PC-HELP.CZ

Dobrý večer, jsem úplný začátečník v práci na PC, proto prosím o shovívavost.
Můj NTB se čas od času (po startu i během práce) zpomalý a zadrhává. Ve Správci úloh je vidět, že soubor "service.exe" zatěžuje v tu chvíli CPU mezi 60-88%. Po cca 5 a více minutách se chod PC vrátí do běžného stavu, service.exe bere okolo 20%.
Prošel jsem fórum a dle návodu vkládám výsledek testu HIjackthis a prosím o jakoukoliv radu.
Ještě dodám, že používám Windows XP, Avast Free a Eset online-scanner, čistím CCleanerem.
Děkuji.
-----------------------------------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:56:01, on 3.3.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\System32\ssins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Acer\Notebook Manager\almxptray.exe
C:\WINDOWS\system32\ctfmon.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
C:\program files\update\realsched.exe
c:\program files\RealPlay.exe
C:\Program Files\Mobile Partner\Mobile Partner.exe
C:\WINDOWS\system32\taskmgr.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
c:\program files\RealPlay.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AcerNotebookManager] C:\Program Files\Acer\Notebook Manager\almxptray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1220945662-1580436667-854245398-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F8333D52-3D1B-4BC6-AD25-562E9A386F76}: NameServer = 93.153.117.1 93.153.117.33
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\WINDOWS\System32\ssins.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 5272 bytes

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod



Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Provedl jsem vše dle pokynů. ATF Cleaner, TFC a AdwCleaner proběhly normálně. Kontrola Malwarebytes Anti-Malware byl vcelku problém, v průběhu docházelo k zatuhnutí (zastavoval se čas kontroly, ukazatel počtu souborů atd.), ale kontrola došla do konce.
------
Mohu nechat Malwarebytes Anti-Malware nainstalovanou a používat ji zároveň s AvastFree nebo mám MbAM raději odinstalovat?
-----
Ještě bych chtěl dodat, jestli problémy nemůže způsobovat stav Windows. Jsou sice legálně koupená, ale jejich "doba použitelnosti" skončila už cca před rokem. Na obrazovce se mi od té doby objevuje hláška, že "Windows nesplňují podmínky ověření pravosti", ale do této doby fungovalo vše normálně, i když už byly "propadlé" před rokem. Až nyní začalo to razantní zpomalování, které popisuji v prvním příspěvku.

----------------------------------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------------------------------------

# AdwCleaner v2.113 - Logfile created 03/04/2013 at 22:33:58
# Updated 23/02/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Zed - ZDĚNDA
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Zed\Dokumenty\Stažené soubory\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v6.0.2900.5512

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0.1 (cs)

File : C:\Documents and Settings\Zed\Data aplikací\Mozilla\Firefox\Profiles\8wgcaole.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [705 octets] - [04/03/2013 22:33:58]

########## EOF - C:\AdwCleaner[R1].txt - [764 octets] ##########

--------------------------------------------------------------------------------------------------------------------------

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
http://www.malwarebytes.org

Verze: v2013.03.04.10

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Zed :: ZDĚNDA [administrátor]

Ochrana: Povolena

4.3.2013 23:04:19
mbam-log-2013-03-04 (23-04-19).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 197524
Uplynulý čas: 21 minut, 17 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Co myslíš tou dobou použitelnosti?

Notebook mám po bráchovi, který ho měl jako služební počítač od zaměstnavatele. "Dobou použitelnosti" myslím platnost licence na program Windows. Windows XP jsou tam v původní verzi (koupené a instalované zaměstnavatelem) a platnost licence zřejmě vypršela.

NTB mám cca 2 roky, cca poslední rok se po naběhnutí Windows na ploše objeví hláška "Tato kopie systému Windows nesplňuje podmínky ověření pravosti" (viz. obrázek v příloze - plocha a hláška v pravém dolním rohu). Občas to samé vyskočí jako bublina (informační hláška v okně, kde se zrovna nacházím). Ale žádný vliv jsem před tím rokem nespozoroval, blbne to až teď.

Myslel jsem, jestli se systém náhodou např. nepokouší marně o nějakou aktualizaci nebo tak nějak. Jinak nevím, proč ten soubor services.exe čas od času takhle blbne.

Ještě oprava - v názvu tématu mám service.exe, ale správně je to services.exe.

Windows není program ale operační systém. Platnost určitě nevypršela. Spíše jde o to, že například zaměstnavatel vyřadil PC a zanikla tak licence. Další možnost je, že si brácha číslo opsal a použil na druhé PC. Možností je více. Každopádně v tomto případě máš nelegální systém... Na viry to pravděpodobně nevypadá. Popovídej si s bráchou co s licencí dělal.

Tak jsem se ptal, s licencí nedělal nic. NTB dostali nové, na kterých XP ani nejsou. O vše okolo PC se jim stará externí firma, takže zřejmě licence zanikla poté, co firma notebooky oficiálně vyřadila.

Každopádně NTB začal blbnout až teď. Napadá vás tedy nějaké řešení problému se souborem services.exe a zamrzáním NTB?

Tak to je více než pravděpodobné, že pokud se počítače vyřadily z evidence, tak licence zanikla. navíc, když se o to starala externí firma. S touhle černou obrazovkou moc dlouho fungovat nebudeš.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Měl bych ještě dva dotazy:
1)
..."S touhle černou obrazovkou moc dlouho fungovat nebudeš."...

Mám tomu rozumět tak, že Windows na mém NTB časem přestanou fungovat úplně, tedy ani vůbec nenaběhnou?

2)
Mám Malwarebytes Anti-Malware instalované v předešlém kroku odstranit, nebo je mohu nechat pracovat (spouštějí se současně s Windows) společně s AvastFree, který používám? Myslím pro běžnou práci.
Během dalších kroků (TDSSKiller a Combofix) MbAM i Avast vypnu.

Za odpovědi děkuji, jsem na vše okolo PC úplný tupec.

1) přesně tak. Pak se začne zobrazovat, že máš provést aktivaci Windows, ale tu provedeš jen s novým sériovým číslem na Windows. Budeš mít na to tuším 30 dní na reaktivaci. Pokud ji neprovedeš, tak Win už nenajede.


2) Mbam můžeš nechat. Akorát až se pustí, tak v tray liště u hodin klikni pravým na ikonu Mbam a dej odšktnout možnost spouštět při startu a bude nabíhat jen AVAST.

1) TDSSKiller proběhl normálně.

22:30:37.0502 2084 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:30:37.0582 2084 ============================================================
22:30:37.0582 2084 Current date / time: 2013/03/19 22:30:37.0582
22:30:37.0582 2084 SystemInfo:
22:30:37.0582 2084
22:30:37.0582 2084 OS Version: 5.1.2600 ServicePack: 3.0
22:30:37.0582 2084 Product type: Workstation
22:30:37.0582 2084 ComputerName: ZDĚNDA
22:30:37.0582 2084 UserName: Zed
22:30:37.0582 2084 Windows directory: C:\WINDOWS
22:30:37.0582 2084 System windows directory: C:\WINDOWS
22:30:37.0582 2084 Processor architecture: Intel x86
22:30:37.0582 2084 Number of processors: 1
22:30:37.0582 2084 Page size: 0x1000
22:30:37.0582 2084 Boot type: Normal boot
22:30:37.0582 2084 ============================================================
22:30:40.0036 2084 Drive \Device\Harddisk0\DR0 - Size: 0x4A8530000 (18.63 Gb), SectorSize: 0x200, Cylinders: 0x980, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:30:40.0086 2084 ============================================================
22:30:40.0086 2084 \Device\Harddisk0\DR0:
22:30:40.0086 2084 MBR partitions:
22:30:40.0086 2084 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x253EA80
22:30:40.0086 2084 ============================================================
22:30:40.0126 2084 C: <-> \Device\Harddisk0\DR0\Partition1
22:30:40.0126 2084 ============================================================
22:30:40.0126 2084 Initialize success
22:30:40.0126 2084 ============================================================
22:31:22.0076 1768 ============================================================
22:31:22.0076 1768 Scan started
22:31:22.0076 1768 Mode: Manual;
22:31:22.0076 1768 ============================================================
22:31:22.0527 1768 ================ Scan system memory ========================
22:31:22.0527 1768 System memory - ok
22:31:22.0537 1768 ================ Scan services =============================
22:31:22.0747 1768 [ 149A8F7ADF9742554DC323E290551E3E ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
22:31:22.0747 1768 Aavmker4 - ok
22:31:22.0757 1768 Abiosdsk - ok
22:31:22.0777 1768 abp480n5 - ok
22:31:22.0847 1768 [ D38AA7BC371CD28BE8DB1E6F4A75E3A9 ] acernbm C:\WINDOWS\system32\drivers\acernbm.sys
22:31:22.0847 1768 acernbm - ok
22:31:22.0927 1768 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:31:22.0927 1768 ACPI - ok
22:31:22.0977 1768 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
22:31:22.0977 1768 ACPIEC - ok
22:31:23.0078 1768 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:31:23.0098 1768 AdobeFlashPlayerUpdateSvc - ok
22:31:23.0108 1768 adpu160m - ok
22:31:23.0158 1768 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
22:31:23.0168 1768 aec - ok
22:31:23.0228 1768 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
22:31:23.0238 1768 AFD - ok
22:31:23.0258 1768 Aha154x - ok
22:31:23.0278 1768 aic78u2 - ok
22:31:23.0288 1768 aic78xx - ok
22:31:23.0348 1768 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
22:31:23.0348 1768 Alerter - ok
22:31:23.0388 1768 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
22:31:23.0398 1768 ALG - ok
22:31:23.0418 1768 AliIde - ok
22:31:23.0428 1768 amsint - ok
22:31:23.0498 1768 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
22:31:23.0508 1768 AppMgmt - ok
22:31:23.0528 1768 asc - ok
22:31:23.0548 1768 asc3350p - ok
22:31:23.0568 1768 asc3550 - ok
22:31:23.0719 1768 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:31:23.0719 1768 aspnet_state - ok
22:31:23.0779 1768 [ DE6ED95AEF259979B2830450072A627B ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
22:31:23.0779 1768 aswFsBlk - ok
22:31:23.0839 1768 [ 84F0BE324EE111338589F448C3E8BAB2 ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
22:31:23.0839 1768 aswMon2 - ok
22:31:23.0889 1768 [ 7C9F0A2AB17D52261A9252A2EB320884 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
22:31:23.0889 1768 AswRdr - ok
22:31:23.0969 1768 [ B32E9AD44A1DBB3E8095E80F8DF32B03 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
22:31:23.0979 1768 aswSnx - ok
22:31:24.0039 1768 [ 67B558895695545FB0568B7541F3BCA7 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
22:31:24.0049 1768 aswSP - ok
22:31:24.0079 1768 [ E3E73B2B73A4DFADFDDF557192C4B08A ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
22:31:24.0089 1768 aswTdi - ok
22:31:24.0159 1768 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:31:24.0159 1768 AsyncMac - ok
22:31:24.0199 1768 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
22:31:24.0199 1768 atapi - ok
22:31:24.0219 1768 Atdisk - ok
22:31:24.0249 1768 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:31:24.0259 1768 Atmarpc - ok
22:31:24.0309 1768 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
22:31:24.0309 1768 AudioSrv - ok
22:31:24.0399 1768 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
22:31:24.0399 1768 audstub - ok
22:31:24.0550 1768 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
22:31:24.0550 1768 avast! Antivirus - ok
22:31:24.0630 1768 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
22:31:24.0630 1768 Beep - ok
22:31:24.0730 1768 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
22:31:24.0760 1768 BITS - ok
22:31:24.0820 1768 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
22:31:24.0840 1768 Browser - ok
22:31:24.0890 1768 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
22:31:24.0890 1768 cbidf2k - ok
22:31:24.0910 1768 cd20xrnt - ok
22:31:24.0960 1768 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
22:31:24.0970 1768 Cdaudio - ok
22:31:25.0040 1768 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
22:31:25.0040 1768 Cdfs - ok
22:31:25.0070 1768 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:31:25.0090 1768 Cdrom - ok
22:31:25.0111 1768 Changer - ok
22:31:25.0181 1768 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
22:31:25.0181 1768 CiSvc - ok
22:31:25.0231 1768 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
22:31:25.0231 1768 ClipSrv - ok
22:31:25.0301 1768 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:31:25.0301 1768 clr_optimization_v2.0.50727_32 - ok
22:31:25.0361 1768 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
22:31:25.0361 1768 CmBatt - ok
22:31:25.0381 1768 CmdIde - ok
22:31:25.0411 1768 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
22:31:25.0421 1768 Compbatt - ok
22:31:25.0431 1768 COMSysApp - ok
22:31:25.0471 1768 Cpqarray - ok
22:31:25.0521 1768 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
22:31:25.0531 1768 CryptSvc - ok
22:31:25.0611 1768 [ 2AC260A7F6292F3FC9BCD4ED6D2EF290 ] cs429x C:\WINDOWS\system32\drivers\cwawdm.sys
22:31:25.0611 1768 cs429x - ok
22:31:25.0631 1768 dac2w2k - ok
22:31:25.0641 1768 dac960nt - ok
22:31:25.0731 1768 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
22:31:25.0761 1768 DcomLaunch - ok
22:31:25.0842 1768 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
22:31:25.0852 1768 Dhcp - ok
22:31:25.0882 1768 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
22:31:25.0882 1768 Disk - ok
22:31:25.0902 1768 dmadmin - ok
22:31:25.0992 1768 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
22:31:26.0012 1768 dmboot - ok
22:31:26.0042 1768 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
22:31:26.0042 1768 dmio - ok
22:31:26.0142 1768 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
22:31:26.0142 1768 dmload - ok
22:31:26.0212 1768 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
22:31:26.0212 1768 dmserver - ok
22:31:26.0272 1768 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
22:31:26.0272 1768 DMusic - ok
22:31:26.0332 1768 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
22:31:26.0342 1768 Dnscache - ok
22:31:26.0422 1768 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
22:31:26.0432 1768 Dot3svc - ok
22:31:26.0452 1768 dpti2o - ok
22:31:26.0472 1768 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
22:31:26.0482 1768 drmkaud - ok
22:31:26.0523 1768 [ DDDC97FFD19A80FEC4A23D459CADFB5D ] DWUSBDNT C:\WINDOWS\system32\DRIVERS\dwusbdnt.sys
22:31:26.0523 1768 DWUSBDNT - ok
22:31:26.0563 1768 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
22:31:26.0573 1768 EapHost - ok
22:31:26.0643 1768 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
22:31:26.0653 1768 ERSvc - ok
22:31:26.0723 1768 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
22:31:26.0753 1768 Eventlog - ok
22:31:26.0843 1768 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\System32\es.dll
22:31:26.0853 1768 EventSystem - ok
22:31:26.0933 1768 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
22:31:26.0943 1768 Fastfat - ok
22:31:27.0003 1768 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
22:31:27.0033 1768 FastUserSwitchingCompatibility - ok
22:31:27.0063 1768 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
22:31:27.0063 1768 Fdc - ok
22:31:27.0123 1768 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
22:31:27.0133 1768 Fips - ok
22:31:27.0153 1768 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:31:27.0153 1768 Flpydisk - ok
22:31:27.0284 1768 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
22:31:27.0294 1768 FltMgr - ok
22:31:27.0394 1768 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:31:27.0394 1768 FontCache3.0.0.0 - ok
22:31:27.0434 1768 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:31:27.0444 1768 Fs_Rec - ok
22:31:27.0504 1768 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:31:27.0514 1768 Ftdisk - ok
22:31:27.0574 1768 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:31:27.0594 1768 Gpc - ok
22:31:27.0694 1768 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:31:27.0694 1768 helpsvc - ok
22:31:27.0714 1768 HidServ - ok
22:31:27.0784 1768 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:31:27.0784 1768 HidUsb - ok
22:31:27.0864 1768 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
22:31:27.0884 1768 hkmsvc - ok
22:31:27.0905 1768 hpn - ok
22:31:27.0975 1768 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
22:31:27.0985 1768 HTTP - ok
22:31:28.0065 1768 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
22:31:28.0105 1768 HTTPFilter - ok
22:31:28.0175 1768 [ 20330198554B7DDB44403AF21D6AE179 ] hwdatacard C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
22:31:28.0175 1768 hwdatacard - ok
22:31:28.0225 1768 i2omgmt - ok
22:31:28.0245 1768 i2omp - ok
22:31:28.0275 1768 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:31:28.0275 1768 i8042prt - ok
22:31:28.0325 1768 [ 1406D6EF4436AEE970EFE13193123965 ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
22:31:28.0325 1768 ialm - ok
22:31:28.0455 1768 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:31:28.0475 1768 idsvc - ok
22:31:28.0535 1768 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
22:31:28.0535 1768 Imapi - ok
22:31:28.0606 1768 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\System32\imapi.exe
22:31:28.0626 1768 ImapiService - ok
22:31:28.0646 1768 ini910u - ok
22:31:28.0696 1768 [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
22:31:28.0696 1768 IntelIde - ok
22:31:28.0766 1768 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:31:28.0776 1768 intelppm - ok
22:31:28.0826 1768 [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw C:\WINDOWS\system32\drivers\ip6fw.sys
22:31:28.0846 1768 ip6fw - ok
22:31:28.0906 1768 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:31:28.0906 1768 IpFilterDriver - ok
22:31:28.0926 1768 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:31:28.0936 1768 IpInIp - ok
22:31:28.0986 1768 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:31:28.0996 1768 IpNat - ok
22:31:29.0056 1768 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:31:29.0066 1768 IPSec - ok
22:31:29.0126 1768 [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda C:\WINDOWS\system32\DRIVERS\irda.sys
22:31:29.0136 1768 irda - ok
22:31:29.0176 1768 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
22:31:29.0176 1768 IRENUM - ok
22:31:29.0236 1768 [ 8024EA8C5B2D2A4D201F418B0AADB804 ] Irmon C:\WINDOWS\System32\irmon.dll
22:31:29.0246 1768 Irmon - ok
22:31:29.0337 1768 [ 0501F0B9AB08425F8C0EACBDCC04AA32 ] irsir C:\WINDOWS\system32\DRIVERS\irsir.sys
22:31:29.0347 1768 irsir - ok
22:31:29.0387 1768 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:31:29.0397 1768 isapnp - ok
22:31:29.0457 1768 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:31:29.0457 1768 Kbdclass - ok
22:31:29.0477 1768 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:31:29.0487 1768 kbdhid - ok
22:31:29.0527 1768 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
22:31:29.0537 1768 kmixer - ok
22:31:29.0607 1768 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
22:31:29.0607 1768 KSecDD - ok
22:31:29.0687 1768 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
22:31:29.0717 1768 lanmanserver - ok
22:31:29.0797 1768 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
22:31:29.0827 1768 lanmanworkstation - ok
22:31:29.0847 1768 lbrtfdc - ok
22:31:29.0927 1768 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
22:31:29.0947 1768 LmHosts - ok
22:31:30.0018 1768 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
22:31:30.0028 1768 MBAMProtector - ok
22:31:30.0118 1768 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
22:31:30.0128 1768 MBAMScheduler - ok
22:31:30.0268 1768 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
22:31:30.0358 1768 MBAMService - ok
22:31:30.0408 1768 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
22:31:30.0428 1768 Messenger - ok
22:31:30.0478 1768 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
22:31:30.0488 1768 mnmdd - ok
22:31:30.0568 1768 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\System32\mnmsrvc.exe
22:31:30.0578 1768 mnmsrvc - ok
22:31:30.0648 1768 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
22:31:30.0658 1768 Modem - ok
22:31:30.0679 1768 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:31:30.0689 1768 Mouclass - ok
22:31:30.0749 1768 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:31:30.0759 1768 mouhid - ok
22:31:30.0789 1768 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
22:31:30.0789 1768 MountMgr - ok
22:31:30.0879 1768 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
22:31:30.0889 1768 MozillaMaintenance - ok
22:31:30.0909 1768 mraid35x - ok
22:31:30.0929 1768 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:31:30.0939 1768 MRxDAV - ok
22:31:31.0029 1768 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:31:31.0049 1768 MRxSmb - ok
22:31:31.0099 1768 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\System32\msdtc.exe
22:31:31.0119 1768 MSDTC - ok
22:31:31.0179 1768 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
22:31:31.0179 1768 Msfs - ok
22:31:31.0249 1768 [ 95C6432151CCFF8617352F8E616A1AA4 ] MSIRCOMM C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys
22:31:31.0259 1768 MSIRCOMM - ok
22:31:31.0279 1768 MSIServer - ok
22:31:31.0400 1768 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:31:31.0400 1768 MSKSSRV - ok
22:31:31.0420 1768 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:31:31.0420 1768 MSPCLOCK - ok
22:31:31.0460 1768 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
22:31:31.0470 1768 MSPQM - ok
22:31:31.0490 1768 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:31:31.0500 1768 mssmbios - ok
22:31:31.0570 1768 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
22:31:31.0570 1768 Mup - ok
22:31:31.0650 1768 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
22:31:31.0680 1768 napagent - ok
22:31:31.0760 1768 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
22:31:31.0770 1768 NDIS - ok
22:31:31.0850 1768 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:31:31.0850 1768 NdisTapi - ok
22:31:31.0890 1768 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:31:31.0890 1768 Ndisuio - ok
22:31:31.0930 1768 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:31:31.0940 1768 NdisWan - ok
22:31:31.0980 1768 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
22:31:31.0980 1768 NDProxy - ok
22:31:32.0050 1768 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
22:31:32.0060 1768 NetBIOS - ok
22:31:32.0101 1768 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
22:31:32.0101 1768 NetBT - ok
22:31:32.0221 1768 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
22:31:32.0241 1768 NetDDE - ok
22:31:32.0261 1768 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
22:31:32.0281 1768 NetDDEdsdm - ok
22:31:32.0331 1768 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\System32\lsass.exe
22:31:32.0351 1768 Netlogon - ok
22:31:32.0401 1768 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
22:31:32.0421 1768 Netman - ok
22:31:32.0491 1768 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:31:32.0501 1768 NetTcpPortSharing - ok
22:31:32.0551 1768 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
22:31:32.0581 1768 Nla - ok
22:31:32.0631 1768 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
22:31:32.0641 1768 Npfs - ok
22:31:32.0671 1768 [ 2ADC0CA9945C65284B3D19BC18765974 ] NSCIRDA C:\WINDOWS\system32\DRIVERS\nscirda.sys
22:31:32.0671 1768 NSCIRDA - ok
22:31:32.0731 1768 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
22:31:32.0741 1768 Ntfs - ok
22:31:32.0772 1768 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\System32\lsass.exe
22:31:32.0782 1768 NtLmSsp - ok
22:31:32.0862 1768 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
22:31:32.0892 1768 NtmsSvc - ok
22:31:32.0942 1768 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
22:31:32.0952 1768 Null - ok
22:31:33.0012 1768 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:31:33.0012 1768 NwlnkFlt - ok
22:31:33.0032 1768 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:31:33.0042 1768 NwlnkFwd - ok
22:31:33.0102 1768 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
22:31:33.0112 1768 Parport - ok
22:31:33.0162 1768 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
22:31:33.0162 1768 PartMgr - ok
22:31:33.0262 1768 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
22:31:33.0262 1768 ParVdm - ok
22:31:33.0282 1768 PCASp50 - ok
22:31:33.0382 1768 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
22:31:33.0382 1768 PCI - ok
22:31:33.0402 1768 PCIDump - ok
22:31:33.0463 1768 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
22:31:33.0463 1768 PCIIde - ok
22:31:33.0513 1768 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
22:31:33.0523 1768 Pcmcia - ok
22:31:33.0543 1768 PDCOMP - ok
22:31:33.0563 1768 PDFRAME - ok
22:31:33.0573 1768 PDRELI - ok
22:31:33.0593 1768 PDRFRAME - ok
22:31:33.0603 1768 perc2 - ok
22:31:33.0623 1768 perc2hib - ok
22:31:33.0773 1768 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
22:31:33.0803 1768 PlugPlay - ok
22:31:33.0833 1768 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\System32\lsass.exe
22:31:33.0863 1768 PolicyAgent - ok
22:31:33.0883 1768 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:31:33.0893 1768 PptpMiniport - ok
22:31:33.0913 1768 [ 7EB15DCE4EC3A0220BD796A15C18186E ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
22:31:33.0913 1768 Processor - ok
22:31:33.0933 1768 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
22:31:33.0953 1768 ProtectedStorage - ok
22:31:33.0983 1768 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
22:31:33.0993 1768 PSched - ok
22:31:34.0053 1768 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:31:34.0063 1768 Ptilink - ok
22:31:34.0073 1768 ql1080 - ok
22:31:34.0103 1768 Ql10wnt - ok
22:31:34.0113 1768 ql12160 - ok
22:31:34.0133 1768 ql1240 - ok
22:31:34.0143 1768 ql1280 - ok
22:31:34.0194 1768 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:31:34.0194 1768 RasAcd - ok
22:31:34.0264 1768 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
22:31:34.0284 1768 RasAuto - ok
22:31:34.0344 1768 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
22:31:34.0354 1768 Rasirda - ok
22:31:34.0384 1768 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:31:34.0384 1768 Rasl2tp - ok
22:31:34.0474 1768 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
22:31:34.0494 1768 RasMan - ok
22:31:34.0534 1768 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:31:34.0544 1768 RasPppoe - ok
22:31:34.0564 1768 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
22:31:34.0574 1768 Raspti - ok
22:31:34.0654 1768 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:31:34.0664 1768 Rdbss - ok
22:31:34.0694 1768 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:31:34.0694 1768 RDPCDD - ok
22:31:34.0754 1768 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:31:34.0764 1768 rdpdr - ok
22:31:34.0834 1768 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
22:31:34.0855 1768 RDPWD - ok
22:31:34.0925 1768 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
22:31:34.0955 1768 RDSessMgr - ok
22:31:35.0045 1768 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
22:31:35.0055 1768 RealNetworks Downloader Resolver Service - ok
22:31:35.0085 1768 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
22:31:35.0105 1768 redbook - ok
22:31:35.0195 1768 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
22:31:35.0215 1768 RemoteAccess - ok
22:31:35.0285 1768 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
22:31:35.0305 1768 RemoteRegistry - ok
22:31:35.0365 1768 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\System32\locator.exe
22:31:35.0375 1768 RpcLocator - ok
22:31:35.0445 1768 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
22:31:35.0475 1768 RpcSs - ok
22:31:35.0546 1768 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\System32\rsvp.exe
22:31:35.0576 1768 RSVP - ok
22:31:35.0646 1768 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
22:31:35.0656 1768 rtl8139 - ok
22:31:35.0686 1768 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
22:31:35.0696 1768 SamSs - ok
22:31:35.0776 1768 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
22:31:35.0806 1768 SCardSvr - ok
22:31:35.0866 1768 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
22:31:35.0896 1768 Schedule - ok
22:31:35.0976 1768 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:31:35.0976 1768 Secdrv - ok
22:31:36.0036 1768 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
22:31:36.0066 1768 seclogon - ok
22:31:36.0156 1768 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
22:31:36.0226 1768 SENS - ok
22:31:36.0297 1768 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\drivers\Serial.sys
22:31:36.0307 1768 Serial - ok
22:31:36.0367 1768 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
22:31:36.0377 1768 Sfloppy - ok
22:31:36.0457 1768 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
22:31:36.0477 1768 SharedAccess - ok
22:31:36.0517 1768 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
22:31:36.0547 1768 ShellHWDetection - ok
22:31:36.0557 1768 Simbad - ok
22:31:36.0587 1768 Sparrow - ok
22:31:36.0647 1768 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
22:31:36.0657 1768 splitter - ok
22:31:36.0707 1768 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
22:31:36.0737 1768 Spooler - ok
22:31:36.0777 1768 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
22:31:36.0787 1768 sr - ok
22:31:36.0857 1768 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\System32\srsvc.dll
22:31:36.0887 1768 srservice - ok
22:31:36.0958 1768 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
22:31:36.0968 1768 Srv - ok
22:31:36.0998 1768 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
22:31:37.0028 1768 SSDPSRV - ok
22:31:37.0438 1768 [ 20CCA549FBDCFF64C46179D82847B88E ] ssinstall C:\WINDOWS\System32\ssins.exe
22:31:37.0629 1768 ssinstall - ok
22:31:37.0699 1768 [ 50F8E144C69A798623E52A514EED9E06 ] st3bus28 C:\WINDOWS\system32\DRIVERS\st3bus28.sys
22:31:37.0709 1768 st3bus28 - ok
22:31:37.0739 1768 [ 0BBB23DDB8D25E1D4D68B757A714D653 ] st3mp28 C:\WINDOWS\system32\DRIVERS\st3mp28.sys
22:31:37.0749 1768 st3mp28 - ok
22:31:37.0829 1768 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
22:31:37.0869 1768 stisvc - ok
22:31:37.0939 1768 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
22:31:37.0939 1768 swenum - ok
22:31:37.0969 1768 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
22:31:37.0979 1768 swmidi - ok
22:31:37.0999 1768 SwPrv - ok
22:31:38.0019 1768 symc810 - ok
22:31:38.0039 1768 symc8xx - ok
22:31:38.0059 1768 sym_hi - ok
22:31:38.0079 1768 sym_u3 - ok
22:31:38.0139 1768 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
22:31:38.0149 1768 sysaudio - ok
22:31:38.0209 1768 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
22:31:38.0239 1768 SysmonLog - ok
22:31:38.0299 1768 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
22:31:38.0330 1768 TapiSrv - ok
22:31:38.0420 1768 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:31:38.0440 1768 Tcpip - ok
22:31:38.0510 1768 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
22:31:38.0520 1768 TDPIPE - ok
22:31:38.0560 1768 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
22:31:38.0560 1768 TDTCP - ok
22:31:38.0600 1768 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
22:31:38.0610 1768 TermDD - ok
22:31:38.0700 1768 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
22:31:38.0730 1768 TermService - ok
22:31:38.0780 1768 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
22:31:38.0800 1768 Themes - ok
22:31:38.0860 1768 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\System32\tlntsvr.exe
22:31:38.0890 1768 TlntSvr - ok
22:31:38.0980 1768 [ EFEF22B9577E5051057FDE1AE381B50C ] TomTomHOMEService C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
22:31:38.0980 1768 TomTomHOMEService - ok
22:31:39.0000 1768 TosIde - ok
22:31:39.0071 1768 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
22:31:39.0111 1768 TrkWks - ok
22:31:39.0261 1768 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
22:31:39.0271 1768 Udfs - ok
22:31:39.0291 1768 ultra - ok
22:31:39.0361 1768 [ AB0A7CA90D9E3D6A193905DC1715DED0 ] UMWdf C:\WINDOWS\System32\wdfmgr.exe
22:31:39.0391 1768 UMWdf - ok
22:31:39.0481 1768 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
22:31:39.0501 1768 Update - ok
22:31:39.0581 1768 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
22:31:39.0621 1768 upnphost - ok
22:31:39.0661 1768 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
22:31:39.0681 1768 UPS - ok
22:31:39.0742 1768 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:31:39.0752 1768 usbccgp - ok
22:31:39.0812 1768 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:31:39.0822 1768 usbehci - ok
22:31:39.0852 1768 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:31:39.0862 1768 usbhub - ok
22:31:39.0892 1768 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:31:39.0902 1768 usbprint - ok
22:31:39.0932 1768 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:31:39.0942 1768 usbscan - ok
22:31:39.0972 1768 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:31:39.0972 1768 USBSTOR - ok
22:31:40.0012 1768 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:31:40.0022 1768 usbuhci - ok
22:31:40.0082 1768 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
22:31:40.0092 1768 VgaSave - ok
22:31:40.0112 1768 ViaIde - ok
22:31:40.0162 1768 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
22:31:40.0172 1768 VolSnap - ok
22:31:40.0362 1768 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
22:31:40.0402 1768 VSS - ok
22:31:40.0463 1768 [ F79E34B3D14FD8BE26A8C4BAB19028B3 ] vwmfbus C:\WINDOWS\system32\DRIVERS\vwmfbus.sys
22:31:40.0473 1768 vwmfbus - ok
22:31:40.0513 1768 [ D3A2CA672674C188795696246C37F0A5 ] vwmfdiag C:\WINDOWS\system32\DRIVERS\vwmfdiag.sys
22:31:40.0523 1768 vwmfdiag - ok
22:31:40.0553 1768 [ 20235AC0832F4FEC190EBC867811A708 ] vwmfmdfl C:\WINDOWS\system32\DRIVERS\vwmfmdfl.sys
22:31:40.0563 1768 vwmfmdfl - ok
22:31:40.0603 1768 [ 4EC7D1B13C0A211830A58360D690C8CE ] vwmfmdm C:\WINDOWS\system32\DRIVERS\vwmfmdm.sys
22:31:40.0613 1768 vwmfmdm - ok
22:31:40.0643 1768 [ CD7979263117667B9DCBC4403BAED9FE ] vwmfserd C:\WINDOWS\system32\DRIVERS\vwmfserd.sys
22:31:40.0653 1768 vwmfserd - ok
22:31:40.0733 1768 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\System32\w32time.dll
22:31:40.0763 1768 W32Time - ok
22:31:40.0843 1768 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:31:40.0853 1768 Wanarp - ok
22:31:40.0873 1768 WDICA - ok
22:31:40.0903 1768 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
22:31:40.0913 1768 wdmaud - ok
22:31:40.0983 1768 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
22:31:41.0013 1768 WebClient - ok
22:31:41.0224 1768 winmgmt - ok
22:31:41.0304 1768 [ 140EF97B64F560FD78643CAE2CDAD838 ] WmdmPmSN C:\WINDOWS\System32\mspmsnsv.dll
22:31:41.0314 1768 WmdmPmSN - ok
22:31:41.0424 1768 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
22:31:41.0444 1768 Wmi - ok
22:31:41.0564 1768 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\System32\wbem\wmiapsrv.exe
22:31:41.0574 1768 WmiApSrv - ok
22:31:41.0634 1768 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:31:41.0644 1768 WS2IFSL - ok
22:31:41.0714 1768 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
22:31:41.0744 1768 wscsvc - ok
22:31:41.0774 1768 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
22:31:41.0805 1768 wuauserv - ok
22:31:41.0905 1768 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
22:31:41.0945 1768 WZCSVC - ok
22:31:42.0015 1768 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
22:31:42.0045 1768 xmlprov - ok
22:31:42.0115 1768 [ FD1F4E9CF06C71C8D73A24ACF18D8296 ] {6080A529-897E-4629-A488-ABA0C29B635E} C:\WINDOWS\system32\drivers\ialmsbw.sys
22:31:42.0125 1768 {6080A529-897E-4629-A488-ABA0C29B635E} - ok
22:31:42.0235 1768 [ D4D7331D33D1FA73E588E5CE0D90A4C1 ] {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} C:\WINDOWS\system32\drivers\ialmkchw.sys
22:31:42.0235 1768 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} - ok
22:31:42.0245 1768 ================ Scan global ===============================
22:31:42.0395 1768 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
22:31:42.0485 1768 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
22:31:42.0546 1768 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
22:31:42.0606 1768 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
22:31:42.0626 1768 [Global] - ok
22:31:42.0636 1768 ================ Scan MBR ==================================
22:31:42.0656 1768 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
22:31:42.0896 1768 \Device\Harddisk0\DR0 - ok
22:31:42.0906 1768 ================ Scan VBR ==================================
22:31:42.0906 1768 [ F719591A6339F1410C5A4A5B1B9B5628 ] \Device\Harddisk0\DR0\Partition1
22:31:42.0916 1768 \Device\Harddisk0\DR0\Partition1 - ok
22:31:42.0916 1768 ============================================================
22:31:42.0916 1768 Scan finished
22:31:42.0916 1768 ============================================================
22:31:42.0946 4084 Detected object count: 0
22:31:42.0946 4084 Actual detected object count: 0
22:32:55.0571 2960 Deinitialize success

---------------------------------------------------------------------------------------------------------------------------------

2) ComboFix si chtěl stáhnout a nainstalovat "Konzolu pro zotavení", takže jsem v jeho průběhu připojil PC k internetu, abych mu vyhověl. DOUFÁM, ŽE TO NENÍ NIČEMU NA ŠKODU.

Mimo jiné mi vymazal část programu na účetnictví, který už mám dávno a problémy nikdy předtím nedělal. CO S TÍM ??

Stav s CPU pořád stejný.



ComboFix 13-03-19.01 - Zed 19.03.2013 23:28:24.1.1 - x86
Spuštěný z: c:\documents and settings\Zed\Dokumenty\Sta×enÚ soubory\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Zed\Plocha\Setup.exe
C:\UCTO2010
c:\ucto2010\{GLOB}\ADRWEB.000
c:\ucto2010\{GLOB}\BANKY.000
c:\ucto2010\{GLOB}\BANKYHB.008
c:\ucto2010\{GLOB}\CISOKR.097
c:\ucto2010\{GLOB}\DATA.000
c:\ucto2010\{GLOB}\DATA.X00
c:\ucto2010\{GLOB}\EXPDEKLA.099
c:\ucto2010\{GLOB}\EXPDEKLA.T99
c:\ucto2010\{GLOB}\FAQ.000
c:\ucto2010\{GLOB}\FAQ.X00
c:\ucto2010\{GLOB}\FIRMY.000
c:\ucto2010\{GLOB}\FORMS.099
c:\ucto2010\{GLOB}\FORMS.T99
c:\ucto2010\{GLOB}\KODPOJ.004
c:\ucto2010\{GLOB}\MODULY.000
c:\ucto2010\{GLOB}\NAHRNEM.004
c:\ucto2010\{GLOB}\NEZDAN.000
c:\ucto2010\{GLOB}\OKRESY.000
c:\ucto2010\{GLOB}\PARAM1.000
c:\ucto2010\{GLOB}\PLATIDLA.004
c:\ucto2010\{GLOB}\POSTY.000
c:\ucto2010\{GLOB}\REPORT.099
c:\ucto2010\{GLOB}\REPORT.T99
c:\ucto2010\{GLOB}\SAZDPH.000
c:\ucto2010\{GLOB}\SAZDPH.X00
c:\ucto2010\{GLOB}\SAZDZP.000
c:\ucto2010\{GLOB}\SAZDZPM.004
c:\ucto2010\{GLOB}\SAZODP.009
c:\ucto2010\{GLOB}\SAZODP.X09
c:\ucto2010\{GLOB}\SLOVNIK.006
c:\ucto2010\{GLOB}\ZALDZP.004
c:\ucto2010\{GLOB}\ZDRSOC.004
c:\ucto2010\{GLOB}\ZUJ.097
c:\ucto2010\{INFO}\ADRZPRAV.000
c:\ucto2010\{INFO}\ADRZPRAV.T00
c:\ucto2010\{INFO}\INFOAUTO.000
c:\ucto2010\{INFO}\INFOPROB.000
c:\ucto2010\{INFO}\INFOPROB.T00
c:\ucto2010\{INFO}\INFOPROB.X00
c:\ucto2010\{INFO}\INFOTEMA.000
c:\ucto2010\{INFO}\KONFEREN.000
c:\ucto2010\{INFO}\KONFEREN.T00
c:\ucto2010\{INFO}\PGMKOD.000
c:\ucto2010\{INFO}\PROGRAMY.000
c:\ucto2010\{INFO}\PROGRAMY.T00
c:\ucto2010\{INFO}\SLUZKOD.000
c:\ucto2010\{NOVA}\ADRESY.000
c:\ucto2010\{NOVA}\ADRESY.T00
c:\ucto2010\{NOVA}\CISABS.004
c:\ucto2010\{NOVA}\CISDOKL.001
c:\ucto2010\{NOVA}\CISDRUH.001
c:\ucto2010\{NOVA}\CISPOH.001
c:\ucto2010\{NOVA}\CISPOZN.000
c:\ucto2010\{NOVA}\CISPOZN.T00
c:\ucto2010\{NOVA}\CIST.000
c:\ucto2010\{NOVA}\CISTXT.006
c:\ucto2010\{NOVA}\CISVYKON.001
c:\ucto2010\{NOVA}\KATEG.004
c:\ucto2010\{NOVA}\PARAM2.000
c:\ucto2010\{NOVA}\PARAM2.T00
c:\ucto2010\{NOVA}\PRACSML.004
c:\ucto2010\{NOVA}\PRACSML.T04
c:\ucto2010\{NOVA}\TRIDY.004
c:\ucto2010\{NOVA}\TYPDOKL.001
c:\ucto2010\{NOVA}\UKOLY.000
c:\ucto2010\{NOVA}\UKOLY.T00
c:\ucto2010\{NOVA}\UZAV.001
c:\ucto2010\{NOVA}\ZAOKFA.006
c:\ucto2010\{OBNV}.BAT
c:\ucto2010\{OBNV}\BANKYHB.008
c:\ucto2010\{OBNV}\KODPOJ.004
c:\ucto2010\{OBNV}\MODULY.000
c:\ucto2010\{OBNV}\NAHRNEM.004
c:\ucto2010\{OBNV}\NEZDAN.000
c:\ucto2010\{OBNV}\PLATIDLA.004
c:\ucto2010\{OBNV}\SAZDPH.000
c:\ucto2010\{OBNV}\SAZDZP.000
c:\ucto2010\{OBNV}\SAZDZPM.004
c:\ucto2010\{OBNV}\SAZODP.009
c:\ucto2010\{OBNV}\SLOVNIK.006
c:\ucto2010\{OBNV}\UCTO2010.CAT
c:\ucto2010\{OBNV}\UCTOOL.EX
c:\ucto2010\{OBNV}\UTISK04.EX
c:\ucto2010\{OBNV}\ZALDZP.004
c:\ucto2010\{OBNV}\ZDRSOC.004
c:\ucto2010\{PDF1}\DAVKYK2.PDF
c:\ucto2010\{PDF1}\DAVKYK3.PDF
c:\ucto2010\{PDF1}\DAVKYP2.PDF
c:\ucto2010\{PDF1}\DAVKYP3.PDF
c:\ucto2010\{PDF1}\DPH15.PDF
c:\ucto2010\{PDF1}\DPH15P.PDF
c:\ucto2010\{PDF1}\DPH16.PDF
c:\ucto2010\{PDF1}\DPH16P.PDF
c:\ucto2010\{PDF1}\DZP.PDF
c:\ucto2010\{PDF1}\DZP_1.PDF
c:\ucto2010\{PDF1}\DZP_2.PDF
c:\ucto2010\{PDF1}\DZP_3.PDF
c:\ucto2010\{PDF1}\DZP_7.PDF
c:\ucto2010\{PDF1}\DZPP.PDF
c:\ucto2010\{PDF1}\ELDP09B.PDF
c:\ucto2010\{PDF1}\ELDP09F.PDF
c:\ucto2010\{PDF1}\ELDP09K.PDF
c:\ucto2010\{PDF1}\ELDP09M.PDF
c:\ucto2010\{PDF1}\ELDP09P.PDF
c:\ucto2010\{PDF1}\ELDPF.PDF
c:\ucto2010\{PDF1}\ELDPK.PDF
c:\ucto2010\{PDF1}\ELDPM.PDF
c:\ucto2010\{PDF1}\ELDPP.PDF
c:\ucto2010\{PDF1}\HROMOZN.PDF
c:\ucto2010\{PDF1}\HROMOZNP.PDF
c:\ucto2010\{PDF1}\CHYBCAST.PDF
c:\ucto2010\{PDF1}\NEMOC.PDF
c:\ucto2010\{PDF1}\NEMOCP.PDF
c:\ucto2010\{PDF1}\ODCITPOL.PDF
c:\ucto2010\{PDF1}\ONZ.PDF
c:\ucto2010\{PDF1}\ONZK.PDF
c:\ucto2010\{PDF1}\ONZP.PDF
c:\ucto2010\{PDF1}\OSSZ.PDF
c:\ucto2010\{PDF1}\OSSZK.PDF
c:\ucto2010\{PDF1}\OSSZP.PDF
c:\ucto2010\{PDF1}\POCZAM.PDF
c:\ucto2010\{PDF1}\POJZAM.PDF
c:\ucto2010\{PDF1}\SILDAN.PDF
c:\ucto2010\{PDF1}\SILDANPO.PDF
c:\ucto2010\{PDF1}\SILDANPR.PDF
c:\ucto2010\{PDF1}\SOUHLAS.PDF
c:\ucto2010\{PDF1}\SOUHLASP.PDF
c:\ucto2010\{PDF1}\VYUCT.PDF
c:\ucto2010\{PDF1}\VYUCTP.PDF
c:\ucto2010\{PDF1}\VYUCTSRP.PDF
c:\ucto2010\{PDF1}\VYUCTSRZ.PDF
c:\ucto2010\{PDF1}\VZP.PDF
c:\ucto2010\{PDF1}\VZPP.PDF
c:\ucto2010\{PDF2}\DLBL.PDF
c:\ucto2010\{PDF2}\DLBL2.PDF
c:\ucto2010\{PDF2}\DLBW.PDF
c:\ucto2010\{PDF2}\DLBW2.PDF
c:\ucto2010\{PDF2}\DLGR.PDF
c:\ucto2010\{PDF2}\DLGR2.PDF
c:\ucto2010\{PDF2}\FABL.PDF
c:\ucto2010\{PDF2}\FABL2.PDF
c:\ucto2010\{PDF2}\FABW.PDF
c:\ucto2010\{PDF2}\FABW2.PDF
c:\ucto2010\{PDF2}\FAGR.PDF
c:\ucto2010\{PDF2}\FAGR2.PDF
c:\ucto2010\{PDF2}\OBBL.PDF
c:\ucto2010\{PDF2}\OBBL2.PDF
c:\ucto2010\{PDF2}\OBBW.PDF
c:\ucto2010\{PDF2}\OBBW2.PDF
c:\ucto2010\{PDF2}\OBGR.PDF
c:\ucto2010\{PDF2}\OBGR2.PDF
c:\ucto2010\{PDF3}\DAVKYK2X.DEF
c:\ucto2010\{PDF3}\DAVKYK2X.PDF
c:\ucto2010\{PDF3}\DAVKYK3X.DEF
c:\ucto2010\{PDF3}\DAVKYK3X.PDF
c:\ucto2010\{PDF3}\DPH15X.DEF
c:\ucto2010\{PDF3}\DPH15X.PDF
c:\ucto2010\{PDF3}\DPH16X.DEF
c:\ucto2010\{PDF3}\DPH16X.PDF
c:\ucto2010\{PDF3}\DZP_1X.DEF
c:\ucto2010\{PDF3}\DZP_1X.PDF
c:\ucto2010\{PDF3}\DZP_2X.DEF
c:\ucto2010\{PDF3}\DZP_2X.PDF
c:\ucto2010\{PDF3}\DZP_3X.DEF
c:\ucto2010\{PDF3}\DZP_3X.PDF
c:\ucto2010\{PDF3}\DZPX.DEF
c:\ucto2010\{PDF3}\DZPX.PDF
c:\ucto2010\{PDF3}\HROMOZNX.DEF
c:\ucto2010\{PDF3}\HROMOZNX.PDF
c:\ucto2010\{PDF3}\CHYBCASX.DEF
c:\ucto2010\{PDF3}\CHYBCASX.PDF
c:\ucto2010\{PDF3}\NEMOCX.DEF
c:\ucto2010\{PDF3}\NEMOCX.PDF
c:\ucto2010\{PDF3}\OSSZKX.DEF
c:\ucto2010\{PDF3}\OSSZKX.PDF
c:\ucto2010\{PDF3}\OSSZX.DEF
c:\ucto2010\{PDF3}\OSSZX.PDF
c:\ucto2010\{PDF3}\POCZAMX.DEF
c:\ucto2010\{PDF3}\POCZAMX.PDF
c:\ucto2010\{PDF3}\POJZAMX.DEF
c:\ucto2010\{PDF3}\POJZAMX.PDF
c:\ucto2010\{PDF3}\SILDANPX.DEF
c:\ucto2010\{PDF3}\SILDANPX.PDF
c:\ucto2010\{PDF3}\SILDANX.DEF
c:\ucto2010\{PDF3}\SILDANX.PDF
c:\ucto2010\{PDF3}\SOUHLASX.DEF
c:\ucto2010\{PDF3}\SOUHLASX.PDF
c:\ucto2010\{PDF3}\VYUCTSRX.DEF
c:\ucto2010\{PDF3}\VYUCTSRX.PDF
c:\ucto2010\{PDF3}\VYUCTX.DEF
c:\ucto2010\{PDF3}\VYUCTX.PDF
c:\ucto2010\{PDF3}\VZPX.DEF
c:\ucto2010\{PDF3}\VZPX.PDF
c:\ucto2010\{PRIK}\ABSENCE.004
c:\ucto2010\{PRIK}\ADRESY.000
c:\ucto2010\{PRIK}\ADRESY.T00
c:\ucto2010\{PRIK}\ADRESY.X00
c:\ucto2010\{PRIK}\ADRSPEC.000
c:\ucto2010\{PRIK}\ADRSPEC.T00
c:\ucto2010\{PRIK}\ARCHIVM.004
c:\ucto2010\{PRIK}\ARCHIVM.T04
c:\ucto2010\{PRIK}\AUTA.005
c:\ucto2010\{PRIK}\AUTA.T05
c:\ucto2010\{PRIK}\BANKA1.008
c:\ucto2010\{PRIK}\CE_AUTA.006
c:\ucto2010\{PRIK}\CE_AUTA.T06
c:\ucto2010\{PRIK}\CE_TRASY.006
c:\ucto2010\{PRIK}\CEST_FH.006
c:\ucto2010\{PRIK}\CEST_FH.T06
c:\ucto2010\{PRIK}\CEST_FP.006
c:\ucto2010\{PRIK}\CEST_FS.006
c:\ucto2010\{PRIK}\CEST_VH.006
c:\ucto2010\{PRIK}\CEST_VH.T06
c:\ucto2010\{PRIK}\CEST_VP.006
c:\ucto2010\{PRIK}\CEST_VS.006
c:\ucto2010\{PRIK}\CISABS.004
c:\ucto2010\{PRIK}\CISCEST.005
c:\ucto2010\{PRIK}\CISDOKL.001
c:\ucto2010\{PRIK}\CISDRUH.001
c:\ucto2010\{PRIK}\CISDRUH.X01
c:\ucto2010\{PRIK}\CISPOH.001
c:\ucto2010\{PRIK}\CISPOH.X01
c:\ucto2010\{PRIK}\CISPOL.006
c:\ucto2010\{PRIK}\CISPOZN.000
c:\ucto2010\{PRIK}\CISPOZN.T00
c:\ucto2010\{PRIK}\CIST.000
c:\ucto2010\{PRIK}\CIST.X00
c:\ucto2010\{PRIK}\CISTEXT.001
c:\ucto2010\{PRIK}\CISTXT.006
c:\ucto2010\{PRIK}\CISUCEL.005
c:\ucto2010\{PRIK}\CISUKOL.004
c:\ucto2010\{PRIK}\CISVYKON.001
c:\ucto2010\{PRIK}\CISVYKON.X01
c:\ucto2010\{PRIK}\DAP15.003
c:\ucto2010\{PRIK}\DAP15.T03
c:\ucto2010\{PRIK}\DAP16.003
c:\ucto2010\{PRIK}\DAP16.T03
c:\ucto2010\{PRIK}\DENIK.001
c:\ucto2010\{PRIK}\DENIK.T01
c:\ucto2010\{PRIK}\DETI.004
c:\ucto2010\{PRIK}\DETI15.003
c:\ucto2010\{PRIK}\DETI16.003
c:\ucto2010\{PRIK}\DODL_AH.006
c:\ucto2010\{PRIK}\DODL_AH.T06
c:\ucto2010\{PRIK}\DODL_AP.006
c:\ucto2010\{PRIK}\DODL_AS.006
c:\ucto2010\{PRIK}\DODL_FH.006
c:\ucto2010\{PRIK}\DODL_FH.T06
c:\ucto2010\{PRIK}\DODL_FP.006
c:\ucto2010\{PRIK}\DODL_FS.006
c:\ucto2010\{PRIK}\DODL_VH.006
c:\ucto2010\{PRIK}\DODL_VH.T06
c:\ucto2010\{PRIK}\DODL_VP.006
c:\ucto2010\{PRIK}\DODL_VS.006
c:\ucto2010\{PRIK}\DOPISY.002
c:\ucto2010\{PRIK}\DOPISY.T02
c:\ucto2010\{PRIK}\DOPISYMM.002
c:\ucto2010\{PRIK}\DOPISYMM.T02
c:\ucto2010\{PRIK}\DOVROK.004
c:\ucto2010\{PRIK}\DROBMAJ.009
c:\ucto2010\{PRIK}\DROBMAJ.T09
c:\ucto2010\{PRIK}\EDIT.000
c:\ucto2010\{PRIK}\EDIT.X00
c:\ucto2010\{PRIK}\EDITPAR.000
c:\ucto2010\{PRIK}\EDITTAB.000
c:\ucto2010\{PRIK}\EDITTAB.T00
c:\ucto2010\{PRIK}\EDITTAB.X00
c:\ucto2010\{PRIK}\FAKT_AH.006
c:\ucto2010\{PRIK}\FAKT_AH.T06
c:\ucto2010\{PRIK}\FAKT_AP.006
c:\ucto2010\{PRIK}\FAKT_AS.006
c:\ucto2010\{PRIK}\FAKT_FH.006
c:\ucto2010\{PRIK}\FAKT_FH.T06
c:\ucto2010\{PRIK}\FAKT_FP.006
c:\ucto2010\{PRIK}\FAKT_FS.006
c:\ucto2010\{PRIK}\FAKT_VH.006
c:\ucto2010\{PRIK}\FAKT_VH.T06
c:\ucto2010\{PRIK}\FAKT_VP.006
c:\ucto2010\{PRIK}\FAKT_VS.006
c:\ucto2010\{PRIK}\FINANCE.001
c:\ucto2010\{PRIK}\FINANCE.T01
c:\ucto2010\{PRIK}\JIZDY.005
c:\ucto2010\{PRIK}\JIZDY.T05
c:\ucto2010\{PRIK}\KATEG.004
c:\ucto2010\{PRIK}\MAT_HP.007
c:\ucto2010\{PRIK}\MAT_PP.007
c:\ucto2010\{PRIK}\MATERIAL.001
c:\ucto2010\{PRIK}\MATERIAL.T01
c:\ucto2010\{PRIK}\MZDY.004
c:\ucto2010\{PRIK}\MZDY.T04
c:\ucto2010\{PRIK}\OBJE_FH.006
c:\ucto2010\{PRIK}\OBJE_FH.T06
c:\ucto2010\{PRIK}\OBJE_FP.006
c:\ucto2010\{PRIK}\OBJE_FS.006
c:\ucto2010\{PRIK}\OBJE_VH.006
c:\ucto2010\{PRIK}\OBJE_VH.T06
c:\ucto2010\{PRIK}\OBJE_VP.006
c:\ucto2010\{PRIK}\OBJE_VS.006
c:\ucto2010\{PRIK}\ODPISY.009
c:\ucto2010\{PRIK}\ODPISY.X09
c:\ucto2010\{PRIK}\ODVODYM.004
c:\ucto2010\{PRIK}\OSSZ08.003
c:\ucto2010\{PRIK}\OST15.003
c:\ucto2010\{PRIK}\OST16.003
c:\ucto2010\{PRIK}\PAR01A2.001
c:\ucto2010\{PRIK}\PAR01A4.001
c:\ucto2010\{PRIK}\PAR09A2.009
c:\ucto2010\{PRIK}\PAR09A2.T09
c:\ucto2010\{PRIK}\PAR09A4.009
c:\ucto2010\{PRIK}\PARAM2.000
c:\ucto2010\{PRIK}\PARAM2.T00
c:\ucto2010\{PRIK}\PARAM4.000
c:\ucto2010\{PRIK}\PARAM4.T00
c:\ucto2010\{PRIK}\PARHB.008
c:\ucto2010\{PRIK}\PARZAS.001
c:\ucto2010\{PRIK}\PHM.005
c:\ucto2010\{PRIK}\PLATBY.001
c:\ucto2010\{PRIK}\PLATBY.T01
c:\ucto2010\{PRIK}\POHLZAV.001
c:\ucto2010\{PRIK}\POHLZAV.T01
c:\ucto2010\{PRIK}\POHYBM.001
c:\ucto2010\{PRIK}\POHYBV.001
c:\ucto2010\{PRIK}\POHYBZ.001
c:\ucto2010\{PRIK}\POJIST.004
c:\ucto2010\{PRIK}\POSTA.002
c:\ucto2010\{PRIK}\POSTA.T02
c:\ucto2010\{PRIK}\PRACOV.004
c:\ucto2010\{PRIK}\PRACOV.T04
c:\ucto2010\{PRIK}\PRACSML.004
c:\ucto2010\{PRIK}\PRACSML.T04
c:\ucto2010\{PRIK}\PRAVJIZD.005
c:\ucto2010\{PRIK}\PRAVJIZD.T05
c:\ucto2010\{PRIK}\PRIKH.008
c:\ucto2010\{PRIK}\PRIKP.008
c:\ucto2010\{PRIK}\SCIT_H.099
c:\ucto2010\{PRIK}\SCIT_H.T99
c:\ucto2010\{PRIK}\SCIT_P.099
c:\ucto2010\{PRIK}\SHIFTF3.000
c:\ucto2010\{PRIK}\SIL.005
c:\ucto2010\{PRIK}\SIL.T05
c:\ucto2010\{PRIK}\SIL.X05
c:\ucto2010\{PRIK}\SILDAN.005
c:\ucto2010\{PRIK}\SILVOZ.005
c:\ucto2010\{PRIK}\SILVOZ.X05
c:\ucto2010\{PRIK}\SRAZKY.004
c:\ucto2010\{PRIK}\SRAZKY.T04
c:\ucto2010\{PRIK}\STATY.000
c:\ucto2010\{PRIK}\STRAV.004
c:\ucto2010\{PRIK}\TECHZHOD.009
c:\ucto2010\{PRIK}\TECHZHOD.X09
c:\ucto2010\{PRIK}\TEXTY.002
c:\ucto2010\{PRIK}\TEXTY.T02
c:\ucto2010\{PRIK}\TRIDY.004
c:\ucto2010\{PRIK}\TYPDOKL.001
c:\ucto2010\{PRIK}\TYPDOKL.X01
c:\ucto2010\{PRIK}\UCTY.000
c:\ucto2010\{PRIK}\UKOL.004
c:\ucto2010\{PRIK}\UKOLY.000
c:\ucto2010\{PRIK}\UKOLY.T00
c:\ucto2010\{PRIK}\UPR15.003
c:\ucto2010\{PRIK}\UPR16.003
c:\ucto2010\{PRIK}\UZAV.001
c:\ucto2010\{PRIK}\VYKMAZA.UUU
c:\ucto2010\{PRIK}\VYR_HP.007
c:\ucto2010\{PRIK}\VYR_HV.007
c:\ucto2010\{PRIK}\VYR_PP.007
c:\ucto2010\{PRIK}\VYR_PV.007
c:\ucto2010\{PRIK}\VYRIZUJE.002
c:\ucto2010\{PRIK}\VYROBA.001
c:\ucto2010\{PRIK}\VYROBKY.001
c:\ucto2010\{PRIK}\VYROBKY.T01
c:\ucto2010\{PRIK}\VYUCSRAZ.097
c:\ucto2010\{PRIK}\VYUCZAL.097
c:\ucto2010\{PRIK}\VZP08.003
c:\ucto2010\{PRIK}\ZAL_H.099
c:\ucto2010\{PRIK}\ZAL_H.T99
c:\ucto2010\{PRIK}\ZAOKFA.006
c:\ucto2010\{PRIK}\ZBO_HP.007
c:\ucto2010\{PRIK}\ZBO_HV.007
c:\ucto2010\{PRIK}\ZBO_PP.007
c:\ucto2010\{PRIK}\ZBO_PV.007
c:\ucto2010\{PRIK}\ZBOZI.001
c:\ucto2010\{PRIK}\ZBOZI.T01
c:\ucto2010\{PRIK}\ZP.009
c:\ucto2010\{PRIK}\ZP.T09
c:\ucto2010\{PRIK}\ZP.X09
c:\ucto2010\{SEST}\SEST00.TXT
c:\ucto2010\{SLOZ}\BALIK_O.HTM
c:\ucto2010\{SLOZ}\BALIK_O.JS
c:\ucto2010\{SLOZ}\BALIK_P.HTM
c:\ucto2010\{SLOZ}\BALIK_P.JS
c:\ucto2010\{SLOZ}\SLOZ_A.HTM
c:\ucto2010\{SLOZ}\SLOZ_A.JS
c:\ucto2010\{SLOZ}\SLOZ_C.HTM
c:\ucto2010\{SLOZ}\SLOZ_C.JS
c:\ucto2010\{STAN}\DANZAT.004
c:\ucto2010\{STAN}\DPH15.009
c:\ucto2010\{STAN}\KALEXEK.099
c:\ucto2010\{STAN}\KASA.099
c:\ucto2010\{STAN}\LEAS.099
c:\ucto2010\{STAN}\LEAS.T99
c:\ucto2010\{STAN}\PAR01A3.001
c:\ucto2010\{STAN}\PAR06A3.006
c:\ucto2010\{STAN}\PAR09A3.009
c:\ucto2010\{STAN}\PARAM3.000
c:\ucto2010\{STAN}\PARAM3.T00
c:\ucto2010\{STAN}\PATHS.000
c:\ucto2010\{STAN}\PENIZED.009
c:\ucto2010\{STAN}\PGM.000
c:\ucto2010\{STAN}\SCITAC.099
c:\ucto2010\{STAN}\STAT.000
c:\ucto2010\{STAN}\TELSEZN.099
c:\ucto2010\{STAN}\VEDKALK.099
c:\ucto2010\{TISK}\ALISFAND.EXE
c:\ucto2010\{TISK}\CALLER.EXE
c:\ucto2010\{TISK}\CMDIALOG.VBX
c:\ucto2010\{TISK}\DISKSIZW.EXE
c:\ucto2010\{TISK}\DISKY.EXE
c:\ucto2010\{TISK}\ELPODPIS.EXE
c:\ucto2010\{TISK}\FAND2PDF.EXE
c:\ucto2010\{TISK}\FANDCLIP.EXE
c:\ucto2010\{TISK}\IEUCTO.EXE
c:\ucto2010\{TISK}\MSINET.OCX
c:\ucto2010\{TISK}\MSMAPI32.OCX
c:\ucto2010\{TISK}\MSVBVM60.DLL
c:\ucto2010\{TISK}\PDFTISK1.EXE
c:\ucto2010\{TISK}\PDFTISK2.EXE
c:\ucto2010\{TISK}\PDFTISK3.EXE
c:\ucto2010\{TISK}\REGISTER.EXE
c:\ucto2010\{TISK}\SETUPCP.EXE
c:\ucto2010\{TISK}\SIFRCSSZ.CER
c:\ucto2010\{TISK}\UCTOFONT.FON
c:\ucto2010\{TISK}\UCTOFT98.EXE
c:\ucto2010\{TISK}\UCTOFTP.EXE
c:\ucto2010\{TISK}\UCTOGRAF.EXE
c:\ucto2010\{TISK}\UCTOGRAF.INI
c:\ucto2010\{TISK}\UCTOLNK.EXE
c:\ucto2010\{TISK}\UCTOLNK.UUU
c:\ucto2010\{TISK}\UCTOLNK.W7
c:\ucto2010\{TISK}\UCTOLNK.WV
c:\ucto2010\{TISK}\UCTOLNK.WXP
c:\ucto2010\{TISK}\UCTOOL.EXE
c:\ucto2010\{TISK}\UEMAIL.EXE
c:\ucto2010\{TISK}\UEMAIL06.EXE
c:\ucto2010\{TISK}\UTISK01.EXE
c:\ucto2010\{TISK}\UTISK04.EXE
c:\ucto2010\{TISK}\UTISK98.EXE
c:\ucto2010\{TISK}\UTISK98.INI
c:\ucto2010\{TISK}\VBRUN300.DLL
c:\ucto2010\{TISK}\WINVERZE.EXE
c:\ucto2010\{TREN}\ADRESY.000
c:\ucto2010\{TREN}\ADRESY.T00
c:\ucto2010\{TREN}\ADRESY.X00
c:\ucto2010\{TREN}\CISABS.004
c:\ucto2010\{TREN}\CISDOKL.001
c:\ucto2010\{TREN}\CISDRUH.001
c:\ucto2010\{TREN}\CISDRUH.X01
c:\ucto2010\{TREN}\CISPOH.001
c:\ucto2010\{TREN}\CISPOH.X01
c:\ucto2010\{TREN}\CISPOZN.000
c:\ucto2010\{TREN}\CISPOZN.T00
c:\ucto2010\{TREN}\CIST.000
c:\ucto2010\{TREN}\CISTEXT.001
c:\ucto2010\{TREN}\CISTXT.006
c:\ucto2010\{TREN}\CISVYKON.001
c:\ucto2010\{TREN}\CISVYKON.X01
c:\ucto2010\{TREN}\EDIT.000
c:\ucto2010\{TREN}\EDIT.X00
c:\ucto2010\{TREN}\EDITPAR.000
c:\ucto2010\{TREN}\EDITPAR.X00
c:\ucto2010\{TREN}\FINANCE.001
c:\ucto2010\{TREN}\FINANCE.T01
c:\ucto2010\{TREN}\KATEG.004
c:\ucto2010\{TREN}\PAR01A2.001
c:\ucto2010\{TREN}\PAR01A4.001
c:\ucto2010\{TREN}\PAR06A4.006
c:\ucto2010\{TREN}\PAR09A2.009
c:\ucto2010\{TREN}\PAR09A2.T09
c:\ucto2010\{TREN}\PAR09A4.009
c:\ucto2010\{TREN}\PARAM2.000
c:\ucto2010\{TREN}\PARAM2.T00
c:\ucto2010\{TREN}\PARAM4.000
c:\ucto2010\{TREN}\PARAM4.T00
c:\ucto2010\{TREN}\PARZAS.001
c:\ucto2010\{TREN}\PRACSML.004
c:\ucto2010\{TREN}\PRACSML.T04
c:\ucto2010\{TREN}\TRIDY.004
c:\ucto2010\{TREN}\TYPDOKL.001
c:\ucto2010\{TREN}\TYPDOKL.X01
c:\ucto2010\{TREN}\UKOLY.000
c:\ucto2010\{TREN}\UKOLY.T00
c:\ucto2010\{TREN}\UZAV.001
c:\ucto2010\{TREN}\ZAOKFA.006
c:\ucto2010\{TREN}\ZAOKFA.X06
c:\ucto2010\{UDOC}\CENIK.TXT
c:\ucto2010\{UDOC}\D2008.PDF
c:\ucto2010\{UDOC}\FAKTURA.TXT
c:\ucto2010\{UDOC}\INFO.TXT
c:\ucto2010\{UDOC}\LICENCE.TXT
c:\ucto2010\{UDOC}\OBJ.TXT
c:\ucto2010\{UDOC}\OBJZPR.TXT
c:\ucto2010\{UDOC}\ONAS.TXT
c:\ucto2010\{UDOC}\POUPG.TXT
c:\ucto2010\{UDOC}\PRIRUCKA.TXT
c:\ucto2010\{UDOC}\PRPRDOK.TXT
c:\ucto2010\{UDOC}\R2010.PDF
c:\ucto2010\{UDOC}\U2010.PDF
c:\ucto2010\{UDOC}\UCTOWIN7.TXT
c:\ucto2010\{UDOC}\ZPROSTRE.TXT
c:\ucto2010\{WWWW}\VERZEWWW.UUU
c:\ucto2010\ÚČTO2010.W9X
c:\ucto2010\B&W.PAL
c:\ucto2010\BLUE.PAL
c:\ucto2010\BROWN.PAL
c:\ucto2010\CAT.BAT
c:\ucto2010\CISABS.UUU
c:\ucto2010\CISDRUH.UUU
c:\ucto2010\CISPOH.UUU
c:\ucto2010\CISSLOUP.000
c:\ucto2010\CONFIG.TXT
c:\ucto2010\DELFILE.EXE
c:\ucto2010\DISKSIZE.EXE
c:\ucto2010\DNY.000
c:\ucto2010\FAND.CFG
c:\ucto2010\FAND.RES
c:\ucto2010\FANDCFG.09
c:\ucto2010\FANDCFG.10
c:\ucto2010\FANDHTML.EXE
c:\ucto2010\FANDINST.EXE
c:\ucto2010\FANDT602.EXE
c:\ucto2010\FILESIZE.EXE
c:\ucto2010\FNDFILES.EXE
c:\ucto2010\HEAD602.UUU
c:\ucto2010\HELP.000
c:\ucto2010\HELP.T00
c:\ucto2010\HELP02.000
c:\ucto2010\HELP02.T00
c:\ucto2010\HELP03.000
c:\ucto2010\HELP03.T00
c:\ucto2010\HELP04.000
c:\ucto2010\HELP04.T00
c:\ucto2010\HELP05.000
c:\ucto2010\HELP05.T00
c:\ucto2010\HELP06.000
c:\ucto2010\HELP06.T00
c:\ucto2010\HELP08.000
c:\ucto2010\HELP08.T00
c:\ucto2010\HELP98.000
c:\ucto2010\HELP98.T00
c:\ucto2010\HELP99.000
c:\ucto2010\HELP99.T00
c:\ucto2010\IMPORT.PRO
c:\ucto2010\IMPORT.TRO
c:\ucto2010\INFOHLP.000
c:\ucto2010\INFOHLP.T00
c:\ucto2010\ISSHARE.EXE
c:\ucto2010\KALENDAR.000
c:\ucto2010\KALKDPH.000
c:\ucto2010\KALKPOJP.000
c:\ucto2010\KALKPOJZ.000
c:\ucto2010\KALKPRUM.000
c:\ucto2010\KALKPV08.000
c:\ucto2010\KALKTABD.000
c:\ucto2010\KATEG.UUU
c:\ucto2010\LASTAKT.TXT
c:\ucto2010\LCD1.PAL
c:\ucto2010\LCD2.PAL
c:\ucto2010\MAKEDIR.BAT
c:\ucto2010\MF5460-1.UUU
c:\ucto2010\MODUL01.PRO
c:\ucto2010\MODUL01.TRO
c:\ucto2010\MODUL02.PRO
c:\ucto2010\MODUL02.TRO
c:\ucto2010\MODUL03.PRO
c:\ucto2010\MODUL03.TRO
c:\ucto2010\MODUL04.PRO
c:\ucto2010\MODUL04.TRO
c:\ucto2010\MODUL05.PRO
c:\ucto2010\MODUL05.TRO
c:\ucto2010\MODUL06.PRO
c:\ucto2010\MODUL06.TRO
c:\ucto2010\MODUL07.PRO
c:\ucto2010\MODUL07.TRO
c:\ucto2010\MODUL08.PRO
c:\ucto2010\MODUL08.TRO
c:\ucto2010\MODUL09.PRO
c:\ucto2010\MODUL09.TRO
c:\ucto2010\MODUL97.PRO
c:\ucto2010\MODUL97.TRO
c:\ucto2010\MODUL98.PRO
c:\ucto2010\MODUL98.TRO
c:\ucto2010\MODUL99.PRO
c:\ucto2010\MODUL99.TRO
c:\ucto2010\MZDYPU.000
c:\ucto2010\NUMKB.EXE
c:\ucto2010\NUMKB3.EXE
c:\ucto2010\OPRAVY.UUU
c:\ucto2010\PGM.CAT
c:\ucto2010\PGM.RDB
c:\ucto2010\PGM.TTT
c:\ucto2010\RADKY.TXT
c:\ucto2010\RENFILES.BAT
c:\ucto2010\RO.EXE
c:\ucto2010\SEARCHX.EXE
c:\ucto2010\SEST01.PRO
c:\ucto2010\SEST01.TRO
c:\ucto2010\SEST02.PRO
c:\ucto2010\SEST02.TRO
c:\ucto2010\SEST03.PRO
c:\ucto2010\SEST03.TRO
c:\ucto2010\SEST04.PRO
c:\ucto2010\SEST04.TRO
c:\ucto2010\SEST05.PRO
c:\ucto2010\SEST05.TRO
c:\ucto2010\SEST06.PRO
c:\ucto2010\SEST06.TRO
c:\ucto2010\SEST07.PRO
c:\ucto2010\SEST07.TRO
c:\ucto2010\SEST08.PRO
c:\ucto2010\SEST08.TRO
c:\ucto2010\SEST09.PRO
c:\ucto2010\SEST09.TRO
c:\ucto2010\SESTAVY.CAT
c:\ucto2010\SESTAVY.RDB
c:\ucto2010\SESTAVY.TTT
c:\ucto2010\SETDATE.EXE
c:\ucto2010\SETFILES.EXE
c:\ucto2010\SEZNTISK.000
c:\ucto2010\SEZNTISK.T00
c:\ucto2010\SLOVY.000
c:\ucto2010\SPEC01.PRO
c:\ucto2010\SPEC01.TRO
c:\ucto2010\SPEC02.PRO
c:\ucto2010\SPEC02.TRO
c:\ucto2010\SPEC03.PRO
c:\ucto2010\SPEC03.TRO
c:\ucto2010\SPEC04.PRO
c:\ucto2010\SPEC04.TRO
c:\ucto2010\SPEC05.PRO
c:\ucto2010\SPEC05.TRO
c:\ucto2010\SPEC06.PRO
c:\ucto2010\SPEC06.TRO
c:\ucto2010\SPEC07.PRO
c:\ucto2010\SPEC07.TRO
c:\ucto2010\SUBDIR.EXE
c:\ucto2010\SUDLICH.EXE
c:\ucto2010\TIPY.000
c:\ucto2010\TIPY.T00
c:\ucto2010\TIPY.X00
c:\ucto2010\TTT.CAT
c:\ucto2010\TTT.RDB
c:\ucto2010\TTT.TTT
c:\ucto2010\TTTNEW.UUU
c:\ucto2010\TXTNARTF.EXE
c:\ucto2010\U.BAT
c:\ucto2010\UCTO.PAL
c:\ucto2010\UCTO2010.CAT
c:\ucto2010\UCTO2010.ICO
c:\ucto2010\UCTO2010.RDB
c:\ucto2010\UCTO2010.TTT
c:\ucto2010\UCTOINFO.PRO
c:\ucto2010\UCTOINFO.TRO
c:\ucto2010\UCTOTXT.UUU
c:\ucto2010\UFAND.EXE
c:\ucto2010\UFAND.OVR
c:\ucto2010\UFANDHLP.000
c:\ucto2010\UFANDHLP.T00
c:\ucto2010\UK.BAT
c:\ucto2010\UPG.PRO
c:\ucto2010\UPG.TRO
c:\ucto2010\UPG01.PRO
c:\ucto2010\UPG01.TRO
c:\ucto2010\UPG02.PRO
c:\ucto2010\UPG02.TRO
c:\ucto2010\UPG03.PRO
c:\ucto2010\UPG03.TRO
c:\ucto2010\UPG04.PRO
c:\ucto2010\UPG04.TRO
c:\ucto2010\UPG05.PRO
c:\ucto2010\UPG05.TRO
c:\ucto2010\UPG06.PRO
c:\ucto2010\UPG06.TRO
c:\ucto2010\UPG07.PRO
c:\ucto2010\UPG07.TRO
c:\ucto2010\UPG08.PRO
c:\ucto2010\UPG08.TRO
c:\ucto2010\UPG09.PRO
c:\ucto2010\UPG09.TRO
c:\ucto2010\UPG97.PRO
c:\ucto2010\UPG97.TRO
c:\ucto2010\UPG99.PRO
c:\ucto2010\UPG99.TRO
c:\ucto2010\UPGPAR.000
c:\ucto2010\VEDLCIN.UUU
c:\ucto2010\VERZE.UUU
c:\ucto2010\VYBERTXT.EXE
c:\ucto2010\VZORTISK.000
c:\ucto2010\ZASTUPCE.CAT
c:\ucto2010\ZASTUPCE.INI
c:\ucto2010\ZASTUPCE.RDB
c:\ucto2010\ZASTUPCE.TTT
c:\ucto2010\ZETROZET.PAL
c:\ucto2010\ZZZ.BAT
c:\windows\daemon.dll
c:\windows\msmqinst.log
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\dllcache\wmpvis.dll
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-19 do 2013-03-19 )))))))))))))))))))))))))))))))
.
.
2013-03-19 21:48 . 2013-03-19 21:48 -------- d-----w- c:\windows\LastGood
2013-03-19 21:42 . 2013-03-19 21:42 -------- d-----w- c:\documents and settings\Zed\Data aplikací\RealNetworks
2013-03-19 19:29 . 2013-02-12 00:32 12928 -c----w- c:\windows\system32\dllcache\usb8023x.sys
2013-03-19 19:29 . 2013-02-12 00:32 12928 -c----w- c:\windows\system32\dllcache\usb8023.sys
2013-03-05 14:04 . 2013-03-05 14:04 -------- d-----w- c:\program files\IrfanView
2013-03-04 21:38 . 2013-03-04 21:38 -------- d-----w- c:\documents and settings\Zed\Data aplikací\Malwarebytes
2013-03-04 21:38 . 2013-03-04 21:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-03-04 21:37 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-04 21:37 . 2013-03-04 21:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-03-03 21:47 . 2013-03-03 21:47 388096 ----a-r- c:\documents and settings\Zed\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-03-03 21:47 . 2013-03-03 21:47 -------- d-----w- c:\program files\Trend Micro
2013-03-01 21:32 . 2013-03-01 21:32 -------- d-----w- c:\program files\AntiTwin
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-12 23:47 . 2012-04-11 10:29 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-12 23:47 . 2012-03-09 14:35 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-12 00:32 . 2009-03-07 10:16 12928 ------w- c:\windows\system32\drivers\usb8023x.sys
2013-02-12 00:32 . 2001-10-25 14:00 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-02-11 04:28 . 2013-02-11 04:28 79 ----a-w- c:\windows\system32\ssinstall-uninstall.bat
2013-02-11 04:28 . 2013-02-11 04:28 2317848 ----a-w- c:\windows\system32\ssins.exe
2013-02-10 08:19 . 2013-02-10 08:19 16384 ----a-w- c:\program files\wmdmhelper.dll
2013-02-10 08:19 . 2013-02-10 08:19 641536 ----a-w- c:\program files\rjbres.dll
2013-02-10 08:19 . 2013-02-10 08:19 370176 ----a-w- c:\program files\rjdlg.dll
2013-02-10 08:19 . 2013-02-10 08:19 31232 ----a-w- c:\program files\rjprog.dll
2013-02-10 08:19 . 2013-02-10 08:19 139264 ----a-w- c:\program files\dunzip32.dll
2013-02-10 08:19 . 2013-02-10 08:19 45568 ----a-w- c:\program files\ierjplug.dll
2013-02-10 08:19 . 2013-02-10 08:19 8704 ----a-w- c:\program files\fixrjb.exe
2013-02-10 08:19 . 2013-02-10 08:19 1115376 ----a-w- c:\program files\cddbmusicid.dll
2013-02-10 08:19 . 2013-02-10 08:19 943344 ----a-w- c:\program files\cddblink.dll
2013-02-10 08:19 . 2013-02-10 08:19 44544 ----a-w- c:\program files\mmcdda32.dll
2013-02-10 08:19 . 2013-02-10 08:19 22528 ----a-w- c:\program files\tnetdtct.dll
2013-02-10 08:19 . 2013-02-10 08:19 2041072 ----a-w- c:\program files\cddbcontrol.dll
2013-02-10 08:19 . 2013-02-10 08:19 73216 ----a-w- c:\program files\tsasdk.dll
2013-02-10 08:19 . 2013-02-10 08:19 48640 ----a-w- c:\program files\tpasdk.dll
2013-02-10 08:18 . 2013-02-10 08:18 56320 ----a-w- c:\program files\rpwa3260.dll
2013-02-10 08:18 . 2013-02-10 08:18 16296 ----a-w- c:\program files\realtfon.fon
2013-02-10 08:18 . 2013-02-10 08:18 9159680 ----a-w- c:\program files\mediainfo.dll
2013-02-10 08:18 . 2013-02-10 08:18 389272 ----a-w- c:\program files\realcleaner.exe
2013-02-10 08:17 . 2013-02-10 08:17 383640 ----a-w- c:\program files\realconverter.exe
2013-02-10 08:17 . 2013-02-10 08:17 354968 ----a-w- c:\program files\convert.exe
2013-02-10 08:17 . 2013-02-10 08:17 390384 ----a-w- c:\program files\mc_enc_mp4v.dll
2013-02-10 08:17 . 2013-02-10 08:17 389272 ----a-w- c:\program files\realtrimmer.exe
2013-02-10 08:17 . 2013-02-10 08:17 136336 ----a-w- c:\program files\realshare.exe
2013-02-10 08:17 . 2013-02-10 08:17 115200 ----a-w- c:\program files\rpshellextension.dll
2013-02-10 08:17 . 2013-02-10 08:17 719360 ----a-w- c:\program files\dbghelp.dll
2013-02-10 08:17 . 2013-02-10 08:17 69632 ----a-w- c:\program files\rjwmapln.dll
2013-02-10 08:17 . 2013-02-10 08:17 47616 ----a-w- c:\program files\rpau3260.dll
2013-02-10 08:16 . 2013-02-10 08:16 30368 ----a-w- c:\program files\rndevicedbbuilder.exe
2013-02-10 08:16 . 2013-02-10 08:16 87552 ----a-w- c:\program files\hxaudiodevicehook.dll
2013-02-10 08:16 . 2013-02-10 08:16 112824 ----a-w- c:\program files\rdsf3260.dll
2013-02-10 08:16 . 2013-02-10 08:16 86016 ----a-w- c:\program files\rpplugprot.dll
2013-02-10 08:16 . 2013-02-10 08:16 70840 ----a-w- c:\program files\rpshell.dll
2013-02-10 08:16 . 2013-02-10 08:16 9216 ----a-w- c:\program files\realjbox.exe
2013-02-10 08:16 . 2013-02-10 08:16 17080 ----a-w- c:\program files\rphelperapp.exe
2013-02-10 08:16 . 2013-02-10 08:16 500888 ----a-w- c:\program files\realplay.exe
2013-02-10 08:16 . 2008-12-26 15:19 499712 ----a-w- c:\windows\system32\msvcp71.dll
2013-02-10 08:16 . 2008-12-26 15:19 348160 ----a-w- c:\windows\system32\msvcr71.dll
2013-02-06 10:55 . 2002-09-20 18:05 668160 ----a-w- c:\windows\system32\wininet.dll
2013-02-06 10:55 . 2001-10-25 14:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-02-06 10:55 . 2009-03-07 10:16 81920 ------w- c:\windows\system32\ieencode.dll
2013-02-06 10:50 . 2009-03-07 10:16 370176 ------w- c:\windows\system32\html.iec
2013-01-26 03:55 . 2002-09-20 18:04 552448 ----a-w- c:\windows\system32\oleaut32.dll
2013-01-07 07:26 . 2002-09-20 17:12 2071936 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-01-07 07:26 . 2002-09-20 17:12 2195200 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-04 10:10 . 2002-09-20 17:41 1867264 ----a-w- c:\windows\system32\win32k.sys
2013-01-02 06:49 . 2008-12-30 23:04 1294848 ----a-w- c:\windows\system32\quartz.dll
2013-01-02 06:49 . 2008-12-30 23:04 148992 ----a-w- c:\windows\system32\mpg2splt.ax
2013-03-12 23:01 . 2013-03-12 23:00 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"AcerNotebookManager"="c:\program files\Acer\Notebook Manager\almxptray.exe" [2003-05-16 509952]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 21:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2009-07-27 02:10 1983816 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2009-03-18 01:40 767312 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
R3 vwmfbus;Vertex Wireless Composite Device driver (WDM);c:\windows\system32\DRIVERS\vwmfbus.sys [x]
R3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM);c:\windows\system32\DRIVERS\vwmfdiag.sys [x]
R3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~;c:\windows\system32\DRIVERS\vwmfmdfl.sys [x]
R3 vwmfmdm;Vertex Wireless CDC Modem Driver;c:\windows\system32\DRIVERS\vwmfmdm.sys [x]
R3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM);c:\windows\system32\DRIVERS\vwmfserd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 acernbm;acernbm;c:\windows\system32\drivers\acernbm.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 ssinstall;SInstalátor;c:\windows\System32\ssins.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 st3bus28;st3bus28;c:\windows\system32\DRIVERS\st3bus28.sys [x]
S3 st3mp28;st3mp28;c:\windows\system32\DRIVERS\st3mp28.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 23:47]
.
2013-03-19 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-29 22:50]
.
2013-03-19 c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1220945662-1580436667-854245398-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2012-11-30 14:30]
.
2013-03-10 c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1220945662-1580436667-854245398-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2012-11-30 14:30]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
TCP: Interfaces\{F8333D52-3D1B-4BC6-AD25-562E9A386F76}: NameServer = 93.153.117.33 93.153.117.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Zed\Data aplikací\Mozilla\Firefox\Profiles\8wgcaole.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-02-10 09:18; {34712C68-7391-4c47-94F3-8F88D49AD632}; c:\documents and settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF - ExtSQL: !HIDDEN! 2011-03-14 01:10; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-CTFMON - (no file)
MSConfigStartUp-TkBellExe - c:\program files\Common Files\Real\Update_OB\realsched.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-19 23:45
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2013-03-19 23:49:26
ComboFix-quarantined-files.txt 2013-03-19 22:49
.
Před spuštěním: 6 550 163 456
Po spuštění: 6 491 664 384
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 8C86F4DA893886D23B57A0D631C07452