Prosim o kontrolu,pomale PC, dekuji

[memphisto]

Ten TDDS budou dlouhý, tak jej rozděl na více odpovědí

[Reklama]

[Milo1]

19:37:49.0437 1392 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:37:49.0734 1392 ============================================================
19:37:49.0734 1392 Current date / time: 2013/08/27 19:37:49.0734
19:37:49.0734 1392 SystemInfo:
19:37:49.0734 1392
19:37:49.0734 1392 OS Version: 5.1.2600 ServicePack: 3.0
19:37:49.0734 1392 Product type: Workstation
19:37:49.0734 1392 ComputerName: ACER-3F8B9F03A8
19:37:49.0734 1392 UserName: ja
19:37:49.0734 1392 Windows directory: C:\WINDOWS
19:37:49.0734 1392 System windows directory: C:\WINDOWS
19:37:49.0734 1392 Processor architecture: Intel x86
19:37:49.0734 1392 Number of processors: 1
19:37:49.0734 1392 Page size: 0x1000
19:37:49.0734 1392 Boot type: Normal boot
19:37:49.0734 1392 ============================================================
19:37:53.0062 1392 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:37:53.0125 1392 ============================================================
19:37:53.0125 1392 \Device\Harddisk0\DR0:
19:37:53.0125 1392 MBR partitions:
19:37:53.0125 1392 \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x7CC5BD, BlocksNum 0x6B660E2
19:37:53.0125 1392 \Device\Harddisk0\DR0\Partition2: MBR, Type 0xC, StartLBA 0x733269F, BlocksNum 0x6C61122
19:37:53.0125 1392 ============================================================
19:37:53.0187 1392 C: <-> \Device\Harddisk0\DR0\Partition1
19:37:53.0218 1392 D: <-> \Device\Harddisk0\DR0\Partition2
19:37:53.0562 1392 ============================================================
19:37:53.0562 1392 Initialize success
19:37:53.0562 1392 ============================================================
19:37:55.0515 1836 ============================================================
19:37:55.0515 1836 Scan started
19:37:55.0515 1836 Mode: Manual;
19:37:55.0515 1836 ============================================================
19:37:56.0312 1836 ================ Scan system memory ========================
19:37:56.0312 1836 System memory - ok
19:37:56.0312 1836 ================ Scan services =============================
19:37:56.0453 1836 Abiosdsk - ok
19:37:56.0500 1836 [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5 C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
19:37:56.0500 1836 abp480n5 - ok
19:37:56.0531 1836 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:37:56.0546 1836 ACPI - ok
19:37:56.0562 1836 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
19:37:56.0562 1836 ACPIEC - ok
19:37:56.0640 1836 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:37:56.0687 1836 AdobeFlashPlayerUpdateSvc - ok
19:37:56.0750 1836 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
19:37:56.0750 1836 adpu160m - ok
19:37:56.0828 1836 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
19:37:56.0859 1836 aec - ok
19:37:56.0921 1836 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
19:37:56.0921 1836 AFD - ok
19:37:56.0937 1836 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
19:37:56.0937 1836 agp440 - ok
19:37:56.0984 1836 [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
19:37:56.0984 1836 agpCPQ - ok
19:37:57.0000 1836 [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x C:\WINDOWS\system32\DRIVERS\aha154x.sys
19:37:57.0015 1836 Aha154x - ok
19:37:57.0031 1836 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
19:37:57.0046 1836 aic78u2 - ok
19:37:57.0062 1836 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
19:37:57.0062 1836 aic78xx - ok
19:37:57.0125 1836 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
19:37:57.0125 1836 Alerter - ok
19:37:57.0187 1836 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
19:37:57.0187 1836 ALG - ok
19:37:57.0203 1836 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
19:37:57.0203 1836 AliIde - ok
19:37:57.0234 1836 [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541 C:\WINDOWS\system32\DRIVERS\alim1541.sys
19:37:57.0234 1836 alim1541 - ok
19:37:57.0250 1836 [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp C:\WINDOWS\system32\DRIVERS\amdagp.sys
19:37:57.0250 1836 amdagp - ok
19:37:57.0328 1836 [ F6F5E047369784E607F3A636AC576148 ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
19:37:57.0328 1836 AmdK8 - ok
19:37:57.0343 1836 [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint C:\WINDOWS\system32\DRIVERS\amsint.sys
19:37:57.0343 1836 amsint - ok
19:37:57.0421 1836 [ 3E59DF4984FBD6800D6621480B38A34E ] Andbus C:\WINDOWS\system32\DRIVERS\lgandbus.sys
19:37:57.0437 1836 Andbus - ok
19:37:57.0500 1836 [ 8E0BF6F3B2C9C292BC7CE0DE727CDD56 ] AndDiag C:\WINDOWS\system32\DRIVERS\lganddiag.sys
19:37:57.0500 1836 AndDiag - ok
19:37:57.0578 1836 [ 1D2C90E25483363D54B652898BBC8F2A ] AndGps C:\WINDOWS\system32\DRIVERS\lgandgps.sys
19:37:57.0593 1836 AndGps - ok
19:37:57.0640 1836 [ B1B06A95DA2CAC7FA19832C60C348C85 ] ANDModem C:\WINDOWS\system32\DRIVERS\lgandmodem.sys
19:37:57.0640 1836 ANDModem - ok
19:37:57.0734 1836 [ 39E58CE46F87D039994F20B4295887CC ] AndNetDiag C:\WINDOWS\system32\DRIVERS\lgandnetdiag.sys
19:37:57.0750 1836 AndNetDiag - ok
19:37:57.0812 1836 [ 2D9231585B67DC7432D135F1EA305655 ] ANDNetModem C:\WINDOWS\system32\DRIVERS\lgandnetmodem.sys
19:37:57.0812 1836 ANDNetModem - ok
19:37:57.0875 1836 [ 54A40A58FF71936026F2E49ECFD487B8 ] androidusb C:\WINDOWS\system32\Drivers\lgandadb.sys
19:37:57.0875 1836 androidusb - ok
19:37:57.0953 1836 AppMgmt - ok
19:37:58.0015 1836 [ BAA6B3CC74A4377D063C5A92DD9C4098 ] AR5211 C:\WINDOWS\system32\DRIVERS\ar5211.sys
19:37:58.0031 1836 AR5211 - ok
19:37:58.0093 1836 [ 62D318E9A0C8FC9B780008E724283707 ] asc C:\WINDOWS\system32\DRIVERS\asc.sys
19:37:58.0093 1836 asc - ok
19:37:58.0109 1836 [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p C:\WINDOWS\system32\DRIVERS\asc3350p.sys
19:37:58.0109 1836 asc3350p - ok
19:37:58.0125 1836 [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550 C:\WINDOWS\system32\DRIVERS\asc3550.sys
19:37:58.0125 1836 asc3550 - ok
19:37:58.0281 1836 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
19:37:58.0281 1836 aspnet_state - ok
19:37:58.0328 1836 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
19:37:58.0343 1836 aswFsBlk - ok
19:37:58.0421 1836 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
19:37:58.0421 1836 aswMonFlt - ok
19:37:58.0468 1836 [ 7B43265F92257A21CBFD88E7A651044C ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
19:37:58.0468 1836 AswRdr - ok
19:37:58.0500 1836 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
19:37:58.0500 1836 aswRvrt - ok
19:37:58.0578 1836 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
19:37:58.0593 1836 aswSnx - ok
19:37:58.0640 1836 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
19:37:58.0640 1836 aswSP - ok
19:37:58.0671 1836 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
19:37:58.0687 1836 aswTdi - ok
19:37:58.0718 1836 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
19:37:58.0734 1836 aswVmm - ok
19:37:58.0781 1836 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:37:58.0781 1836 AsyncMac - ok
19:37:58.0843 1836 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
19:37:58.0843 1836 atapi - ok
19:37:58.0906 1836 Atdisk - ok
19:37:58.0984 1836 [ DEA649BC17D6F16CE6B1389D9CE9EA69 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
19:37:59.0015 1836 Ati HotKey Poller - ok
19:37:59.0171 1836 [ B1FA8F1DC0A49618E544287A92AC266E ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
19:37:59.0187 1836 ati2mtag - ok
19:37:59.0250 1836 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:37:59.0250 1836 Atmarpc - ok
19:37:59.0359 1836 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
19:37:59.0359 1836 AudioSrv - ok
19:37:59.0421 1836 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
19:37:59.0421 1836 audstub - ok
19:37:59.0578 1836 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
19:37:59.0578 1836 avast! Antivirus - ok
19:37:59.0640 1836 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
19:37:59.0640 1836 Beep - ok
19:37:59.0718 1836 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
19:37:59.0750 1836 BITS - ok
19:37:59.0828 1836 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:37:59.0859 1836 Bonjour Service - ok
19:37:59.0890 1836 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
19:37:59.0906 1836 Browser - ok
19:37:59.0953 1836 [ B279426E3C0C344893ED78A613A73BDE ] BthEnum C:\WINDOWS\system32\DRIVERS\BthEnum.sys
19:37:59.0953 1836 BthEnum - ok
19:37:59.0984 1836 [ 80602B8746D3738F5886CE3D67EF06B6 ] BthPan C:\WINDOWS\system32\DRIVERS\bthpan.sys
19:37:59.0984 1836 BthPan - ok
19:38:00.0062 1836 [ F338662A6C1FC11DD9508F6DFF2C06A2 ] BTHPORT C:\WINDOWS\system32\Drivers\BTHport.sys
19:38:00.0078 1836 BTHPORT - ok
19:38:00.0140 1836 [ 70CA4B3F634C9DCA200832F8DA76E009 ] BthServ C:\WINDOWS\System32\bthserv.dll
19:38:00.0140 1836 BthServ - ok
19:38:00.0171 1836 [ 61364CD71EF63B0F038B7E9DF00F1EFA ] BTHUSB C:\WINDOWS\system32\Drivers\BTHUSB.sys
19:38:00.0171 1836 BTHUSB - ok
19:38:00.0250 1836 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
19:38:00.0250 1836 cbidf - ok
19:38:00.0250 1836 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
19:38:00.0265 1836 cbidf2k - ok
19:38:00.0281 1836 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
19:38:00.0281 1836 CCDECODE - ok
19:38:00.0296 1836 [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
19:38:00.0296 1836 cd20xrnt - ok
19:38:00.0312 1836 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
19:38:00.0328 1836 Cdaudio - ok
19:38:00.0343 1836 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
19:38:00.0343 1836 Cdfs - ok
19:38:00.0406 1836 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:38:00.0421 1836 Cdrom - ok
19:38:00.0468 1836 Changer - ok
19:38:00.0546 1836 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
19:38:00.0546 1836 CiSvc - ok
19:38:00.0625 1836 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
19:38:00.0640 1836 ClipSrv - ok
19:38:00.0718 1836 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:38:00.0718 1836 clr_optimization_v2.0.50727_32 - ok
19:38:00.0812 1836 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:38:00.0828 1836 clr_optimization_v4.0.30319_32 - ok
19:38:00.0875 1836 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
19:38:00.0890 1836 CmBatt - ok
19:38:00.0921 1836 [ 964D0F042ACA51D5644779EB9D9EE40F ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
19:38:00.0921 1836 CmdIde - ok
19:38:00.0937 1836 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
19:38:00.0937 1836 Compbatt - ok
19:38:00.0984 1836 COMSysApp - ok
19:38:01.0015 1836 [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray C:\WINDOWS\system32\DRIVERS\cpqarray.sys
19:38:01.0015 1836 Cpqarray - ok
19:38:01.0109 1836 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
19:38:01.0125 1836 CryptSvc - ok
19:38:01.0140 1836 [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
19:38:01.0156 1836 dac2w2k - ok
19:38:01.0171 1836 [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt C:\WINDOWS\system32\DRIVERS\dac960nt.sys
19:38:01.0171 1836 dac960nt - ok
19:38:01.0250 1836 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
19:38:01.0265 1836 DcomLaunch - ok
19:38:01.0328 1836 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
19:38:01.0328 1836 Dhcp - ok
19:38:01.0359 1836 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
19:38:01.0359 1836 Disk - ok
19:38:01.0406 1836 dmadmin - ok
19:38:01.0515 1836 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
19:38:01.0578 1836 dmboot - ok
19:38:01.0609 1836 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
19:38:01.0625 1836 dmio - ok
19:38:01.0687 1836 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
19:38:01.0687 1836 dmload - ok
19:38:01.0750 1836 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
19:38:01.0750 1836 dmserver - ok
19:38:01.0796 1836 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
19:38:01.0796 1836 DMusic - ok
19:38:01.0875 1836 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
19:38:01.0875 1836 Dnscache - ok
19:38:01.0984 1836 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
19:38:02.0015 1836 Dot3svc - ok
19:38:02.0046 1836 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
19:38:02.0046 1836 dpti2o - ok
19:38:02.0078 1836 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
19:38:02.0093 1836 drmkaud - ok
19:38:02.0140 1836 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
19:38:02.0140 1836 EapHost - ok
19:38:02.0187 1836 [ 66029E6C4B19223C24D8710EED3AAEAB ] EMSCR C:\WINDOWS\system32\DRIVERS\EMS7SK.sys
19:38:02.0187 1836 EMSCR - ok
19:38:02.0265 1836 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
19:38:02.0265 1836 ERSvc - ok
19:38:02.0312 1836 [ 9F0FA60836E1D1148CC0C1B6E67AA6F7 ] ESDCR C:\WINDOWS\system32\DRIVERS\ESD7SK.sys
19:38:02.0312 1836 ESDCR - ok
19:38:02.0343 1836 [ D9DA881BE71B74B328471CCF28B5F0A9 ] ESMCR C:\WINDOWS\system32\DRIVERS\ESM7SK.sys
19:38:02.0359 1836 ESMCR - ok
19:38:02.0406 1836 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
19:38:02.0421 1836 Eventlog - ok
19:38:02.0515 1836 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
19:38:02.0546 1836 EventSystem - ok
19:38:02.0609 1836 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
19:38:02.0625 1836 Fastfat - ok
19:38:02.0703 1836 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
19:38:02.0718 1836 FastUserSwitchingCompatibility - ok
19:38:02.0765 1836 [ 2CD14C70D1D81AF054AA5ED8024DCAE6 ] Fax C:\WINDOWS\system32\fxssvc.exe
19:38:02.0796 1836 Fax - ok
19:38:02.0843 1836 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
19:38:02.0859 1836 Fdc - ok
19:38:02.0875 1836 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
19:38:02.0875 1836 Fips - ok
19:38:03.0015 1836 [ 227846995AFEEFA70D328BF5334A86A5 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
19:38:03.0078 1836 FLEXnet Licensing Service - ok
19:38:03.0109 1836 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
19:38:03.0109 1836 Flpydisk - ok
19:38:03.0156 1836 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
19:38:03.0171 1836 FltMgr - ok
19:38:03.0265 1836 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:38:03.0265 1836 FontCache3.0.0.0 - ok
19:38:03.0281 1836 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:38:03.0281 1836 Fs_Rec - ok
19:38:03.0312 1836 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:38:03.0343 1836 Ftdisk - ok
19:38:03.0500 1836 [ 2973B4EB7BE10A0D491B2037DCAAE88F ] Garmin Core Update Service D:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
19:38:03.0515 1836 Garmin Core Update Service - ok
19:38:03.0578 1836 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:38:03.0578 1836 Gpc - ok
19:38:03.0703 1836 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
19:38:03.0718 1836 gupdate - ok
19:38:03.0734 1836 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
19:38:03.0734 1836 gupdatem - ok
19:38:03.0781 1836 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:38:03.0781 1836 HDAudBus - ok
19:38:03.0875 1836 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:38:03.0875 1836 helpsvc - ok
19:38:03.0953 1836 HidServ - ok
19:38:04.0000 1836 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:38:04.0000 1836 HidUsb - ok
19:38:04.0093 1836 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
19:38:04.0093 1836 hkmsvc - ok
19:38:04.0156 1836 [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn C:\WINDOWS\system32\DRIVERS\hpn.sys
19:38:04.0156 1836 hpn - ok
19:38:04.0234 1836 [ 448C0FD272FE1B80046F4767DB21EB8D ] HSFHWAZL C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
19:38:04.0250 1836 HSFHWAZL - ok
19:38:04.0328 1836 [ 2715A27DE9C17BDBAF6D6C79989A7B12 ] HSF_DPV C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
19:38:04.0359 1836 HSF_DPV - ok
19:38:04.0421 1836 [ CBD09ED9CF6822177EE85AEA4D8816A2 ] HTCAND32 C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys
19:38:04.0437 1836 HTCAND32 - ok
19:38:04.0500 1836 [ 04E3B3554076B8192A668EFE88A682A1 ] htcnprot C:\WINDOWS\system32\DRIVERS\htcnprot.sys
19:38:04.0500 1836 htcnprot - ok
19:38:04.0562 1836 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
19:38:04.0578 1836 HTTP - ok
19:38:04.0640 1836 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
19:38:04.0656 1836 HTTPFilter - ok
19:38:04.0687 1836 [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt C:\WINDOWS\system32\drivers\i2omgmt.sys
19:38:04.0687 1836 i2omgmt - ok
19:38:04.0718 1836 [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp C:\WINDOWS\system32\DRIVERS\i2omp.sys
19:38:04.0734 1836 i2omp - ok
19:38:04.0781 1836 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:38:04.0796 1836 i8042prt - ok
19:38:04.0906 1836 [ DAF66902F08796F9C694901660E5A64A ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
19:38:04.0937 1836 IDriverT - ok
19:38:05.0046 1836 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:38:05.0093 1836 idsvc - ok
19:38:05.0125 1836 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
19:38:05.0125 1836 Imapi - ok
19:38:05.0234 1836 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
19:38:05.0250 1836 ImapiService - ok
19:38:05.0296 1836 [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u C:\WINDOWS\system32\DRIVERS\ini910u.sys
19:38:05.0296 1836 ini910u - ok
19:38:05.0312 1836 int15.sys - ok
19:38:05.0640 1836 [ 909D03B3B7FB7C830B74F74F4D0EA7CE ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
19:38:05.0671 1836 IntcAzAudAddService - ok
19:38:05.0765 1836 [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
19:38:05.0765 1836 IntelIde - ok
19:38:05.0828 1836 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
19:38:05.0828 1836 Ip6Fw - ok
19:38:05.0859 1836 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:38:05.0859 1836 IpFilterDriver - ok
19:38:05.0921 1836 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:38:05.0921 1836 IpInIp - ok
19:38:05.0984 1836 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:38:06.0015 1836 IpNat - ok
19:38:06.0031 1836 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:38:06.0046 1836 IPSec - ok
19:38:06.0078 1836 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
19:38:06.0078 1836 IRENUM - ok
19:38:06.0109 1836 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:38:06.0125 1836 isapnp - ok
19:38:06.0171 1836 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:38:06.0187 1836 Kbdclass - ok
19:38:06.0250 1836 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
19:38:06.0265 1836 kmixer - ok
19:38:06.0281 1836 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
19:38:06.0281 1836 KSecDD - ok
19:38:06.0375 1836 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
19:38:06.0375 1836 lanmanserver - ok
19:38:06.0453 1836 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
19:38:06.0468 1836 lanmanworkstation - ok
19:38:06.0515 1836 lbrtfdc - ok
19:38:06.0546 1836 [ 4DD47B5AF0B24871EBB9EFC012A7474E ] LgBttPort C:\WINDOWS\system32\DRIVERS\lgbtport.sys
19:38:06.0546 1836 LgBttPort - ok
19:38:06.0671 1836 [ 1D038CA6C529203087A990E5E97887B4 ] lgbusenum C:\WINDOWS\system32\DRIVERS\lgbtbus.sys
19:38:06.0687 1836 lgbusenum - ok
19:38:06.0765 1836 [ 26F1976A330195D62A6224C76968CF0D ] LGVMODEM C:\WINDOWS\system32\DRIVERS\lgvmodem.sys
19:38:06.0781 1836 LGVMODEM - ok
19:38:07.0156 1836 [ 86E8BCAA91FC2ACFACD99CF2BF9F1F47 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:38:07.0156 1836 LightScribeService - ok
19:38:07.0187 1836 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
19:38:07.0187 1836 LmHosts - ok
19:38:07.0281 1836 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
19:38:07.0281 1836 MBAMProtector - ok
19:38:07.0937 1836 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:38:08.0234 1836 MBAMScheduler - ok
19:38:08.0984 1836 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
19:38:09.0187 1836 MBAMService - ok
19:38:09.0281 1836 [ 74F4372AF97A587ECEC527EC34955712 ] mdmxsdk C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
19:38:09.0281 1836 mdmxsdk - ok
19:38:09.0406 1836 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
19:38:09.0406 1836 Messenger - ok
19:38:09.0468 1836 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
19:38:09.0468 1836 mnmdd - ok
19:38:09.0609 1836 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
19:38:09.0609 1836 mnmsrvc - ok
19:38:09.0718 1836 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
19:38:09.0734 1836 Modem - ok
19:38:09.0843 1836 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:38:09.0859 1836 Mouclass - ok
19:38:09.0921 1836 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:38:09.0953 1836 mouhid - ok
19:38:10.0109 1836 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
19:38:10.0125 1836 MountMgr - ok
19:38:10.0296 1836 [ A35576A433F4AEB0D48976A004657CB6 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:38:10.0296 1836 MozillaMaintenance - ok
19:38:10.0328 1836 [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x C:\WINDOWS\system32\DRIVERS\mraid35x.sys
19:38:10.0328 1836 mraid35x - ok
19:38:10.0359 1836 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:38:10.0375 1836 MRxDAV - ok
19:38:10.0531 1836 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:38:10.0578 1836 MRxSmb - ok
19:38:10.0671 1836 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe

[Milo1]

19:38:10.0687 1836 MSDTC - ok
19:38:10.0750 1836 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
19:38:10.0750 1836 Msfs - ok
19:38:10.0796 1836 MSIServer - ok
19:38:10.0843 1836 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:38:10.0859 1836 MSKSSRV - ok
19:38:10.0890 1836 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:38:10.0890 1836 MSPCLOCK - ok
19:38:10.0906 1836 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
19:38:10.0906 1836 MSPQM - ok
19:38:10.0937 1836 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:38:10.0937 1836 mssmbios - ok
19:38:11.0000 1836 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
19:38:11.0000 1836 MSTEE - ok
19:38:11.0046 1836 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
19:38:11.0046 1836 Mup - ok
19:38:11.0093 1836 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
19:38:11.0093 1836 NABTSFEC - ok
19:38:11.0250 1836 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
19:38:11.0281 1836 napagent - ok
19:38:11.0312 1836 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
19:38:11.0328 1836 NDIS - ok
19:38:11.0359 1836 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
19:38:11.0375 1836 NdisIP - ok
19:38:11.0390 1836 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:38:11.0406 1836 NdisTapi - ok
19:38:11.0437 1836 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:38:11.0437 1836 Ndisuio - ok
19:38:11.0484 1836 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:38:11.0500 1836 NdisWan - ok
19:38:11.0578 1836 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
19:38:11.0578 1836 NDProxy - ok
19:38:11.0609 1836 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
19:38:11.0625 1836 NetBIOS - ok
19:38:11.0671 1836 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
19:38:11.0703 1836 NetBT - ok
19:38:11.0843 1836 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
19:38:11.0875 1836 NetDDE - ok
19:38:11.0890 1836 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
19:38:11.0890 1836 NetDDEdsdm - ok
19:38:11.0984 1836 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
19:38:12.0000 1836 Netlogon - ok
19:38:12.0046 1836 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
19:38:12.0078 1836 Netman - ok
19:38:12.0234 1836 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
19:38:12.0234 1836 NetTcpPortSharing - ok
19:38:12.0437 1836 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
19:38:12.0453 1836 Nla - ok
19:38:12.0500 1836 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
19:38:12.0500 1836 Npfs - ok
19:38:12.0640 1836 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
19:38:12.0671 1836 Ntfs - ok
19:38:12.0703 1836 [ 7F1C1F78D709C4A54CBB46EDE7E0B48D ] NTIDrvr C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys
19:38:12.0718 1836 NTIDrvr - ok
19:38:12.0750 1836 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
19:38:12.0765 1836 NtLmSsp - ok
19:38:12.0921 1836 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
19:38:12.0953 1836 NtmsSvc - ok
19:38:13.0015 1836 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
19:38:13.0015 1836 Null - ok
19:38:13.0062 1836 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:38:13.0062 1836 NwlnkFlt - ok
19:38:13.0125 1836 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:38:13.0125 1836 NwlnkFwd - ok
19:38:13.0156 1836 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\drivers\Parport.sys
19:38:13.0171 1836 Parport - ok
19:38:13.0203 1836 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
19:38:13.0203 1836 PartMgr - ok
19:38:13.0265 1836 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
19:38:13.0265 1836 ParVdm - ok
19:38:13.0437 1836 [ 3CAE2BBC86FCF7F94C9696994AF30386 ] PassThru Service C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
19:38:13.0437 1836 PassThru Service - ok
19:38:13.0484 1836 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
19:38:13.0484 1836 PCI - ok
19:38:13.0531 1836 PCIDump - ok
19:38:13.0546 1836 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
19:38:13.0546 1836 PCIIde - ok
19:38:13.0640 1836 [ 90505755634407D4EF4C6DEA60FC1DF9 ] Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
19:38:13.0640 1836 Pcmcia - ok
19:38:13.0656 1836 PDCOMP - ok
19:38:13.0703 1836 PDFRAME - ok
19:38:13.0734 1836 PDRELI - ok
19:38:13.0750 1836 PDRFRAME - ok
19:38:13.0812 1836 [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2 C:\WINDOWS\system32\DRIVERS\perc2.sys
19:38:13.0828 1836 perc2 - ok
19:38:13.0843 1836 [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib C:\WINDOWS\system32\DRIVERS\perc2hib.sys
19:38:13.0843 1836 perc2hib - ok
19:38:14.0046 1836 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
19:38:14.0046 1836 PlugPlay - ok
19:38:14.0093 1836 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
19:38:14.0109 1836 PolicyAgent - ok
19:38:14.0140 1836 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:38:14.0140 1836 PptpMiniport - ok
19:38:14.0171 1836 [ 7EB15DCE4EC3A0220BD796A15C18186E ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
19:38:14.0171 1836 Processor - ok
19:38:14.0218 1836 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
19:38:14.0218 1836 ProtectedStorage - ok
19:38:14.0250 1836 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
19:38:14.0250 1836 PSched - ok
19:38:14.0281 1836 psdfilter - ok
19:38:14.0296 1836 psdvdisk - ok
19:38:14.0343 1836 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:38:14.0343 1836 Ptilink - ok
19:38:14.0421 1836 [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080 C:\WINDOWS\system32\DRIVERS\ql1080.sys
19:38:14.0484 1836 ql1080 - ok
19:38:14.0671 1836 [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
19:38:14.0718 1836 Ql10wnt - ok
19:38:14.0828 1836 [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160 C:\WINDOWS\system32\DRIVERS\ql12160.sys
19:38:14.0828 1836 ql12160 - ok
19:38:14.0953 1836 [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240 C:\WINDOWS\system32\DRIVERS\ql1240.sys
19:38:14.0953 1836 ql1240 - ok
19:38:15.0078 1836 [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280 C:\WINDOWS\system32\DRIVERS\ql1280.sys
19:38:15.0187 1836 ql1280 - ok
19:38:15.0250 1836 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:38:15.0296 1836 RasAcd - ok
19:38:15.0453 1836 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
19:38:15.0703 1836 RasAuto - ok
19:38:15.0875 1836 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:38:15.0984 1836 Rasl2tp - ok
19:38:16.0656 1836 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
19:38:16.0859 1836 RasMan - ok
19:38:17.0171 1836 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:38:17.0281 1836 RasPppoe - ok
19:38:17.0359 1836 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
19:38:17.0359 1836 Raspti - ok
19:38:17.0562 1836 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:38:17.0703 1836 Rdbss - ok
19:38:17.0781 1836 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:38:17.0781 1836 RDPCDD - ok
19:38:18.0156 1836 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
19:38:18.0187 1836 rdpdr - ok
19:38:18.0781 1836 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
19:38:18.0937 1836 RDPWD - ok
19:38:19.0390 1836 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
19:38:19.0437 1836 RDSessMgr - ok
19:38:19.0562 1836 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
19:38:19.0609 1836 redbook - ok
19:38:19.0906 1836 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
19:38:19.0937 1836 RemoteAccess - ok
19:38:20.0125 1836 [ 851C30DF2807FCFA21E4C681A7D6440E ] RFCOMM C:\WINDOWS\system32\DRIVERS\rfcomm.sys
19:38:20.0171 1836 RFCOMM - ok
19:38:20.0296 1836 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
19:38:20.0375 1836 RpcLocator - ok
19:38:20.0765 1836 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
19:38:20.0765 1836 RpcSs - ok
19:38:20.0828 1836 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
19:38:20.0906 1836 RSVP - ok
19:38:21.0062 1836 [ 7988BFE882BCD94199225B5C3482F1BD ] RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
19:38:21.0062 1836 RTL8023xp - ok
19:38:21.0156 1836 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
19:38:21.0171 1836 SamSs - ok
19:38:21.0203 1836 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
19:38:21.0203 1836 SCardSvr - ok
19:38:21.0718 1836 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
19:38:21.0890 1836 Schedule - ok
19:38:22.0125 1836 [ 8D04819A3CE51B9EB47E5689B44D43C4 ] sdbus C:\WINDOWS\system32\DRIVERS\sdbus.sys
19:38:22.0171 1836 sdbus - ok
19:38:25.0437 1836 [ 95AA9E165C7DE1B64A11E8B18E91E499 ] SDScannerService C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
19:38:25.0453 1836 SDScannerService - ok
19:38:27.0546 1836 [ D31398D4BB4907B517B6E784C2100C4A ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
19:38:27.0546 1836 SDUpdateService - ok
19:38:27.0671 1836 [ 6AE8E702D1027A9627DDE2B77BB9992B ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
19:38:27.0703 1836 SDWSCService - ok
19:38:28.0015 1836 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:38:28.0062 1836 Secdrv - ok
19:38:28.0328 1836 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
19:38:28.0390 1836 seclogon - ok
19:38:28.0500 1836 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
19:38:28.0531 1836 SENS - ok
19:38:28.0656 1836 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\drivers\Serial.sys
19:38:28.0687 1836 Serial - ok
19:38:28.0937 1836 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
19:38:29.0015 1836 Sfloppy - ok
19:38:30.0000 1836 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
19:38:30.0328 1836 SharedAccess - ok
19:38:31.0031 1836 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
19:38:31.0031 1836 ShellHWDetection - ok
19:38:31.0156 1836 Simbad - ok
19:38:31.0328 1836 [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp C:\WINDOWS\system32\DRIVERS\sisagp.sys
19:38:31.0359 1836 sisagp - ok
19:38:34.0250 1836 [ D0776778A9FC5E37F2E9EB21FC8A9709 ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
19:38:34.0937 1836 Skype C2C Service - ok
19:38:35.0171 1836 [ 3E587DBBDFF938DDE5D4CE4047BE9041 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
19:38:35.0187 1836 SkypeUpdate - ok
19:38:35.0296 1836 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
19:38:35.0296 1836 SLIP - ok
19:38:37.0000 1836 [ 0676A15103FDD5BD9B8A6C4D76F41C00 ] SNP2STD C:\WINDOWS\system32\DRIVERS\snp2sxp.sys
19:38:37.0578 1836 SNP2STD - ok
19:38:37.0718 1836 [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow C:\WINDOWS\system32\DRIVERS\sparrow.sys
19:38:37.0718 1836 Sparrow - ok
19:38:37.0828 1836 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
19:38:37.0828 1836 splitter - ok
19:38:37.0906 1836 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
19:38:37.0921 1836 Spooler - ok
19:38:37.0968 1836 [ EDAEF346DE209F040D0C9F9EFFEDF084 ] SpyEmrg C:\WINDOWS\system32\Drivers\spyemrg.sys
19:38:37.0968 1836 SpyEmrg - ok
19:38:38.0031 1836 [ 5A1C84D84A07A3B6D389EBA12C345EA4 ] SpyEmrgAccess C:\WINDOWS\system32\Drivers\spyemrg_access.sys
19:38:38.0031 1836 SpyEmrgAccess - ok
19:38:38.0062 1836 [ 9E91568FEEB1C78F2F271FBC0F639365 ] SpyEmrgGuard C:\WINDOWS\system32\Drivers\spyemrg_guard.sys
19:38:38.0062 1836 SpyEmrgGuard - ok
19:38:38.0578 1836 [ 5EB54B10F521F7FD7807BD3CB8CB25BB ] SpyEmrgSrv C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
19:38:38.0671 1836 SpyEmrgSrv - ok
19:38:38.0875 1836 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
19:38:38.0890 1836 sr - ok
19:38:38.0984 1836 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
19:38:39.0015 1836 srservice - ok
19:38:39.0078 1836 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
19:38:39.0109 1836 Srv - ok
19:38:39.0187 1836 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
19:38:39.0203 1836 SSDPSRV - ok
19:38:39.0328 1836 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
19:38:39.0359 1836 stisvc - ok
19:38:39.0421 1836 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
19:38:39.0421 1836 streamip - ok
19:38:39.0468 1836 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
19:38:39.0468 1836 swenum - ok
19:38:39.0531 1836 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
19:38:39.0531 1836 swmidi - ok
19:38:39.0609 1836 SwPrv - ok
19:38:39.0656 1836 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
19:38:39.0656 1836 symc810 - ok
19:38:39.0687 1836 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
19:38:39.0687 1836 symc8xx - ok
19:38:39.0703 1836 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
19:38:39.0703 1836 sym_hi - ok
19:38:39.0718 1836 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
19:38:39.0734 1836 sym_u3 - ok
19:38:39.0796 1836 [ 9D3611FA3BCCA8090FDD1A45BD1EA586 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
19:38:39.0796 1836 SynTP - ok
19:38:39.0859 1836 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
19:38:39.0875 1836 sysaudio - ok
19:38:39.0968 1836 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
19:38:39.0968 1836 SysmonLog - ok
19:38:40.0078 1836 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
19:38:40.0140 1836 TapiSrv - ok
19:38:40.0296 1836 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:38:40.0328 1836 Tcpip - ok
19:38:40.0343 1836 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
19:38:40.0359 1836 TDPIPE - ok
19:38:40.0406 1836 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
19:38:40.0406 1836 TDTCP - ok
19:38:40.0437 1836 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
19:38:40.0453 1836 TermDD - ok
19:38:40.0562 1836 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
19:38:40.0578 1836 TermService - ok
19:38:40.0640 1836 [ E70124B772AD84B6BC1E3A92A59D1799 ] tffsport C:\WINDOWS\system32\DRIVERS\tffsport.sys
19:38:40.0640 1836 tffsport - ok
19:38:40.0718 1836 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
19:38:40.0718 1836 Themes - ok
19:38:40.0734 1836 [ FD4FD7D6FDA5C019ED86025D7BE1510F ] TosIde C:\WINDOWS\system32\DRIVERS\toside.sys
19:38:40.0750 1836 TosIde - ok
19:38:40.0812 1836 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
19:38:40.0812 1836 TrkWks - ok
19:38:40.0859 1836 [ E0C67BE430C6DE490D6CCAECFA071F9E ] UBHelper C:\WINDOWS\system32\drivers\UBHelper.sys
19:38:40.0875 1836 UBHelper - ok
19:38:40.0906 1836 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
19:38:40.0921 1836 Udfs - ok
19:38:40.0968 1836 UIUSys - ok
19:38:40.0984 1836 [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra C:\WINDOWS\system32\DRIVERS\ultra.sys
19:38:41.0000 1836 ultra - ok
19:38:41.0109 1836 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
19:38:41.0156 1836 Update - ok
19:38:41.0250 1836 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
19:38:41.0265 1836 upnphost - ok
19:38:41.0343 1836 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
19:38:41.0343 1836 UPS - ok
19:38:41.0406 1836 [ AF9388E736AF0C325067F05EDC350010 ] usbbus C:\WINDOWS\system32\DRIVERS\lgusbbus.sys
19:38:41.0421 1836 usbbus - ok
19:38:41.0468 1836 [ BFFD9F120CC63BCBAA3D840F3EEF9F79 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:38:41.0484 1836 usbccgp - ok
19:38:41.0500 1836 [ AE30EA96E60E823C7B525DA356283AE8 ] UsbDiag C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys
19:38:41.0500 1836 UsbDiag - ok
19:38:41.0531 1836 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:38:41.0531 1836 usbehci - ok
19:38:41.0578 1836 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:38:41.0578 1836 usbhub - ok
19:38:41.0609 1836 [ 46AC66DF3D6EFE81F69BEA823A53AAB5 ] USBModem C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys
19:38:41.0609 1836 USBModem - ok
19:38:41.0640 1836 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
19:38:41.0656 1836 usbohci - ok
19:38:41.0687 1836 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:38:41.0687 1836 usbscan - ok
19:38:41.0750 1836 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:38:41.0750 1836 USBSTOR - ok
19:38:41.0796 1836 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
19:38:41.0796 1836 VgaSave - ok
19:38:41.0828 1836 [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp C:\WINDOWS\system32\DRIVERS\viaagp.sys
19:38:41.0828 1836 viaagp - ok
19:38:41.0859 1836 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
19:38:41.0859 1836 ViaIde - ok
19:38:41.0875 1836 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
19:38:41.0875 1836 VolSnap - ok
19:38:41.0968 1836 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
19:38:42.0031 1836 VSS - ok
19:38:42.0078 1836 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
19:38:42.0109 1836 W32Time - ok
19:38:42.0140 1836 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:38:42.0140 1836 Wanarp - ok
19:38:42.0265 1836 [ 4769596D7CC0F5FA447D2BABC239672A ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
19:38:42.0281 1836 Wdf01000 - ok
19:38:42.0375 1836 WDICA - ok
19:38:42.0453 1836 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
19:38:42.0453 1836 wdmaud - ok
19:38:42.0531 1836 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
19:38:42.0531 1836 WebClient - ok
19:38:42.0640 1836 [ 7FE372B1AB60736CC67E8EB6F1FB1F5B ] winachsf C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
19:38:42.0687 1836 winachsf - ok
19:38:42.0796 1836 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
19:38:42.0812 1836 winmgmt - ok
19:38:42.0875 1836 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
19:38:42.0890 1836 WmdmPmSN - ok
19:38:42.0953 1836 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
19:38:42.0953 1836 WmiAcpi - ok
19:38:42.0984 1836 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:38:43.0000 1836 WmiApSrv - ok
19:38:43.0218 1836 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
19:38:43.0281 1836 WMPNetworkSvc - ok
19:38:43.0328 1836 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
19:38:43.0328 1836 WpdUsb - ok
19:38:43.0625 1836 [ B800EEC15851597405784126C407188C ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:38:43.0703 1836 WPFFontCache_v0400 - ok
19:38:43.0796 1836 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
19:38:43.0812 1836 wscsvc - ok
19:38:43.0859 1836 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
19:38:43.0859 1836 WSTCODEC - ok
19:38:43.0937 1836 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
19:38:43.0953 1836 wuauserv - ok
19:38:44.0015 1836 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
19:38:44.0031 1836 WudfPf - ok
19:38:44.0062 1836 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
19:38:44.0062 1836 WudfRd - ok
19:38:44.0125 1836 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
19:38:44.0140 1836 WudfSvc - ok
19:38:44.0281 1836 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
19:38:44.0312 1836 WZCSVC - ok
19:38:44.0390 1836 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
19:38:44.0421 1836 xmlprov - ok
19:38:44.0437 1836 ================ Scan global ===============================
19:38:44.0546 1836 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
19:38:44.0718 1836 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
19:38:44.0859 1836 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
19:38:45.0031 1836 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
19:38:45.0046 1836 [Global] - ok
19:38:45.0046 1836 ================ Scan MBR ==================================
19:38:45.0078 1836 [ 99852D5C3A78447C3D6D82B6155FE848 ] \Device\Harddisk0\DR0
19:38:48.0234 1836 \Device\Harddisk0\DR0 - ok
19:38:48.0234 1836 ================ Scan VBR ==================================
19:38:48.0265 1836 [ D1DDB0828C266DED65C547D8E8864DD8 ] \Device\Harddisk0\DR0\Partition1
19:38:48.0281 1836 \Device\Harddisk0\DR0\Partition1 - ok
19:38:48.0296 1836 [ ABDFAFACCB9ECAE93F573B83640E9480 ] \Device\Harddisk0\DR0\Partition2
19:38:48.0312 1836 \Device\Harddisk0\DR0\Partition2 - ok
19:38:48.0312 1836 ============================================================
19:38:48.0312 1836 Scan finished
19:38:48.0312 1836 ============================================================
19:38:48.0343 1828 Detected object count: 0
19:38:48.0343 1828 Actual detected object count: 0

[memphisto]

Jak je na tom PC? Vypadá to čistě. Dej ještě nový HJT na dočištění...

[Milo1]

Přijde mi, že je to stejné ,dnes naběhnutí PC cca 6min. Při spuštění Firefox s několika záložkami jsem si mohl odskočit na kávu.Když pouštím správce úloh, - výkon - tak křivka má neustálý výkyv až do 45% (stále pracuje).

[memphisto]

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je oznaèen pro odstranění, stačí restartovat počítač.

[Milo1]

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0405.exe
c:\windows\system32\SETE0.tmp
c:\windows\system32\SETE4.tmp
c:\windows\system32\SETE5.tmp
c:\windows\system32\SETEC.tmp
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-07-28 do 2013-08-31 )))))))))))))))))))))))))))))))
.
.
2013-08-26 19:17 . 2013-08-26 19:17 -------- d-----w- c:\windows\ERUNT
2013-08-26 19:10 . 2013-08-26 19:10 -------- d-----w- c:\windows\snack
2013-08-26 16:49 . 2013-08-26 16:49 -------- d-----w- C:\AdwCleaner
2013-08-26 16:07 . 2013-08-26 16:07 -------- d-----w- c:\documents and settings\ja\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-08-26 16:06 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-08-26 15:12 . 2013-08-26 15:12 388096 ----a-r- c:\documents and settings\ja\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-08-26 15:12 . 2013-08-26 15:12 -------- d-----w- c:\program files\Hijact
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\ja\Data aplikací\Spy Emergency
2013-08-24 10:50 . 2011-04-21 09:31 20056 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2013-08-24 10:50 . 2011-04-21 09:31 16216 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2013-08-24 10:50 . 2011-04-21 09:31 14168 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NETGATE
2013-08-24 10:49 . 2013-08-24 10:50 -------- d-----w- c:\program files\NETGATE
2013-08-24 09:11 . 2013-08-24 09:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-08-24 09:10 . 2009-01-25 11:14 15224 ----a-w- c:\windows\system32\sdnclean.exe
2013-08-24 09:10 . 2013-08-24 09:10 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2013-08-23 16:33 . 2013-08-23 16:33 -------- d-----w- C:\Firefox_zaloha
2013-08-23 08:43 . 2013-08-23 08:43 -------- d-----w- c:\program files\CCleaner
2013-08-14 15:23 . 2013-08-14 15:23 -------- d-----w- c:\windows\system32\MRT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-21 23:17 . 2012-11-23 19:01 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-21 23:17 . 2012-11-23 19:01 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-02 23:48 . 2006-10-18 19:47 1543680 ------w- c:\windows\system32\wmvdecod.dll
2013-07-26 02:49 . 2006-01-09 18:08 920064 ----a-w- c:\windows\system32\wininet.dll
2013-07-26 02:49 . 2004-08-18 18:00 43520 ------w- c:\windows\system32\licmgr10.dll
2013-07-26 02:49 . 2004-08-18 18:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-07-25 15:53 . 2004-08-18 18:00 385024 ------w- c:\windows\system32\html.iec
2013-07-10 10:37 . 2004-08-18 18:00 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-06 21:05 . 2013-03-11 16:10 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-06 21:05 . 2012-11-18 19:39 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-06 21:05 . 2012-11-18 19:38 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-04 07:34 . 2005-09-29 18:30 2195712 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 07:34 . 2005-09-29 18:30 2072320 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-05 09:08 . 2004-08-18 18:00 1876736 ----a-w- c:\windows\system32\win32k.sys
2013-06-04 07:23 . 2004-08-18 18:00 563712 ----a-w- c:\windows\system32\qedit.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2006-08-16 09:20 69632 ----a-w- c:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
2006-05-10 09:12 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
2006-08-16 09:20 53248 ------w- c:\program files\Realtek\InstallShield\AzMixerSel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:22 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2006-06-01 12:40 413696 ----a-w- c:\acer\Empowering Technology\eRecovery\eRAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
2013-03-27 14:18 1098072 ----a-w- d:\program files\Garmin\Express Tray\ExpressTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2004-08-18 18:00 208952 ----a-w- c:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2004-08-18 18:00 59392 ----a-w- c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI]
2006-05-15 09:15 45056 ----a-w- c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2006-08-16 09:23 16248320 ----a-w- c:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
2013-05-16 08:59 3830224 ----a-w- c:\program files\Spybot - Search & Destroy 2\SDTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2006-08-16 09:21 2879488 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2std]
2006-08-09 14:18 675840 ----a-w- c:\windows\vsnp2std.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyEmergency]
2013-07-31 05:54 2483512 ----a-w- c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-08-15 18:34 766041 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"CyberLink Media Library Service"=2 (0x2)
"CLSched"=2 (0x2)
"CLCapSvc"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"=
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [11.3.2013 18:10 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [11.3.2013 18:10 175176]
R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [27.12.2012 22:41 149376]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.11.2012 21:38 770344]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.11.2012 21:39 369584]
R1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\drivers\spyemrg.sys [24.8.2013 12:50 14168]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.11.2012 21:39 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [11.3.2013 18:10 66336]
R2 Garmin Core Update Service;Garmin Core Update Service;d:\program files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [27.3.2013 16:17 185688]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [7.12.2012 18:27 167424]
R2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [24.8.2013 12:50 2438896]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [26.8.2013 18:06 22856]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\drivers\spyemrg_guard.sys [24.8.2013 12:50 16216]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [26.8.2013 18:06 701512]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files\Spybot - Search & Destroy 2\SDFSSvc.exe [24.8.2013 11:10 1817560]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [24.8.2013 11:10 1033688]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [24.8.2013 11:10 171928]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [14.8.2013 11:10 3291008]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [21.6.2013 9:53 162408]
S3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\drivers\lgandbus.sys [26.1.2013 1:21 14336]
S3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\drivers\lganddiag.sys [26.1.2013 1:21 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\drivers\lgandgps.sys [26.1.2013 1:21 20096]
S3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\drivers\lgandmodem.sys [26.1.2013 1:21 25088]
S3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\drivers\lgandnetdiag.sys [26.1.2013 1:21 23040]
S3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\drivers\lgandnetmodem.sys [26.1.2013 1:21 27776]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\lgandadb.sys [26.1.2013 1:21 25728]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [30.4.2013 17:16 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [7.12.2012 18:27 21248]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\drivers\spyemrg_access.sys [24.8.2013 12:50 20056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-30 15:18 1177552 ----a-w- c:\program files\Google\Chrome\Application\29.0.1547.62\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-08-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-23 23:17]
.
2013-08-31 c:\windows\Tasks\GlaryInitialize.job
- d:\program files\Glary Utilities\initialize.exe [2013-04-05 11:10]
.
2013-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-08-31 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-11-18 08:58]
.
2013-08-31 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDUpdate.exe [2013-08-24 08:58]
.
2013-08-24 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDImmunize.exe [2013-08-24 08:57]
.
2013-08-24 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDScan.exe [2013-08-24 08:58]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = localhost:21320
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
TCP: DhcpNameServer = 8.8.8.8 192.168.1.11
FF - ProfilePath - c:\documents and settings\ja\Data aplikací\Mozilla\Firefox\Profiles\t8s5f3ii.default\
FF - prefs.js: browser.search.selectedEngine - Glary Search
FF - prefs.js: browser.startup.homepage - www.google.com
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Notify-SDWinLogon - SDWinLogon.dll
AddRemove-Glarysoft Toolbar - c:\program files\Glarysoft Toolbar\uninstaller.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-08-31 22:56
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(624)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2013-08-31 22:58:45
ComboFix-quarantined-files.txt 2013-08-31 20:58
.
Před spuštěním: Volných bajtů: 22 506 668 032
Po spuštění: Volných bajtů: 22 722 281 472
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
.
- - End Of File - - C1C4D8D175623811854B67819C768C28
99852D5C3A78447C3D6D82B6155FE848

[jaro3]

Log není celý , chybí začátek.

Odinstaluj:
Spybot - Search & Destroy 2
Spy Emergency nebo AVAST

Pak nový Combofix.

[Milo1]

ComboFix 13-08-31.01 - ja 02.09.2013 22:32:11.2.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1278.804 [GMT 2:00]
Spuštěný z: c:\documents and settings\ja\Dokumenty\Stažené soubory\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-02 do 2013-09-02 )))))))))))))))))))))))))))))))
.
.
2013-08-26 19:17 . 2013-08-26 19:17 -------- d-----w- c:\windows\ERUNT
2013-08-26 19:10 . 2013-08-26 19:10 -------- d-----w- c:\windows\snack
2013-08-26 16:49 . 2013-08-26 16:49 -------- d-----w- C:\AdwCleaner
2013-08-26 16:07 . 2013-08-26 16:07 -------- d-----w- c:\documents and settings\ja\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-08-26 16:06 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-08-26 15:12 . 2013-08-26 15:12 388096 ----a-r- c:\documents and settings\ja\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-08-26 15:12 . 2013-08-26 15:12 -------- d-----w- c:\program files\Hijact
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\ja\Data aplikací\Spy Emergency
2013-08-24 10:50 . 2011-04-21 09:31 20056 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2013-08-24 10:50 . 2011-04-21 09:31 16216 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2013-08-24 10:50 . 2011-04-21 09:31 14168 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NETGATE
2013-08-24 10:49 . 2013-08-24 10:50 -------- d-----w- c:\program files\NETGATE
2013-08-24 09:11 . 2013-08-24 09:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-08-24 09:10 . 2009-01-25 11:14 15224 ----a-w- c:\windows\system32\sdnclean.exe
2013-08-24 09:10 . 2013-08-24 09:10 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2013-08-23 16:33 . 2013-08-23 16:33 -------- d-----w- C:\Firefox_zaloha
2013-08-23 08:43 . 2013-08-23 08:43 -------- d-----w- c:\program files\CCleaner
2013-08-14 15:23 . 2013-08-14 15:23 -------- d-----w- c:\windows\system32\MRT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-21 23:17 . 2012-11-23 19:01 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-21 23:17 . 2012-11-23 19:01 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-02 23:48 . 2006-10-18 19:47 1543680 ------w- c:\windows\system32\wmvdecod.dll
2013-07-26 02:49 . 2006-01-09 18:08 920064 ----a-w- c:\windows\system32\wininet.dll
2013-07-26 02:49 . 2004-08-18 18:00 43520 ------w- c:\windows\system32\licmgr10.dll
2013-07-26 02:49 . 2004-08-18 18:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-07-25 15:53 . 2004-08-18 18:00 385024 ------w- c:\windows\system32\html.iec
2013-07-10 10:37 . 2004-08-18 18:00 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-06 21:05 . 2013-03-11 16:10 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-06 21:05 . 2012-11-18 19:39 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-06 21:05 . 2012-11-18 19:38 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-04 07:34 . 2005-09-29 18:30 2195712 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 07:34 . 2005-09-29 18:30 2072320 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-05 09:08 . 2004-08-18 18:00 1876736 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2006-08-16 09:20 69632 ----a-w- c:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
2006-05-10 09:12 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
2006-08-16 09:20 53248 ------w- c:\program files\Realtek\InstallShield\AzMixerSel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:22 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2006-06-01 12:40 413696 ----a-w- c:\acer\Empowering Technology\eRecovery\eRAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
2013-03-27 14:18 1098072 ----a-w- d:\program files\Garmin\Express Tray\ExpressTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2004-08-18 18:00 208952 ----a-w- c:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2004-08-18 18:00 59392 ----a-w- c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI]
2006-05-15 09:15 45056 ----a-w- c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2006-08-16 09:23 16248320 ----a-w- c:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
2013-05-16 08:59 3830224 ----a-w- c:\program files\Spybot - Search & Destroy 2\SDTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2006-08-16 09:21 2879488 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2std]
2006-08-09 14:18 675840 ----a-w- c:\windows\vsnp2std.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyEmergency]
2013-07-31 05:54 2483512 ----a-w- c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-08-15 18:34 766041 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"CyberLink Media Library Service"=2 (0x2)
"CLSched"=2 (0x2)
"CLCapSvc"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"=
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [11.3.2013 18:10 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [11.3.2013 18:10 175176]
R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [27.12.2012 22:41 149376]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.11.2012 21:38 770344]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.11.2012 21:39 369584]
R1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\drivers\spyemrg.sys [24.8.2013 12:50 14168]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.11.2012 21:39 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [11.3.2013 18:10 66336]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [7.12.2012 18:27 167424]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files\Spybot - Search & Destroy 2\SDFSSvc.exe [24.8.2013 11:10 1817560]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [24.8.2013 11:10 1033688]
R2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [24.8.2013 12:50 2438896]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [26.8.2013 18:06 22856]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\drivers\spyemrg_guard.sys [24.8.2013 12:50 16216]
S2 Garmin Core Update Service;Garmin Core Update Service;d:\program files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [27.3.2013 16:17 185688]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [26.8.2013 18:06 701512]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [24.8.2013 11:10 171928]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [14.8.2013 11:10 3291008]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [21.6.2013 9:53 162408]
S3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\drivers\lgandbus.sys [26.1.2013 1:21 14336]
S3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\drivers\lganddiag.sys [26.1.2013 1:21 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\drivers\lgandgps.sys [26.1.2013 1:21 20096]
S3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\drivers\lgandmodem.sys [26.1.2013 1:21 25088]
S3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\drivers\lgandnetdiag.sys [26.1.2013 1:21 23040]
S3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\drivers\lgandnetmodem.sys [26.1.2013 1:21 27776]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\lgandadb.sys [26.1.2013 1:21 25728]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [30.4.2013 17:16 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [7.12.2012 18:27 21248]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\drivers\spyemrg_access.sys [24.8.2013 12:50 20056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-30 15:18 1177552 ----a-w- c:\program files\Google\Chrome\Application\29.0.1547.62\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-09-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-23 23:17]
.
2013-09-02 c:\windows\Tasks\GlaryInitialize.job
- d:\program files\Glary Utilities\initialize.exe [2013-04-05 11:10]
.
2013-09-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-09-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-09-02 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-11-18 08:58]
.
2013-09-02 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDUpdate.exe [2013-08-24 08:58]
.
2013-08-24 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDImmunize.exe [2013-08-24 08:57]
.
2013-08-24 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDScan.exe [2013-08-24 08:58]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = localhost:21320
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
FF - ProfilePath - c:\documents and settings\ja\Data aplikací\Mozilla\Firefox\Profiles\t8s5f3ii.default\
FF - prefs.js: browser.search.selectedEngine - Glary Search
FF - prefs.js: browser.startup.homepage - http://www.google.com
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-09-02 22:38
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(632)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(3776)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
.
Celkový čas: 2013-09-02 22:39:59
ComboFix-quarantined-files.txt 2013-09-02 20:39
ComboFix2.txt 2013-08-31 20:58
.
Před spuštěním: Volných bajtů: 22 370 910 208
Po spuštění: Volných bajtů: 22 360 162 304
.
- - End Of File - - D9008E50DBFB0B89B7CA1D9AF2E84E7F
99852D5C3A78447C3D6D82B6155FE848

[memphisto]

Odkud že máš ten Combofix spouštět? Takhle nebudou skripty fungovat, takže znovu a spouštět z Plochy!

[Milo1]

ComboFix 13-08-31.01 - ja 04.09.2013 18:33:53.3.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1278.719 [GMT 2:00]
Spuštěný z: c:\documents and settings\ja\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-04 do 2013-09-04 )))))))))))))))))))))))))))))))
.
.
2013-09-04 15:25 . 2006-10-26 17:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2013-09-04 15:25 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2013-09-04 15:23 . 2013-09-04 15:23 -------- d-----w- c:\program files\Microsoft Works
2013-09-04 15:18 . 2013-09-04 15:18 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2013-09-04 15:17 . 2013-09-04 15:17 -------- d-----w- c:\windows\SHELLNEW
2013-09-04 15:16 . 2013-09-04 15:16 -------- d-----r- C:\MSOCache
2013-08-26 19:17 . 2013-08-26 19:17 -------- d-----w- c:\windows\ERUNT
2013-08-26 19:10 . 2013-08-26 19:10 -------- d-----w- c:\windows\snack
2013-08-26 16:49 . 2013-08-26 16:49 -------- d-----w- C:\AdwCleaner
2013-08-26 16:07 . 2013-08-26 16:07 -------- d-----w- c:\documents and settings\ja\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-08-26 16:06 . 2013-08-26 16:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-08-26 16:06 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-08-26 15:12 . 2013-08-26 15:12 388096 ----a-r- c:\documents and settings\ja\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-08-26 15:12 . 2013-08-26 15:12 -------- d-----w- c:\program files\Hijact
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\ja\Data aplikací\Spy Emergency
2013-08-24 10:50 . 2011-04-21 09:31 20056 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2013-08-24 10:50 . 2011-04-21 09:31 16216 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2013-08-24 10:50 . 2011-04-21 09:31 14168 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2013-08-24 10:50 . 2013-08-24 10:50 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NETGATE
2013-08-24 10:49 . 2013-08-24 10:50 -------- d-----w- c:\program files\NETGATE
2013-08-24 09:11 . 2013-08-24 09:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-08-24 09:10 . 2009-01-25 11:14 15224 ----a-w- c:\windows\system32\sdnclean.exe
2013-08-24 09:10 . 2013-08-24 09:10 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2013-08-23 16:33 . 2013-08-23 16:33 -------- d-----w- C:\Firefox_zaloha
2013-08-23 08:43 . 2013-08-23 08:43 -------- d-----w- c:\program files\CCleaner
2013-08-14 15:23 . 2013-08-14 15:23 -------- d-----w- c:\windows\system32\MRT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-21 23:17 . 2012-11-23 19:01 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-21 23:17 . 2012-11-23 19:01 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-02 23:48 . 2006-10-18 19:47 1543680 ------w- c:\windows\system32\wmvdecod.dll
2013-07-26 02:49 . 2006-01-09 18:08 920064 ----a-w- c:\windows\system32\wininet.dll
2013-07-26 02:49 . 2004-08-18 18:00 43520 ------w- c:\windows\system32\licmgr10.dll
2013-07-26 02:49 . 2004-08-18 18:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-07-25 15:53 . 2004-08-18 18:00 385024 ------w- c:\windows\system32\html.iec
2013-07-10 10:37 . 2004-08-18 18:00 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-06 21:05 . 2013-03-11 16:10 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-06 21:05 . 2012-11-18 19:39 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-06 21:05 . 2012-11-18 19:38 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-04 07:34 . 2005-09-29 18:30 2195712 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 07:34 . 2005-09-29 18:30 2072320 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2006-08-16 09:20 69632 ----a-w- c:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
2006-05-10 09:12 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
2006-08-16 09:20 53248 ------w- c:\program files\Realtek\InstallShield\AzMixerSel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:22 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2006-06-01 12:40 413696 ----a-w- c:\acer\Empowering Technology\eRecovery\eRAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
2013-03-27 14:18 1098072 ----a-w- d:\program files\Garmin\Express Tray\ExpressTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2004-08-18 18:00 208952 ----a-w- c:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2004-08-18 18:00 59392 ----a-w- c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI]
2006-05-15 09:15 45056 ----a-w- c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-08-18 18:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2006-08-16 09:23 16248320 ----a-w- c:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
2013-05-16 08:59 3830224 ----a-w- c:\program files\Spybot - Search & Destroy 2\SDTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2006-08-16 09:21 2879488 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2std]
2006-08-09 14:18 675840 ----a-w- c:\windows\vsnp2std.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyEmergency]
2013-07-31 05:54 2483512 ----a-w- c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-08-15 18:34 766041 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"CyberLink Media Library Service"=2 (0x2)
"CLSched"=2 (0x2)
"CLCapSvc"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\groove.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [11.3.2013 18:10 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [11.3.2013 18:10 175176]
R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [27.12.2012 22:41 149376]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.11.2012 21:38 770344]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.11.2012 21:39 369584]
R1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\drivers\spyemrg.sys [24.8.2013 12:50 14168]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.11.2012 21:39 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [11.3.2013 18:10 66336]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [7.12.2012 18:27 167424]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files\Spybot - Search & Destroy 2\SDFSSvc.exe [24.8.2013 11:10 1817560]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [24.8.2013 11:10 1033688]
R2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [24.8.2013 12:50 2438896]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [26.8.2013 18:06 22856]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\drivers\spyemrg_guard.sys [24.8.2013 12:50 16216]
S2 Garmin Core Update Service;Garmin Core Update Service;d:\program files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [27.3.2013 16:17 185688]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [26.8.2013 18:06 701512]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [24.8.2013 11:10 171928]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [14.8.2013 11:10 3291008]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [21.6.2013 9:53 162408]
S3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\drivers\lgandbus.sys [26.1.2013 1:21 14336]
S3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\drivers\lganddiag.sys [26.1.2013 1:21 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\drivers\lgandgps.sys [26.1.2013 1:21 20096]
S3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\drivers\lgandmodem.sys [26.1.2013 1:21 25088]
S3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\drivers\lgandnetdiag.sys [26.1.2013 1:21 23040]
S3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\drivers\lgandnetmodem.sys [26.1.2013 1:21 27776]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\lgandadb.sys [26.1.2013 1:21 25728]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [30.4.2013 17:16 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [7.12.2012 18:27 21248]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\drivers\spyemrg_access.sys [24.8.2013 12:50 20056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-30 15:18 1177552 ----a-w- c:\program files\Google\Chrome\Application\29.0.1547.62\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-09-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-23 23:17]
.
2013-09-04 c:\windows\Tasks\GlaryInitialize.job
- d:\program files\Glary Utilities\initialize.exe [2013-04-05 11:10]
.
2013-09-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-09-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 09:21]
.
2013-09-03 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-11-18 08:58]
.
2013-09-04 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDUpdate.exe [2013-08-24 08:58]
.
2013-08-24 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDImmunize.exe [2013-08-24 08:57]
.
2013-08-24 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDScan.exe [2013-08-24 08:58]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = localhost:21320
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\ja\Data aplikací\Mozilla\Firefox\Profiles\t8s5f3ii.default\
FF - prefs.js: browser.search.selectedEngine - Glary Search
FF - prefs.js: browser.startup.homepage - www.google.com
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-09-04 18:41
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(624)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(1292)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Microsoft Office\Office12\1029\GrooveIntlResource.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
.
Celkový čas: 2013-09-04 18:43:18
ComboFix-quarantined-files.txt 2013-09-04 16:43
ComboFix2.txt 2013-09-02 20:40
ComboFix3.txt 2013-08-31 20:58
.
Před spuštěním: Volných bajtů: 20 998 356 992
Po spuštění: Volných bajtů: 20 985 511 936
.
- - End Of File - - 6DA759D4A1EEBB843E098390155F5299
99852D5C3A78447C3D6D82B6155FE848

[jaro3]

Odinstaluj :
SpyEmergency
http://www.uninstallhelp.com/Uninstall- ... 93114.html

SpyBot
http://www.slideshare.net/CatherineCole ... ch-destroy
http://www.safer-networking.org/faq/how-to-uninstall-2/

Pak nový Combofix.