Prosím o kontrolu logu

[AngryPanda]

Zdravím,
prosil bych nějaké zkušenější lidi, kteří se v tomto vyznají o kontrolu mého logu.

Mám tyto 2 problémy, se kterýma si nejsem jist jestli je to chyba softwaru, nebo hardwaru -
1. Když vypnu PC, občas se stane, že se po cca. 4s sám zapne.
2. Poměrně často mi kolísá rychlost internetu (také možné, že je to chyba u poskytovatele internetu)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:55, on 9.3.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
D:\LogMeIn Hamachi\hamachi-2-ui.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Skype\Phone\Skype.exe
C:\Program Files\ManyCam\Bin\ManyCam.exe
C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe
C:\Program Files\ZyXEL\G-302v3\G-302v3.exe
C:\Program Files\Rainmeter\Rainmeter.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
D:\Download\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={AF34819B-01A7-11E2-8240-0019CBD41760}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={AF34819B-01A7-11E2-8240-0019CBD41760}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Skype] "D:\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ManyCam] "C:\Program Files\ManyCam\Bin\ManyCam.exe" /silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2052111302-602162358-725345543-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: REALTEK RTL8187 Wireless LAN Utility.lnk = ?
O4 - Global Startup: ZyXEL G-302 v3 Utility.lnk = C:\Program Files\ZyXEL\G-302v3\G-302v3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 8854 bytes


Už předem děkuji.

[Reklama]

[Žbeky]

Fixni:

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={AF34819B-01A7-11E2-8240-0019CBD41760}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={AF34819B-01A7-11E2-8240-0019CBD41760}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

[AngryPanda]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.03.09.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Dajos :: DAJOS-PC [administrátor]

Ochrana: Povolena

9.3.2013 19:03:17
mbam-log-2013-03-09 (19-03-17).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 235105
Uplynulý čas: 3 minut, 32 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[AngryPanda]

# AdwCleaner v2.114 - Logfile created 03/09/2013 at 19:10:31
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Dajos - DAJOS-PC
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Dajos\Plocha\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Found : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\searchplugins\SweetIm.xml
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Found : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Folder Found : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\SweetPacksToolbarData
Folder Found : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\APN
Folder Found : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Conduit
Folder Found : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\uTorrentControl2
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\uTorrentControl2
Folder Found : C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}

***** [Registry] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\uTorrentControl2
Key Found : HKCU\Toolbar
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Key Found : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B02CE0C-7913-4F39-850B-968C92F23493}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{511C1515-DE22-4ACD-AE93-AD6FECFEB235}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentControl2 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Found : HKLM\Software\PIP
Key Found : HKLM\Software\uTorrentControl2
Key Found : HKU\S-1-5-21-2052111302-602162358-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKU\S-1-5-21-2052111302-602162358-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0.1 (en-US)

File : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\prefs.js

Found : user_pref("keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010000.10005&q=");
Found : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Found : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Found : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "1361481500217");
Found : user_pref("sweetim.toolbar.Visibility.enable", "true");
Found : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Found : user_pref("sweetim.toolbar.cargo", "3.1010000.10005");
Found : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Found : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Found : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Found : user_pref("sweetim.toolbar.cda.returnValue", "hide");
Found : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Found : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...]
Found : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Found : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Found : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Found : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?la[...]
Found : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Found : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Found : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...]
Found : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Found : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Found : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Found : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...]
Found : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Found : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Found : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handl[...]
Found : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Found : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Found : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Found : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Found : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Found : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...]
Found : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Found : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Found : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.mode.debug", "false");
Found : user_pref("sweetim.toolbar.newtab.created", "false");
Found : user_pref("sweetim.toolbar.newtab.enable", "true");
Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Found : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Found : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_V[...]
Found : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Found : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Found : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Found : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Found : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Found : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Found : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Found : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Found : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Found : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Found : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Found : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Found : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Found : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Found : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Found : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Found : user_pref("sweetim.toolbar.scripts.2.callback", "");
Found : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...]
Found : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Found : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Found : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Found : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Found : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...]
Found : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Found : user_pref("sweetim.toolbar.search.history.capacity", "10");
Found : user_pref("sweetim.toolbar.searchguard.enable", "false");
Found : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Found : user_pref("sweetim.toolbar.simapp_id", "{AF34819B-01A7-11E2-8240-0019CBD41760}");
Found : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={AF34[...]
Found : user_pref("sweetim.toolbar.version", "1.9.0.0");
Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");

-\\ Google Chrome v25.0.1364.152

File : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [15141 octets] - [09/03/2013 19:10:31]

########## EOF - C:\AdwCleaner[R1].txt - [15202 octets] ##########

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[AngryPanda]

# AdwCleaner v2.114 - Logfile created 03/10/2013 at 11:18:36
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Dajos - DAJOS-PC
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Dajos\Plocha\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\searchplugins\SweetIm.xml
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Folder Deleted : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\SweetPacksToolbarData
Folder Deleted : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\APN
Folder Deleted : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\uTorrentControl2
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\uTorrentControl2
Folder Deleted : C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\uTorrentControl2
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Key Deleted : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B02CE0C-7913-4F39-850B-968C92F23493}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{511C1515-DE22-4ACD-AE93-AD6FECFEB235}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentControl2 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\uTorrentControl2
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0.1 (en-US)

File : C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\prefs.js

C:\Documents and Settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\user.js ... Deleted !

Deleted : user_pref("keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010000.10005&q=");
Deleted : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Deleted : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Deleted : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "1361481500217");
Deleted : user_pref("sweetim.toolbar.Visibility.enable", "true");
Deleted : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Deleted : user_pref("sweetim.toolbar.cargo", "3.1010000.10005");
Deleted : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Deleted : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Deleted : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Deleted : user_pref("sweetim.toolbar.cda.returnValue", "hide");
Deleted : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Deleted : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...]
Deleted : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Deleted : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Deleted : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Deleted : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?la[...]
Deleted : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Deleted : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Deleted : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...]
Deleted : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Deleted : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Deleted : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Deleted : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...]
Deleted : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Deleted : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Deleted : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handl[...]
Deleted : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Deleted : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Deleted : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Deleted : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Deleted : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Deleted : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...]
Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Deleted : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Deleted : user_pref("sweetim.toolbar.newtab.created", "false");
Deleted : user_pref("sweetim.toolbar.newtab.enable", "true");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Deleted : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_V[...]
Deleted : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Deleted : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Deleted : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Deleted : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Deleted : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Deleted : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Deleted : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Deleted : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Deleted : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Deleted : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Deleted : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Deleted : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Deleted : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Deleted : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Deleted : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Deleted : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Deleted : user_pref("sweetim.toolbar.scripts.2.callback", "");
Deleted : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...]
Deleted : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Deleted : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Deleted : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Deleted : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Deleted : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...]
Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "false");
Deleted : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Deleted : user_pref("sweetim.toolbar.simapp_id", "{AF34819B-01A7-11E2-8240-0019CBD41760}");
Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={AF34[...]
Deleted : user_pref("sweetim.toolbar.version", "1.9.0.0");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");

-\\ Google Chrome v25.0.1364.152

File : C:\Documents and Settings\Dajos\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [15272 octets] - [09/03/2013 19:10:31]
AdwCleaner[R2].txt - [15333 octets] - [10/03/2013 11:06:52]
AdwCleaner[S1].txt - [15388 octets] - [10/03/2013 11:18:36]

########## EOF - C:\AdwCleaner[S1].txt - [15449 octets] ##########

[AngryPanda]

11:27:33.0375 2728 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
11:27:33.0562 2728 ============================================================
11:27:33.0562 2728 Current date / time: 2013/03/10 11:27:33.0562
11:27:33.0562 2728 SystemInfo:
11:27:33.0562 2728
11:27:33.0562 2728 OS Version: 5.1.2600 ServicePack: 3.0
11:27:33.0562 2728 Product type: Workstation
11:27:33.0562 2728 ComputerName: DAJOS-PC
11:27:33.0562 2728 UserName: Dajos
11:27:33.0562 2728 Windows directory: C:\WINDOWS
11:27:33.0562 2728 System windows directory: C:\WINDOWS
11:27:33.0562 2728 Processor architecture: Intel x86
11:27:33.0562 2728 Number of processors: 2
11:27:33.0562 2728 Page size: 0x1000
11:27:33.0562 2728 Boot type: Normal boot
11:27:33.0562 2728 ============================================================
11:27:34.0171 2728 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
11:27:34.0171 2728 Drive \Device\Harddisk1\DR3 - Size: 0x1DD800000 (7.46 Gb), SectorSize: 0x200, Cylinders: 0x3CD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
11:27:34.0171 2728 ============================================================
11:27:34.0171 2728 \Device\Harddisk0\DR0:
11:27:34.0171 2728 MBR partitions:
11:27:34.0171 2728 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3413448
11:27:34.0171 2728 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3413487, BlocksNum 0xF60563A
11:27:34.0171 2728 \Device\Harddisk1\DR3:
11:27:34.0171 2728 MBR partitions:
11:27:34.0171 2728 \Device\Harddisk1\DR3\Partition1: MBR, Type 0xB, StartLBA 0x1F80, BlocksNum 0xEEA080
11:27:34.0171 2728 ============================================================
11:27:34.0203 2728 C: <-> \Device\Harddisk0\DR0\Partition1
11:27:34.0234 2728 D: <-> \Device\Harddisk0\DR0\Partition2
11:27:34.0234 2728 ============================================================
11:27:34.0234 2728 Initialize success
11:27:34.0234 2728 ============================================================
11:28:26.0218 2456 ============================================================
11:28:26.0218 2456 Scan started
11:28:26.0218 2456 Mode: Manual;
11:28:26.0218 2456 ============================================================
11:28:26.0500 2456 ================ Scan system memory ========================
11:28:26.0500 2456 System memory - ok
11:28:26.0500 2456 ================ Scan services =============================
11:28:26.0593 2456 Abiosdsk - ok
11:28:26.0593 2456 abp480n5 - ok
11:28:26.0625 2456 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
11:28:26.0625 2456 ACPI - ok
11:28:26.0656 2456 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
11:28:26.0656 2456 ACPIEC - ok
11:28:26.0687 2456 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:28:26.0703 2456 AdobeFlashPlayerUpdateSvc - ok
11:28:26.0703 2456 adpu160m - ok
11:28:26.0718 2456 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
11:28:26.0718 2456 aec - ok
11:28:26.0750 2456 [ 30BB1BDE595CA65FD5549462080D94E5 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
11:28:26.0750 2456 AegisP - ok
11:28:26.0781 2456 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
11:28:26.0781 2456 AFD - ok
11:28:26.0781 2456 Aha154x - ok
11:28:26.0796 2456 aic78u2 - ok
11:28:26.0796 2456 aic78xx - ok
11:28:26.0828 2456 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
11:28:26.0828 2456 Alerter - ok
11:28:26.0843 2456 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
11:28:26.0843 2456 ALG - ok
11:28:26.0843 2456 AliIde - ok
11:28:26.0875 2456 [ FCFFA85CFD4BF7A4711012847048DCA3 ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
11:28:26.0875 2456 AmdK8 - ok
11:28:26.0890 2456 amsint - ok
11:28:26.0890 2456 AppMgmt - ok
11:28:26.0921 2456 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
11:28:26.0921 2456 Arp1394 - ok
11:28:26.0921 2456 asc - ok
11:28:26.0921 2456 asc3350p - ok
11:28:26.0937 2456 asc3550 - ok
11:28:27.0000 2456 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
11:28:27.0031 2456 aspnet_state - ok
11:28:27.0062 2456 [ D320732BCF5FF856120BD06855C66867 ] asusgsb C:\WINDOWS\system32\drivers\asusgsb.sys
11:28:27.0062 2456 asusgsb - ok
11:28:27.0078 2456 [ B3B881EB81013AAC11594A5400ADA47A ] asuskbnt C:\WINDOWS\system32\drivers\atkkbnt.sys
11:28:27.0078 2456 asuskbnt - ok
11:28:27.0093 2456 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
11:28:27.0109 2456 AsyncMac - ok
11:28:27.0109 2456 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
11:28:27.0109 2456 atapi - ok
11:28:27.0109 2456 Atdisk - ok
11:28:27.0140 2456 [ B453700B9EB83FEF29811B28DAE27D29 ] ATKKeyboardService C:\WINDOWS\ATKKBService.exe
11:28:27.0703 2456 ATKKeyboardService - ok
11:28:27.0734 2456 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
11:28:27.0750 2456 Atmarpc - ok
11:28:27.0781 2456 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
11:28:27.0781 2456 AudioSrv - ok
11:28:27.0796 2456 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
11:28:27.0796 2456 audstub - ok
11:28:27.0828 2456 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
11:28:27.0828 2456 Beep - ok
11:28:27.0875 2456 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
11:28:27.0875 2456 BITS - ok
11:28:27.0921 2456 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
11:28:27.0921 2456 Browser - ok
11:28:27.0937 2456 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
11:28:27.0937 2456 cbidf2k - ok
11:28:27.0953 2456 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
11:28:27.0953 2456 CCDECODE - ok
11:28:27.0953 2456 cd20xrnt - ok
11:28:27.0968 2456 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
11:28:27.0968 2456 Cdaudio - ok
11:28:28.0000 2456 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
11:28:28.0000 2456 Cdfs - ok
11:28:28.0015 2456 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
11:28:28.0015 2456 Cdrom - ok
11:28:28.0015 2456 Changer - ok
11:28:28.0046 2456 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
11:28:28.0046 2456 CiSvc - ok
11:28:28.0062 2456 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
11:28:28.0062 2456 ClipSrv - ok
11:28:28.0078 2456 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:28:28.0093 2456 clr_optimization_v2.0.50727_32 - ok
11:28:28.0109 2456 CmdIde - ok
11:28:28.0109 2456 COMSysApp - ok
11:28:28.0125 2456 Cpqarray - ok
11:28:28.0187 2456 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
11:28:28.0187 2456 CryptSvc - ok
11:28:28.0187 2456 dac2w2k - ok
11:28:28.0203 2456 dac960nt - ok
11:28:28.0218 2456 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
11:28:28.0218 2456 DcomLaunch - ok
11:28:28.0250 2456 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
11:28:28.0250 2456 Dhcp - ok
11:28:28.0265 2456 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
11:28:28.0265 2456 Disk - ok
11:28:28.0265 2456 dmadmin - ok
11:28:28.0296 2456 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
11:28:28.0312 2456 dmboot - ok
11:28:28.0328 2456 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
11:28:28.0328 2456 dmio - ok
11:28:28.0343 2456 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
11:28:28.0343 2456 dmload - ok
11:28:28.0359 2456 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
11:28:28.0359 2456 dmserver - ok
11:28:28.0375 2456 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
11:28:28.0375 2456 DMusic - ok
11:28:28.0390 2456 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
11:28:28.0390 2456 Dnscache - ok
11:28:28.0421 2456 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
11:28:28.0421 2456 Dot3svc - ok
11:28:28.0421 2456 dpti2o - ok
11:28:28.0437 2456 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
11:28:28.0437 2456 drmkaud - ok
11:28:28.0468 2456 [ 651554E483712B708EDE864D0CA1AA73 ] DrvAgent32 C:\WINDOWS\system32\Drivers\DrvAgent32.sys
11:28:28.0468 2456 DrvAgent32 - ok
11:28:28.0484 2456 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
11:28:28.0484 2456 EapHost - ok
11:28:28.0500 2456 [ D82414EC520453EFE2EBA936F6A9115A ] EAPPkt C:\WINDOWS\system32\DRIVERS\EAPPkt.sys
11:28:28.0500 2456 EAPPkt - ok
11:28:28.0531 2456 [ 0DAF3544804650526751C478AECCCE63 ] EIO C:\WINDOWS\system32\drivers\EIO.sys
11:28:28.0531 2456 EIO - ok
11:28:28.0546 2456 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
11:28:28.0546 2456 ERSvc - ok
11:28:28.0578 2456 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
11:28:28.0578 2456 Eventlog - ok
11:28:28.0609 2456 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
11:28:28.0609 2456 EventSystem - ok
11:28:28.0640 2456 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
11:28:28.0640 2456 Fastfat - ok
11:28:28.0671 2456 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
11:28:28.0687 2456 FastUserSwitchingCompatibility - ok
11:28:28.0718 2456 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
11:28:28.0718 2456 Fdc - ok
11:28:28.0718 2456 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
11:28:28.0734 2456 Fips - ok
11:28:28.0734 2456 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
11:28:28.0734 2456 Flpydisk - ok
11:28:28.0765 2456 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
11:28:28.0765 2456 FltMgr - ok
11:28:28.0812 2456 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
11:28:28.0812 2456 FontCache3.0.0.0 - ok
11:28:28.0812 2456 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
11:28:28.0828 2456 Fs_Rec - ok
11:28:28.0828 2456 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
11:28:28.0828 2456 Ftdisk - ok
11:28:28.0828 2456 GGSAFERDriver - ok
11:28:28.0843 2456 GMSIPCI - ok
11:28:28.0843 2456 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
11:28:28.0843 2456 Gpc - ok
11:28:28.0859 2456 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys
11:28:28.0859 2456 hamachi - ok
11:28:28.0968 2456 [ 616399E27A55C97AE859230EB13984D8 ] Hamachi2Svc D:\LogMeIn Hamachi\hamachi-2.exe
11:28:29.0015 2456 Hamachi2Svc - ok
11:28:29.0031 2456 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
11:28:29.0031 2456 HDAudBus - ok
11:28:29.0078 2456 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
11:28:29.0078 2456 helpsvc - ok
11:28:29.0078 2456 HidServ - ok
11:28:29.0109 2456 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
11:28:29.0109 2456 hidusb - ok
11:28:29.0140 2456 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
11:28:29.0140 2456 hkmsvc - ok
11:28:29.0156 2456 hpn - ok
11:28:29.0171 2456 [ 9F1D80908658EB7F1BF70809E0B51470 ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
11:28:29.0171 2456 HPZid412 - ok
11:28:29.0187 2456 [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
11:28:29.0187 2456 HPZipr12 - ok
11:28:29.0187 2456 [ CF1B7951B4EC8D13F3C93B74BB2B461B ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
11:28:29.0187 2456 HPZius12 - ok
11:28:29.0218 2456 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
11:28:29.0218 2456 HTTP - ok
11:28:29.0234 2456 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
11:28:29.0234 2456 HTTPFilter - ok
11:28:29.0234 2456 i2omgmt - ok
11:28:29.0250 2456 i2omp - ok
11:28:29.0265 2456 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
11:28:29.0265 2456 i8042prt - ok
11:28:29.0328 2456 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
11:28:29.0328 2456 IDriverT - ok
11:28:29.0375 2456 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:28:29.0406 2456 idsvc - ok
11:28:29.0421 2456 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
11:28:29.0421 2456 Imapi - ok
11:28:29.0437 2456 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
11:28:29.0453 2456 ImapiService - ok
11:28:29.0453 2456 ini910u - ok
11:28:29.0562 2456 [ A799E941C3D19BCF6F93CBE12B55BC17 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
11:28:29.0578 2456 IntcAzAudAddService - ok
11:28:29.0593 2456 IntelIde - ok
11:28:29.0609 2456 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
11:28:29.0609 2456 Ip6Fw - ok
11:28:29.0640 2456 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
11:28:29.0640 2456 IpFilterDriver - ok
11:28:29.0640 2456 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
11:28:29.0640 2456 IpInIp - ok
11:28:29.0656 2456 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
11:28:29.0656 2456 IpNat - ok
11:28:29.0671 2456 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
11:28:29.0671 2456 IPSec - ok
11:28:29.0687 2456 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
11:28:29.0687 2456 IRENUM - ok
11:28:29.0703 2456 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
11:28:29.0703 2456 isapnp - ok
11:28:29.0750 2456 [ 2F03CEB28307983F3B36216D35FFA5AA ] ISODrive D:\UltraISO\drivers\ISODrive.sys
11:28:29.0750 2456 ISODrive - ok
11:28:29.0781 2456 [ 1758AF653723679E3746FC7DDD93C69B ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
11:28:29.0781 2456 JavaQuickStarterService - ok
11:28:29.0796 2456 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
11:28:29.0796 2456 Kbdclass - ok
11:28:29.0812 2456 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
11:28:29.0812 2456 kmixer - ok
11:28:29.0843 2456 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
11:28:29.0859 2456 KSecDD - ok
11:28:29.0875 2456 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
11:28:29.0875 2456 lanmanserver - ok
11:28:29.0921 2456 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
11:28:29.0921 2456 lanmanworkstation - ok
11:28:29.0921 2456 lbrtfdc - ok
11:28:29.0953 2456 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
11:28:29.0953 2456 LmHosts - ok
11:28:29.0984 2456 [ D8C0B2EB928D57C928522EFF500C4BA8 ] ManyCam C:\WINDOWS\system32\DRIVERS\mcvidrv.sys
11:28:29.0984 2456 ManyCam - ok
11:28:30.0015 2456 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
11:28:30.0015 2456 MBAMProtector - ok
11:28:30.0078 2456 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler D:\Malwarebytes' Anti-Malware\mbamscheduler.exe
11:28:30.0093 2456 MBAMScheduler - ok
11:28:30.0140 2456 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService D:\Malwarebytes' Anti-Malware\mbamservice.exe
11:28:30.0156 2456 MBAMService - ok
11:28:30.0171 2456 [ DFAA87E30868FE4CB7D335837A4BF39C ] mcaudrv_simple C:\WINDOWS\system32\drivers\mcaudrv.sys
11:28:30.0171 2456 mcaudrv_simple - ok
11:28:30.0203 2456 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
11:28:30.0203 2456 Messenger - ok
11:28:30.0218 2456 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
11:28:30.0218 2456 mnmdd - ok
11:28:30.0250 2456 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
11:28:30.0250 2456 mnmsrvc - ok
11:28:30.0281 2456 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
11:28:30.0281 2456 Modem - ok
11:28:30.0281 2456 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
11:28:30.0281 2456 Mouclass - ok
11:28:30.0312 2456 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
11:28:30.0312 2456 mouhid - ok
11:28:30.0312 2456 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
11:28:30.0312 2456 MountMgr - ok
11:28:30.0375 2456 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
11:28:30.0375 2456 MozillaMaintenance - ok
11:28:30.0375 2456 mraid35x - ok
11:28:30.0390 2456 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
11:28:30.0390 2456 MRxDAV - ok
11:28:30.0421 2456 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
11:28:30.0421 2456 MRxSmb - ok
11:28:30.0453 2456 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
11:28:30.0453 2456 MSDTC - ok
11:28:30.0453 2456 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
11:28:30.0453 2456 Msfs - ok
11:28:30.0468 2456 MSIServer - ok
11:28:30.0484 2456 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
11:28:30.0484 2456 MSKSSRV - ok
11:28:30.0500 2456 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
11:28:30.0500 2456 MSPCLOCK - ok
11:28:30.0515 2456 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
11:28:30.0515 2456 MSPQM - ok
11:28:30.0531 2456 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
11:28:30.0531 2456 mssmbios - ok
11:28:30.0531 2456 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
11:28:30.0531 2456 MSTEE - ok
11:28:30.0546 2456 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
11:28:30.0546 2456 Mup - ok
11:28:30.0562 2456 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
11:28:30.0562 2456 NABTSFEC - ok
11:28:30.0593 2456 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
11:28:30.0609 2456 napagent - ok
11:28:30.0625 2456 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
11:28:30.0625 2456 NDIS - ok
11:28:30.0625 2456 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
11:28:30.0640 2456 NdisIP - ok
11:28:30.0656 2456 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
11:28:30.0656 2456 NdisTapi - ok
11:28:30.0671 2456 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
11:28:30.0671 2456 Ndisuio - ok
11:28:30.0671 2456 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:28:30.0687 2456 NdisWan - ok
11:28:30.0703 2456 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
11:28:30.0703 2456 NDProxy - ok
11:28:30.0718 2456 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
11:28:30.0718 2456 NetBIOS - ok
11:28:30.0718 2456 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
11:28:30.0734 2456 NetBT - ok
11:28:30.0750 2456 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
11:28:30.0750 2456 NetDDE - ok
11:28:30.0765 2456 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
11:28:30.0765 2456 NetDDEdsdm - ok
11:28:30.0796 2456 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
11:28:30.0796 2456 Netlogon - ok
11:28:30.0812 2456 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
11:28:30.0812 2456 Netman - ok
11:28:30.0875 2456 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:28:30.0875 2456 NetTcpPortSharing - ok
11:28:30.0890 2456 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
11:28:30.0890 2456 NIC1394 - ok
11:28:30.0906 2456 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
11:28:30.0921 2456 Nla - ok
11:28:30.0953 2456 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
11:28:30.0953 2456 Npfs - ok
11:28:30.0968 2456 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
11:28:30.0984 2456 Ntfs - ok
11:28:31.0000 2456 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
11:28:31.0000 2456 NtLmSsp - ok
11:28:31.0031 2456 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
11:28:31.0046 2456 NtmsSvc - ok
11:28:31.0046 2456 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
11:28:31.0046 2456 Null - ok
11:28:31.0281 2456 [ CADFF8601B10D406DAAF56C6ACA36502 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
11:28:31.0343 2456 nv - ok
11:28:31.0375 2456 [ 9E95E0F8EDE1CCEBF70D9E388D467814 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
11:28:31.0390 2456 NVSvc - ok
11:28:31.0437 2456 [ 0B2B188B73EA97B2506D0A4BE819D48C ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
11:28:31.0468 2456 nvUpdatusService - ok
11:28:31.0500 2456 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
11:28:31.0500 2456 NwlnkFlt - ok
11:28:31.0500 2456 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
11:28:31.0500 2456 NwlnkFwd - ok
11:28:31.0578 2456 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
11:28:31.0593 2456 odserv - ok
11:28:31.0609 2456 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
11:28:31.0609 2456 ohci1394 - ok
11:28:31.0625 2456 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:28:31.0625 2456 ose - ok
11:28:31.0640 2456 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
11:28:31.0656 2456 Parport - ok
11:28:31.0656 2456 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
11:28:31.0656 2456 PartMgr - ok
11:28:31.0687 2456 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
11:28:31.0687 2456 ParVdm - ok
11:28:31.0687 2456 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
11:28:31.0703 2456 PCI - ok
11:28:31.0703 2456 PCIDump - ok
11:28:31.0703 2456 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
11:28:31.0703 2456 PCIIde - ok
11:28:31.0718 2456 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
11:28:31.0718 2456 Pcmcia - ok
11:28:31.0734 2456 PDCOMP - ok
11:28:31.0734 2456 PDFRAME - ok
11:28:31.0734 2456 PDRELI - ok
11:28:31.0750 2456 PDRFRAME - ok
11:28:31.0750 2456 perc2 - ok
11:28:31.0750 2456 perc2hib - ok
11:28:31.0781 2456 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
11:28:31.0781 2456 PlugPlay - ok
11:28:31.0796 2456 [ 9D84376931440F3679BEEF2A414FA493 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
11:28:31.0812 2456 Pml Driver HPZ12 - ok
11:28:31.0828 2456 [ 3A2BDD76E7D2A5F40A7174793D1BA794 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
11:28:31.0828 2456 PnkBstrA - ok
11:28:31.0859 2456 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
11:28:31.0859 2456 PolicyAgent - ok
11:28:31.0859 2456 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
11:28:31.0859 2456 PptpMiniport - ok
11:28:31.0875 2456 [ 7EB15DCE4EC3A0220BD796A15C18186E ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
11:28:31.0875 2456 Processor - ok
11:28:31.0875 2456 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
11:28:31.0890 2456 ProtectedStorage - ok
11:28:31.0890 2456 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
11:28:31.0890 2456 PSched - ok
11:28:31.0906 2456 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
11:28:31.0906 2456 Ptilink - ok
11:28:31.0921 2456 ql1080 - ok
11:28:31.0921 2456 Ql10wnt - ok
11:28:31.0921 2456 ql12160 - ok
11:28:31.0937 2456 ql1240 - ok
11:28:31.0937 2456 ql1280 - ok
11:28:31.0953 2456 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
11:28:31.0953 2456 RasAcd - ok
11:28:31.0968 2456 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
11:28:31.0968 2456 RasAuto - ok
11:28:31.0984 2456 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
11:28:31.0984 2456 Rasl2tp - ok
11:28:32.0015 2456 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
11:28:32.0015 2456 RasMan - ok
11:28:32.0031 2456 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
11:28:32.0031 2456 RasPppoe - ok
11:28:32.0031 2456 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
11:28:32.0031 2456 Raspti - ok
11:28:32.0046 2456 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
11:28:32.0046 2456 Rdbss - ok
11:28:32.0046 2456 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
11:28:32.0046 2456 RDPCDD - ok
11:28:32.0078 2456 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
11:28:32.0093 2456 RDPWD - ok
11:28:32.0109 2456 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
11:28:32.0109 2456 RDSessMgr - ok
11:28:32.0125 2456 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
11:28:32.0125 2456 redbook - ok
11:28:32.0140 2456 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
11:28:32.0156 2456 RemoteAccess - ok
11:28:32.0156 2456 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
11:28:32.0156 2456 RpcLocator - ok
11:28:32.0171 2456 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
11:28:32.0187 2456 RpcSs - ok
11:28:32.0203 2456 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
11:28:32.0203 2456 RSVP - ok
11:28:32.0250 2456 [ DE11516A1123A4FA32150F24AA749502 ] rtl8185 C:\WINDOWS\system32\DRIVERS\rtl8185.sys
11:28:32.0265 2456 rtl8185 - ok
11:28:32.0281 2456 [ E6E5AF7D6920824B066832D3E1665506 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
11:28:32.0296 2456 RTLE8023xp - ok
11:28:32.0296 2456 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
11:28:32.0296 2456 SamSs - ok
11:28:32.0312 2456 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
11:28:32.0312 2456 SCardSvr - ok
11:28:32.0359 2456 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
11:28:32.0359 2456 Schedule - ok
11:28:32.0375 2456 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
11:28:32.0390 2456 Secdrv - ok
11:28:32.0406 2456 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
11:28:32.0406 2456 seclogon - ok
11:28:32.0406 2456 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
11:28:32.0421 2456 SENS - ok
11:28:32.0421 2456 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
11:28:32.0421 2456 serenum - ok
11:28:32.0437 2456 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
11:28:32.0437 2456 Serial - ok
11:28:32.0453 2456 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
11:28:32.0453 2456 Sfloppy - ok
11:28:32.0468 2456 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
11:28:32.0468 2456 SharedAccess - ok
11:28:32.0484 2456 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
11:28:32.0484 2456 ShellHWDetection - ok
11:28:32.0484 2456 Simbad - ok
11:28:32.0531 2456 [ 0A0A0183711EFB04F9BCC32BB44471F2 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
11:28:32.0531 2456 SkypeUpdate - ok
11:28:32.0546 2456 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
11:28:32.0546 2456 SLIP - ok
11:28:32.0546 2456 Sparrow - ok
11:28:32.0578 2456 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
11:28:32.0578 2456 splitter - ok
11:28:32.0593 2456 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
11:28:32.0593 2456 Spooler - ok
11:28:32.0609 2456 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
11:28:32.0609 2456 sr - ok
11:28:32.0625 2456 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
11:28:32.0625 2456 srservice - ok
11:28:32.0640 2456 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
11:28:32.0640 2456 Srv - ok
11:28:32.0671 2456 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
11:28:32.0671 2456 SSDPSRV - ok
11:28:32.0687 2456 Steam Client Service - ok
11:28:32.0703 2456 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
11:28:32.0703 2456 stisvc - ok
11:28:32.0734 2456 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
11:28:32.0734 2456 streamip - ok
11:28:32.0750 2456 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
11:28:32.0750 2456 swenum - ok
11:28:32.0750 2456 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
11:28:32.0765 2456 swmidi - ok
11:28:32.0781 2456 SwPrv - ok
11:28:32.0781 2456 symc810 - ok
11:28:32.0796 2456 symc8xx - ok
11:28:32.0796 2456 sym_hi - ok
11:28:32.0796 2456 sym_u3 - ok
11:28:32.0828 2456 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
11:28:32.0828 2456 sysaudio - ok
11:28:32.0843 2456 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
11:28:32.0843 2456 SysmonLog - ok
11:28:32.0890 2456 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
11:28:32.0890 2456 TapiSrv - ok
11:28:32.0906 2456 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
11:28:32.0921 2456 Tcpip - ok
11:28:32.0953 2456 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
11:28:32.0953 2456 TDPIPE - ok
11:28:32.0968 2456 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
11:28:32.0968 2456 TDTCP - ok
11:28:32.0984 2456 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
11:28:32.0984 2456 TermDD - ok
11:28:33.0015 2456 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
11:28:33.0015 2456 TermService - ok
11:28:33.0031 2456 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
11:28:33.0031 2456 Themes - ok
11:28:33.0046 2456 TosIde - ok
11:28:33.0046 2456 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
11:28:33.0046 2456 TrkWks - ok
11:28:33.0062 2456 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
11:28:33.0078 2456 Udfs - ok
11:28:33.0078 2456 ultra - ok
11:28:33.0093 2456 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
11:28:33.0109 2456 Update - ok
11:28:33.0125 2456 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
11:28:33.0125 2456 upnphost - ok
11:28:33.0140 2456 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
11:28:33.0140 2456 UPS - ok
11:28:33.0156 2456 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
11:28:33.0156 2456 usbaudio - ok
11:28:33.0156 2456 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
11:28:33.0171 2456 usbccgp - ok
11:28:33.0171 2456 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
11:28:33.0171 2456 usbehci - ok
11:28:33.0187 2456 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
11:28:33.0187 2456 usbhub - ok
11:28:33.0187 2456 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
11:28:33.0203 2456 usbohci - ok
11:28:33.0218 2456 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
11:28:33.0218 2456 usbprint - ok
11:28:33.0234 2456 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
11:28:33.0234 2456 usbscan - ok
11:28:33.0234 2456 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
11:28:33.0234 2456 USBSTOR - ok
11:28:33.0265 2456 [ B2ABAB4CA46BAD182E27763DC19C780F ] VCSVADHWSer C:\WINDOWS\system32\DRIVERS\vcsvad.sys
11:28:33.0265 2456 VCSVADHWSer - ok
11:28:33.0281 2456 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
11:28:33.0281 2456 VgaSave - ok
11:28:33.0281 2456 ViaIde - ok
11:28:33.0296 2456 [ 8643DA4A6C83DA6C10FCAB1E5AB6632D ] Video3D C:\WINDOWS\system32\Drivers\Video3D32.sys
11:28:33.0296 2456 Video3D - ok
11:28:33.0312 2456 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
11:28:33.0312 2456 VolSnap - ok
11:28:33.0343 2456 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
11:28:33.0343 2456 VSS - ok
11:28:33.0359 2456 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
11:28:33.0375 2456 W32Time - ok
11:28:33.0375 2456 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:28:33.0375 2456 Wanarp - ok
11:28:33.0375 2456 WDICA - ok
11:28:33.0390 2456 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
11:28:33.0390 2456 wdmaud - ok
11:28:33.0421 2456 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
11:28:33.0421 2456 WebClient - ok
11:28:33.0453 2456 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
11:28:33.0453 2456 winmgmt - ok
11:28:33.0468 2456 WinRing0_1_2_0 - ok
11:28:33.0515 2456 [ 4D34CEDD74BDBF2B6A935EAE3BF80543 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
11:28:33.0531 2456 WinRM - ok
11:28:33.0562 2456 [ 6199B2AE3F9DB9CB6DB230471A1DC601 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
11:28:33.0562 2456 WmdmPmSN - ok
11:28:33.0593 2456 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
11:28:33.0593 2456 WmiApSrv - ok
11:28:33.0625 2456 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
11:28:33.0625 2456 wscsvc - ok
11:28:33.0640 2456 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
11:28:33.0640 2456 WSTCODEC - ok
11:28:33.0656 2456 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
11:28:33.0656 2456 wuauserv - ok
11:28:33.0687 2456 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
11:28:33.0703 2456 WZCSVC - ok
11:28:33.0734 2456 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
11:28:33.0734 2456 xmlprov - ok

[AngryPanda]

11:28:33.0750 2456 ================ Scan global ===============================
11:28:33.0781 2456 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
11:28:33.0812 2456 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
11:28:33.0828 2456 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
11:28:33.0843 2456 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
11:28:33.0843 2456 [Global] - ok
11:28:33.0843 2456 ================ Scan MBR ==================================
11:28:33.0859 2456 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
11:28:34.0000 2456 \Device\Harddisk0\DR0 - ok
11:28:34.0015 2456 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR3
11:28:34.0015 2456 \Device\Harddisk1\DR3 - ok
11:28:34.0015 2456 ================ Scan VBR ==================================
11:28:34.0015 2456 [ 7CA87B00DE018277F5A78F2BE3F99CAC ] \Device\Harddisk0\DR0\Partition1
11:28:34.0015 2456 \Device\Harddisk0\DR0\Partition1 - ok
11:28:34.0031 2456 [ 37EBD56EA142E924582B468824537913 ] \Device\Harddisk0\DR0\Partition2
11:28:34.0031 2456 \Device\Harddisk0\DR0\Partition2 - ok
11:28:34.0046 2456 [ 784284AE1912DEC42C92EF65AE10C624 ] \Device\Harddisk1\DR3\Partition1
11:28:34.0046 2456 \Device\Harddisk1\DR3\Partition1 - ok
11:28:34.0046 2456 ============================================================
11:28:34.0046 2456 Scan finished
11:28:34.0046 2456 ============================================================
11:28:34.0046 3840 Detected object count: 0
11:28:34.0046 3840 Actual detected object count: 0
11:28:45.0187 3284 ============================================================
11:28:45.0187 3284 Scan started
11:28:45.0187 3284 Mode: Manual;
11:28:45.0187 3284 ============================================================
11:28:45.0390 3284 ================ Scan system memory ========================
11:28:45.0406 3284 System memory - ok
11:28:45.0406 3284 ================ Scan services =============================
11:28:45.0515 3284 Abiosdsk - ok
11:28:45.0515 3284 abp480n5 - ok
11:28:45.0578 3284 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
11:28:45.0593 3284 ACPI - ok
11:28:45.0593 3284 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
11:28:45.0609 3284 ACPIEC - ok
11:28:45.0640 3284 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:28:45.0640 3284 AdobeFlashPlayerUpdateSvc - ok
11:28:45.0640 3284 adpu160m - ok
11:28:45.0671 3284 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
11:28:45.0671 3284 aec - ok
11:28:45.0687 3284 [ 30BB1BDE595CA65FD5549462080D94E5 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
11:28:45.0703 3284 AegisP - ok
11:28:45.0718 3284 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
11:28:45.0718 3284 AFD - ok
11:28:45.0718 3284 Aha154x - ok
11:28:45.0734 3284 aic78u2 - ok
11:28:45.0734 3284 aic78xx - ok
11:28:45.0765 3284 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
11:28:45.0765 3284 Alerter - ok
11:28:45.0781 3284 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
11:28:45.0781 3284 ALG - ok
11:28:45.0796 3284 AliIde - ok
11:28:45.0828 3284 [ FCFFA85CFD4BF7A4711012847048DCA3 ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
11:28:45.0828 3284 AmdK8 - ok
11:28:45.0843 3284 amsint - ok
11:28:45.0843 3284 AppMgmt - ok
11:28:45.0859 3284 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
11:28:45.0875 3284 Arp1394 - ok
11:28:45.0875 3284 asc - ok
11:28:45.0875 3284 asc3350p - ok
11:28:45.0890 3284 asc3550 - ok
11:28:45.0953 3284 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
11:28:45.0953 3284 aspnet_state - ok
11:28:46.0000 3284 [ D320732BCF5FF856120BD06855C66867 ] asusgsb C:\WINDOWS\system32\drivers\asusgsb.sys
11:28:46.0000 3284 asusgsb - ok
11:28:46.0000 3284 [ B3B881EB81013AAC11594A5400ADA47A ] asuskbnt C:\WINDOWS\system32\drivers\atkkbnt.sys
11:28:46.0000 3284 asuskbnt - ok
11:28:46.0031 3284 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
11:28:46.0031 3284 AsyncMac - ok
11:28:46.0031 3284 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
11:28:46.0031 3284 atapi - ok
11:28:46.0046 3284 Atdisk - ok
11:28:46.0062 3284 [ B453700B9EB83FEF29811B28DAE27D29 ] ATKKeyboardService C:\WINDOWS\ATKKBService.exe
11:28:46.0062 3284 ATKKeyboardService - ok
11:28:46.0078 3284 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
11:28:46.0078 3284 Atmarpc - ok
11:28:46.0109 3284 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
11:28:46.0109 3284 AudioSrv - ok
11:28:46.0140 3284 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
11:28:46.0140 3284 audstub - ok
11:28:46.0171 3284 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
11:28:46.0171 3284 Beep - ok
11:28:46.0203 3284 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
11:28:46.0203 3284 BITS - ok
11:28:46.0234 3284 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
11:28:46.0250 3284 Browser - ok
11:28:46.0265 3284 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
11:28:46.0265 3284 cbidf2k - ok
11:28:46.0281 3284 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
11:28:46.0281 3284 CCDECODE - ok
11:28:46.0281 3284 cd20xrnt - ok
11:28:46.0296 3284 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
11:28:46.0296 3284 Cdaudio - ok
11:28:46.0312 3284 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
11:28:46.0312 3284 Cdfs - ok
11:28:46.0328 3284 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
11:28:46.0328 3284 Cdrom - ok
11:28:46.0328 3284 Changer - ok
11:28:46.0390 3284 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
11:28:46.0390 3284 CiSvc - ok
11:28:46.0390 3284 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
11:28:46.0390 3284 ClipSrv - ok
11:28:46.0421 3284 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:28:46.0421 3284 clr_optimization_v2.0.50727_32 - ok
11:28:46.0421 3284 CmdIde - ok
11:28:46.0437 3284 COMSysApp - ok
11:28:46.0437 3284 Cpqarray - ok
11:28:46.0468 3284 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
11:28:46.0468 3284 CryptSvc - ok
11:28:46.0468 3284 dac2w2k - ok
11:28:46.0484 3284 dac960nt - ok
11:28:46.0500 3284 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
11:28:46.0515 3284 DcomLaunch - ok
11:28:46.0531 3284 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
11:28:46.0531 3284 Dhcp - ok
11:28:46.0546 3284 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
11:28:46.0546 3284 Disk - ok
11:28:46.0546 3284 dmadmin - ok
11:28:46.0578 3284 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
11:28:46.0578 3284 dmboot - ok
11:28:46.0593 3284 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
11:28:46.0593 3284 dmio - ok
11:28:46.0609 3284 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
11:28:46.0609 3284 dmload - ok
11:28:46.0625 3284 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
11:28:46.0625 3284 dmserver - ok
11:28:46.0640 3284 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
11:28:46.0640 3284 DMusic - ok
11:28:46.0656 3284 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
11:28:46.0656 3284 Dnscache - ok
11:28:46.0687 3284 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
11:28:46.0687 3284 Dot3svc - ok
11:28:46.0687 3284 dpti2o - ok
11:28:46.0703 3284 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
11:28:46.0703 3284 drmkaud - ok
11:28:46.0734 3284 [ 651554E483712B708EDE864D0CA1AA73 ] DrvAgent32 C:\WINDOWS\system32\Drivers\DrvAgent32.sys
11:28:46.0734 3284 DrvAgent32 - ok
11:28:46.0750 3284 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
11:28:46.0750 3284 EapHost - ok
11:28:46.0765 3284 [ D82414EC520453EFE2EBA936F6A9115A ] EAPPkt C:\WINDOWS\system32\DRIVERS\EAPPkt.sys
11:28:46.0765 3284 EAPPkt - ok
11:28:46.0796 3284 [ 0DAF3544804650526751C478AECCCE63 ] EIO C:\WINDOWS\system32\drivers\EIO.sys
11:28:46.0796 3284 EIO - ok
11:28:46.0812 3284 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
11:28:46.0812 3284 ERSvc - ok
11:28:46.0828 3284 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
11:28:46.0843 3284 Eventlog - ok
11:28:46.0875 3284 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
11:28:46.0875 3284 EventSystem - ok
11:28:46.0906 3284 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
11:28:46.0921 3284 Fastfat - ok
11:28:46.0937 3284 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
11:28:46.0937 3284 FastUserSwitchingCompatibility - ok
11:28:46.0953 3284 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
11:28:46.0953 3284 Fdc - ok
11:28:46.0953 3284 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
11:28:46.0968 3284 Fips - ok
11:28:46.0968 3284 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
11:28:46.0968 3284 Flpydisk - ok
11:28:47.0000 3284 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
11:28:47.0000 3284 FltMgr - ok
11:28:47.0046 3284 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
11:28:47.0046 3284 FontCache3.0.0.0 - ok
11:28:47.0046 3284 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
11:28:47.0062 3284 Fs_Rec - ok
11:28:47.0062 3284 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
11:28:47.0062 3284 Ftdisk - ok
11:28:47.0062 3284 GGSAFERDriver - ok
11:28:47.0062 3284 GMSIPCI - ok
11:28:47.0078 3284 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
11:28:47.0078 3284 Gpc - ok
11:28:47.0093 3284 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys
11:28:47.0093 3284 hamachi - ok
11:28:47.0203 3284 [ 616399E27A55C97AE859230EB13984D8 ] Hamachi2Svc D:\LogMeIn Hamachi\hamachi-2.exe
11:28:47.0218 3284 Hamachi2Svc - ok
11:28:47.0250 3284 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
11:28:47.0250 3284 HDAudBus - ok
11:28:47.0281 3284 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
11:28:47.0281 3284 helpsvc - ok
11:28:47.0296 3284 HidServ - ok
11:28:47.0312 3284 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
11:28:47.0312 3284 hidusb - ok
11:28:47.0328 3284 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
11:28:47.0328 3284 hkmsvc - ok
11:28:47.0328 3284 hpn - ok
11:28:47.0343 3284 [ 9F1D80908658EB7F1BF70809E0B51470 ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
11:28:47.0343 3284 HPZid412 - ok
11:28:47.0375 3284 [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
11:28:47.0375 3284 HPZipr12 - ok
11:28:47.0375 3284 [ CF1B7951B4EC8D13F3C93B74BB2B461B ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
11:28:47.0375 3284 HPZius12 - ok
11:28:47.0406 3284 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
11:28:47.0406 3284 HTTP - ok
11:28:47.0421 3284 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
11:28:47.0421 3284 HTTPFilter - ok
11:28:47.0437 3284 i2omgmt - ok
11:28:47.0437 3284 i2omp - ok
11:28:47.0453 3284 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
11:28:47.0453 3284 i8042prt - ok
11:28:47.0515 3284 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
11:28:47.0515 3284 IDriverT - ok
11:28:47.0562 3284 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:28:47.0578 3284 idsvc - ok
11:28:47.0593 3284 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
11:28:47.0593 3284 Imapi - ok
11:28:47.0625 3284 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
11:28:47.0625 3284 ImapiService - ok
11:28:47.0625 3284 ini910u - ok
11:28:47.0734 3284 [ A799E941C3D19BCF6F93CBE12B55BC17 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
11:28:47.0765 3284 IntcAzAudAddService - ok
11:28:47.0765 3284 IntelIde - ok
11:28:47.0796 3284 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
11:28:47.0796 3284 Ip6Fw - ok
11:28:47.0812 3284 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
11:28:47.0812 3284 IpFilterDriver - ok
11:28:47.0812 3284 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
11:28:47.0812 3284 IpInIp - ok
11:28:47.0828 3284 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
11:28:47.0828 3284 IpNat - ok
11:28:47.0843 3284 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
11:28:47.0843 3284 IPSec - ok
11:28:47.0859 3284 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
11:28:47.0859 3284 IRENUM - ok
11:28:47.0890 3284 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
11:28:47.0890 3284 isapnp - ok
11:28:47.0921 3284 [ 2F03CEB28307983F3B36216D35FFA5AA ] ISODrive D:\UltraISO\drivers\ISODrive.sys
11:28:47.0921 3284 ISODrive - ok
11:28:47.0953 3284 [ 1758AF653723679E3746FC7DDD93C69B ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
11:28:47.0953 3284 JavaQuickStarterService - ok
11:28:47.0968 3284 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
11:28:47.0968 3284 Kbdclass - ok
11:28:47.0984 3284 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
11:28:47.0984 3284 kmixer - ok
11:28:48.0000 3284 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
11:28:48.0000 3284 KSecDD - ok
11:28:48.0015 3284 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
11:28:48.0031 3284 lanmanserver - ok
11:28:48.0046 3284 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
11:28:48.0046 3284 lanmanworkstation - ok
11:28:48.0062 3284 lbrtfdc - ok
11:28:48.0078 3284 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
11:28:48.0078 3284 LmHosts - ok
11:28:48.0109 3284 [ D8C0B2EB928D57C928522EFF500C4BA8 ] ManyCam C:\WINDOWS\system32\DRIVERS\mcvidrv.sys
11:28:48.0109 3284 ManyCam - ok
11:28:48.0140 3284 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
11:28:48.0140 3284 MBAMProtector - ok
11:28:48.0218 3284 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler D:\Malwarebytes' Anti-Malware\mbamscheduler.exe
11:28:48.0218 3284 MBAMScheduler - ok
11:28:48.0265 3284 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService D:\Malwarebytes' Anti-Malware\mbamservice.exe
11:28:48.0265 3284 MBAMService - ok
11:28:48.0281 3284 [ DFAA87E30868FE4CB7D335837A4BF39C ] mcaudrv_simple C:\WINDOWS\system32\drivers\mcaudrv.sys
11:28:48.0281 3284 mcaudrv_simple - ok
11:28:48.0312 3284 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
11:28:48.0312 3284 Messenger - ok
11:28:48.0343 3284 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
11:28:48.0343 3284 mnmdd - ok
11:28:48.0375 3284 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
11:28:48.0375 3284 mnmsrvc - ok
11:28:48.0390 3284 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
11:28:48.0390 3284 Modem - ok
11:28:48.0390 3284 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
11:28:48.0390 3284 Mouclass - ok
11:28:48.0421 3284 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
11:28:48.0421 3284 mouhid - ok
11:28:48.0421 3284 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
11:28:48.0421 3284 MountMgr - ok
11:28:48.0468 3284 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
11:28:48.0468 3284 MozillaMaintenance - ok
11:28:48.0468 3284 mraid35x - ok
11:28:48.0484 3284 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
11:28:48.0500 3284 MRxDAV - ok
11:28:48.0515 3284 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
11:28:48.0515 3284 MRxSmb - ok
11:28:48.0546 3284 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
11:28:48.0546 3284 MSDTC - ok
11:28:48.0546 3284 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
11:28:48.0546 3284 Msfs - ok
11:28:48.0562 3284 MSIServer - ok
11:28:48.0578 3284 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
11:28:48.0578 3284 MSKSSRV - ok
11:28:48.0593 3284 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
11:28:48.0593 3284 MSPCLOCK - ok
11:28:48.0609 3284 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
11:28:48.0609 3284 MSPQM - ok
11:28:48.0625 3284 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
11:28:48.0625 3284 mssmbios - ok
11:28:48.0625 3284 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
11:28:48.0625 3284 MSTEE - ok
11:28:48.0656 3284 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
11:28:48.0656 3284 Mup - ok
11:28:48.0687 3284 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
11:28:48.0687 3284 NABTSFEC - ok
11:28:48.0718 3284 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
11:28:48.0718 3284 napagent - ok
11:28:48.0734 3284 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
11:28:48.0734 3284 NDIS - ok
11:28:48.0750 3284 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
11:28:48.0750 3284 NdisIP - ok
11:28:48.0765 3284 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
11:28:48.0765 3284 NdisTapi - ok
11:28:48.0781 3284 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
11:28:48.0781 3284 Ndisuio - ok
11:28:48.0796 3284 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:28:48.0796 3284 NdisWan - ok
11:28:48.0828 3284 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
11:28:48.0828 3284 NDProxy - ok
11:28:48.0828 3284 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
11:28:48.0828 3284 NetBIOS - ok
11:28:48.0843 3284 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
11:28:48.0843 3284 NetBT - ok
11:28:48.0890 3284 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
11:28:48.0890 3284 NetDDE - ok
11:28:48.0890 3284 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
11:28:48.0890 3284 NetDDEdsdm - ok
11:28:48.0906 3284 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
11:28:48.0921 3284 Netlogon - ok
11:28:48.0921 3284 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
11:28:48.0921 3284 Netman - ok
11:28:48.0953 3284 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:28:48.0953 3284 NetTcpPortSharing - ok
11:28:48.0968 3284 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
11:28:48.0968 3284 NIC1394 - ok
11:28:48.0984 3284 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
11:28:48.0984 3284 Nla - ok
11:28:49.0015 3284 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
11:28:49.0015 3284 Npfs - ok
11:28:49.0046 3284 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
11:28:49.0046 3284 Ntfs - ok
11:28:49.0046 3284 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
11:28:49.0046 3284 NtLmSsp - ok
11:28:49.0078 3284 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
11:28:49.0078 3284 NtmsSvc - ok
11:28:49.0078 3284 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
11:28:49.0078 3284 Null - ok
11:28:49.0312 3284 [ CADFF8601B10D406DAAF56C6ACA36502 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
11:28:49.0375 3284 nv - ok
11:28:49.0406 3284 [ 9E95E0F8EDE1CCEBF70D9E388D467814 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
11:28:49.0406 3284 NVSvc - ok
11:28:49.0468 3284 [ 0B2B188B73EA97B2506D0A4BE819D48C ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
11:28:49.0484 3284 nvUpdatusService - ok
11:28:49.0500 3284 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
11:28:49.0500 3284 NwlnkFlt - ok
11:28:49.0500 3284 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
11:28:49.0500 3284 NwlnkFwd - ok
11:28:49.0578 3284 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
11:28:49.0578 3284 odserv - ok
11:28:49.0609 3284 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
11:28:49.0609 3284 ohci1394 - ok
11:28:49.0625 3284 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:28:49.0625 3284 ose - ok
11:28:49.0656 3284 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
11:28:49.0656 3284 Parport - ok
11:28:49.0656 3284 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
11:28:49.0656 3284 PartMgr - ok
11:28:49.0687 3284 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
11:28:49.0687 3284 ParVdm - ok
11:28:49.0687 3284 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
11:28:49.0703 3284 PCI - ok
11:28:49.0703 3284 PCIDump - ok
11:28:49.0703 3284 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
11:28:49.0703 3284 PCIIde - ok
11:28:49.0718 3284 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
11:28:49.0718 3284 Pcmcia - ok
11:28:49.0734 3284 PDCOMP - ok
11:28:49.0734 3284 PDFRAME - ok
11:28:49.0734 3284 PDRELI - ok
11:28:49.0750 3284 PDRFRAME - ok
11:28:49.0750 3284 perc2 - ok
11:28:49.0750 3284 perc2hib - ok
11:28:49.0796 3284 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
11:28:49.0796 3284 PlugPlay - ok
11:28:49.0828 3284 [ 9D84376931440F3679BEEF2A414FA493 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
11:28:49.0828 3284 Pml Driver HPZ12 - ok
11:28:49.0843 3284 [ 3A2BDD76E7D2A5F40A7174793D1BA794 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
11:28:49.0843 3284 PnkBstrA - ok
11:28:49.0859 3284 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
11:28:49.0859 3284 PolicyAgent - ok
11:28:49.0875 3284 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
11:28:49.0875 3284 PptpMiniport - ok
11:28:49.0890 3284 [ 7EB15DCE4EC3A0220BD796A15C18186E ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
11:28:49.0890 3284 Processor - ok
11:28:49.0906 3284 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
11:28:49.0906 3284 ProtectedStorage - ok
11:28:49.0906 3284 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
11:28:49.0906 3284 PSched - ok
11:28:49.0937 3284 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
11:28:49.0937 3284 Ptilink - ok
11:28:49.0953 3284 ql1080 - ok
11:28:49.0953 3284 Ql10wnt - ok
11:28:49.0953 3284 ql12160 - ok
11:28:49.0968 3284 ql1240 - ok
11:28:49.0968 3284 ql1280 - ok
11:28:49.0968 3284 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
11:28:49.0968 3284 RasAcd - ok
11:28:50.0000 3284 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
11:28:50.0015 3284 RasAuto - ok
11:28:50.0015 3284 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
11:28:50.0015 3284 Rasl2tp - ok
11:28:50.0046 3284 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
11:28:50.0046 3284 RasMan - ok
11:28:50.0046 3284 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
11:28:50.0046 3284 RasPppoe - ok
11:28:50.0062 3284 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
11:28:50.0062 3284 Raspti - ok
11:28:50.0062 3284 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
11:28:50.0062 3284 Rdbss - ok
11:28:50.0078 3284 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
11:28:50.0078 3284 RDPCDD - ok
11:28:50.0109 3284 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
11:28:50.0109 3284 RDPWD - ok
11:28:50.0125 3284 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
11:28:50.0125 3284 RDSessMgr - ok
11:28:50.0140 3284 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
11:28:50.0140 3284 redbook - ok
11:28:50.0156 3284 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
11:28:50.0156 3284 RemoteAccess - ok
11:28:50.0171 3284 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
11:28:50.0171 3284 RpcLocator - ok
11:28:50.0187 3284 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
11:28:50.0187 3284 RpcSs - ok
11:28:50.0203 3284 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
11:28:50.0218 3284 RSVP - ok
11:28:50.0250 3284 [ DE11516A1123A4FA32150F24AA749502 ] rtl8185 C:\WINDOWS\system32\DRIVERS\rtl8185.sys
11:28:50.0265 3284 rtl8185 - ok
11:28:50.0281 3284 [ E6E5AF7D6920824B066832D3E1665506 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
11:28:50.0281 3284 RTLE8023xp - ok
11:28:50.0296 3284 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
11:28:50.0296 3284 SamSs - ok
11:28:50.0312 3284 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
11:28:50.0312 3284 SCardSvr - ok
11:28:50.0359 3284 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
11:28:50.0359 3284 Schedule - ok
11:28:50.0390 3284 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
11:28:50.0390 3284 Secdrv - ok
11:28:50.0406 3284 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
11:28:50.0406 3284 seclogon - ok
11:28:50.0421 3284 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
11:28:50.0421 3284 SENS - ok
11:28:50.0437 3284 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
11:28:50.0437 3284 serenum - ok
11:28:50.0437 3284 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
11:28:50.0437 3284 Serial - ok
11:28:50.0453 3284 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
11:28:50.0453 3284 Sfloppy - ok
11:28:50.0484 3284 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
11:28:50.0484 3284 SharedAccess - ok
11:28:50.0500 3284 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
11:28:50.0500 3284 ShellHWDetection - ok
11:28:50.0500 3284 Simbad - ok
11:28:50.0546 3284 [ 0A0A0183711EFB04F9BCC32BB44471F2 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
11:28:50.0546 3284 SkypeUpdate - ok
11:28:50.0562 3284 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
11:28:50.0562 3284 SLIP - ok
11:28:50.0562 3284 Sparrow - ok
11:28:50.0593 3284 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
11:28:50.0593 3284 splitter - ok
11:28:50.0609 3284 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
11:28:50.0609 3284 Spooler - ok
11:28:50.0609 3284 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
11:28:50.0609 3284 sr - ok
11:28:50.0625 3284 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
11:28:50.0625 3284 srservice - ok
11:28:50.0656 3284 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
11:28:50.0656 3284 Srv - ok
11:28:50.0671 3284 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
11:28:50.0671 3284 SSDPSRV - ok
11:28:50.0687 3284 Steam Client Service - ok
11:28:50.0718 3284 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
11:28:50.0718 3284 stisvc - ok
11:28:50.0718 3284 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
11:28:50.0718 3284 streamip - ok
11:28:50.0734 3284 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
11:28:50.0734 3284 swenum - ok
11:28:50.0750 3284 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
11:28:50.0750 3284 swmidi - ok
11:28:50.0750 3284 SwPrv - ok
11:28:50.0781 3284 symc810 - ok
11:28:50.0781 3284 symc8xx - ok
11:28:50.0781 3284 sym_hi - ok
11:28:50.0796 3284 sym_u3 - ok
11:28:50.0812 3284 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
11:28:50.0812 3284 sysaudio - ok
11:28:50.0828 3284 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
11:28:50.0843 3284 SysmonLog - ok
11:28:50.0875 3284 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
11:28:50.0875 3284 TapiSrv - ok
11:28:50.0890 3284 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
11:28:50.0890 3284 Tcpip - ok
11:28:50.0921 3284 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
11:28:50.0921 3284 TDPIPE - ok
11:28:50.0921 3284 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
11:28:50.0921 3284 TDTCP - ok
11:28:50.0937 3284 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
11:28:50.0937 3284 TermDD - ok
11:28:50.0953 3284 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
11:28:50.0968 3284 TermService - ok
11:28:50.0968 3284 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
11:28:50.0984 3284 Themes - ok
11:28:50.0984 3284 TosIde - ok
11:28:51.0000 3284 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
11:28:51.0000 3284 TrkWks - ok
11:28:51.0015 3284 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
11:28:51.0015 3284 Udfs - ok
11:28:51.0015 3284 ultra - ok
11:28:51.0031 3284 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
11:28:51.0046 3284 Update - ok
11:28:51.0062 3284 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
11:28:51.0062 3284 upnphost - ok
11:28:51.0062 3284 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
11:28:51.0062 3284 UPS - ok
11:28:51.0093 3284 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
11:28:51.0093 3284 usbaudio - ok
11:28:51.0093 3284 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
11:28:51.0093 3284 usbccgp - ok
11:28:51.0109 3284 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
11:28:51.0109 3284 usbehci - ok
11:28:51.0125 3284 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
11:28:51.0125 3284 usbhub - ok
11:28:51.0125 3284 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
11:28:51.0125 3284 usbohci - ok
11:28:51.0156 3284 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
11:28:51.0156 3284 usbprint - ok
11:28:51.0171 3284 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
11:28:51.0171 3284 usbscan - ok
11:28:51.0171 3284 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
11:28:51.0171 3284 USBSTOR - ok
11:28:51.0203 3284 [ B2ABAB4CA46BAD182E27763DC19C780F ] VCSVADHWSer C:\WINDOWS\system32\DRIVERS\vcsvad.sys
11:28:51.0203 3284 VCSVADHWSer - ok
11:28:51.0203 3284 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
11:28:51.0203 3284 VgaSave - ok
11:28:51.0218 3284 ViaIde - ok
11:28:51.0234 3284 [ 8643DA4A6C83DA6C10FCAB1E5AB6632D ] Video3D C:\WINDOWS\system32\Drivers\Video3D32.sys
11:28:51.0234 3284 Video3D - ok
11:28:51.0250 3284 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
11:28:51.0250 3284 VolSnap - ok
11:28:51.0281 3284 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
11:28:51.0281 3284 VSS - ok
11:28:51.0296 3284 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
11:28:51.0296 3284 W32Time - ok
11:28:51.0312 3284 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:28:51.0312 3284 Wanarp - ok
11:28:51.0312 3284 WDICA - ok
11:28:51.0328 3284 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
11:28:51.0328 3284 wdmaud - ok
11:28:51.0343 3284 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
11:28:51.0343 3284 WebClient - ok
11:28:51.0390 3284 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
11:28:51.0390 3284 winmgmt - ok
11:28:51.0390 3284 WinRing0_1_2_0 - ok
11:28:51.0437 3284 [ 4D34CEDD74BDBF2B6A935EAE3BF80543 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
11:28:51.0437 3284 WinRM - ok
11:28:51.0468 3284 [ 6199B2AE3F9DB9CB6DB230471A1DC601 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
11:28:51.0484 3284 WmdmPmSN - ok
11:28:51.0500 3284 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
11:28:51.0500 3284 WmiApSrv - ok
11:28:51.0531 3284 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
11:28:51.0531 3284 wscsvc - ok
11:28:51.0531 3284 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
11:28:51.0531 3284 WSTCODEC - ok
11:28:51.0546 3284 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
11:28:51.0546 3284 wuauserv - ok
11:28:51.0578 3284 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
11:28:51.0578 3284 WZCSVC - ok
11:28:51.0593 3284 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
11:28:51.0593 3284 xmlprov - ok
11:28:51.0609 3284 ================ Scan global ===============================
11:28:51.0625 3284 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
11:28:51.0656 3284 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
11:28:51.0656 3284 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
11:28:51.0671 3284 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
11:28:51.0671 3284 [Global] - ok
11:28:51.0671 3284 ================ Scan MBR ==================================
11:28:51.0687 3284 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
11:28:51.0828 3284 \Device\Harddisk0\DR0 - ok
11:28:51.0828 3284 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR3
11:28:51.0843 3284 \Device\Harddisk1\DR3 - ok
11:28:51.0843 3284 ================ Scan VBR ==================================
11:28:51.0843 3284 [ 7CA87B00DE018277F5A78F2BE3F99CAC ] \Device\Harddisk0\DR0\Partition1
11:28:51.0843 3284 \Device\Harddisk0\DR0\Partition1 - ok
11:28:51.0859 3284 [ 37EBD56EA142E924582B468824537913 ] \Device\Harddisk0\DR0\Partition2
11:28:51.0859 3284 \Device\Harddisk0\DR0\Partition2 - ok
11:28:51.0875 3284 [ 784284AE1912DEC42C92EF65AE10C624 ] \Device\Harddisk1\DR3\Partition1
11:28:51.0875 3284 \Device\Harddisk1\DR3\Partition1 - ok
11:28:51.0875 3284 ============================================================
11:28:51.0875 3284 Scan finished
11:28:51.0875 3284 ============================================================
11:28:51.0875 3408 Detected object count: 0
11:28:51.0875 3408 Actual detected object count: 0
11:28:56.0953 1352 Deinitialize success

[Žbeky]

A combofix?

[AngryPanda]

ComboFix 13-03-11.01 - Dajos 11.03.2013 19:46:34.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1612 [GMT 1:00]
Spuštěný z: c:\documents and settings\Dajos\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\_000005_.tmp.dll
c:\windows\system32\SET114.tmp
c:\windows\system32\SET23A.tmp
c:\windows\system32\SET26E.tmp
c:\windows\system32\SET276.tmp
c:\windows\system32\SETFB.tmp
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-11 do 2013-03-11 )))))))))))))))))))))))))))))))
.
.
2013-03-09 17:22 . 2013-03-09 17:22 -------- d-----w- c:\documents and settings\Dajos\Data aplikací\Malwarebytes
2013-03-09 17:22 . 2013-03-09 17:22 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-03-09 17:21 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-03 21:20 . 2013-03-03 21:20 -------- d-----w- c:\program files\MSXML 4.0
2013-03-02 17:02 . 2013-03-02 17:02 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Age of Empires 3
2013-02-27 17:18 . 2013-02-27 17:18 -------- d-----w- c:\program files\ZAV
2013-02-23 09:47 . 2013-02-23 09:47 -------- d-----w- c:\documents and settings\Dajos\Local Settings\Data aplikací\Sun
2013-02-22 09:06 . 2013-02-22 09:06 -------- d-----w- c:\program files\Common Files\Java
2013-02-22 09:05 . 2013-02-22 09:05 143872 ----a-w- c:\windows\system32\javacpl.cpl
2013-02-22 09:05 . 2013-02-22 09:05 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-02-22 09:05 . 2013-02-22 09:05 -------- d-----w- c:\program files\Java
2013-02-21 21:10 . 2013-02-21 21:11 -------- d-----w- c:\documents and settings\Dajos\Local Settings\Data aplikací\ManyCam
2013-02-21 21:10 . 2013-02-21 21:10 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ManyCam
2013-02-21 21:10 . 2013-02-21 21:10 -------- d-----w- c:\documents and settings\Dajos\Data aplikací\ManyCam
2013-02-21 17:53 . 2013-02-21 17:53 -------- d-----w- c:\program files\Common Files\Skype
2013-02-21 17:53 . 2013-02-21 17:53 -------- d-----r- c:\program files\Skype
2013-02-21 17:53 . 2013-02-21 17:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Skype
2013-02-20 19:09 . 2013-02-10 03:20 892704 ----a-w- c:\windows\system32\nvdispgenco3220162.dll
2013-02-20 19:09 . 2013-02-10 03:20 1012512 ----a-w- c:\windows\system32\nvdispco3220294.dll
2013-02-10 14:07 . 2013-02-10 14:07 -------- d-----w- c:\documents and settings\Dajos\Data aplikací\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-27 17:57 . 2012-08-30 18:19 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-27 17:57 . 2012-08-30 18:19 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-02-22 09:05 . 2012-07-08 11:44 861088 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-02-22 09:05 . 2012-04-19 15:36 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-10 03:20 . 2012-11-02 14:36 6070272 ----a-w- c:\windows\system32\nvopencl.dll
2013-02-10 03:20 . 2012-05-25 19:00 2731296 ----a-w- c:\windows\system32\nvcuvid.dll
2013-02-10 03:20 . 2012-05-25 19:00 1990944 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-02-10 03:20 . 2012-05-25 19:00 7749632 ----a-w- c:\windows\system32\nvcuda.dll
2013-02-10 03:20 . 2012-05-25 19:00 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2013-02-10 03:20 . 2007-06-28 16:43 4078976 ----a-w- c:\windows\system32\nv4_disp.dll
2013-02-10 03:20 . 2007-06-28 16:43 2481664 ----a-w- c:\windows\system32\nvapi.dll
2013-02-10 03:20 . 2007-06-28 16:43 19685376 ----a-w- c:\windows\system32\nvoglnt.dll
2013-02-10 03:20 . 2007-06-28 16:43 10707360 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2013-02-10 00:29 . 2013-01-06 15:07 253952 ----a-w- c:\windows\system32\nvrsth.dll
2013-02-10 00:29 . 2007-06-28 16:43 258048 ----a-w- c:\windows\system32\nvrstr.dll
2013-02-10 00:29 . 2007-06-28 16:43 253952 ----a-w- c:\windows\system32\nvrssv.dll
2013-02-10 00:29 . 2007-06-28 16:43 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2013-02-10 00:29 . 2007-06-28 16:43 126976 ----a-w- c:\windows\system32\nvrszht.dll
2013-02-10 00:29 . 2007-06-28 16:43 274432 ----a-w- c:\windows\system32\nvrspt.dll
2013-02-10 00:29 . 2007-06-28 16:43 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2013-02-10 00:29 . 2007-06-28 16:43 274432 ----a-w- c:\windows\system32\nvrsja.dll
2013-02-10 00:29 . 2007-06-28 16:43 270336 ----a-w- c:\windows\system32\nvrsru.dll
2013-02-10 00:29 . 2007-06-28 16:43 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2013-02-10 00:29 . 2007-06-28 16:43 266240 ----a-w- c:\windows\system32\nvrsko.dll
2013-02-10 00:29 . 2007-06-28 16:43 258048 ----a-w- c:\windows\system32\nvrssl.dll
2013-02-10 00:29 . 2007-06-28 16:43 258048 ----a-w- c:\windows\system32\nvrssk.dll
2013-02-10 00:29 . 2007-06-28 16:43 258048 ----a-w- c:\windows\system32\nvrspl.dll
2013-02-10 00:29 . 2007-06-28 16:43 253952 ----a-w- c:\windows\system32\nvrsno.dll
2013-02-10 00:29 . 2007-06-28 16:43 335872 ----a-w- c:\windows\system32\nvrshe.dll
2013-02-10 00:29 . 2007-06-28 16:43 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2013-02-10 00:29 . 2007-06-28 16:43 282624 ----a-w- c:\windows\system32\nvrsit.dll
2013-02-10 00:29 . 2007-06-28 16:43 282624 ----a-w- c:\windows\system32\nvrses.dll
2013-02-10 00:29 . 2007-06-28 16:43 282624 ----a-w- c:\windows\system32\nvrsel.dll
2013-02-10 00:29 . 2007-06-28 16:43 278528 ----a-w- c:\windows\system32\nvrsde.dll
2013-02-10 00:29 . 2007-06-28 16:43 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2013-02-10 00:29 . 2007-06-28 16:43 262144 ----a-w- c:\windows\system32\nvrshu.dll
2013-02-10 00:29 . 2007-06-28 16:43 253952 ----a-w- c:\windows\system32\nvrsda.dll
2013-02-10 00:29 . 2007-06-28 16:43 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2013-02-10 00:29 . 2007-06-28 16:43 249856 ----a-w- c:\windows\system32\nvrseng.dll
2013-02-10 00:29 . 2007-06-28 16:43 335872 ----a-w- c:\windows\system32\nvrsar.dll
2013-02-10 00:29 . 2007-06-28 16:43 249856 ----a-w- c:\windows\system32\nvrscs.dll
2013-02-10 00:27 . 2007-06-28 16:43 54272 ----a-w- c:\windows\system32\nvwddi.dll
2013-02-10 00:27 . 2007-06-28 16:43 223008 ----a-w- c:\windows\system32\nvmctray.dll
2013-02-10 00:27 . 2007-06-28 16:43 156960 ----a-w- c:\windows\system32\nvsvc32.exe
2013-02-10 00:27 . 2007-06-28 16:43 15664416 ----a-w- c:\windows\system32\nvcpl.dll
2013-02-10 00:27 . 2007-06-28 16:43 144160 ----a-w- c:\windows\system32\nvcolor.exe
2013-01-31 09:50 . 2012-10-11 03:08 22656 ----a-w- c:\windows\system32\drivers\mcaudrv.sys
2013-01-26 03:55 . 2006-03-02 12:00 552448 ----a-w- c:\windows\system32\oleaut32.dll
2013-01-07 07:26 . 2006-03-02 12:00 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-07 07:26 . 2004-08-17 15:45 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-01-04 10:10 . 2006-03-02 12:00 1867264 ----a-w- c:\windows\system32\win32k.sys
2013-01-02 06:49 . 2006-03-02 12:00 148992 ----a-w- c:\windows\system32\mpg2splt.ax
2013-01-02 06:49 . 2006-03-02 12:00 1294848 ----a-w- c:\windows\system32\quartz.dll
2012-12-29 10:31 . 2012-11-02 14:36 889784 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-29 10:31 . 2012-05-25 19:00 1017272 ----a-w- c:\windows\system32\nvdispco32.dll
2012-12-28 09:45 . 2012-05-13 12:22 139080 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-12-28 09:45 . 2012-05-13 12:25 270240 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-12-28 09:45 . 2012-05-13 12:21 270240 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-12-27 18:34 . 2012-05-13 12:21 270240 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-12-27 14:47 . 2012-05-13 12:22 138056 ----a-w- c:\documents and settings\Dajos\Data aplikací\PnkBstrK.sys
2012-12-27 14:47 . 2012-05-13 12:21 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-12-26 20:20 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2012-12-26 20:19 . 2006-03-02 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-12-26 20:19 . 2006-03-02 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-12-24 06:40 . 2006-03-02 12:00 385024 ------w- c:\windows\system32\html.iec
2012-12-21 12:22 . 2012-04-14 12:09 196608 ----a-w- c:\windows\system32\drivers\nStandard.bin
2012-12-16 12:23 . 2006-03-02 12:00 290560 ----a-w- c:\windows\system32\atmfd.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\steam\steam.exe" [2013-02-25 1602984]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2012-12-14 3093624]
"Skype"="d:\skype\Phone\Skype.exe" [2010-04-06 26102056]
"ManyCam"="c:\program files\ManyCam\Bin\ManyCam.exe" [2013-02-12 5402960]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUSGamerOSD"="c:\program files\ASUS\GamerOSD\GamerOSD.exe" [2007-07-12 380928]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 16342528]
"LogMeIn Hamachi Ui"="d:\logmein hamachi\hamachi-2-ui.exe" [2012-12-10 2254768]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2013-02-10 15664416]
"NvMediaCenter"="NvMCTray.dll" [2013-02-10 223008]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2013-02-10 1982312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Dajos\Nabídka Start\Programy\Po spuštění\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-11-4 40136]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
REALTEK RTL8187 Wireless LAN Utility.lnk - c:\program files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe [2012-4-15 737280]
ZyXEL G-302 v3 Utility.lnk - c:\program files\ZyXEL\G-302v3\G-302v3.exe [2012-4-15 1609216]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Steam\\Steam.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"d:\\Steam\\steamapps\\common\\Rome Total War Gold\\RomeTW.exe"=
"d:\\Steam\\steamapps\\common\\Rome Total War Gold\\RomeTW-BI.exe"=
"d:\\Steam\\steamapps\\common\\KillingFloor\\System\\KillingFloor.exe"=
"d:\\World_of_Tanks\\WorldOfTanks.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Europa Universalis III\\eu3game.exe"=
"d:\\Age of Empires III\\age3.exe"=
"d:\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"56688:TCP"= 56688:TCP:Pando Media Booster
"56688:UDP"= 56688:UDP:Pando Media Booster
.
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [15.4.2012 15:02 38144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\logmein hamachi\hamachi-2.exe [10.12.2012 17:29 1435568]
R3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\drivers\mcvidrv.sys [11.10.2012 4:08 34432]
R3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv.sys [11.10.2012 4:08 22656]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [1.2.2013 18:32 17792]
S2 MBAMService;MBAMService;d:\malwarebytes' anti-malware\mbamservice.exe [8.3.2011 17:24 682344]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [7.2.2013 13:10 161384]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [24.5.2012 18:49 23456]
S3 GGSAFERDriver;GGSAFER Driver;\??\d:\garena\Garena Plus\Room\safedrv.sys --> d:\garena\Garena Plus\Room\safedrv.sys [?]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [9.3.2013 18:21 21104]
S3 WinRing0_1_2_0;WinRing0_1_2_0;\??\d:\game booster 3\Driver\WinRing0.sys --> d:\game booster 3\Driver\WinRing0.sys [?]
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-30 17:57]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 93.185.0.5 93.185.0.6
FF - ProfilePath - c:\documents and settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - ExtSQL: 2013-02-07 15:22; {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}; d:\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
FF - ExtSQL: 2013-02-21 22:12; toolbar@ask.com; c:\documents and settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\extensions\toolbar@ask.com
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-11 19:52
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2013-03-11 19:53:13
ComboFix-quarantined-files.txt 2013-03-11 18:53
.
Před spuštěním: Volných bajtů: 10 843 234 304
Po spuštění: Volných bajtů: 10 978 492 416
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
.
- - End Of File - - A030167C825DB1A9BEA2D606ACBD44AF

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
Folder::
c:\program files\Skype\Updater
d:\garena

Driver::
SkypeUpdate
GGSAFERDriver
WinRing0_1_2_0

Firefox::
FF - ProfilePath - c:\documents and settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\
FF - ExtSQL: 2013-02-07 15:22; {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}; d:\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
FF - ExtSQL: 2013-02-21 22:12; toolbar@ask.com; c:\documents and settings\Dajos\Data aplikací\Mozilla\Firefox\Profiles\hovvkuni.default\extensions\toolbar@ask.com


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.