PC-HELP.CZ

Ahoj, prosím o kontrolu logu protože mám PC poslední dobou velmi zpomalené, okna se načítají déle, když chci něco vyhodit do koše čekám, při vysýpání taky tak. Ale nejvíc mě štve že nemůžu přehrávat videa na netu, i když si nastavím nejhorší kvalitu tak se seká zvuk i obraz. Dále když jsem sledoval CPU tak jednou využívá 90% za chvilku zase 10% což asi není normální. Díky za zkontrolování.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:32:13, on 7.1.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Zkuřka\Plocha\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\ADVANC~2\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 2992807093
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 2993399406
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\WINDOWS\system32\IProsetMonitor.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 5982 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Malwarebytes Anti-Malware (PRO) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.07.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Zkuřka :: WEED [administrátor]

Ochrana: Zakázána

7.1.2013 21:46:35
mbam-log-2013-01-07 (21-46-35).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 191620
Uplynulý čas: 32 minut, 41 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Stáhni si Memtest:

Do políčka vlož největší velikost Tvé jednotlivé paměti RAM (256,512 nebo 1024,2048) dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.


Je třeba zkontrolovat HDD na chyby , zkusit jeho defragmentaci ..

Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.

Memtest jsem spouštěl přes mechaniku nechal jsem ho 3x projít a negativní.
Na kontrolu chyb HDD používám Advanced SystemCare, ten my spouští ty systémové kontroly (Kontrola disku Místní disk (C:) ale udělal jsem i systémovou defragmentaci. Posílám z toho i log. Jinak vím že mám u HDD docela vyšší teplotu ale nemám kam do té bedny dát ještě větrák.

Svazek (C:)
Velikost svazku = 74,52 GB
Velikost clusteru = 4 kB
Využité místo = 16,89 GB
Volné místo = 57,63 GB
Procenta volného místa = 77 %

Fragmentace svazku
Celková fragmentace = 0 %
Fragmentace souborů = 0 %
Fragmentace volného místa = 0 %

Fragmentace souborů
Celkový počet souborů = 41 033
Průměrná velikost souboru = 476 kB
Celkový počet fragmentovaných souborů = 1
Celkový počet přebytečných fragmentů = 184
Průměrný počet fragmentů na soubor = 1,00

Fragmentace stránkového souboru
Velikost stránkového souboru = 1,13 GB
Celkový počet fragmentů = 1

Fragmentace složek
Celkový počet složek = 4 883
Počet fragmentovaných složek = 1
Počet přebytečných fragmentů složek = 0

Fragmentace hlavní tabulky souborů (MFT)
Celková velikost tabulky MFT = 55 MB
Počet záznamů tabulky MFT = 46 043
Procento využití tabulky MFT = 81 %
Celkový počet fragmentů tabulky MFT = 5

--------------------------------------------------------------------------------
Fragmenty Velikost souboruSoubory, které nelze defragmentovat
Žádné

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2013/01/08 12:28:04

-- Controller Map ----------------------------------------------------------
+ Řadič úložiště Intel(R) 82801DB v režimu Ultra ATA - 24CB [ATA]
+ Primární kanál IDE (0)
- LITEON CD-ROM LTN526
- ST380011A
- Sekundární kanál IDE (1)

-- Disk List ---------------------------------------------------------------
(1) ST380011A : 80,0 GB [0/0/0, pd1] - st
(2) ST2000DL003-9VT166 : 2000,3 GB [1/X/X, sa1] (V=18A5, P=0216) - st

----------------------------------------------------------------------------
(1) ST380011A
----------------------------------------------------------------------------
Model : ST380011A
Firmware : 3.06
Serial Number : 5JV5QS8G
Disk Size : 80,0 GB (8,4/80,0/80,0)
Buffer Size : 2048 KB
Queue Depth : 1
# of Sectors : 156301488
Rotation Rate : Neznámy údaj
Interface : Parallel ATA
Major Version : ATA/ATAPI-6
Minor Version : ATA/ATAPI-6 T13 1410D version 2
Transfer Mode : Ultra DMA/100
Power On Hours : 1825 hod.
Power On Count : 759 krát
Temparature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 _69 _63 __6 000000411761 Počet chyb čtení
03 _99 _98 __0 000000000000 Čas na roztočení ploten
04 100 100 _20 000000000174 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _81 _60 _30 000009213093 Počet chybných hledání
09 _98 _98 __0 000000000721 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 _20 0000000002F7 Počet cyklů zapnutí zařízení
C2 _36 _53 __0 000000000024 Teplota
C3 _69 _62 __0 000000411761 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 __0 000000000000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 354A 5635 5153 3847 2020 2020 2020 2020 2020 2020
020: 0000 1000 0004 332E 3036 2020 2020 5354 3338 3030
030: 3131 4120 2020 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 0000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: F8B0 0950 0000 0007 0003 0078 0078 00F0 0078 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 007E 001B 346B 7D01 4003 3C01 3C01 4003 203F 0000
090: 0000 FEFE 0000 607B 8000 0000 0000 0000 0000 0000
100: F8B0 0950 0000 0000 0000 0000 0000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 F8B0
130: 0950 F8B0 0950 2020 0002 0000 0000 8A00 3C06 3C0A
140: FFFF 07C6 0100 0800 09D0 0002 0002 0030 0000 0000
150: 0000 FE06 0000 0002 0000 0000 0000 0000 0021 000B
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 61A5

----------------------------------------------------------------------------
(2) ST2000DL003-9VT166
----------------------------------------------------------------------------
Enclosure : ST2000DL 003-9VT166 USB Device (V=18A5, P=0216, sa1) - st
Model : ST2000DL003-9VT166
Firmware : CC45
Serial Number : 5YDA50EA
Disk Size : 2000,3 GB (8,4/137,4/2000,3)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 3907029168
Rotation Rate : 5900 RPM
Interface : USB (Serial ATA)
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/600
Power On Hours : 33 hod.
Power On Count : 13 krát
Host Reads : 360 GB
Host Writes : 217 GB
Temparature : 23 C (73 F)
Health Status : Dobrý
Features : S.M.A.R.T., AAM, 48bit LBA, NCQ
APM Level : ----
AAM Level : D0D0h [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 105 100 __6 000000898F20 Počet chyb čtení
03 _93 _92 __0 000000000000 Čas na roztočení ploten
04 100 100 _20 000000000012 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 100 253 _30 000000094C7C Počet chybných hledání
09 100 100 __0 000000000021 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 _20 00000000000D Počet cyklů zapnutí zařízení
B7 100 100 __0 000000000000 Neznámý
B8 100 100 _99 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 100 __0 000000000000 Časový limit příkazu
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _77 _55 _45 000017120017 Teplota toku vzduchu
BF 100 100 __0 000000000000 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000000B Počet vypnutí disku
C1 100 100 __0 000000000012 Počet cyklů načítání/vymazání
C2 _23 _45 __0 000F00000017 Teplota
C3 _24 _17 __0 000000898F20 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
F0 100 253 __0 9FEE0000001A Čas nastavování hlaviček - v hodinách
F1 100 253 __0 00001B26D5A2 Total LBAs Written
F2 100 253 __0 00002D0BFB66 Total LBAs Read

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 3559 3559 4441 3530 4541
020: 0000 0000 0004 4343 3435 2020 2020 5354 3230 3030
030: 444C 3030 332D 3956 5431 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0010
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 850E 850E 0002 0048 0040
080: 01F0 0029 346B 7F01 4163 BE01 BE01 4163 407F 00A5
090: 00A5 0000 FFFE 0000 D0D0 0000 0000 0000 0000 0000
100: 88B0 E8E0 0000 0000 0000 6003 6003 0000 5000 C500
110: 5C4D 2E27 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0021 88B0
130: E8E0 88B0 E8E0 2020 0002 0100 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 007F 007F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 4F00 8980
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 30B7 30B7 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 170C 0000 0000
220: 0000 0000 1020 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 10A5

Disky OK.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

12:53:57.0734 0888 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
12:53:57.0937 0888 ============================================================
12:53:57.0937 0888 Current date / time: 2013/01/09 12:53:57.0937
12:53:57.0937 0888 SystemInfo:
12:53:57.0937 0888
12:53:57.0937 0888 OS Version: 5.1.2600 ServicePack: 3.0
12:53:57.0937 0888 Product type: Workstation
12:53:57.0937 0888 ComputerName: WEED
12:53:57.0937 0888 UserName: Zkuřka
12:53:57.0937 0888 Windows directory: C:\WINDOWS
12:53:57.0937 0888 System windows directory: C:\WINDOWS
12:53:57.0937 0888 Processor architecture: Intel x86
12:53:57.0937 0888 Number of processors: 1
12:53:57.0937 0888 Page size: 0x1000
12:53:57.0937 0888 Boot type: Normal boot
12:53:57.0937 0888 ============================================================
12:53:59.0109 0888 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
12:53:59.0125 0888 ============================================================
12:53:59.0125 0888 \Device\Harddisk0\DR0:
12:53:59.0125 0888 MBR partitions:
12:53:59.0125 0888 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
12:53:59.0125 0888 ============================================================
12:53:59.0140 0888 C: <-> \Device\Harddisk0\DR0\Partition1
12:53:59.0140 0888 ============================================================
12:53:59.0140 0888 Initialize success
12:53:59.0140 0888 ============================================================
12:54:01.0750 3904 ============================================================
12:54:01.0750 3904 Scan started
12:54:01.0750 3904 Mode: Manual;
12:54:01.0750 3904 ============================================================
12:54:02.0875 3904 ================ Scan system memory ========================
12:54:02.0890 3904 System memory - ok
12:54:02.0890 3904 ================ Scan services =============================
12:54:03.0031 3904 [ 149A8F7ADF9742554DC323E290551E3E ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
12:54:03.0031 3904 Aavmker4 - ok
12:54:03.0046 3904 Abiosdsk - ok
12:54:03.0062 3904 abp480n5 - ok
12:54:03.0125 3904 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
12:54:03.0125 3904 ACPI - ok
12:54:03.0156 3904 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
12:54:03.0156 3904 ACPIEC - ok
12:54:03.0187 3904 adpu160m - ok
12:54:03.0281 3904 [ 993F7B0BA5188A0007C085AA10257B8E ] AdvancedSystemCareService6 C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
12:54:03.0296 3904 AdvancedSystemCareService6 - ok
12:54:03.0343 3904 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
12:54:03.0343 3904 aec - ok
12:54:03.0390 3904 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
12:54:03.0390 3904 AFD - ok
12:54:03.0421 3904 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
12:54:03.0421 3904 agp440 - ok
12:54:03.0437 3904 Aha154x - ok
12:54:03.0453 3904 aic78u2 - ok
12:54:03.0468 3904 aic78xx - ok
12:54:03.0656 3904 [ DD8520280304B6145A6BE31008748C7C ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
12:54:03.0812 3904 ALCXWDM - ok
12:54:03.0843 3904 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
12:54:03.0843 3904 Alerter - ok
12:54:03.0875 3904 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
12:54:03.0875 3904 ALG - ok
12:54:03.0890 3904 AliIde - ok
12:54:03.0906 3904 amsint - ok
12:54:03.0953 3904 [ EFA78DCA6DE1B9E5DFA1834AD9DD6B20 ] anvsnddrv C:\WINDOWS\system32\drivers\anvsnddrv.sys
12:54:03.0953 3904 anvsnddrv - ok
12:54:03.0984 3904 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
12:54:04.0000 3904 AppMgmt - ok
12:54:04.0015 3904 asc - ok
12:54:04.0031 3904 asc3350p - ok
12:54:04.0062 3904 asc3550 - ok
12:54:04.0171 3904 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
12:54:04.0171 3904 aspnet_state - ok
12:54:04.0203 3904 [ DE6ED95AEF259979B2830450072A627B ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
12:54:04.0218 3904 aswFsBlk - ok
12:54:04.0250 3904 [ CCAFDA4AB7F3738142B3BA7DA311FFB0 ] aswFW C:\WINDOWS\system32\drivers\aswFW.sys
12:54:04.0250 3904 aswFW - ok
12:54:04.0296 3904 [ E2FEE0486D68BF85355D3EDA1A24FF68 ] aswKbd C:\WINDOWS\system32\drivers\aswKbd.sys
12:54:04.0296 3904 aswKbd - ok
12:54:04.0343 3904 [ 84F0BE324EE111338589F448C3E8BAB2 ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
12:54:04.0343 3904 aswMon2 - ok
12:54:04.0390 3904 [ 7B948E3657BEA62E437BC46CA6EF6012 ] aswNdis C:\WINDOWS\system32\DRIVERS\aswNdis.sys
12:54:04.0390 3904 aswNdis - ok
12:54:04.0437 3904 [ DCF8B68A3A6217F87CA7FA95F535B47E ] aswNdis2 C:\WINDOWS\system32\drivers\aswNdis2.sys
12:54:04.0437 3904 aswNdis2 - ok
12:54:04.0468 3904 [ 7C9F0A2AB17D52261A9252A2EB320884 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
12:54:04.0468 3904 AswRdr - ok
12:54:04.0531 3904 [ B32E9AD44A1DBB3E8095E80F8DF32B03 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
12:54:04.0562 3904 aswSnx - ok
12:54:04.0609 3904 [ 67B558895695545FB0568B7541F3BCA7 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
12:54:04.0625 3904 aswSP - ok
12:54:04.0656 3904 [ E3E73B2B73A4DFADFDDF557192C4B08A ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
12:54:04.0656 3904 aswTdi - ok
12:54:04.0687 3904 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:54:04.0687 3904 AsyncMac - ok
12:54:04.0734 3904 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
12:54:04.0734 3904 atapi - ok
12:54:04.0750 3904 Atdisk - ok
12:54:04.0781 3904 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:54:04.0781 3904 Atmarpc - ok
12:54:04.0812 3904 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
12:54:04.0812 3904 AudioSrv - ok
12:54:04.0859 3904 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
12:54:04.0859 3904 audstub - ok
12:54:04.0921 3904 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
12:54:04.0921 3904 avast! Antivirus - ok
12:54:04.0953 3904 [ BC0E07A768A0A14C48E3CE1875F2C377 ] avast! Firewall C:\Program Files\AVAST Software\Avast\afwServ.exe
12:54:04.0968 3904 avast! Firewall - ok
12:54:05.0015 3904 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
12:54:05.0015 3904 Beep - ok
12:54:05.0062 3904 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
12:54:05.0078 3904 BITS - ok
12:54:05.0125 3904 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
12:54:05.0125 3904 Browser - ok
12:54:05.0140 3904 catchme - ok
12:54:05.0187 3904 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
12:54:05.0187 3904 cbidf2k - ok
12:54:05.0203 3904 cd20xrnt - ok
12:54:05.0234 3904 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
12:54:05.0234 3904 Cdaudio - ok
12:54:05.0281 3904 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
12:54:05.0281 3904 Cdfs - ok
12:54:05.0328 3904 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
12:54:05.0328 3904 Cdrom - ok
12:54:05.0343 3904 Changer - ok
12:54:05.0375 3904 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
12:54:05.0375 3904 CiSvc - ok
12:54:05.0406 3904 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
12:54:05.0406 3904 ClipSrv - ok
12:54:05.0468 3904 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:54:05.0484 3904 clr_optimization_v2.0.50727_32 - ok
12:54:05.0531 3904 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:54:05.0625 3904 clr_optimization_v4.0.30319_32 - ok
12:54:05.0640 3904 CmdIde - ok
12:54:05.0656 3904 COMSysApp - ok
12:54:05.0687 3904 Cpqarray - ok
12:54:05.0734 3904 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
12:54:05.0734 3904 CryptSvc - ok
12:54:05.0750 3904 dac2w2k - ok
12:54:05.0765 3904 dac960nt - ok
12:54:05.0828 3904 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
12:54:05.0843 3904 DcomLaunch - ok
12:54:05.0890 3904 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
12:54:05.0890 3904 Dhcp - ok
12:54:05.0921 3904 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
12:54:05.0921 3904 Disk - ok
12:54:05.0937 3904 dmadmin - ok
12:54:06.0000 3904 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
12:54:06.0093 3904 dmboot - ok
12:54:06.0640 3904 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
12:54:06.0656 3904 dmio - ok
12:54:06.0687 3904 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
12:54:06.0703 3904 dmload - ok
12:54:06.0718 3904 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
12:54:06.0734 3904 dmserver - ok
12:54:06.0781 3904 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
12:54:06.0781 3904 DMusic - ok
12:54:06.0812 3904 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
12:54:06.0828 3904 Dnscache - ok
12:54:06.0859 3904 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
12:54:06.0875 3904 Dot3svc - ok
12:54:06.0890 3904 dpti2o - ok
12:54:06.0921 3904 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
12:54:06.0921 3904 drmkaud - ok
12:54:06.0984 3904 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
12:54:06.0984 3904 dtsoftbus01 - ok
12:54:07.0031 3904 [ AC9CF17EE2AE003C98EB4F5336C38058 ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
12:54:07.0031 3904 E100B - ok
12:54:07.0078 3904 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
12:54:07.0078 3904 EapHost - ok
12:54:07.0125 3904 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
12:54:07.0140 3904 ERSvc - ok
12:54:07.0171 3904 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
12:54:07.0187 3904 Eventlog - ok
12:54:07.0218 3904 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
12:54:07.0250 3904 EventSystem - ok
12:54:07.0281 3904 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
12:54:07.0281 3904 Fastfat - ok
12:54:07.0328 3904 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
12:54:07.0343 3904 FastUserSwitchingCompatibility - ok
12:54:07.0359 3904 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
12:54:07.0375 3904 Fdc - ok
12:54:07.0390 3904 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
12:54:07.0406 3904 Fips - ok
12:54:07.0437 3904 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
12:54:07.0437 3904 Flpydisk - ok
12:54:07.0468 3904 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
12:54:07.0468 3904 FltMgr - ok
12:54:07.0531 3904 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
12:54:07.0531 3904 FontCache3.0.0.0 - ok
12:54:07.0546 3904 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
12:54:07.0546 3904 Fs_Rec - ok
12:54:07.0593 3904 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:54:07.0593 3904 Ftdisk - ok
12:54:07.0625 3904 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
12:54:07.0625 3904 gameenum - ok
12:54:07.0671 3904 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
12:54:07.0671 3904 Gpc - ok
12:54:07.0734 3904 [ 9513DE607CD2C6D7FBECA2E6E0AE5DC0 ] HCF_MSFT C:\WINDOWS\system32\DRIVERS\HCF_MSFT.sys
12:54:07.0765 3904 HCF_MSFT - ok
12:54:07.0828 3904 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:54:07.0828 3904 helpsvc - ok
12:54:07.0875 3904 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
12:54:07.0875 3904 hkmsvc - ok
12:54:07.0890 3904 hpn - ok
12:54:07.0937 3904 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
12:54:07.0953 3904 HTTP - ok
12:54:07.0984 3904 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
12:54:08.0000 3904 HTTPFilter - ok
12:54:08.0015 3904 i2omgmt - ok
12:54:08.0046 3904 i2omp - ok
12:54:08.0078 3904 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:54:08.0078 3904 i8042prt - ok
12:54:08.0156 3904 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:54:08.0187 3904 idsvc - ok
12:54:08.0218 3904 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
12:54:08.0218 3904 Imapi - ok
12:54:08.0281 3904 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
12:54:08.0281 3904 ImapiService - ok
12:54:08.0312 3904 ini910u - ok
12:54:08.0359 3904 [ 16508B07D708B92D74DF6233CDC06E3C ] Intel(R) PROSet Monitoring Service C:\WINDOWS\system32\IProsetMonitor.exe
12:54:08.0359 3904 Intel(R) PROSet Monitoring Service - ok
12:54:08.0390 3904 [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
12:54:08.0390 3904 IntelIde - ok
12:54:08.0437 3904 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
12:54:08.0437 3904 intelppm - ok
12:54:08.0468 3904 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
12:54:08.0468 3904 Ip6Fw - ok
12:54:08.0515 3904 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:54:08.0515 3904 IpFilterDriver - ok
12:54:08.0546 3904 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
12:54:08.0546 3904 IpInIp - ok
12:54:08.0578 3904 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
12:54:08.0578 3904 IpNat - ok
12:54:08.0625 3904 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
12:54:08.0625 3904 IPSec - ok
12:54:08.0656 3904 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
12:54:08.0671 3904 IRENUM - ok
12:54:08.0703 3904 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
12:54:08.0703 3904 isapnp - ok
12:54:08.0781 3904 [ B591E761161D1EF547D76EF236EAA6A5 ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
12:54:08.0781 3904 JavaQuickStarterService - ok
12:54:08.0812 3904 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:54:08.0812 3904 Kbdclass - ok
12:54:08.0859 3904 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
12:54:08.0859 3904 kmixer - ok
12:54:08.0906 3904 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
12:54:08.0906 3904 KSecDD - ok
12:54:08.0937 3904 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
12:54:08.0953 3904 LanmanServer - ok
12:54:09.0000 3904 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
12:54:09.0015 3904 lanmanworkstation - ok
12:54:09.0031 3904 lbrtfdc - ok
12:54:09.0078 3904 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
12:54:09.0093 3904 LmHosts - ok
12:54:09.0125 3904 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
12:54:09.0125 3904 MBAMProtector - ok
12:54:09.0187 3904 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
12:54:09.0203 3904 MBAMScheduler - ok
12:54:09.0265 3904 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
12:54:09.0296 3904 MBAMService - ok
12:54:09.0328 3904 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
12:54:09.0343 3904 Messenger - ok
12:54:09.0375 3904 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
12:54:09.0375 3904 mnmdd - ok
12:54:09.0421 3904 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
12:54:09.0421 3904 mnmsrvc - ok
12:54:09.0453 3904 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
12:54:09.0453 3904 Modem - ok
12:54:09.0484 3904 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
12:54:09.0484 3904 Mouclass - ok
12:54:09.0515 3904 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
12:54:09.0515 3904 MountMgr - ok
12:54:09.0531 3904 mraid35x - ok
12:54:09.0578 3904 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:54:09.0593 3904 MRxDAV - ok
12:54:09.0640 3904 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:54:09.0671 3904 MRxSmb - ok
12:54:09.0703 3904 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
12:54:09.0718 3904 MSDTC - ok
12:54:09.0781 3904 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
12:54:09.0781 3904 Msfs - ok
12:54:09.0796 3904 MSIServer - ok
12:54:09.0828 3904 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
12:54:09.0828 3904 MSKSSRV - ok
12:54:09.0875 3904 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:54:09.0875 3904 MSPCLOCK - ok
12:54:09.0906 3904 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
12:54:09.0906 3904 MSPQM - ok
12:54:09.0937 3904 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:54:09.0953 3904 mssmbios - ok
12:54:10.0000 3904 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
12:54:10.0000 3904 Mup - ok
12:54:10.0046 3904 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
12:54:10.0078 3904 napagent - ok
12:54:10.0109 3904 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
12:54:10.0109 3904 NDIS - ok
12:54:10.0140 3904 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:54:10.0140 3904 NdisTapi - ok
12:54:10.0187 3904 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:54:10.0187 3904 Ndisuio - ok
12:54:10.0218 3904 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:54:10.0218 3904 NdisWan - ok
12:54:10.0265 3904 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
12:54:10.0265 3904 NDProxy - ok
12:54:10.0281 3904 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
12:54:10.0296 3904 NetBIOS - ok
12:54:10.0312 3904 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
12:54:10.0328 3904 NetBT - ok
12:54:10.0375 3904 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
12:54:10.0375 3904 NetDDE - ok
12:54:10.0406 3904 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
12:54:10.0406 3904 NetDDEdsdm - ok
12:54:10.0437 3904 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
12:54:10.0453 3904 Netlogon - ok
12:54:10.0484 3904 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
12:54:10.0500 3904 Netman - ok
12:54:10.0546 3904 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
12:54:10.0593 3904 NetTcpPortSharing - ok
12:54:10.0640 3904 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
12:54:10.0671 3904 Nla - ok
12:54:10.0734 3904 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
12:54:10.0734 3904 Npfs - ok
12:54:10.0796 3904 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
12:54:10.0828 3904 Ntfs - ok
12:54:10.0843 3904 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
12:54:10.0859 3904 NtLmSsp - ok
12:54:10.0906 3904 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
12:54:10.0937 3904 NtmsSvc - ok
12:54:10.0953 3904 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
12:54:10.0968 3904 Null - ok
12:54:11.0046 3904 [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
12:54:11.0109 3904 nv - ok
12:54:11.0140 3904 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:54:11.0140 3904 NwlnkFlt - ok
12:54:11.0171 3904 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:54:11.0171 3904 NwlnkFwd - ok
12:54:11.0234 3904 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:54:11.0234 3904 ose - ok
12:54:11.0281 3904 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
12:54:11.0281 3904 Parport - ok
12:54:11.0312 3904 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
12:54:11.0328 3904 PartMgr - ok
12:54:11.0359 3904 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
12:54:11.0359 3904 ParVdm - ok
12:54:11.0390 3904 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
12:54:11.0390 3904 PCI - ok
12:54:11.0421 3904 PCIDump - ok
12:54:11.0437 3904 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\drivers\PCIIde.sys
12:54:11.0437 3904 PCIIde - ok
12:54:11.0484 3904 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
12:54:11.0484 3904 Pcmcia - ok
12:54:11.0515 3904 PDCOMP - ok
12:54:11.0531 3904 PDFRAME - ok
12:54:11.0546 3904 PDRELI - ok
12:54:11.0578 3904 PDRFRAME - ok
12:54:11.0593 3904 perc2 - ok
12:54:11.0609 3904 perc2hib - ok
12:54:11.0687 3904 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
12:54:11.0687 3904 PlugPlay - ok
12:54:11.0718 3904 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
12:54:11.0718 3904 PolicyAgent - ok
12:54:11.0734 3904 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
12:54:11.0750 3904 PptpMiniport - ok
12:54:11.0796 3904 [ 18D9789A4664BF417EEA944D2776091A ] prodrv06 C:\WINDOWS\System32\drivers\prodrv06.sys
12:54:11.0796 3904 prodrv06 - ok
12:54:11.0828 3904 [ 8CC9671A7ED2902E747EE0892E1C8575 ] prohlp02 C:\WINDOWS\system32\drivers\prohlp02.sys
12:54:11.0828 3904 prohlp02 - ok
12:54:11.0859 3904 [ 960BCE3ED38761B446AABAC06C76BADF ] prosync1 C:\WINDOWS\system32\drivers\prosync1.sys
12:54:11.0859 3904 prosync1 - ok
12:54:11.0890 3904 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
12:54:11.0890 3904 ProtectedStorage - ok
12:54:11.0921 3904 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
12:54:11.0921 3904 PSched - ok
12:54:11.0953 3904 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
12:54:11.0953 3904 Ptilink - ok
12:54:11.0968 3904 ql1080 - ok
12:54:11.0984 3904 Ql10wnt - ok
12:54:12.0015 3904 ql12160 - ok
12:54:12.0031 3904 ql1240 - ok
12:54:12.0046 3904 ql1280 - ok
12:54:12.0078 3904 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
12:54:12.0078 3904 RasAcd - ok
12:54:12.0125 3904 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
12:54:12.0140 3904 RasAuto - ok
12:54:12.0171 3904 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:54:12.0171 3904 Rasl2tp - ok
12:54:12.0203 3904 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
12:54:12.0218 3904 RasMan - ok
12:54:12.0250 3904 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:54:12.0250 3904 RasPppoe - ok
12:54:12.0281 3904 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
12:54:12.0281 3904 Raspti - ok
12:54:12.0312 3904 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
12:54:12.0312 3904 Rdbss - ok
12:54:12.0343 3904 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:54:12.0343 3904 RDPCDD - ok
12:54:12.0406 3904 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
12:54:12.0406 3904 rdpdr - ok
12:54:12.0453 3904 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
12:54:12.0468 3904 RDPWD - ok
12:54:12.0500 3904 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
12:54:12.0531 3904 RDSessMgr - ok
12:54:12.0562 3904 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
12:54:12.0562 3904 redbook - ok
12:54:12.0593 3904 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
12:54:12.0609 3904 RemoteAccess - ok
12:54:12.0640 3904 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
12:54:12.0656 3904 RemoteRegistry - ok
12:54:12.0703 3904 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
12:54:12.0703 3904 RpcLocator - ok
12:54:12.0734 3904 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
12:54:12.0750 3904 RpcSs - ok
12:54:12.0812 3904 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
12:54:12.0828 3904 RSVP - ok
12:54:12.0843 3904 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
12:54:12.0859 3904 SamSs - ok
12:54:12.0890 3904 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
12:54:12.0906 3904 SCardSvr - ok
12:54:12.0937 3904 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
12:54:12.0953 3904 Schedule - ok
12:54:13.0000 3904 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
12:54:13.0000 3904 Secdrv - ok
12:54:13.0046 3904 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
12:54:13.0062 3904 seclogon - ok
12:54:13.0078 3904 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
12:54:13.0093 3904 SENS - ok
12:54:13.0125 3904 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
12:54:13.0125 3904 serenum - ok
12:54:13.0156 3904 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
12:54:13.0156 3904 Serial - ok
12:54:13.0234 3904 [ 4C0D673281178CB496011A2E28571FC8 ] sfdrv01 C:\WINDOWS\system32\drivers\sfdrv01.sys
12:54:13.0250 3904 sfdrv01 - ok
12:54:13.0265 3904 [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01 C:\WINDOWS\system32\drivers\sfhlp01.sys
12:54:13.0265 3904 sfhlp01 - ok
12:54:13.0312 3904 [ 15BE2B5E4DC5B8623CF167720682ABC9 ] sfhlp02 C:\WINDOWS\system32\drivers\sfhlp02.sys
12:54:13.0312 3904 sfhlp02 - ok
12:54:13.0343 3904 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
12:54:13.0343 3904 Sfloppy - ok
12:54:13.0375 3904 [ D5A7E09D2C6A702809E49190D52ADC9F ] sfvfs02 C:\WINDOWS\system32\drivers\sfvfs02.sys
12:54:13.0375 3904 sfvfs02 - ok
12:54:13.0421 3904 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
12:54:13.0437 3904 SharedAccess - ok
12:54:13.0468 3904 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
12:54:13.0468 3904 ShellHWDetection - ok
12:54:13.0500 3904 Simbad - ok
12:54:13.0562 3904 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:54:13.0562 3904 SkypeUpdate - ok
12:54:13.0593 3904 Sparrow - ok
12:54:13.0640 3904 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
12:54:13.0640 3904 splitter - ok
12:54:13.0687 3904 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
12:54:13.0703 3904 Spooler - ok
12:54:13.0734 3904 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
12:54:13.0734 3904 sr - ok
12:54:13.0765 3904 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
12:54:13.0796 3904 srservice - ok
12:54:13.0843 3904 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
12:54:13.0859 3904 Srv - ok
12:54:13.0890 3904 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
12:54:13.0906 3904 SSDPSRV - ok
12:54:13.0953 3904 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
12:54:14.0000 3904 stisvc - ok
12:54:14.0031 3904 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
12:54:14.0031 3904 swenum - ok
12:54:14.0062 3904 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
12:54:14.0062 3904 swmidi - ok
12:54:14.0078 3904 SwPrv - ok
12:54:14.0093 3904 symc810 - ok
12:54:14.0125 3904 symc8xx - ok
12:54:14.0140 3904 sym_hi - ok
12:54:14.0156 3904 sym_u3 - ok
12:54:14.0203 3904 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
12:54:14.0203 3904 sysaudio - ok
12:54:14.0250 3904 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
12:54:14.0250 3904 SysmonLog - ok
12:54:14.0312 3904 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
12:54:14.0328 3904 TapiSrv - ok
12:54:14.0375 3904 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
12:54:14.0390 3904 Tcpip - ok
12:54:14.0437 3904 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
12:54:14.0437 3904 TDPIPE - ok
12:54:14.0468 3904 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
12:54:14.0468 3904 TDTCP - ok
12:54:14.0500 3904 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
12:54:14.0500 3904 TermDD - ok
12:54:14.0531 3904 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
12:54:14.0562 3904 TermService - ok
12:54:14.0593 3904 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
12:54:14.0593 3904 Themes - ok
12:54:14.0640 3904 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
12:54:14.0640 3904 TlntSvr - ok
12:54:14.0671 3904 TosIde - ok
12:54:14.0687 3904 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
12:54:14.0703 3904 TrkWks - ok
12:54:14.0750 3904 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
12:54:14.0750 3904 Udfs - ok
12:54:14.0796 3904 ultra - ok
12:54:14.0843 3904 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
12:54:14.0843 3904 Update - ok
12:54:14.0890 3904 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
12:54:14.0906 3904 upnphost - ok
12:54:14.0937 3904 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
12:54:14.0953 3904 UPS - ok
12:54:15.0000 3904 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
12:54:15.0000 3904 usbccgp - ok
12:54:15.0015 3904 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
12:54:15.0031 3904 usbehci - ok
12:54:15.0062 3904 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
12:54:15.0062 3904 usbhub - ok
12:54:15.0093 3904 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:54:15.0093 3904 USBSTOR - ok
12:54:15.0140 3904 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
12:54:15.0140 3904 usbuhci - ok
12:54:15.0156 3904 VBoxDRV - ok
12:54:15.0171 3904 VBoxUSBMon - ok
12:54:15.0203 3904 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
12:54:15.0203 3904 VgaSave - ok
12:54:15.0218 3904 ViaIde - ok
12:54:15.0250 3904 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
12:54:15.0250 3904 VolSnap - ok
12:54:15.0296 3904 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
12:54:15.0312 3904 VSS - ok
12:54:15.0359 3904 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
12:54:15.0375 3904 W32Time - ok
12:54:15.0421 3904 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
12:54:15.0421 3904 Wanarp - ok
12:54:15.0437 3904 WDICA - ok
12:54:15.0484 3904 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
12:54:15.0484 3904 wdmaud - ok
12:54:15.0515 3904 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
12:54:15.0531 3904 WebClient - ok
12:54:15.0625 3904 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
12:54:15.0625 3904 winmgmt - ok
12:54:15.0703 3904 [ 4D34CEDD74BDBF2B6A935EAE3BF80543 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
12:54:15.0750 3904 WinRM - ok
12:54:15.0812 3904 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
12:54:15.0812 3904 WmdmPmSN - ok
12:54:15.0859 3904 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
12:54:15.0890 3904 Wmi - ok
12:54:15.0937 3904 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
12:54:15.0937 3904 WmiApSrv - ok
12:54:16.0031 3904 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
12:54:16.0078 3904 WMPNetworkSvc - ok
12:54:16.0156 3904 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
12:54:16.0187 3904 WPFFontCache_v0400 - ok
12:54:16.0218 3904 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
12:54:16.0218 3904 WS2IFSL - ok
12:54:16.0265 3904 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
12:54:16.0281 3904 wscsvc - ok
12:54:16.0296 3904 WSearch - ok
12:54:16.0343 3904 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
12:54:16.0359 3904 wuauserv - ok
12:54:16.0406 3904 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
12:54:16.0406 3904 WudfPf - ok
12:54:16.0437 3904 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
12:54:16.0437 3904 WudfRd - ok
12:54:16.0468 3904 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
12:54:16.0500 3904 WudfSvc - ok
12:54:16.0562 3904 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
12:54:16.0593 3904 WZCSVC - ok
12:54:16.0625 3904 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
12:54:16.0656 3904 xmlprov - ok
12:54:16.0671 3904 ================ Scan global ===============================
12:54:16.0703 3904 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
12:54:16.0750 3904 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
12:54:16.0812 3904 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
12:54:16.0843 3904 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
12:54:16.0859 3904 [Global] - ok
12:54:16.0859 3904 ================ Scan MBR ==================================
12:54:16.0875 3904 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
12:54:17.0078 3904 \Device\Harddisk0\DR0 - ok
12:54:17.0093 3904 ================ Scan VBR ==================================
12:54:17.0093 3904 [ 57958C6B1ACF8A548D06DA0E1FC8FE42 ] \Device\Harddisk0\DR0\Partition1
12:54:17.0093 3904 \Device\Harddisk0\DR0\Partition1 - ok
12:54:17.0109 3904 ============================================================
12:54:17.0109 3904 Scan finished
12:54:17.0109 3904 ============================================================
12:54:17.0140 2396 Detected object count: 0
12:54:17.0140 2396 Actual detected object count: 0
12:54:29.0921 2460 Deinitialize success

ComboFix 13-01-08.01 - Zkuřka 09.01.2013 12:58:01.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.767.435 [GMT 1:00]
Spuštěný z: c:\documents and settings\Zku°ka\Plocha\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: ESET Smart Security 6.0 *Disabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: avast! Internet Security *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-09 do 2013-01-09 )))))))))))))))))))))))))))))))
.
.
2013-01-09 11:44 . 2013-01-09 11:44 -------- d-----w- c:\windows\LastGood
2013-01-07 10:48 . 2012-10-30 22:51 106560 ----a-w- c:\windows\system32\drivers\aswFW.sys
2013-01-07 10:47 . 2012-10-30 22:51 199320 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2013-01-07 10:47 . 2012-10-30 22:51 20624 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2013-01-07 10:47 . 2012-09-21 09:26 12112 ----a-w- c:\windows\system32\drivers\aswNdis.sys
2013-01-04 21:04 . 2012-10-30 22:51 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-01-04 21:04 . 2012-10-30 22:51 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-01-04 21:03 . 2012-10-30 22:51 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-01-04 21:03 . 2012-10-30 22:51 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-01-04 21:03 . 2012-10-30 22:51 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-01-04 21:03 . 2012-10-30 22:51 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2013-01-04 21:03 . 2012-10-30 22:51 89752 ----a-w- c:\windows\system32\drivers\aswmon.sys
2013-01-04 21:03 . 2012-10-30 22:51 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2013-01-04 20:54 . 2012-10-30 22:51 41224 ----a-w- c:\windows\avastSS.scr
2013-01-04 20:54 . 2012-10-30 22:50 227648 ----a-w- c:\windows\system32\aswBoot.exe
2013-01-04 20:51 . 2013-01-04 20:51 -------- d-----w- c:\program files\AVAST Software
2013-01-04 20:51 . 2013-01-04 20:51 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2012-12-24 12:16 . 2012-05-31 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-12-24 12:14 . 2012-12-24 12:14 -------- d-----w- c:\documents and settings\Zkuřka\Local Settings\Data aplikací\SKIDROW
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2008-04-14 06:37 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-12-14 15:49 . 2012-07-22 19:03 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-13 11:55 . 2008-04-14 05:45 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-10 13:10 . 2012-11-10 13:10 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-11-09 20:55 . 2012-11-09 20:56 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-02 02:03 . 2008-04-14 06:51 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:12 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 12:12 . 2008-04-14 06:52 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:12 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2012-11-01 00:35 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2012-10-12 18:09 . 2012-07-22 19:49 22400 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\QuadCoreM2\\pack\\core.bin"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [7.1.2013 11:47 12112]
R0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [7.1.2013 11:47 199320]
R1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [7.1.2013 11:48 106560]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [7.1.2013 11:47 20624]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [4.1.2013 22:03 738504]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [4.1.2013 22:04 361032]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [10.11.2012 14:10 242240]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [3.11.2012 20:31 464256]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [4.1.2013 22:04 21256]
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [7.1.2013 11:47 133912]
R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys [22.7.2012 22:45 32896]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22.7.2012 20:03 21104]
S2 ekrn;ESET Service; [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [22.7.2012 20:03 682344]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [13.7.2012 12:28 160944]
S2 VBoxDRV;PortableVBoxDRV;\??\e:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys --> e:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys [?]
S2 VBoxUSBMon;PortableVBoxUSBMon;\??\e:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys --> e:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys [?]
S3 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [22.7.2012 19:29 117920]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 74168485
*Deregistered* - 74168485
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-09 c:\windows\Tasks\ASC6_AutoClean.job
- c:\program files\IObit\Advanced SystemCare 6\AutoSweep.exe [2012-11-03 13:51]
.
2013-01-09 c:\windows\Tasks\ASC6_PerformanceMonitor.job
- c:\program files\IObit\Advanced SystemCare 6\Monitor.exe [2012-11-03 19:33]
.
2013-01-09 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2013-01-04 22:50]
.
2013-01-09 c:\windows\Tasks\User_Feed_Synchronization-{5E204C73-7E77-444E-82A6-10F6CEA17E49}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
2013-01-09 c:\windows\Tasks\User_Feed_Synchronization-{80E37467-516D-4B05-9E42-89925BC54FBE}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 77.48.254.254 77.48.100.254
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-09 13:07
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\avast! sandbox
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d2,03,0e,69,4b,b1,68,43,9b,38,3e,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d2,03,0e,69,4b,b1,68,43,9b,38,3e,\
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
Celkový čas: 2013-01-09 13:10:49
ComboFix-quarantined-files.txt 2013-01-09 12:10
.
Před spuštěním: Volných bajtů: 61 632 073 728
Po spuštění: Volných bajtů: 61 627 191 296
.
- - End Of File - - 874E3994BA6AA4DE0820CEA474839585

AV: avast! Internet Security *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: ESET Smart Security 6.0 *Disabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: avast! Internet Security *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}

Zbytky ESS odinstaluj tímhle:
http://kb.eset.com/esetkb/index?page=content&id=SOLN93

pak nový Combofix.

Co mám udělat s těmi třemi řádky? To mám přes ten poznámkový blok vložit do CF? Jinak ten uninstaller stáhnout nemůžu, chce to po mě jméno a heslo.

S těmi řádky nic..

přihlaš se svou registrací programu ESS.

To jsem právě udělal, přihlásil jsem se stáhnoul jsem ten program a při instalaci my to toto udělalo. A stahuji přes Google Chrome do složky v dokumentech download a tam se my vůbec nezobrazejí instalace. Když jdou stáhnout novou tak se my objeví číslice (2) a první nemůžu odstranit protože tam není. To se my zachvíly zasere počítač. Nevíš jak by jsem to měl obnovit?