PC-HELP.CZ

Zdravim,

Raz mi urobilo ked som zapol PC tak CPU bolo vytazene na 100%. V procesoch to robil prave run32dll tak som ho zavrel a od vtedy.

Mi robi proble,m ked vypinam PC tak mi nabehne, ze ukoncuje proces Run32DLL a musim dat ukoncit ihned, inak sa PC samo nevypne.

Tu davam log s RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Erik at 2013-07-12 17:26:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 26 GB (23%) free of 114 GB
Total RAM: 3071 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:26:34, on 12.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\Program Files\Ask.com\Updater\Updater.exe
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\Opera\opera.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Program Files\Garena Plus\GarenaMessenger.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\rundll32.exe
D:\Documents and Settings\Erik\Desktop\RSIT.exe
D:\Program Files\trend micro\Erik.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?affID=119 ... 19661675EE
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - D:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - D:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll
O3 - Toolbar: KMPlayer Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ApnUpdater] "D:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BrowserProtect - Unknown owner - D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 7532 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Adobe Flash Player Updater.job
D:\WINDOWS\tasks\avast! Emergency Update.job
D:\WINDOWS\tasks\EPUpdater.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
D:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre7\bin\ssv.dll [2013-05-12 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
delta Helper Object - D:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll [2013-03-13 251288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
KMPlayer Toolbar - D:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-12 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{82E1477C-B154-48D3-9891-33D83C26BCD3} - Delta Toolbar - D:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll [2013-03-13 325016]
{D4027C7F-154A-4066-A1AD-4243D8127440} - KMPlayer Toolbar - D:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=D:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"avast"=D:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
""= []
"ApnUpdater"=D:\Program Files\Ask.com\Updater\Updater.exe [2013-04-01 1719944]
"Adobe ARM"=D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"RivaTunerStartupDaemon"=D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe [2009-08-22 2781184]
"RTHDCPL"=D:\WINDOWS\RTHDCPL.EXE [2006-08-01 16049664]
"Alcmtr"=D:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ATICustomerCare"=D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-11-16 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=D:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"GarenaPlus"=D:\Program Files\Garena Plus\GarenaMessenger.exe [2013-06-19 9873200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
D:\WINDOWS\system32\antiwpa.dll [2011-01-06 60416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
D:\WINDOWS\system32\Ati2evxx.dll [2012-11-16 192512]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"D:\Program Files\Opera\opera.exe"="D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"D:\Games\World_of_Tanks\WoTLauncher.exe"="D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"D:\Documents and Settings\Erik\Local Settings\Apps\2.0\CE7LRHX6.B36\AECC8Z69.CO7\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\Launcher.exe"="D:\Documents and Settings\Erik\Local Settings\Apps\2.0\CE7LRHX6.B36\AECC8Z69.CO7\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\Launcher.exe:*:Enabled:Launcher"
"D:\WINDOWS\system32\PnkBstrA.exe"="D:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"D:\WINDOWS\system32\PnkBstrB.exe"="D:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe"="D:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe:*:Enabled:GRO Client"
"D:\Documents and Settings\Erik\Application Data\uTorrent\uTorrent.exe"="D:\Documents and Settings\Erik\Application Data\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\JDownloader\jre\bin\javaw.exe"="D:\Program Files\JDownloader\jre\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\WINDOWS\system32\javaw.exe"="D:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Activision\Call of Duty - Black Ops\BlackOpsMP.exe"="D:\Program Files\Activision\Call of Duty - Black Ops\BlackOpsMP.exe:*:Enabled:BlackOpsMP"
"D:\Program Files\Garena Plus\Room\garena_room.exe"="D:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:garena_room"
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Warcraft III\Warcraft III.exe"="D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\Program Files\Warcraft III\War3.exe"="D:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"D:\Program Files\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe"="D:\Program Files\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII"
"D:\Program Files\Pando Networks\Media Booster\PMB.exe"="D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Pando Networks\Media Booster\PMB.exe"="D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=D:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=D:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-07-12 17:26:27 ----D---- D:\Program Files\trend micro
2013-07-12 17:26:26 ----D---- D:\rsit
2013-07-11 19:31:17 ----D---- D:\Documents and Settings\Erik\Application Data\LolClient
2013-07-10 20:35:34 ----SHD---- D:\WINDOWS\system32\AI_RecycleBin
2013-07-10 20:35:28 ----D---- D:\Riot Games
2013-07-10 20:34:56 ----D---- D:\Documents and Settings\All Users\Application Data\PMB Files
2013-07-10 20:34:45 ----D---- D:\Program Files\Pando Networks
2013-07-10 20:34:02 ----D---- D:\Documents and Settings\Erik\Application Data\Riot Games
2013-06-21 08:48:46 ----D---- D:\Documents and Settings\Erik\Application Data\File Scout
2013-06-18 22:38:39 ----D---- D:\Documents and Settings\All Users\Application Data\ATI
2013-06-18 20:11:44 ----A---- D:\WINDOWS\system32\drivers\AtihdXP3.sys
2013-06-18 20:08:35 ----D---- D:\AMD
2013-06-18 19:58:15 ----D---- D:\Program Files\The KMPlayer
2013-06-18 19:44:54 ----D---- D:\Documents and Settings\Erik\Application Data\vlc
2013-06-18 19:44:05 ----D---- D:\Program Files\VideoLAN
2013-06-18 19:38:34 ----D---- D:\Program Files\MPC-HC
2013-06-18 19:36:12 ----D---- D:\Documents and Settings\Erik\Application Data\Media Player Classic
2013-06-16 22:38:21 ----D---- D:\Program Files\SystemRequirementsLab
2013-06-16 22:38:21 ----D---- D:\Documents and Settings\All Users\Application Data\SystemRequirementsLab
2013-06-16 22:38:10 ----D---- D:\WINDOWS\Sun

======List of files/folders modified in the last 1 month======

2013-07-12 17:26:27 ----RD---- D:\Program Files
2013-07-12 17:14:28 ----D---- D:\Documents and Settings\All Users\Application Data\GarenaMessenger
2013-07-12 17:14:27 ----D---- D:\Documents and Settings\Erik\Application Data\GarenaPlus
2013-07-12 17:12:18 ----D---- D:\WINDOWS\system32
2013-07-12 17:12:18 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2013-07-12 17:10:56 ----D---- D:\Documents and Settings\Erik\Application Data\Skype
2013-07-12 17:09:53 ----D---- D:\WINDOWS\Temp
2013-07-12 17:07:34 ----SD---- D:\WINDOWS\Tasks
2013-07-12 15:00:18 ----A---- D:\WINDOWS\SchedLgU.Txt
2013-07-11 19:31:12 ----D---- D:\WINDOWS\Prefetch
2013-07-11 16:26:16 ----D---- D:\WINDOWS\system32\config
2013-07-11 16:03:20 ----D---- D:\WINDOWS
2013-07-10 22:19:01 ----D---- D:\WINDOWS\system32\CatRoot2
2013-07-10 20:35:45 ----HD---- D:\WINDOWS\inf
2013-07-10 20:35:39 ----D---- D:\WINDOWS\system32\DirectX
2013-07-10 20:35:35 ----SHD---- D:\WINDOWS\Installer
2013-07-10 20:35:35 ----D---- D:\WINDOWS\Logs
2013-07-10 15:25:58 ----D---- D:\Program Files\Opera
2013-06-27 20:24:12 ----D---- D:\Documents and Settings\Erik\Application Data\abgx360
2013-06-23 20:38:00 ----D---- D:\Documents and Settings\Erik\Application Data\Bioshock
2013-06-20 01:32:49 ----D---- D:\Program Files\Warcraft III
2013-06-19 23:21:34 ----D---- D:\Program Files\Garena Plus
2013-06-18 20:13:01 ----D---- D:\WINDOWS\system32\CatRoot
2013-06-18 20:11:53 ----RSHDC---- D:\WINDOWS\system32\dllcache
2013-06-18 20:11:49 ----D---- D:\WINDOWS\system32\drivers
2013-06-18 20:11:44 ----DC---- D:\WINDOWS\system32\DRVSTORE
2013-06-18 20:11:06 ----D---- D:\WINDOWS\system32\ReinstallBackups
2013-06-15 00:55:34 ----D---- D:\Documents and Settings\Erik\Application Data\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; D:\WINDOWS\system32\drivers\aswRvrt.sys [2013-03-07 49248]
R0 nvata;nvata; D:\WINDOWS\system32\DRIVERS\nvata.sys [2006-06-28 105088]
R0 nvgts;nvgts; D:\WINDOWS\system32\DRIVERS\nvgts.sys [2008-12-14 145952]
R1 AswRdr;aswRdr; D:\WINDOWS\system32\drivers\AswRdr.sys [2013-03-07 49760]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2013-03-07 765736]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2013-03-07 368176]
R1 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2013-03-07 62376]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; D:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-04-27 242240]
R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-03-07 29816]
R2 aswMonFlt;aswMonFlt; \??\D:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-11-16 7874560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; D:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-01 4356608]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; D:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; D:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 RivaTuner32;RivaTuner32; \??\D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys []
S1 kbdhid;Keyboard HID Driver; D:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aswVmm;aswVmm; D:\WINDOWS\system32\drivers\aswVmm.sys [2013-03-07 164736]
S3 AtiHdmiService;ATI Function Driver for HDMI Service; D:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-20 93696]
S3 ENTECH;ENTECH; \??\D:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Program Files\Garena Plus\Room\safedrv.sys []
S3 GPU-Z;GPU-Z; \??\D:\DOCUME~1\Erik\LOCALS~1\Temp\GPU-Z.sys []
S3 HidUsb;Microsoft HID Class Driver; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Mouse HID Driver; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 usbccgp;Microsoft USB Generic Parent Driver; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;USB Mass Storage Driver; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\D:\Documents and Settings\Erik\Local Settings\Temp\tmp1.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2012-11-16 643072]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 BrowserProtect;BrowserProtect; D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-06-03 3085264]
R2 ForcewareWebInterface;Forceware Web Interface; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 JavaQuickStarterService;Java Quick Starter; D:\Program Files\Java\jre7\bin\jqs.exe [2013-05-12 181664]
R2 nSvcIp;ForceWare IP service; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 PnkBstrA;PnkBstrA; D:\WINDOWS\system32\PnkBstrA.exe [2013-05-17 76888]
S2 ATI Smart;ATI Smart; D:\WINDOWS\system32\ati2sgag.exe [2009-05-15 593920]
S2 gupdate;Služba Google Update (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-27 116648]
S2 SkypeUpdate;Skype Updater; D:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-27 116648]
S3 IDriverT;InstallDriver Table Manager; D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


Diky moc dopredu za pomoc.

Příště vlož HJT:
viewtopic.php?f=70&t=5119

MSIE: Internet Explorer v6.00 --chtělo by to aktualizovat IE.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Zdravim osprvadlnujem sa za zdrzanie.

Log s adwcleaner

# AdwCleaner v2.305 - Logfile created 07/16/2013 at 18:39:48
# Updated 11/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Erik - ERIK-91F951D550
# Boot Mode : Normal
# Running from : D:\Documents and Settings\Erik\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : BrowserProtect

***** [Files / Folders] *****

File Found : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
File Found : D:\WINDOWS\Tasks\EPUpdater.job
File Found : D:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Folder Found : D:\Documents and Settings\All Users\Application Data\Babylon
Folder Found : D:\Documents and Settings\All Users\Application Data\BrowserProtect
Folder Found : D:\Documents and Settings\Erik\Application Data\BabSolution
Folder Found : D:\Documents and Settings\Erik\Application Data\Babylon
Folder Found : D:\Documents and Settings\Erik\Application Data\delta
Folder Found : D:\Documents and Settings\Erik\Application Data\file scout
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\APN
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\AskToolbar
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\Bundled software uninstaller
Folder Found : D:\Program Files\Ask.com
Folder Found : D:\Program Files\delta
Folder Found : D:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Key Found : HKCU\Software\82d6debd6ae845
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\BI
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\Delta
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\82d6debd6ae845
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB61AF52AD64B6B45930BE969F316720
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Found : HKLM\Software\PIP
Key Found : HKU\S-1-5-21-1659004503-682003330-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

***** [Internet Browsers] *****

-\\ Internet Explorer v6.0.2900.5512

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE

-\\ Google Chrome v28.0.1500.72

File : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.16.1860.0

File : D:\Documents and Settings\Erik\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : D:\Documents and Settings\Administrator\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [12670 octets] - [16/07/2013 18:39:48]

########## EOF - D:\AdwCleaner[R1].txt - [12731 octets] ##########


Log s Malwarebytes' Anti-Malware

Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.07.16.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Erik :: ERIK-91F951D550 [administrátor]

Ochrana: Zapnuté

16.7.2013 18:43:49
MBAM-log-2013-07-16 (18-52-38).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 219648
Uplynutý čas: 8 min, 10 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 2
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll (Adware.BProtector) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.

Detegované registračné kľúče: 2
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (PUP.Wpakill) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (Adware.BProtector) -> Škodlivý: (d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll) Dobrý: () -> Žiadna úloha nevykonaná.

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 6
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll (Adware.BProtector) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-Activator-for-SP3.rar (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-SP3-ACTIVATION-.rar (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll4D4BD7 (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Žiadna úloha nevykonaná.

(koniec)

Diky moc dopredu za pomoc.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Zdravim teraz pre istotu po restarte musim nahodit nova uloha explorer.exe inak ikony nenabehnu no kazdopadne tu su logy.

ADware log :

# AdwCleaner v2.305 - Logfile created 07/18/2013 at 13:39:29
# Updated 11/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Erik - ERIK-91F951D550
# Boot Mode : Normal
# Running from : D:\Documents and Settings\Erik\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : BrowserProtect

***** [Files / Folders] *****

File Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : D:\WINDOWS\Tasks\BrowserProtect.job
File Deleted : D:\WINDOWS\Tasks\EPUpdater.job
File Deleted : D:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Folder Deleted : D:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : D:\Documents and Settings\All Users\Application Data\BrowserProtect
Folder Deleted : D:\Documents and Settings\Erik\Application Data\BabSolution
Folder Deleted : D:\Documents and Settings\Erik\Application Data\Babylon
Folder Deleted : D:\Documents and Settings\Erik\Application Data\delta
Folder Deleted : D:\Documents and Settings\Erik\Application Data\file scout
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\APN
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\AskToolbar
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\Bundled software uninstaller
Folder Deleted : D:\Program Files\Ask.com
Folder Deleted : D:\Program Files\delta
Folder Deleted : D:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Key Deleted : HKCU\Software\82d6debd6ae845
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AskToolbar
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\82d6debd6ae845
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB61AF52AD64B6B45930BE969F316720
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\Software\PIP
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

***** [Internet Browsers] *****

-\\ Internet Explorer v6.0.2900.5512

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE --> hxxp://www.google.com

-\\ Google Chrome v28.0.1500.72

File : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.16.1860.0

File : D:\Documents and Settings\Erik\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : D:\Documents and Settings\Administrator\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [12801 octets] - [16/07/2013 18:39:48]
AdwCleaner[S1].txt - [12796 octets] - [18/07/2013 13:39:29]

########## EOF - D:\AdwCleaner[S1].txt - [12857 octets] ##########

MBam log :

Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.07.18.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Erik :: ERIK-91F951D550 [administrátor]

Ochrana: Zapnuté

18.7.2013 13:45:32
mbam-log-2013-07-18 (13-45-32).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 219628
Uplynutý čas: 6 min, 11 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 1
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Bude odstránený po reštartovaní.

Detegované registračné kľúče: 2
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 5
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Bude odstránený po reštartovaní.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-Activator-for-SP3.rar (RiskWare.Tool.CK) -> Pridanie do karantény a zmazanie úspešné.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-SP3-ACTIVATION-.rar (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
D:\WINDOWS\system32\antiwpa.dll4D4BD7 (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
D:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Bude odstránený po reštartovaní.

(koniec)

JRT log :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.6 (07.17.2013:4)
OS: Microsoft Windows XP x86
Ran by Erik on çt 18.07.2013 at 15:45:59,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "D:\WINDOWS\system32\ai_recyclebin"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on çt 18.07.2013 at 15:52:11,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Rougekiller log:

RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Erik [Práva Správcu]
Režim : Kontrola -- Dátum : 07/18/2013 15:54:18
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3120026AS +++++
--- User ---
[MBR] d405aa811ac8ee8638473efe0e45cde8
[BSP] 2f9add54af66ad5d4ef9e98ddec2c78d : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114455 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST3120026AS +++++
--- User ---
[MBR] 84ff06f75a50cc0707a4dc07d4191012
[BSP] b1a301ccbc8839837dc5f585b8eb07a5 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_S_07182013_155418.txt >>

Zavři všechny programy a prohlížeče.
Odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller (Pro Windows Vista nebo WIN7 klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status box zobrazuje "Scan" "
- Klikni na "Delete"
- Počkej, dokud status box zobrazuje "Smazání - Finished"
- Klikni na "Zprávy", zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [1].txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

RougeKiller log

RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Erik [Práva Správcu]
Režim : Odebrať -- Dátum : 07/18/2013 18:45:47
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3120026AS +++++
--- User ---
[MBR] d405aa811ac8ee8638473efe0e45cde8
[BSP] 2f9add54af66ad5d4ef9e98ddec2c78d : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114455 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST3120026AS +++++
--- User ---
[MBR] 84ff06f75a50cc0707a4dc07d4191012
[BSP] b1a301ccbc8839837dc5f585b8eb07a5 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_D_07182013_184547.txt >>
RKreport[0]_S_07182013_155418.txt;RKreport[0]_S_07182013_184507.txt

TDSS log:

18:47:36.0843 3344 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:47:37.0296 3344 ============================================================
18:47:37.0296 3344 Current date / time: 2013/07/18 18:47:37.0296
18:47:37.0296 3344 SystemInfo:
18:47:37.0296 3344
18:47:37.0296 3344 OS Version: 5.1.2600 ServicePack: 3.0
18:47:37.0296 3344 Product type: Workstation
18:47:37.0296 3344 ComputerName: ERIK-91F951D550
18:47:37.0296 3344 UserName: Erik
18:47:37.0296 3344 Windows directory: D:\WINDOWS
18:47:37.0296 3344 System windows directory: D:\WINDOWS
18:47:37.0296 3344 Processor architecture: Intel x86
18:47:37.0296 3344 Number of processors: 3
18:47:37.0296 3344 Page size: 0x1000
18:47:37.0296 3344 Boot type: Normal boot
18:47:37.0296 3344 ============================================================
18:47:37.0671 3344 Drive \Device\Harddisk0\DR0 - Size: 0x1BF266DE00 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3900, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:47:37.0703 3344 Drive \Device\Harddisk1\DR1 - Size: 0x4A85C4DE00 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:47:37.0703 3344 ============================================================
18:47:37.0703 3344 \Device\Harddisk0\DR0:
18:47:37.0703 3344 MBR partitions:
18:47:37.0703 3344 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF8BA00
18:47:37.0703 3344 \Device\Harddisk1\DR1:
18:47:37.0703 3344 MBR partitions:
18:47:37.0703 3344 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x254297C1
18:47:37.0703 3344 ============================================================
18:47:37.0734 3344 C: <-> \Device\Harddisk1\DR1\Partition1
18:47:37.0765 3344 D: <-> \Device\Harddisk0\DR0\Partition1
18:47:37.0765 3344 ============================================================
18:47:37.0765 3344 Initialize success
18:47:37.0765 3344 ============================================================
18:47:41.0359 2160 ============================================================
18:47:41.0359 2160 Scan started
18:47:41.0359 2160 Mode: Manual;
18:47:41.0359 2160 ============================================================
18:47:42.0000 2160 ================ Scan system memory ========================
18:47:42.0015 2160 System memory - ok
18:47:42.0015 2160 ================ Scan services =============================
18:47:42.0078 2160 Abiosdsk - ok
18:47:42.0078 2160 abp480n5 - ok
18:47:42.0093 2160 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI D:\WINDOWS\system32\DRIVERS\ACPI.sys
18:47:42.0109 2160 ACPI - ok
18:47:42.0125 2160 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC D:\WINDOWS\system32\drivers\ACPIEC.sys
18:47:42.0125 2160 ACPIEC - ok
18:47:42.0125 2160 adpu160m - ok
18:47:42.0156 2160 [ 8BED39E3C35D6A489438B8141717A557 ] aec D:\WINDOWS\system32\drivers\aec.sys
18:47:42.0171 2160 aec - ok
18:47:42.0187 2160 [ 322D0E36693D6E24A2398BEE62A268CD ] AFD D:\WINDOWS\System32\drivers\afd.sys
18:47:42.0187 2160 AFD - ok
18:47:42.0187 2160 Aha154x - ok
18:47:42.0187 2160 aic78u2 - ok
18:47:42.0203 2160 aic78xx - ok
18:47:42.0218 2160 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter D:\WINDOWS\system32\alrsvc.dll
18:47:42.0218 2160 Alerter - ok
18:47:42.0234 2160 [ 8C515081584A38AA007909CD02020B3D ] ALG D:\WINDOWS\System32\alg.exe
18:47:42.0234 2160 ALG - ok
18:47:42.0234 2160 AliIde - ok
18:47:42.0250 2160 amsint - ok
18:47:42.0265 2160 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt D:\WINDOWS\System32\appmgmts.dll
18:47:42.0265 2160 AppMgmt - ok
18:47:42.0265 2160 asc - ok
18:47:42.0265 2160 asc3350p - ok
18:47:42.0281 2160 asc3550 - ok
18:47:42.0328 2160 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
18:47:42.0343 2160 aspnet_state - ok
18:47:42.0359 2160 [ CCDA8D84FD02AEC52E62F296433AE9DC ] aswFsBlk D:\WINDOWS\system32\drivers\aswFsBlk.sys
18:47:42.0359 2160 aswFsBlk - ok
18:47:42.0390 2160 [ A6E20E62871A28A0F1C05B1681848FA7 ] aswMonFlt D:\WINDOWS\system32\drivers\aswMonFlt.sys
18:47:42.0390 2160 aswMonFlt - ok
18:47:42.0390 2160 [ C1A411B7CCD604554D96EFDAC2F83617 ] AswRdr D:\WINDOWS\system32\drivers\AswRdr.sys
18:47:42.0390 2160 AswRdr - ok
18:47:42.0390 2160 [ 657A61979F40D67CA29716149766FFA7 ] aswRvrt D:\WINDOWS\system32\drivers\aswRvrt.sys
18:47:42.0406 2160 aswRvrt - ok
18:47:42.0437 2160 [ 0E604867FC28F00D91CB0B00D2EC830D ] aswSnx D:\WINDOWS\system32\drivers\aswSnx.sys
18:47:42.0437 2160 aswSnx - ok
18:47:42.0484 2160 [ 6FC4AA106AA505394C908D37CCCB9148 ] aswSP D:\WINDOWS\system32\drivers\aswSP.sys
18:47:42.0484 2160 aswSP - ok
18:47:42.0531 2160 [ 33E21FFB063CA6C7E00D568467DC72E4 ] aswTdi D:\WINDOWS\system32\drivers\aswTdi.sys
18:47:42.0531 2160 aswTdi - ok
18:47:42.0546 2160 [ EDB0C9BA44B748E420CCA989FD8B826E ] aswVmm D:\WINDOWS\system32\drivers\aswVmm.sys
18:47:42.0562 2160 aswVmm - ok
18:47:42.0562 2160 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac D:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:47:42.0562 2160 AsyncMac - ok
18:47:42.0578 2160 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi D:\WINDOWS\system32\DRIVERS\atapi.sys
18:47:42.0578 2160 atapi - ok
18:47:42.0578 2160 Atdisk - ok
18:47:42.0609 2160 [ 43E17DA549BC8219EEE90AA9C6480AAA ] Ati HotKey Poller D:\WINDOWS\system32\Ati2evxx.exe
18:47:42.0609 2160 Ati HotKey Poller - ok
18:47:42.0656 2160 [ 613E7ADA3279F7AD20588B919C223481 ] ATI Smart D:\WINDOWS\system32\ati2sgag.exe
18:47:42.0656 2160 ATI Smart - ok
18:47:42.0875 2160 [ 50D7EE1C07BC1E549FAE797668A90E1E ] ati2mtag D:\WINDOWS\system32\DRIVERS\ati2mtag.sys
18:47:42.0921 2160 ati2mtag - ok
18:47:42.0953 2160 [ 924971A182E07463765EF9FA8876F24F ] AtiHDAudioService D:\WINDOWS\system32\drivers\AtihdXP3.sys
18:47:42.0968 2160 AtiHDAudioService - ok
18:47:42.0984 2160 [ 41C8F0EDA10DA14378D304C20BA6E558 ] AtiHdmiService D:\WINDOWS\system32\drivers\AtiHdmi.sys
18:47:42.0984 2160 AtiHdmiService - ok
18:47:43.0000 2160 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc D:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:47:43.0000 2160 Atmarpc - ok
18:47:43.0015 2160 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv D:\WINDOWS\System32\audiosrv.dll
18:47:43.0015 2160 AudioSrv - ok
18:47:43.0031 2160 [ D9F724AA26C010A217C97606B160ED68 ] audstub D:\WINDOWS\system32\DRIVERS\audstub.sys
18:47:43.0031 2160 audstub - ok
18:47:43.0062 2160 [ 41735B82DB57E4EBE9504EC400FD120E ] avast! Antivirus D:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:47:43.0062 2160 avast! Antivirus - ok
18:47:43.0093 2160 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep D:\WINDOWS\system32\drivers\Beep.sys
18:47:43.0093 2160 Beep - ok
18:47:43.0109 2160 [ 574738F61FCA2935F5265DC4E5691314 ] BITS D:\WINDOWS\system32\qmgr.dll
18:47:43.0140 2160 BITS - ok
18:47:43.0140 2160 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser D:\WINDOWS\System32\browser.dll
18:47:43.0140 2160 Browser - ok
18:47:43.0156 2160 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k D:\WINDOWS\system32\drivers\cbidf2k.sys
18:47:43.0156 2160 cbidf2k - ok
18:47:43.0156 2160 cd20xrnt - ok
18:47:43.0171 2160 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio D:\WINDOWS\system32\drivers\Cdaudio.sys
18:47:43.0171 2160 Cdaudio - ok
18:47:43.0187 2160 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs D:\WINDOWS\system32\drivers\Cdfs.sys
18:47:43.0187 2160 Cdfs - ok
18:47:43.0187 2160 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom D:\WINDOWS\system32\DRIVERS\cdrom.sys
18:47:43.0187 2160 Cdrom - ok
18:47:43.0187 2160 Changer - ok
18:47:43.0203 2160 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc D:\WINDOWS\system32\cisvc.exe
18:47:43.0203 2160 CiSvc - ok
18:47:43.0203 2160 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv D:\WINDOWS\system32\clipsrv.exe
18:47:43.0203 2160 ClipSrv - ok
18:47:43.0234 2160 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:47:43.0265 2160 clr_optimization_v2.0.50727_32 - ok
18:47:43.0281 2160 CmdIde - ok
18:47:43.0281 2160 COMSysApp - ok
18:47:43.0281 2160 Cpqarray - ok
18:47:43.0296 2160 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc D:\WINDOWS\System32\cryptsvc.dll
18:47:43.0296 2160 CryptSvc - ok
18:47:43.0312 2160 dac2w2k - ok
18:47:43.0312 2160 dac960nt - ok
18:47:43.0343 2160 [ 2589FE6015A316C0F5D5112B4DA7B509 ] DcomLaunch D:\WINDOWS\system32\rpcss.dll
18:47:43.0343 2160 DcomLaunch - ok
18:47:43.0359 2160 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp D:\WINDOWS\System32\dhcpcsvc.dll
18:47:43.0359 2160 Dhcp - ok
18:47:43.0375 2160 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk D:\WINDOWS\system32\DRIVERS\disk.sys
18:47:43.0375 2160 Disk - ok
18:47:43.0375 2160 dmadmin - ok
18:47:43.0406 2160 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot D:\WINDOWS\system32\drivers\dmboot.sys
18:47:43.0406 2160 dmboot - ok
18:47:43.0421 2160 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio D:\WINDOWS\system32\drivers\dmio.sys
18:47:43.0421 2160 dmio - ok
18:47:43.0421 2160 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload D:\WINDOWS\system32\drivers\dmload.sys
18:47:43.0421 2160 dmload - ok
18:47:43.0437 2160 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver D:\WINDOWS\System32\dmserver.dll
18:47:43.0437 2160 dmserver - ok
18:47:43.0453 2160 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic D:\WINDOWS\system32\drivers\DMusic.sys
18:47:43.0453 2160 DMusic - ok
18:47:43.0468 2160 [ 474B4DC3983173E4B4C9740B0DAC98A6 ] Dnscache D:\WINDOWS\System32\dnsrslvr.dll
18:47:43.0468 2160 Dnscache - ok
18:47:43.0484 2160 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc D:\WINDOWS\System32\dot3svc.dll
18:47:43.0500 2160 Dot3svc - ok
18:47:43.0500 2160 dpti2o - ok
18:47:43.0515 2160 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud D:\WINDOWS\system32\drivers\drmkaud.sys
18:47:43.0515 2160 drmkaud - ok
18:47:43.0531 2160 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 D:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
18:47:43.0531 2160 dtsoftbus01 - ok
18:47:43.0546 2160 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost D:\WINDOWS\System32\eapsvc.dll
18:47:43.0546 2160 EapHost - ok
18:47:43.0562 2160 [ FD9FC82F134B1C91004FFC76A5AE494B ] ENTECH D:\WINDOWS\system32\DRIVERS\ENTECH.sys
18:47:43.0562 2160 ENTECH - ok
18:47:43.0578 2160 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc D:\WINDOWS\System32\ersvc.dll
18:47:43.0578 2160 ERSvc - ok
18:47:43.0593 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] Eventlog D:\WINDOWS\system32\services.exe
18:47:43.0593 2160 Eventlog - ok
18:47:43.0625 2160 [ 19A799805B24990867B00C120D300C3A ] EventSystem D:\WINDOWS\system32\es.dll
18:47:43.0625 2160 EventSystem - ok
18:47:43.0640 2160 [ 38D332A6D56AF32635675F132548343E ] Fastfat D:\WINDOWS\system32\drivers\Fastfat.sys
18:47:43.0640 2160 Fastfat - ok
18:47:43.0671 2160 [ 1926899BF9FFE2602B63074971700412 ] FastUserSwitchingCompatibility D:\WINDOWS\System32\shsvcs.dll
18:47:43.0671 2160 FastUserSwitchingCompatibility - ok
18:47:43.0687 2160 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc D:\WINDOWS\system32\DRIVERS\fdc.sys
18:47:43.0687 2160 Fdc - ok
18:47:43.0703 2160 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips D:\WINDOWS\system32\drivers\Fips.sys
18:47:43.0703 2160 Fips - ok
18:47:43.0718 2160 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk D:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:47:43.0718 2160 Flpydisk - ok
18:47:43.0734 2160 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr D:\WINDOWS\system32\DRIVERS\fltMgr.sys
18:47:43.0734 2160 FltMgr - ok
18:47:43.0781 2160 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:47:43.0781 2160 FontCache3.0.0.0 - ok
18:47:43.0843 2160 [ B81F8778F5BB485F3B75114F0C99A49F ] ForcewareWebInterface D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
18:47:43.0843 2160 ForcewareWebInterface - ok
18:47:43.0859 2160 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec D:\WINDOWS\system32\drivers\Fs_Rec.sys
18:47:43.0859 2160 Fs_Rec - ok
18:47:43.0875 2160 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk D:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:47:43.0875 2160 Ftdisk - ok
18:47:43.0875 2160 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum D:\WINDOWS\system32\DRIVERS\gameenum.sys
18:47:43.0890 2160 gameenum - ok
18:47:43.0921 2160 GGSAFERDriver - ok
18:47:43.0937 2160 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc D:\WINDOWS\system32\DRIVERS\msgpc.sys
18:47:43.0937 2160 Gpc - ok
18:47:44.0000 2160 GPU-Z - ok
18:47:44.0046 2160 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate D:\Program Files\Google\Update\GoogleUpdate.exe
18:47:44.0046 2160 gupdate - ok
18:47:44.0046 2160 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem D:\Program Files\Google\Update\GoogleUpdate.exe
18:47:44.0046 2160 gupdatem - ok
18:47:44.0062 2160 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus D:\WINDOWS\system32\DRIVERS\HDAudBus.sys
18:47:44.0062 2160 HDAudBus - ok
18:47:44.0109 2160 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:47:44.0109 2160 helpsvc - ok
18:47:44.0125 2160 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ D:\WINDOWS\System32\hidserv.dll
18:47:44.0125 2160 HidServ - ok
18:47:44.0140 2160 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb D:\WINDOWS\system32\DRIVERS\hidusb.sys
18:47:44.0156 2160 HidUsb - ok
18:47:44.0171 2160 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc D:\WINDOWS\System32\kmsvc.dll
18:47:44.0171 2160 hkmsvc - ok
18:47:44.0187 2160 hpn - ok
18:47:44.0203 2160 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP D:\WINDOWS\system32\Drivers\HTTP.sys
18:47:44.0203 2160 HTTP - ok
18:47:44.0234 2160 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter D:\WINDOWS\System32\w3ssl.dll
18:47:44.0250 2160 HTTPFilter - ok
18:47:44.0250 2160 i2omgmt - ok
18:47:44.0250 2160 i2omp - ok
18:47:44.0281 2160 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt D:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:47:44.0281 2160 i8042prt - ok
18:47:44.0343 2160 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:47:44.0343 2160 IDriverT - ok
18:47:44.0468 2160 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:47:44.0515 2160 idsvc - ok
18:47:44.0531 2160 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi D:\WINDOWS\system32\DRIVERS\imapi.sys
18:47:44.0531 2160 Imapi - ok
18:47:44.0546 2160 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService D:\WINDOWS\system32\imapi.exe
18:47:44.0546 2160 ImapiService - ok
18:47:44.0562 2160 ini910u - ok
18:47:44.0687 2160 [ A7D3A1B2CABDAB81EAD07C204ADB7CE1 ] IntcAzAudAddService D:\WINDOWS\system32\drivers\RtkHDAud.sys
18:47:44.0718 2160 IntcAzAudAddService - ok
18:47:44.0718 2160 IntelIde - ok
18:47:44.0718 2160 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw D:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
18:47:44.0718 2160 Ip6Fw - ok
18:47:44.0734 2160 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:47:44.0734 2160 IpFilterDriver - ok
18:47:44.0750 2160 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp D:\WINDOWS\system32\DRIVERS\ipinip.sys
18:47:44.0750 2160 IpInIp - ok
18:47:44.0765 2160 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat D:\WINDOWS\system32\DRIVERS\ipnat.sys
18:47:44.0765 2160 IpNat - ok
18:47:44.0765 2160 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec D:\WINDOWS\system32\DRIVERS\ipsec.sys
18:47:44.0765 2160 IPSec - ok
18:47:44.0781 2160 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM D:\WINDOWS\system32\DRIVERS\irenum.sys
18:47:44.0781 2160 IRENUM - ok
18:47:44.0796 2160 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp D:\WINDOWS\system32\DRIVERS\isapnp.sys
18:47:44.0796 2160 isapnp - ok
18:47:44.0859 2160 [ 5739F2821D49975CEDE6BF0153D0CF01 ] JavaQuickStarterService D:\Program Files\Java\jre7\bin\jqs.exe
18:47:44.0859 2160 JavaQuickStarterService - ok
18:47:44.0875 2160 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass D:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:47:44.0875 2160 Kbdclass - ok
18:47:44.0890 2160 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid D:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:47:44.0890 2160 kbdhid - ok
18:47:44.0906 2160 [ 692BCF44383D056AED41B045A323D378 ] kmixer D:\WINDOWS\system32\drivers\kmixer.sys
18:47:44.0906 2160 kmixer - ok
18:47:44.0906 2160 [ 1705745D900DABF2D89F90EBADDC7517 ] KSecDD D:\WINDOWS\system32\drivers\KSecDD.sys
18:47:44.0906 2160 KSecDD - ok
18:47:44.0921 2160 [ F385F4B02C535BFFE1D70CAB80838123 ] LanmanServer D:\WINDOWS\System32\srvsvc.dll
18:47:44.0937 2160 LanmanServer - ok
18:47:44.0968 2160 [ 1B67B632786FEF1C1BBAEF46C2F3F2E6 ] lanmanworkstation D:\WINDOWS\System32\wkssvc.dll
18:47:44.0968 2160 lanmanworkstation - ok
18:47:44.0968 2160 lbrtfdc - ok
18:47:44.0984 2160 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts D:\WINDOWS\System32\lmhsvc.dll
18:47:44.0984 2160 LmHosts - ok
18:47:45.0000 2160 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector D:\WINDOWS\system32\drivers\mbam.sys
18:47:45.0000 2160 MBAMProtector - ok
18:47:45.0046 2160 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:47:45.0062 2160 MBAMScheduler - ok
18:47:45.0093 2160 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
18:47:45.0093 2160 MBAMService - ok
18:47:45.0109 2160 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger D:\WINDOWS\System32\msgsvc.dll
18:47:45.0125 2160 Messenger - ok
18:47:45.0140 2160 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd D:\WINDOWS\system32\drivers\mnmdd.sys
18:47:45.0140 2160 mnmdd - ok
18:47:45.0156 2160 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc D:\WINDOWS\system32\mnmsrvc.exe
18:47:45.0156 2160 mnmsrvc - ok
18:47:45.0171 2160 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem D:\WINDOWS\system32\drivers\Modem.sys
18:47:45.0171 2160 Modem - ok
18:47:45.0171 2160 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass D:\WINDOWS\system32\DRIVERS\mouclass.sys
18:47:45.0171 2160 Mouclass - ok
18:47:45.0187 2160 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid D:\WINDOWS\system32\DRIVERS\mouhid.sys
18:47:45.0187 2160 mouhid - ok
18:47:45.0203 2160 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr D:\WINDOWS\system32\drivers\MountMgr.sys
18:47:45.0203 2160 MountMgr - ok
18:47:45.0203 2160 mraid35x - ok
18:47:45.0203 2160 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV D:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:47:45.0218 2160 MRxDAV - ok
18:47:45.0234 2160 [ 68755F0FF16070178B54674FE5B847B0 ] MRxSmb D:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:47:45.0234 2160 MRxSmb - ok
18:47:45.0265 2160 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC D:\WINDOWS\system32\msdtc.exe
18:47:45.0265 2160 MSDTC - ok
18:47:45.0281 2160 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs D:\WINDOWS\system32\drivers\Msfs.sys
18:47:45.0281 2160 Msfs - ok
18:47:45.0281 2160 MSIServer - ok
18:47:45.0312 2160 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV D:\WINDOWS\system32\drivers\MSKSSRV.sys
18:47:45.0312 2160 MSKSSRV - ok
18:47:45.0328 2160 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK D:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:47:45.0328 2160 MSPCLOCK - ok
18:47:45.0343 2160 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM D:\WINDOWS\system32\drivers\MSPQM.sys
18:47:45.0343 2160 MSPQM - ok
18:47:45.0343 2160 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios D:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:47:45.0359 2160 mssmbios - ok
18:47:45.0375 2160 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup D:\WINDOWS\system32\drivers\Mup.sys
18:47:45.0375 2160 Mup - ok
18:47:45.0406 2160 [ 0102140028FAD045756796E1C685D695 ] napagent D:\WINDOWS\System32\qagentrt.dll
18:47:45.0437 2160 napagent - ok
18:47:45.0453 2160 [ 1DF7F42665C94B825322FAE71721130D ] NDIS D:\WINDOWS\system32\drivers\NDIS.sys
18:47:45.0453 2160 NDIS - ok
18:47:45.0468 2160 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi D:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:47:45.0468 2160 NdisTapi - ok
18:47:45.0468 2160 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio D:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:47:45.0468 2160 Ndisuio - ok
18:47:45.0500 2160 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan D:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:47:45.0500 2160 NdisWan - ok
18:47:45.0515 2160 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy D:\WINDOWS\system32\drivers\NDProxy.sys
18:47:45.0515 2160 NDProxy - ok
18:47:45.0515 2160 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS D:\WINDOWS\system32\DRIVERS\netbios.sys
18:47:45.0515 2160 NetBIOS - ok
18:47:45.0531 2160 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT D:\WINDOWS\system32\DRIVERS\netbt.sys
18:47:45.0531 2160 NetBT - ok
18:47:45.0562 2160 [ B857BA82860D7FF85AE29B095645563B ] NetDDE D:\WINDOWS\system32\netdde.exe
18:47:45.0593 2160 NetDDE - ok
18:47:45.0593 2160 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm D:\WINDOWS\system32\netdde.exe
18:47:45.0609 2160 NetDDEdsdm - ok
18:47:45.0625 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon D:\WINDOWS\system32\lsass.exe
18:47:45.0625 2160 Netlogon - ok
18:47:45.0656 2160 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman D:\WINDOWS\System32\netman.dll
18:47:45.0656 2160 Netman - ok
18:47:45.0734 2160 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:47:45.0734 2160 NetTcpPortSharing - ok
18:47:45.0781 2160 [ B4138E99236F0F57D4CF49BAE98A0746 ] Nla D:\WINDOWS\System32\mswsock.dll
18:47:45.0781 2160 Nla - ok
18:47:45.0781 2160 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs D:\WINDOWS\system32\drivers\Npfs.sys
18:47:45.0796 2160 Npfs - ok
18:47:45.0828 2160 [ ADC2D25754F8CA371AFF9644B8EAA681 ] nSvcIp D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
18:47:45.0828 2160 nSvcIp - ok
18:47:45.0843 2160 [ EE0F4D3E3FD2B5DACF7EEDDDBB243973 ] nSvcLog D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
18:47:45.0843 2160 nSvcLog - ok
18:47:45.0875 2160 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs D:\WINDOWS\system32\drivers\Ntfs.sys
18:47:45.0875 2160 Ntfs - ok
18:47:45.0875 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp D:\WINDOWS\system32\lsass.exe
18:47:45.0890 2160 NtLmSsp - ok
18:47:45.0906 2160 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc D:\WINDOWS\system32\ntmssvc.dll
18:47:45.0937 2160 NtmsSvc - ok
18:47:45.0968 2160 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null D:\WINDOWS\system32\drivers\Null.sys
18:47:45.0968 2160 Null - ok
18:47:45.0968 2160 [ 9ECCD189A9554C30A0D18A429778C7BA ] nvata D:\WINDOWS\system32\DRIVERS\nvata.sys
18:47:45.0968 2160 nvata - ok
18:47:46.0000 2160 [ 4D6F0D3FB17C1BA64942F415C73ADCDB ] NVENETFD D:\WINDOWS\system32\DRIVERS\NVENETFD.sys
18:47:46.0000 2160 NVENETFD - ok
18:47:46.0031 2160 [ EA98BFE4931BD13D747D647C1859796E ] nvgts D:\WINDOWS\system32\DRIVERS\nvgts.sys
18:47:46.0031 2160 nvgts - ok
18:47:46.0046 2160 [ 921E63AA1E1A20302223D016ACAFB52B ] nvnetbus D:\WINDOWS\system32\DRIVERS\nvnetbus.sys
18:47:46.0046 2160 nvnetbus - ok
18:47:46.0062 2160 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:47:46.0062 2160 NwlnkFlt - ok
18:47:46.0062 2160 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:47:46.0062 2160 NwlnkFwd - ok
18:47:46.0140 2160 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:47:46.0171 2160 odserv - ok
18:47:46.0218 2160 [ 5A432A042DAE460ABE7199B758E8606C ] ose D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:47:46.0234 2160 ose - ok
18:47:46.0250 2160 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport D:\WINDOWS\system32\DRIVERS\parport.sys
18:47:46.0265 2160 Parport - ok
18:47:46.0265 2160 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr D:\WINDOWS\system32\drivers\PartMgr.sys
18:47:46.0265 2160 PartMgr - ok
18:47:46.0296 2160 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm D:\WINDOWS\system32\drivers\ParVdm.sys
18:47:46.0296 2160 ParVdm - ok
18:47:46.0312 2160 [ A219903CCF74233761D92BEF471A07B1 ] PCI D:\WINDOWS\system32\DRIVERS\pci.sys
18:47:46.0312 2160 PCI - ok
18:47:46.0312 2160 PCIDump - ok
18:47:46.0312 2160 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde D:\WINDOWS\system32\DRIVERS\pciide.sys
18:47:46.0312 2160 PCIIde - ok
18:47:46.0328 2160 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia D:\WINDOWS\system32\drivers\Pcmcia.sys
18:47:46.0328 2160 Pcmcia - ok
18:47:46.0328 2160 PDCOMP - ok
18:47:46.0328 2160 PDFRAME - ok
18:47:46.0328 2160 PDRELI - ok
18:47:46.0343 2160 PDRFRAME - ok
18:47:46.0343 2160 perc2 - ok
18:47:46.0343 2160 perc2hib - ok
18:47:46.0375 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] PlugPlay D:\WINDOWS\system32\services.exe
18:47:46.0375 2160 PlugPlay - ok
18:47:46.0406 2160 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA D:\WINDOWS\system32\PnkBstrA.exe
18:47:46.0406 2160 PnkBstrA - ok
18:47:46.0421 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent D:\WINDOWS\system32\lsass.exe
18:47:46.0421 2160 PolicyAgent - ok
18:47:46.0468 2160 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport D:\WINDOWS\system32\DRIVERS\raspptp.sys
18:47:46.0468 2160 PptpMiniport - ok
18:47:46.0500 2160 [ A32BEBAF723557681BFC6BD93E98BD26 ] Processor D:\WINDOWS\system32\DRIVERS\processr.sys
18:47:46.0500 2160 Processor - ok
18:47:46.0515 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage D:\WINDOWS\system32\lsass.exe
18:47:46.0515 2160 ProtectedStorage - ok
18:47:46.0515 2160 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched D:\WINDOWS\system32\DRIVERS\psched.sys
18:47:46.0515 2160 PSched - ok
18:47:46.0546 2160 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink D:\WINDOWS\system32\DRIVERS\ptilink.sys
18:47:46.0546 2160 Ptilink - ok
18:47:46.0546 2160 ql1080 - ok
18:47:46.0546 2160 Ql10wnt - ok
18:47:46.0546 2160 ql12160 - ok
18:47:46.0562 2160 ql1240 - ok
18:47:46.0562 2160 ql1280 - ok
18:47:46.0562 2160 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd D:\WINDOWS\system32\DRIVERS\rasacd.sys
18:47:46.0562 2160 RasAcd - ok
18:47:46.0578 2160 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto D:\WINDOWS\System32\rasauto.dll
18:47:46.0593 2160 RasAuto - ok
18:47:46.0593 2160 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp D:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:47:46.0593 2160 Rasl2tp - ok
18:47:46.0625 2160 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan D:\WINDOWS\System32\rasmans.dll
18:47:46.0625 2160 RasMan - ok
18:47:46.0625 2160 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe D:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:47:46.0640 2160 RasPppoe - ok
18:47:46.0640 2160 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti D:\WINDOWS\system32\DRIVERS\raspti.sys
18:47:46.0640 2160 Raspti - ok
18:47:46.0656 2160 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss D:\WINDOWS\system32\DRIVERS\rdbss.sys
18:47:46.0656 2160 Rdbss - ok
18:47:46.0671 2160 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD D:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:47:46.0671 2160 RDPCDD - ok
18:47:46.0718 2160 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr D:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:47:46.0718 2160 rdpdr - ok
18:47:46.0812 2160 [ 6728E45B66F93C08F11DE2E316FC70DD ] RDPWD D:\WINDOWS\system32\drivers\RDPWD.sys
18:47:46.0812 2160 RDPWD - ok
18:47:46.0906 2160 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr D:\WINDOWS\system32\sessmgr.exe
18:47:46.0921 2160 RDSessMgr - ok
18:47:46.0953 2160 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook D:\WINDOWS\system32\DRIVERS\redbook.sys
18:47:46.0953 2160 redbook - ok
18:47:47.0000 2160 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess D:\WINDOWS\System32\mprdim.dll
18:47:47.0015 2160 RemoteAccess - ok
18:47:47.0046 2160 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry D:\WINDOWS\system32\regsvc.dll
18:47:47.0046 2160 RemoteRegistry - ok
18:47:47.0109 2160 [ C0C8909BE3ECC9DF8089112BF9BE954E ] RivaTuner32 D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys
18:47:47.0109 2160 RivaTuner32 - ok
18:47:47.0140 2160 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator D:\WINDOWS\system32\locator.exe
18:47:47.0156 2160 RpcLocator - ok
18:47:47.0203 2160 [ 2589FE6015A316C0F5D5112B4DA7B509 ] RpcSs D:\WINDOWS\system32\rpcss.dll
18:47:47.0218 2160 RpcSs - ok
18:47:47.0265 2160 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP D:\WINDOWS\system32\rsvp.exe
18:47:47.0281 2160 RSVP - ok
18:47:47.0281 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs D:\WINDOWS\system32\lsass.exe
18:47:47.0296 2160 SamSs - ok
18:47:47.0312 2160 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr D:\WINDOWS\System32\SCardSvr.exe
18:47:47.0328 2160 SCardSvr - ok
18:47:47.0375 2160 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule D:\WINDOWS\system32\schedsvc.dll
18:47:47.0375 2160 Schedule - ok
18:47:47.0421 2160 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv D:\WINDOWS\system32\DRIVERS\secdrv.sys
18:47:47.0421 2160 Secdrv - ok
18:47:47.0437 2160 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon D:\WINDOWS\System32\seclogon.dll
18:47:47.0437 2160 seclogon - ok
18:47:47.0437 2160 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS D:\WINDOWS\system32\sens.dll
18:47:47.0453 2160 SENS - ok
18:47:47.0484 2160 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum D:\WINDOWS\system32\DRIVERS\serenum.sys
18:47:47.0484 2160 serenum - ok
18:47:47.0515 2160 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial D:\WINDOWS\system32\DRIVERS\serial.sys
18:47:47.0531 2160 Serial - ok
18:47:47.0578 2160 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy D:\WINDOWS\system32\drivers\Sfloppy.sys
18:47:47.0578 2160 Sfloppy - ok
18:47:47.0625 2160 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess D:\WINDOWS\System32\ipnathlp.dll
18:47:47.0671 2160 SharedAccess - ok
18:47:47.0718 2160 [ 1926899BF9FFE2602B63074971700412 ] ShellHWDetection D:\WINDOWS\System32\shsvcs.dll
18:47:47.0734 2160 ShellHWDetection - ok
18:47:47.0734 2160 Simbad - ok
18:47:47.0781 2160 [ 2F5AF9D91D51E832773D4A9EAF65CB33 ] SkypeUpdate D:\Program Files\Skype\Updater\Updater.exe
18:47:47.0781 2160 SkypeUpdate - ok
18:47:47.0781 2160 Sparrow - ok
18:47:47.0812 2160 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter D:\WINDOWS\system32\drivers\splitter.sys
18:47:47.0812 2160 splitter - ok
18:47:47.0828 2160 [ D8E14A61ACC1D4A6CD0D38AEBAC7FA3B ] Spooler D:\WINDOWS\system32\spoolsv.exe
18:47:47.0843 2160 Spooler - ok
18:47:47.0875 2160 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr D:\WINDOWS\system32\DRIVERS\sr.sys
18:47:47.0890 2160 sr - ok
18:47:47.0921 2160 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice D:\WINDOWS\system32\srsvc.dll
18:47:47.0953 2160 srservice - ok
18:47:48.0015 2160 [ 5252605079810904E31C332E241CD59B ] Srv D:\WINDOWS\system32\DRIVERS\srv.sys
18:47:48.0015 2160 Srv - ok
18:47:48.0031 2160 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV D:\WINDOWS\System32\ssdpsrv.dll
18:47:48.0046 2160 SSDPSRV - ok
18:47:48.0109 2160 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc D:\WINDOWS\system32\wiaservc.dll
18:47:48.0156 2160 stisvc - ok
18:47:48.0187 2160 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum D:\WINDOWS\system32\DRIVERS\swenum.sys
18:47:48.0187 2160 swenum - ok
18:47:48.0218 2160 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi D:\WINDOWS\system32\drivers\swmidi.sys
18:47:48.0218 2160 swmidi - ok
18:47:48.0218 2160 SwPrv - ok
18:47:48.0218 2160 symc810 - ok
18:47:48.0218 2160 symc8xx - ok
18:47:48.0234 2160 sym_hi - ok
18:47:48.0234 2160 sym_u3 - ok
18:47:48.0265 2160 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio D:\WINDOWS\system32\drivers\sysaudio.sys
18:47:48.0265 2160 sysaudio - ok
18:47:48.0281 2160 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog D:\WINDOWS\system32\smlogsvc.exe
18:47:48.0296 2160 SysmonLog - ok
18:47:48.0312 2160 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv D:\WINDOWS\System32\tapisrv.dll
18:47:48.0312 2160 TapiSrv - ok
18:47:48.0359 2160 [ 93EA8D04EC73A85DB02EB8805988F733 ] Tcpip D:\WINDOWS\system32\DRIVERS\tcpip.sys
18:47:48.0359 2160 Tcpip - ok
18:47:48.0406 2160 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE D:\WINDOWS\system32\drivers\TDPIPE.sys
18:47:48.0406 2160 TDPIPE - ok
18:47:48.0406 2160 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP D:\WINDOWS\system32\drivers\TDTCP.sys
18:47:48.0406 2160 TDTCP - ok
18:47:48.0406 2160 [ 88155247177638048422893737429D9E ] TermDD D:\WINDOWS\system32\DRIVERS\termdd.sys
18:47:48.0421 2160 TermDD - ok
18:47:48.0453 2160 [ FF3477C03BE7201C294C35F684B3479F ] TermService D:\WINDOWS\System32\termsrv.dll
18:47:48.0453 2160 TermService - ok
18:47:48.0484 2160 [ 1926899BF9FFE2602B63074971700412 ] Themes D:\WINDOWS\System32\shsvcs.dll
18:47:48.0500 2160 Themes - ok
18:47:48.0515 2160 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr D:\WINDOWS\system32\tlntsvr.exe
18:47:48.0531 2160 TlntSvr - ok
18:47:48.0531 2160 TosIde - ok
18:47:48.0546 2160 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks D:\WINDOWS\system32\trkwks.dll
18:47:48.0562 2160 TrkWks - ok
18:47:48.0562 2160 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs D:\WINDOWS\system32\drivers\Udfs.sys
18:47:48.0578 2160 Udfs - ok
18:47:48.0578 2160 ultra - ok
18:47:48.0625 2160 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update D:\WINDOWS\system32\DRIVERS\update.sys
18:47:48.0625 2160 Update - ok
18:47:48.0656 2160 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost D:\WINDOWS\System32\upnphost.dll
18:47:48.0656 2160 upnphost - ok
18:47:48.0671 2160 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS D:\WINDOWS\System32\ups.exe
18:47:48.0687 2160 UPS - ok
18:47:48.0687 2160 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp D:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:47:48.0687 2160 usbccgp - ok
18:47:48.0703 2160 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci D:\WINDOWS\system32\DRIVERS\usbehci.sys
18:47:48.0703 2160 usbehci - ok
18:47:48.0703 2160 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub D:\WINDOWS\system32\DRIVERS\usbhub.sys
18:47:48.0718 2160 usbhub - ok
18:47:48.0718 2160 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci D:\WINDOWS\system32\DRIVERS\usbohci.sys
18:47:48.0718 2160 usbohci - ok
18:47:48.0750 2160 [ A717C8721046828520C9EDF31288FC00 ] usbprint D:\WINDOWS\system32\DRIVERS\usbprint.sys
18:47:48.0750 2160 usbprint - ok
18:47:48.0796 2160 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:47:48.0796 2160 USBSTOR - ok
18:47:48.0796 2160 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave D:\WINDOWS\System32\drivers\vga.sys
18:47:48.0796 2160 VgaSave - ok
18:47:48.0812 2160 ViaIde - ok
18:47:48.0843 2160 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap D:\WINDOWS\system32\drivers\VolSnap.sys
18:47:48.0843 2160 VolSnap - ok
18:47:48.0859 2160 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS D:\WINDOWS\System32\vssvc.exe
18:47:48.0875 2160 VSS - ok
18:47:48.0890 2160 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time D:\WINDOWS\system32\w32time.dll
18:47:48.0906 2160 W32Time - ok
18:47:48.0906 2160 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp D:\WINDOWS\system32\DRIVERS\wanarp.sys
18:47:48.0906 2160 Wanarp - ok
18:47:48.0906 2160 WDICA - ok
18:47:48.0937 2160 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud D:\WINDOWS\system32\drivers\wdmaud.sys
18:47:48.0937 2160 wdmaud - ok
18:47:48.0968 2160 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient D:\WINDOWS\System32\webclnt.dll
18:47:48.0984 2160 WebClient - ok
18:47:49.0031 2160 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt D:\WINDOWS\system32\wbem\WMIsvc.dll
18:47:49.0031 2160 winmgmt - ok
18:47:49.0031 2160 WinRing0_1_2_0 - ok
18:47:49.0046 2160 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN D:\WINDOWS\system32\mspmsnsv.dll
18:47:49.0062 2160 WmdmPmSN - ok
18:47:49.0093 2160 [ BAB489A5FE26F2D0C910CF7AF7E4CF92 ] Wmi D:\WINDOWS\System32\advapi32.dll
18:47:49.0093 2160 Wmi - ok
18:47:49.0140 2160 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv D:\WINDOWS\system32\wbem\wmiapsrv.exe
18:47:49.0156 2160 WmiApSrv - ok
18:47:49.0156 2160 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc D:\WINDOWS\system32\wscsvc.dll
18:47:49.0171 2160 wscsvc - ok
18:47:49.0203 2160 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv D:\WINDOWS\system32\wuauserv.dll
18:47:49.0203 2160 wuauserv - ok
18:47:49.0234 2160 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC D:\WINDOWS\System32\wzcsvc.dll
18:47:49.0250 2160 WZCSVC - ok
18:47:49.0265 2160 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov D:\WINDOWS\System32\xmlprov.dll
18:47:49.0265 2160 xmlprov - ok
18:47:49.0265 2160 ================ Scan global ===============================
18:47:49.0281 2160 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] D:\WINDOWS\system32\basesrv.dll
18:47:49.0312 2160 [ 1618F36D4F7F6CCCEB3EE44BA95BE85C ] D:\WINDOWS\system32\winsrv.dll
18:47:49.0343 2160 [ 1618F36D4F7F6CCCEB3EE44BA95BE85C ] D:\WINDOWS\system32\winsrv.dll
18:47:49.0359 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] D:\WINDOWS\system32\services.exe
18:47:49.0375 2160 [Global] - ok
18:47:49.0375 2160 ================ Scan MBR ==================================
18:47:49.0375 2160 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
18:47:49.0390 2160 \Device\Harddisk0\DR0 - ok
18:47:49.0390 2160 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
18:47:49.0484 2160 \Device\Harddisk1\DR1 - ok
18:47:49.0484 2160 ================ Scan VBR ==================================
18:47:49.0484 2160 [ 38CC28010CC1CBB464F8DD888866C84D ] \Device\Harddisk0\DR0\Partition1
18:47:49.0484 2160 \Device\Harddisk0\DR0\Partition1 - ok
18:47:49.0500 2160 [ 64A56C4B320E2F3EE919F7DD4EFB16F3 ] \Device\Harddisk1\DR1\Partition1
18:47:49.0500 2160 \Device\Harddisk1\DR1\Partition1 - ok
18:47:49.0500 2160 ============================================================
18:47:49.0500 2160 Scan finished
18:47:49.0500 2160 ============================================================
18:47:49.0500 3708 Detected object count: 0
18:47:49.0500 3708 Actual detected object count: 0

Ach jo... Nataháš si tam svinstvo a pak prosíš o pomoc...

Jak je na tom PC ted? Dej nový HJT na dočištění

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:33:35, on 19.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Program Files\Garena Plus\GarenaMessenger.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\Program Files\Opera\opera.exe
D:\WINDOWS\system32\msiexec.exe
D:\Program Files\trend micro\HiJackThis\HiJackThis.exe
D:\WINDOWS\system32\rundll32.exe

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6492 bytes

V HJT fixni:
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

Jak je na tom PC?

Zdravim fixol som to ale stale mi pri vypinani robi rovnaky problem.

log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:41:35, on 20.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\rundll32.exe
D:\Program Files\Opera\opera.exe
D:\Program Files\trend micro\HiJackThis\HiJackThis.exe

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 5431 bytes

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.