Prohlížeč zatěžuje CPU na 100% Vyřešeno

[rados-75]

Dobrý den,
při spuštění prohlížeče se rapidně zvyšuje zatížení procesoru až na 100%, dochází ke zpomalování načítání stránek apod.

Konfigurace:
Win XP Pro SP3
AMD Athlon XP 2500+
1,5 GB RAM

Při použití antiviru (používám MSE) mi hlásil trojského koně - odstraněno.

Prosím poraďte co s tím.

LOG:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:11:09, on 2013-06-01
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Restore Desktop\RestoreDesktop.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\trend micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RestoreDesktop] C:\Program Files\Restore Desktop\RestoreDesktop.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O20 - AppInit_DLLs: prio.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Usługa Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe

--
End of file - 6529 bytes

[Reklama]

[memphisto]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

[kropovez]

Podle mě nemá cenu. Měl jsem taky AMD Athlon XP 2500+ a i s čistým OS ho firefox nebo chrome zatížil na 100%, když sem byl třeba na youtube nebo na náročnější stránce. Pro tento procák jedině Operu.

[memphisto]

V této sekci nemáš co dělat!

[rados-75]

Tady jsou ty logy:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.01.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Doma :: MASINA [administrátor]

Ochrana: Zakázána

2013-06-01 15:19:45
MBAM-log-2013-06-01 (15-28-41).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 224502
Uplynulý čas: 7 minut, 53 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 1
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)



# AdwCleaner v2.301 - Log vytvooen 01/06/2013 v 15:32:11
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Doma - MASINA
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Doma\Plocha\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Složka Nalezeno : C:\Documents and Settings\Doma\Local Settings\Data aplikací\Conduit
Složka Nalezeno : C:\Documents and Settings\Doma\Local Settings\Data aplikací\MyPlayCity
Složka Nalezeno : C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\MyPlayCity
Složka Nalezeno : C:\Program Files\Conduit
Složka Nalezeno : C:\Program Files\MyPlayCity
Soubor Nalezeno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-1.xml
Soubor Nalezeno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-2.xml
Soubor Nalezeno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-3.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}]
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\MyPlayCity
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPlayCity Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPlayCity Toolbar
Klíe Nalezeno : HKLM\Software\MyPlayCity
Klíe Nalezeno : HKU\S-1-5-21-746137067-1409082233-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v6.0.2900.5512

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.icq.com/
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\prefs.js

Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_v[...]
Nalezeno : user_pref("foxytunes.recent_players", "@foxytunes.org/FoxyTunes/WinAmp;1,@foxytunes.org/FoxyTunes/Ya[...]
Nalezeno : user_pref("icqtoolbar.allowSendURL", false);
Nalezeno : user_pref("icqtoolbar.defSearchChange", true);
Nalezeno : user_pref("icqtoolbar.displayHistory", false);
Nalezeno : user_pref("icqtoolbar.engineVerified", false);
Nalezeno : user_pref("icqtoolbar.geolastmodified", 1313427613);
Nalezeno : user_pref("icqtoolbar.hiddenElements", "itb_options itb_games");
Nalezeno : user_pref("icqtoolbar.hpChange", true);
Nalezeno : user_pref("icqtoolbar.icqgeo", 42);
Nalezeno : user_pref("icqtoolbar.installTime", "1313482166");
Nalezeno : user_pref("icqtoolbar.installsource", "1");
Nalezeno : user_pref("icqtoolbar.newtab_state", "1");
Nalezeno : user_pref("icqtoolbar.numberOfSearches", 0);
Nalezeno : user_pref("icqtoolbar.previousFFVersion", "5.0");
Nalezeno : user_pref("icqtoolbar.searchOnDrop", false);
Nalezeno : user_pref("icqtoolbar.shownElements", "itb_people itb_zoom_in itb_zoom_out itb_zoom_default itb_high[...]
Nalezeno : user_pref("icqtoolbar.skip_default_search", "no");
Nalezeno : user_pref("icqtoolbar.suggestions", false);
Nalezeno : user_pref("icqtoolbar.uniqueID", "124526806112452680611245281265300");
Nalezeno : user_pref("icqtoolbar.usageStatstTimestamp", 1313436167);
Nalezeno : user_pref("icqtoolbar.version", "1.2.9");
Nalezeno : user_pref("icqtoolbar.voucherHideClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherWasShown", 0);
Nalezeno : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
Nalezeno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Nalezeno : user_pref("icqtoolbar.xmlLanguage", "cs");
Nalezeno : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.9&q=");

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Documents and Settings\Doma\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [5517 octets] - [01/06/2013 15:32:11]

########## EOF - C:\AdwCleaner[R1].txt - [5577 octets] ##########

[Žbeky]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“)
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt), jeho obsah sem celý vlož.

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni si RogueKiller
32bit:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a WIN7 spusť program jako správce, u XP poklepáním.
- Počkej až skončí Prescan.
- Zkontroluj, zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
- Potom klikni na „Prohledat“.
- Program skenuje PC. Po proskenování klikni na „Zpráva“ - celý obsah logu sem zkopíruj.
Pokud je program blokován, zkus ho spustit několikrát. Pokud dále program nepůjde spustit, přejmenuj ho na winlogon.exe.

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

[rados-75]

# AdwCleaner v2.301 - Log vytvooen 01/06/2013 v 17:00:11
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Doma - MASINA
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Doma\Plocha\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Složka Vymazáno : C:\Documents and Settings\Doma\Local Settings\Data aplikací\Conduit
Složka Vymazáno : C:\Documents and Settings\Doma\Local Settings\Data aplikací\MyPlayCity
Složka Vymazáno : C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\MyPlayCity
Složka Vymazáno : C:\Program Files\Conduit
Složka Vymazáno : C:\Program Files\MyPlayCity
Soubor Vymazáno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin.xml
Soubor Vymazáno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-1.xml
Soubor Vymazáno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-2.xml
Soubor Vymazáno : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\searchplugins\icqplugin-3.xml

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}]
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\MyPlayCity
Klíe Vymazáno : HKCU\Software\YahooPartnerToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPlayCity Toolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPlayCity Toolbar
Klíe Vymazáno : HKLM\Software\MyPlayCity

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v6.0.2900.5512

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.icq.com/ --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Documents and Settings\Doma\Data aplikací\Mozilla\Firefox\Profiles\wnn8u1fr.default\prefs.js

Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_v[...]
Vymazáno : user_pref("foxytunes.recent_players", "@foxytunes.org/FoxyTunes/WinAmp;1,@foxytunes.org/FoxyTunes/Ya[...]
Vymazáno : user_pref("icqtoolbar.allowSendURL", false);
Vymazáno : user_pref("icqtoolbar.defSearchChange", true);
Vymazáno : user_pref("icqtoolbar.displayHistory", false);
Vymazáno : user_pref("icqtoolbar.engineVerified", false);
Vymazáno : user_pref("icqtoolbar.geolastmodified", 1313427613);
Vymazáno : user_pref("icqtoolbar.hiddenElements", "itb_options itb_games");
Vymazáno : user_pref("icqtoolbar.hpChange", true);
Vymazáno : user_pref("icqtoolbar.icqgeo", 42);
Vymazáno : user_pref("icqtoolbar.installTime", "1313482166");
Vymazáno : user_pref("icqtoolbar.installsource", "1");
Vymazáno : user_pref("icqtoolbar.newtab_state", "1");
Vymazáno : user_pref("icqtoolbar.numberOfSearches", 0);
Vymazáno : user_pref("icqtoolbar.previousFFVersion", "5.0");
Vymazáno : user_pref("icqtoolbar.searchOnDrop", false);
Vymazáno : user_pref("icqtoolbar.shownElements", "itb_people itb_zoom_in itb_zoom_out itb_zoom_default itb_high[...]
Vymazáno : user_pref("icqtoolbar.skip_default_search", "no");
Vymazáno : user_pref("icqtoolbar.suggestions", false);
Vymazáno : user_pref("icqtoolbar.uniqueID", "124526806112452680611245281265300");
Vymazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1313436167);
Vymazáno : user_pref("icqtoolbar.version", "1.2.9");
Vymazáno : user_pref("icqtoolbar.voucherHideClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherWasShown", 0);
Vymazáno : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
Vymazáno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Vymazáno : user_pref("icqtoolbar.xmlLanguage", "cs");
Vymazáno : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.9&q=");

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Documents and Settings\Doma\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [5646 octets] - [01/06/2013 15:32:11]
AdwCleaner[S1].txt - [5494 octets] - [01/06/2013 17:00:11]

########## EOF - C:\AdwCleaner[S1].txt - [5554 octets] ##########

[rados-75]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.01.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Doma :: MASINA [administrátor]

Ochrana: Zakázána

2013-06-01 17:05:56
mbam-log-2013-06-01 (17-05-56).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 224486
Uplynulý čas: 8 minut, 19 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 1
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Přesun do karantény a opravení se zdařilo.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[rados-75]

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Doma [Práva správce]
Mód : Kontrola -- Datum : 06/01/2013 17:23:23
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3200826A +++++
--- User ---
[MBR] 86b697ba725aac35027f956290f50460
[BSP] 95249b99efade9dd3d713b5490d57d7b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 24999 Mo
1 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 51199155 | Size: 165780 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_06012013_02d1723.txt >>
RKreport[1]_S_06012013_02d1723.txt

[rados-75]

17:28:47.0890 3700 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:28:48.0140 3700 ============================================================
17:28:48.0140 3700 Current date / time: 2013/06/01 17:28:48.0140
17:28:48.0140 3700 SystemInfo:
17:28:48.0140 3700
17:28:48.0140 3700 OS Version: 5.1.2600 ServicePack: 3.0
17:28:48.0140 3700 Product type: Workstation
17:28:48.0140 3700 ComputerName: MASINA
17:28:48.0156 3700 UserName: Doma
17:28:48.0156 3700 Windows directory: C:\WINDOWS
17:28:48.0156 3700 System windows directory: C:\WINDOWS
17:28:48.0156 3700 Processor architecture: Intel x86
17:28:48.0156 3700 Number of processors: 1
17:28:48.0156 3700 Page size: 0x1000
17:28:48.0156 3700 Boot type: Normal boot
17:28:48.0156 3700 ============================================================
17:28:49.0546 3700 Drive \Device\Harddisk0\DR0 - Size: 0x2E93D2DE00 (186.31 Gb), SectorSize: 0x200, Cylinders: 0x5F01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:28:49.0546 3700 ============================================================
17:28:49.0546 3700 \Device\Harddisk0\DR0:
17:28:49.0546 3700 MBR partitions:
17:28:49.0546 3700 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x30D3C74
17:28:49.0562 3700 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x30D3CF2, BlocksNum 0x143CA0CF
17:28:49.0562 3700 ============================================================
17:28:49.0578 3700 C: <-> \Device\Harddisk0\DR0\Partition1
17:28:49.0593 3700 D: <-> \Device\Harddisk0\DR0\Partition2
17:28:49.0593 3700 ============================================================
17:28:49.0609 3700 Initialize success
17:28:49.0609 3700 ============================================================
17:28:52.0937 3880 ============================================================
17:28:52.0937 3880 Scan started
17:28:52.0937 3880 Mode: Manual;
17:28:52.0937 3880 ============================================================
17:28:54.0500 3880 ================ Scan system memory ========================
17:28:54.0500 3880 System memory - ok
17:28:54.0515 3880 ================ Scan services =============================
17:28:54.0656 3880 Abiosdsk - ok
17:28:54.0671 3880 abp480n5 - ok
17:28:54.0750 3880 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:28:54.0750 3880 ACPI - ok
17:28:54.0796 3880 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
17:28:54.0796 3880 ACPIEC - ok
17:28:54.0890 3880 [ 93E118B465160D9D01907EA3350353CA ] AcrSch2Svc C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
17:28:54.0890 3880 AcrSch2Svc - ok
17:28:54.0984 3880 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:28:54.0984 3880 AdobeFlashPlayerUpdateSvc - ok
17:28:55.0000 3880 adpu160m - ok
17:28:55.0046 3880 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
17:28:55.0062 3880 aec - ok
17:28:55.0093 3880 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
17:28:55.0093 3880 AFD - ok
17:28:55.0140 3880 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
17:28:55.0140 3880 agp440 - ok
17:28:55.0171 3880 Aha154x - ok
17:28:55.0187 3880 aic78u2 - ok
17:28:55.0203 3880 aic78xx - ok
17:28:55.0406 3880 [ 34149A136B2B7525113950233F259EC1 ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
17:28:55.0453 3880 ALCXWDM - ok
17:28:55.0484 3880 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
17:28:55.0484 3880 Alerter - ok
17:28:55.0531 3880 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
17:28:55.0531 3880 ALG - ok
17:28:55.0546 3880 AliIde - ok
17:28:55.0593 3880 [ 3980814F8027D27EA003E2E3D9D4F604 ] AmdK7 C:\WINDOWS\system32\DRIVERS\amdk7.sys
17:28:55.0593 3880 AmdK7 - ok
17:28:55.0609 3880 amsint - ok
17:28:55.0687 3880 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
17:28:55.0703 3880 AppMgmt - ok
17:28:55.0734 3880 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
17:28:55.0734 3880 Arp1394 - ok
17:28:55.0750 3880 asc - ok
17:28:55.0765 3880 asc3350p - ok
17:28:55.0796 3880 asc3550 - ok
17:28:55.0828 3880 [ B979979AB8027F7F53FB16EC4229B7DB ] ASPI32 C:\WINDOWS\system32\drivers\ASPI32.sys
17:28:55.0828 3880 ASPI32 - ok
17:28:55.0906 3880 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
17:28:55.0906 3880 aspnet_state - ok
17:28:55.0937 3880 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:28:55.0937 3880 AsyncMac - ok
17:28:55.0968 3880 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
17:28:55.0968 3880 atapi - ok
17:28:55.0984 3880 Atdisk - ok
17:28:56.0031 3880 [ B2906F9E62A6AC6AD7F5F35DE9656098 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
17:28:56.0046 3880 Ati HotKey Poller - ok
17:28:56.0093 3880 [ 56926CCC03417DFFC39C02AC4C163EBC ] ATI Smart C:\WINDOWS\system32\ati2sgag.exe
17:28:56.0093 3880 ATI Smart - ok
17:28:56.0171 3880 [ 86BE5339A67C0A309F3E3EF8B0901EE5 ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
17:28:56.0171 3880 ati2mtag - ok
17:28:56.0218 3880 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:28:56.0218 3880 Atmarpc - ok
17:28:56.0250 3880 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
17:28:56.0250 3880 AudioSrv - ok
17:28:56.0296 3880 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
17:28:56.0296 3880 audstub - ok
17:28:56.0328 3880 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
17:28:56.0328 3880 Beep - ok
17:28:56.0375 3880 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
17:28:56.0390 3880 BITS - ok
17:28:56.0421 3880 [ CFD4C3352E29A8B729536648466E8DF5 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:28:56.0421 3880 Bonjour Service - ok
17:28:56.0453 3880 [ 249276D3EF1E74B992299CB96099E4D7 ] Browser C:\WINDOWS\System32\browser.dll
17:28:56.0453 3880 Browser - ok
17:28:56.0484 3880 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
17:28:56.0484 3880 cbidf2k - ok
17:28:56.0531 3880 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
17:28:56.0531 3880 CCDECODE - ok
17:28:56.0546 3880 cd20xrnt - ok
17:28:56.0578 3880 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
17:28:56.0578 3880 Cdaudio - ok
17:28:56.0609 3880 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
17:28:56.0609 3880 Cdfs - ok
17:28:56.0625 3880 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:28:56.0625 3880 Cdrom - ok
17:28:56.0640 3880 Changer - ok
17:28:56.0671 3880 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
17:28:56.0671 3880 CiSvc - ok
17:28:56.0703 3880 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
17:28:56.0703 3880 ClipSrv - ok
17:28:56.0734 3880 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:28:56.0750 3880 clr_optimization_v2.0.50727_32 - ok
17:28:56.0812 3880 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:28:56.0812 3880 clr_optimization_v4.0.30319_32 - ok
17:28:56.0843 3880 CmdIde - ok
17:28:56.0859 3880 COMSysApp - ok
17:28:56.0890 3880 Cpqarray - ok
17:28:56.0921 3880 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
17:28:56.0921 3880 CryptSvc - ok
17:28:56.0953 3880 dac2w2k - ok
17:28:56.0968 3880 dac960nt - ok
17:28:57.0015 3880 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
17:28:57.0031 3880 DcomLaunch - ok
17:28:57.0062 3880 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
17:28:57.0062 3880 Dhcp - ok
17:28:57.0093 3880 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
17:28:57.0109 3880 Disk - ok
17:28:57.0125 3880 dmadmin - ok
17:28:57.0156 3880 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
17:28:57.0171 3880 dmboot - ok
17:28:57.0203 3880 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\DRIVERS\dmio.sys
17:28:57.0203 3880 dmio - ok
17:28:57.0250 3880 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
17:28:57.0250 3880 dmload - ok
17:28:57.0281 3880 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
17:28:57.0281 3880 dmserver - ok
17:28:57.0312 3880 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
17:28:57.0328 3880 DMusic - ok
17:28:57.0359 3880 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
17:28:57.0375 3880 Dnscache - ok
17:28:57.0421 3880 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
17:28:57.0437 3880 Dot3svc - ok
17:28:57.0453 3880 dpti2o - ok
17:28:57.0484 3880 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
17:28:57.0484 3880 drmkaud - ok
17:28:57.0500 3880 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
17:28:57.0500 3880 EapHost - ok
17:28:57.0515 3880 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
17:28:57.0515 3880 ERSvc - ok
17:28:57.0546 3880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
17:28:57.0562 3880 Eventlog - ok
17:28:57.0593 3880 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
17:28:57.0593 3880 EventSystem - ok
17:28:57.0625 3880 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
17:28:57.0625 3880 Fastfat - ok
17:28:57.0671 3880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
17:28:57.0687 3880 FastUserSwitchingCompatibility - ok
17:28:57.0718 3880 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
17:28:57.0718 3880 Fdc - ok
17:28:57.0765 3880 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
17:28:57.0765 3880 Fips - ok
17:28:57.0781 3880 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
17:28:57.0781 3880 Flpydisk - ok
17:28:57.0828 3880 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
17:28:57.0828 3880 FltMgr - ok
17:28:57.0890 3880 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
17:28:57.0890 3880 FontCache3.0.0.0 - ok
17:28:57.0921 3880 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:28:57.0921 3880 Fs_Rec - ok
17:28:57.0937 3880 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:28:57.0937 3880 Ftdisk - ok
17:28:57.0953 3880 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
17:28:57.0953 3880 gameenum - ok
17:28:58.0046 3880 [ 2973B4EB7BE10A0D491B2037DCAAE88F ] Garmin Core Update Service D:\Garmin\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
17:28:58.0046 3880 Garmin Core Update Service - ok
17:28:58.0093 3880 [ 4AC51459805264AFFD5F6FDFB9D9235F ] GEARAspiWDM C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
17:28:58.0109 3880 GEARAspiWDM - ok
17:28:58.0140 3880 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\WINDOWS\system32\giveio.sys
17:28:58.0140 3880 giveio - ok
17:28:58.0187 3880 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:28:58.0187 3880 Gpc - ok
17:28:58.0234 3880 [ 6003BC70F1A8307262BD3C941BDA0B7E ] grmnusb C:\WINDOWS\system32\drivers\grmnusb.sys
17:28:58.0234 3880 grmnusb - ok
17:28:58.0296 3880 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
17:28:58.0296 3880 gupdate - ok
17:28:58.0312 3880 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
17:28:58.0312 3880 gupdatem - ok
17:28:58.0359 3880 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
17:28:58.0359 3880 helpsvc - ok
17:28:58.0390 3880 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
17:28:58.0390 3880 HidServ - ok
17:28:58.0421 3880 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
17:28:58.0421 3880 hidusb - ok
17:28:58.0468 3880 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
17:28:58.0468 3880 hkmsvc - ok
17:28:58.0484 3880 hpn - ok
17:28:58.0546 3880 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
17:28:58.0546 3880 HTTP - ok
17:28:58.0593 3880 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
17:28:58.0593 3880 HTTPFilter - ok
17:28:58.0609 3880 i2omgmt - ok
17:28:58.0625 3880 i2omp - ok
17:28:58.0656 3880 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
17:28:58.0656 3880 i8042prt - ok
17:28:58.0718 3880 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:28:58.0750 3880 idsvc - ok
17:28:58.0781 3880 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
17:28:58.0781 3880 Imapi - ok
17:28:58.0828 3880 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
17:28:58.0828 3880 ImapiService - ok
17:28:58.0859 3880 ini910u - ok
17:28:58.0890 3880 [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
17:28:58.0890 3880 IntelIde - ok
17:28:58.0937 3880 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:28:58.0937 3880 intelppm - ok
17:28:58.0953 3880 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
17:28:58.0953 3880 Ip6Fw - ok
17:28:58.0984 3880 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:28:58.0984 3880 IpFilterDriver - ok
17:28:59.0015 3880 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:28:59.0015 3880 IpInIp - ok
17:28:59.0046 3880 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:28:59.0046 3880 IpNat - ok
17:28:59.0078 3880 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:28:59.0078 3880 IPSec - ok
17:28:59.0109 3880 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
17:28:59.0125 3880 IRENUM - ok
17:28:59.0156 3880 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:28:59.0156 3880 isapnp - ok
17:28:59.0234 3880 [ 126A16F569122AE00AD3D12EF831D651 ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
17:28:59.0234 3880 JavaQuickStarterService - ok
17:28:59.0281 3880 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:28:59.0281 3880 Kbdclass - ok
17:28:59.0312 3880 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
17:28:59.0312 3880 kbdhid - ok
17:28:59.0359 3880 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
17:28:59.0359 3880 kmixer - ok
17:28:59.0390 3880 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
17:28:59.0406 3880 KSecDD - ok
17:28:59.0437 3880 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
17:28:59.0437 3880 lanmanserver - ok
17:28:59.0484 3880 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
17:28:59.0484 3880 lanmanworkstation - ok
17:28:59.0515 3880 lbrtfdc - ok
17:28:59.0562 3880 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
17:28:59.0562 3880 LmHosts - ok
17:28:59.0625 3880 [ FDEA00D7B13211FEC24E411FDA43D9BA ] LMIGuardianSvc C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
17:28:59.0640 3880 LMIGuardianSvc - ok
17:28:59.0640 3880 LMIInfo - ok
17:28:59.0671 3880 [ E67977626735C9033AA6EB264329CE98 ] LMIMaint C:\Program Files\LogMeIn\x86\RaMaint.exe
17:28:59.0671 3880 LMIMaint - ok
17:28:59.0718 3880 [ 4477689E2D8AE6B78BA34C9AF4CC1ED1 ] lmimirr C:\WINDOWS\system32\DRIVERS\lmimirr.sys
17:28:59.0718 3880 lmimirr - ok
17:28:59.0734 3880 LMIRfsClientNP - ok
17:28:59.0765 3880 [ 3FAA563DDF853320F90259D455A01D79 ] LMIRfsDriver C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
17:28:59.0765 3880 LMIRfsDriver - ok
17:28:59.0812 3880 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
17:28:59.0812 3880 MBAMProtector - ok
17:28:59.0875 3880 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:28:59.0875 3880 MBAMScheduler - ok
17:28:59.0921 3880 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
17:28:59.0937 3880 MBAMService - ok
17:28:59.0968 3880 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
17:28:59.0968 3880 Messenger - ok
17:29:00.0015 3880 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
17:29:00.0015 3880 mnmdd - ok
17:29:00.0062 3880 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
17:29:00.0062 3880 mnmsrvc - ok
17:29:00.0093 3880 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
17:29:00.0093 3880 Modem - ok
17:29:00.0125 3880 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:29:00.0125 3880 Mouclass - ok
17:29:00.0171 3880 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
17:29:00.0171 3880 mouhid - ok
17:29:00.0203 3880 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
17:29:00.0203 3880 MountMgr - ok
17:29:00.0265 3880 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:29:00.0265 3880 MozillaMaintenance - ok
17:29:00.0296 3880 [ C0F8E0C2C3C0437CF37C6781896DC3EC ] MPE C:\WINDOWS\system32\DRIVERS\MPE.sys
17:29:00.0296 3880 MPE - ok
17:29:00.0359 3880 [ CF105EE42E3F71E648CEBB3F666E1CF0 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
17:29:00.0359 3880 MpFilter - ok
17:29:00.0453 3880 [ A69630D039C38018689190234F866D77 ] MpKsl6eefe789 C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{F17AD03E-2131-4131-9501-C01C7CAC19AA}\MpKsl6eefe789.sys
17:29:00.0453 3880 MpKsl6eefe789 - ok
17:29:00.0468 3880 mraid35x - ok
17:29:00.0500 3880 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:29:00.0515 3880 MRxDAV - ok
17:29:00.0562 3880 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:29:00.0562 3880 MRxSmb - ok
17:29:00.0609 3880 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
17:29:00.0609 3880 MSDTC - ok
17:29:00.0656 3880 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
17:29:00.0656 3880 Msfs - ok
17:29:00.0671 3880 MSIServer - ok
17:29:00.0703 3880 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:29:00.0703 3880 MSKSSRV - ok
17:29:00.0750 3880 [ C1F19D2BACBEE9AB64D9AE69E9859AC0 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
17:29:00.0750 3880 MsMpSvc - ok
17:29:00.0765 3880 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:29:00.0765 3880 MSPCLOCK - ok
17:29:00.0796 3880 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
17:29:00.0796 3880 MSPQM - ok
17:29:00.0828 3880 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:29:00.0828 3880 mssmbios - ok
17:29:00.0859 3880 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
17:29:00.0859 3880 MSTEE - ok
17:29:00.0890 3880 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
17:29:00.0890 3880 Mup - ok
17:29:00.0937 3880 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
17:29:00.0937 3880 NABTSFEC - ok
17:29:00.0968 3880 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
17:29:00.0984 3880 napagent - ok
17:29:01.0015 3880 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
17:29:01.0015 3880 NDIS - ok
17:29:01.0046 3880 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
17:29:01.0046 3880 NdisIP - ok
17:29:01.0078 3880 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:29:01.0078 3880 NdisTapi - ok
17:29:01.0109 3880 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:29:01.0109 3880 Ndisuio - ok
17:29:01.0140 3880 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:29:01.0140 3880 NdisWan - ok
17:29:01.0171 3880 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
17:29:01.0187 3880 NDProxy - ok
17:29:01.0203 3880 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
17:29:01.0203 3880 NetBIOS - ok
17:29:01.0250 3880 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
17:29:01.0250 3880 NetBT - ok
17:29:01.0312 3880 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
17:29:01.0312 3880 NetDDE - ok
17:29:01.0328 3880 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
17:29:01.0328 3880 NetDDEdsdm - ok
17:29:01.0359 3880 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
17:29:01.0375 3880 Netlogon - ok
17:29:01.0421 3880 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
17:29:01.0421 3880 Netman - ok
17:29:01.0484 3880 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:29:01.0484 3880 NetTcpPortSharing - ok
17:29:01.0515 3880 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
17:29:01.0515 3880 NIC1394 - ok
17:29:01.0546 3880 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
17:29:01.0562 3880 Nla - ok
17:29:01.0609 3880 [ B0A67DE1A128389AEA4D42C5A56215FD ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
17:29:01.0609 3880 nmwcd - ok
17:29:01.0640 3880 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
17:29:01.0640 3880 Npfs - ok
17:29:01.0687 3880 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
17:29:01.0703 3880 Ntfs - ok
17:29:01.0734 3880 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
17:29:01.0734 3880 NtLmSsp - ok
17:29:01.0781 3880 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
17:29:01.0796 3880 NtmsSvc - ok
17:29:01.0828 3880 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
17:29:01.0828 3880 Null - ok
17:29:01.0875 3880 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:29:01.0875 3880 NwlnkFlt - ok
17:29:01.0906 3880 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:29:01.0906 3880 NwlnkFwd - ok
17:29:01.0937 3880 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
17:29:01.0953 3880 ohci1394 - ok
17:29:01.0984 3880 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:29:01.0984 3880 ose - ok
17:29:02.0031 3880 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
17:29:02.0031 3880 Parport - ok
17:29:02.0062 3880 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
17:29:02.0062 3880 PartMgr - ok
17:29:02.0093 3880 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
17:29:02.0093 3880 ParVdm - ok
17:29:02.0125 3880 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
17:29:02.0125 3880 PCI - ok
17:29:02.0140 3880 PCIDump - ok
17:29:02.0203 3880 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\drivers\PCIIde.sys
17:29:02.0203 3880 PCIIde - ok
17:29:02.0234 3880 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
17:29:02.0234 3880 Pcmcia - ok
17:29:02.0250 3880 PDCOMP - ok
17:29:02.0265 3880 PDFRAME - ok
17:29:02.0296 3880 PDRELI - ok
17:29:02.0312 3880 PDRFRAME - ok
17:29:02.0328 3880 perc2 - ok
17:29:02.0343 3880 perc2hib - ok
17:29:02.0406 3880 [ 957B82EC80AD7EAD64E5E47DF6B0DC40 ] pfc C:\WINDOWS\system32\drivers\pfc.sys
17:29:02.0406 3880 pfc - ok
17:29:02.0437 3880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
17:29:02.0437 3880 PlugPlay - ok
17:29:02.0468 3880 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
17:29:02.0468 3880 PolicyAgent - ok
17:29:02.0515 3880 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:29:02.0515 3880 PptpMiniport - ok
17:29:02.0562 3880 [ 4ED8C1B65CBB15E26EECEFFFF173981F ] prio C:\WINDOWS\system32\drivers\prio.sys
17:29:02.0562 3880 prio - ok
17:29:02.0578 3880 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
17:29:02.0578 3880 ProtectedStorage - ok
17:29:02.0609 3880 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
17:29:02.0609 3880 PSched - ok
17:29:02.0656 3880 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:29:02.0656 3880 Ptilink - ok
17:29:02.0687 3880 [ 81088114178112618B1C414A65E50F7C ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
17:29:02.0687 3880 PxHelp20 - ok
17:29:02.0703 3880 ql1080 - ok
17:29:02.0718 3880 Ql10wnt - ok
17:29:02.0750 3880 ql12160 - ok
17:29:02.0765 3880 ql1240 - ok
17:29:02.0781 3880 ql1280 - ok
17:29:02.0812 3880 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:29:02.0812 3880 RasAcd - ok
17:29:02.0859 3880 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
17:29:02.0859 3880 RasAuto - ok
17:29:02.0890 3880 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:29:02.0890 3880 Rasl2tp - ok
17:29:02.0921 3880 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
17:29:02.0937 3880 RasMan - ok
17:29:02.0953 3880 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:29:02.0968 3880 RasPppoe - ok
17:29:02.0984 3880 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
17:29:02.0984 3880 Raspti - ok
17:29:03.0031 3880 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:29:03.0031 3880 Rdbss - ok
17:29:03.0062 3880 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:29:03.0062 3880 RDPCDD - ok
17:29:03.0093 3880 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
17:29:03.0109 3880 rdpdr - ok
17:29:03.0140 3880 [ 5B3055DAA788BD688594D2F5981F2A83 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
17:29:03.0156 3880 RDPWD - ok
17:29:03.0203 3880 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
17:29:03.0203 3880 RDSessMgr - ok
17:29:03.0234 3880 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
17:29:03.0234 3880 redbook - ok
17:29:03.0281 3880 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
17:29:03.0281 3880 RemoteAccess - ok
17:29:03.0312 3880 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
17:29:03.0328 3880 RemoteRegistry - ok
17:29:03.0359 3880 [ 8B5B8A11306190C6963D3473F052D3C8 ] Revoflt C:\WINDOWS\system32\DRIVERS\revoflt.sys
17:29:03.0359 3880 Revoflt - ok
17:29:03.0406 3880 [ 1D4061CC5BC8E823D05E1E6E6C1224E3 ] RichVideo C:\Program Files\Cyberlink\Shared files\RichVideo.exe
17:29:03.0421 3880 RichVideo - ok
17:29:03.0453 3880 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
17:29:03.0453 3880 RpcLocator - ok
17:29:03.0500 3880 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
17:29:03.0500 3880 RpcSs - ok
17:29:03.0546 3880 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
17:29:03.0546 3880 RSVP - ok
17:29:03.0593 3880 [ 2377F31CBB8277807C3351302CF133E9 ] RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
17:29:03.0593 3880 RTL8023xp - ok
17:29:03.0625 3880 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
17:29:03.0625 3880 rtl8139 - ok
17:29:03.0656 3880 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
17:29:03.0656 3880 SamSs - ok
17:29:03.0687 3880 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
17:29:03.0687 3880 SCardSvr - ok
17:29:03.0718 3880 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
17:29:03.0734 3880 Schedule - ok
17:29:03.0781 3880 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:29:03.0781 3880 Secdrv - ok
17:29:03.0812 3880 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
17:29:03.0812 3880 seclogon - ok
17:29:03.0843 3880 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
17:29:03.0843 3880 SENS - ok
17:29:03.0890 3880 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
17:29:03.0890 3880 serenum - ok
17:29:03.0921 3880 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
17:29:03.0921 3880 Serial - ok
17:29:03.0953 3880 [ 61490899036B14DEDC24BABD847D7001 ] sermouse C:\WINDOWS\system32\DRIVERS\sermouse.sys
17:29:03.0953 3880 sermouse - ok
17:29:04.0031 3880 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
17:29:04.0031 3880 Sfloppy - ok
17:29:04.0062 3880 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
17:29:04.0078 3880 SharedAccess - ok
17:29:04.0109 3880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:29:04.0125 3880 ShellHWDetection - ok
17:29:04.0140 3880 Simbad - ok
17:29:04.0171 3880 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
17:29:04.0171 3880 SLIP - ok
17:29:04.0234 3880 [ E78C98378A071CE4D48A7C514FA98FA1 ] snapman C:\WINDOWS\system32\DRIVERS\snapman.sys
17:29:04.0234 3880 snapman - ok
17:29:04.0265 3880 [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1 C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
17:29:04.0265 3880 SONYPVU1 - ok
17:29:04.0281 3880 Sparrow - ok
17:29:04.0312 3880 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\WINDOWS\system32\speedfan.sys
17:29:04.0328 3880 speedfan - ok
17:29:04.0359 3880 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
17:29:04.0359 3880 splitter - ok
17:29:04.0421 3880 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
17:29:04.0421 3880 Spooler - ok
17:29:04.0453 3880 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
17:29:04.0453 3880 sr - ok
17:29:04.0500 3880 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
17:29:04.0515 3880 srservice - ok
17:29:04.0562 3880 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
17:29:04.0578 3880 Srv - ok
17:29:04.0609 3880 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
17:29:04.0609 3880 SSDPSRV - ok
17:29:04.0671 3880 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
17:29:04.0687 3880 stisvc - ok
17:29:04.0703 3880 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
17:29:04.0703 3880 streamip - ok
17:29:04.0734 3880 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
17:29:04.0734 3880 swenum - ok
17:29:04.0765 3880 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
17:29:04.0765 3880 swmidi - ok
17:29:04.0781 3880 SwPrv - ok
17:29:04.0812 3880 symc810 - ok
17:29:04.0828 3880 symc8xx - ok
17:29:04.0843 3880 sym_hi - ok
17:29:04.0875 3880 sym_u3 - ok
17:29:04.0906 3880 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
17:29:04.0906 3880 sysaudio - ok
17:29:04.0937 3880 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
17:29:04.0953 3880 SysmonLog - ok
17:29:04.0984 3880 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
17:29:04.0984 3880 TapiSrv - ok
17:29:05.0031 3880 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:29:05.0046 3880 Tcpip - ok
17:29:05.0078 3880 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
17:29:05.0078 3880 TDPIPE - ok
17:29:05.0109 3880 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
17:29:05.0109 3880 TDTCP - ok
17:29:05.0140 3880 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
17:29:05.0140 3880 TermDD - ok
17:29:05.0171 3880 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
17:29:05.0187 3880 TermService - ok
17:29:05.0218 3880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
17:29:05.0218 3880 Themes - ok
17:29:05.0250 3880 [ D352FFF2A623B916C08CEACBFC8B5C32 ] tifsfilter C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
17:29:05.0250 3880 tifsfilter - ok
17:29:05.0296 3880 [ 64694B2A5C772E1C61FEAC300ED90CA6 ] timounter C:\WINDOWS\system32\DRIVERS\timntr.sys
17:29:05.0296 3880 timounter - ok
17:29:05.0343 3880 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
17:29:05.0343 3880 TlntSvr - ok
17:29:05.0359 3880 TosIde - ok
17:29:05.0390 3880 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
17:29:05.0390 3880 TrkWks - ok
17:29:05.0437 3880 [ E266683FC95ABDEC17CD378564E1B54B ] TVICHW32 C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS
17:29:05.0437 3880 TVICHW32 - ok
17:29:05.0484 3880 [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35 C:\WINDOWS\system32\DRIVERS\uagp35.sys
17:29:05.0484 3880 uagp35 - ok
17:29:05.0515 3880 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
17:29:05.0515 3880 Udfs - ok
17:29:05.0546 3880 [ 332D341D92B933600D41953B08360DFB ] UleadBurningHelper C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
17:29:05.0546 3880 UleadBurningHelper - ok
17:29:05.0562 3880 ultra - ok
17:29:05.0609 3880 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
17:29:05.0609 3880 Update - ok
17:29:05.0656 3880 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
17:29:05.0656 3880 upnphost - ok
17:29:05.0687 3880 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
17:29:05.0703 3880 UPS - ok
17:29:05.0734 3880 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
17:29:05.0734 3880 usbccgp - ok
17:29:05.0750 3880 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
17:29:05.0750 3880 usbehci - ok
17:29:05.0781 3880 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:29:05.0781 3880 usbhub - ok
17:29:05.0796 3880 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
17:29:05.0812 3880 usbscan - ok
17:29:05.0843 3880 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:29:05.0843 3880 USBSTOR - ok
17:29:05.0859 3880 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:29:05.0859 3880 usbuhci - ok
17:29:05.0890 3880 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
17:29:05.0890 3880 VgaSave - ok
17:29:05.0921 3880 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
17:29:05.0921 3880 ViaIde - ok
17:29:05.0953 3880 [ C8EE49FA76EB7C41A9CDDFE58151A74E ] videX32 C:\WINDOWS\system32\DRIVERS\videX32.sys
17:29:05.0953 3880 videX32 - ok
17:29:05.0984 3880 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
17:29:05.0984 3880 VolSnap - ok
17:29:06.0031 3880 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
17:29:06.0046 3880 VSS - ok
17:29:06.0093 3880 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
17:29:06.0093 3880 W32Time - ok
17:29:06.0140 3880 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:29:06.0140 3880 Wanarp - ok
17:29:06.0187 3880 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
17:29:06.0187 3880 Wdf01000 - ok
17:29:06.0218 3880 WDICA - ok
17:29:06.0250 3880 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
17:29:06.0250 3880 wdmaud - ok
17:29:06.0281 3880 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
17:29:06.0281 3880 WebClient - ok
17:29:06.0312 3880 [ 0E507042CCEFC40B8BB5DDE75A7BD0C7 ] wfcxacap C:\WINDOWS\system32\DRIVERS\wfcxacap.sys
17:29:06.0312 3880 wfcxacap - ok
17:29:06.0359 3880 [ B8ACB6B48F928FF5E58B1A2DC3FA628C ] wfcxatun C:\WINDOWS\system32\drivers\wfcxatun.sys
17:29:06.0359 3880 wfcxatun - ok
17:29:06.0390 3880 [ E32EEEAC4ED0249474A2C9B71F1D5A73 ] wfcxdtun C:\WINDOWS\system32\drivers\wfcxdtun.sys
17:29:06.0390 3880 wfcxdtun - ok
17:29:06.0406 3880 [ FC4F80B8C23DBF4D23A9A4DED38CF430 ] wfcxtcap C:\WINDOWS\system32\drivers\wfcxtcap.sys
17:29:06.0406 3880 wfcxtcap - ok
17:29:06.0437 3880 [ E9905845ABC7B3521F642F9C8D08A03E ] WFCXVCAP C:\WINDOWS\system32\drivers\wfcxvcap.sys
17:29:06.0437 3880 WFCXVCAP - ok
17:29:06.0468 3880 [ 0AED0D6F83ADE999FA6A8E485830E4C5 ] wfcxxbar C:\WINDOWS\system32\drivers\wfcxxbar.sys
17:29:06.0468 3880 wfcxxbar - ok
17:29:06.0515 3880 [ 9BC98A4E3401D52ED860CF883CCB7478 ] WFIOCTL C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS
17:29:06.0515 3880 WFIOCTL - ok
17:29:06.0593 3880 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
17:29:06.0593 3880 winmgmt - ok
17:29:06.0656 3880 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
17:29:06.0656 3880 WmdmPmSN - ok
17:29:06.0703 3880 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
17:29:06.0718 3880 Wmi - ok
17:29:06.0765 3880 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
17:29:06.0765 3880 WmiApSrv - ok
17:29:06.0796 3880 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
17:29:06.0812 3880 WpdUsb - ok
17:29:06.0906 3880 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:29:06.0906 3880 WPFFontCache_v0400 - ok
17:29:06.0937 3880 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:29:06.0937 3880 WS2IFSL - ok
17:29:06.0984 3880 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
17:29:06.0984 3880 wscsvc - ok
17:29:07.0015 3880 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
17:29:07.0015 3880 WSTCODEC - ok
17:29:07.0046 3880 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
17:29:07.0062 3880 wuauserv - ok
17:29:07.0093 3880 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
17:29:07.0109 3880 WudfPf - ok
17:29:07.0140 3880 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
17:29:07.0140 3880 WudfRd - ok
17:29:07.0187 3880 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
17:29:07.0187 3880 WudfSvc - ok
17:29:07.0250 3880 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
17:29:07.0281 3880 WZCSVC - ok
17:29:07.0328 3880 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
17:29:07.0328 3880 xmlprov - ok
17:29:07.0375 3880 [ 24143E06D15DB866DEA29258F77FD89D ] yukonx86 C:\WINDOWS\system32\DRIVERS\yukonx86.sys
17:29:07.0375 3880 yukonx86 - ok
17:29:07.0437 3880 [ 8098180B3F6C430A4E60333BC036F936 ] {95808DC4-FA4A-4c74-92FE-5B863F82066B} C:\Program Files\PowerDVD\000.fcl
17:29:07.0437 3880 {95808DC4-FA4A-4c74-92FE-5B863F82066B} - ok
17:29:07.0468 3880 ================ Scan global ===============================
17:29:07.0500 3880 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
17:29:07.0531 3880 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
17:29:07.0578 3880 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
17:29:07.0593 3880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
17:29:07.0609 3880 [Global] - ok
17:29:07.0609 3880 ================ Scan MBR ==================================
17:29:07.0625 3880 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
17:29:07.0765 3880 \Device\Harddisk0\DR0 - ok
17:29:07.0781 3880 ================ Scan VBR ==================================
17:29:07.0781 3880 [ 0E62905C43C435FB65B9FAB6D91F7E37 ] \Device\Harddisk0\DR0\Partition1
17:29:07.0781 3880 \Device\Harddisk0\DR0\Partition1 - ok
17:29:07.0812 3880 [ 09DCFA8145E294705E4D8F910EE50125 ] \Device\Harddisk0\DR0\Partition2
17:29:07.0812 3880 \Device\Harddisk0\DR0\Partition2 - ok
17:29:07.0828 3880 ============================================================
17:29:07.0828 3880 Scan finished
17:29:07.0828 3880 ============================================================
17:29:07.0843 3852 Detected object count: 0
17:29:07.0843 3852 Actual detected object count: 0
17:29:26.0015 3688 Deinitialize success

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání skončeno "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[rados-75]

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Doma [Práva správce]
Mód : Kontrola -- Datum : 06/01/2013 19:31:40
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 4 ¤¤¤
[HJ] HKLM\[...]\Security Center : UpdatesDisableNotify (1) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3200826A +++++
--- User ---
[MBR] 86b697ba725aac35027f956290f50460
[BSP] 95249b99efade9dd3d713b5490d57d7b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 24999 Mo
1 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 51199155 | Size: 165780 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2]_S_06012013_02d1931.txt >>
RKreport[1]_S_06012013_02d1723.txt ; RKreport[2]_S_06012013_02d1931.txt