:\windows\system32\DRIVERS\wimfltr.sys

11:06:57.0668 11468  WimFltr - ok

11:06:57.0677 11468  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\windows\system32\drivers\wimmount.sys

11:06:57.0693 11468  WIMMount - ok

11:06:57.0718 11468  WinDefend - ok

11:06:57.0729 11468  WinHttpAutoProxySvc - ok

11:06:57.0783 11468  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\windows\system32\wbem\WMIsvc.dll

11:06:57.0853 11468  Winmgmt - ok

11:06:57.0931 11468  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\windows\system32\WsmSvc.dll

11:06:58.0067 11468  WinRM - ok

11:06:58.0121 11468  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys

11:06:58.0142 11468  WinUsb - ok

11:06:58.0188 11468  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\windows\System32\wlansvc.dll

11:06:58.0244 11468  Wlansvc - ok

11:06:58.0275 11468  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

11:06:58.0289 11468  wlcrasvc - ok

11:06:58.0389 11468  [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

11:06:58.0489 11468  wlidsvc - ok

11:06:58.0554 11468  [ 6F253B09280462D1F7E794DCC02DB9A1 ] wltrysvc        C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

11:06:58.0579 11468  wltrysvc ( UnsignedFile.Multi.Generic ) - warning

11:06:58.0579 11468  wltrysvc - detected UnsignedFile.Multi.Generic (1)

11:06:58.0614 11468  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\windows\system32\DRIVERS\wmiacpi.sys

11:06:58.0654 11468  WmiAcpi - ok

11:06:58.0699 11468  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe

11:06:58.0743 11468  wmiApSrv - ok

11:06:58.0775 11468  WMPNetworkSvc - ok

11:06:58.0808 11468  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\windows\System32\wpcsvc.dll

11:06:58.0843 11468  WPCSvc - ok

11:06:58.0865 11468  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll

11:06:58.0886 11468  WPDBusEnum - ok

11:06:58.0906 11468  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\windows\system32\drivers\ws2ifsl.sys

11:06:58.0950 11468  ws2ifsl - ok

11:06:58.0968 11468  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\windows\System32\wscsvc.dll

11:06:58.0994 11468  wscsvc - ok

11:06:58.0999 11468  WSearch - ok

11:06:59.0098 11468  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\windows\system32\wuaueng.dll

11:06:59.0210 11468  wuauserv - ok

11:06:59.0227 11468  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\windows\system32\drivers\WudfPf.sys

11:06:59.0304 11468  WudfPf - ok

11:06:59.0328 11468  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys

11:06:59.0384 11468  WUDFRd - ok

11:06:59.0411 11468  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc         C:\windows\System32\WUDFSvc.dll

11:06:59.0456 11468  wudfsvc - ok

11:06:59.0470 11468  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\windows\System32\wwansvc.dll

11:06:59.0509 11468  WwanSvc - ok

11:06:59.0537 11468  ================ Scan global ===============================

11:06:59.0556 11468  [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll

11:06:59.0601 11468  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

11:06:59.0621 11468  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

11:06:59.0663 11468  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll

11:06:59.0696 11468  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe

11:06:59.0706 11468  [Global] - ok

11:06:59.0707 11468  ================ Scan MBR ==================================

11:06:59.0724 11468  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

11:07:00.0274 11468  \Device\Harddisk0\DR0 - ok

11:07:00.0279 11468  ================ Scan VBR ==================================

11:07:00.0283 11468  [ 17E6064B18AA88ED8319B3238FE06A25 ] \Device\Harddisk0\DR0\Partition1

11:07:00.0286 11468  \Device\Harddisk0\DR0\Partition1 - ok

11:07:00.0322 11468  [ 02D3C531AC736F85F2D45F0E1FD3F66F ] \Device\Harddisk0\DR0\Partition2

11:07:00.0325 11468  \Device\Harddisk0\DR0\Partition2 - ok

11:07:00.0325 11468  ============================================================

11:07:00.0325 11468  Scan finished

11:07:00.0325 11468  ============================================================

11:07:00.0346 11448  Detected object count: 1

11:07:00.0346 11448  Actual detected object count: 1

11:08:10.0940 11448  wltrysvc ( UnsignedFile.Multi.Generic ) - skipped by user

11:08:10.0940 11448  wltrysvc ( UnsignedFile.Multi.Generic ) - User select action: Skip