PC-HELP.CZ

Dobrý den, nedávno (koncem minulého roku) jsme tady řešili problém s pomalým pc, pomalým načítáním videí, sekáním videí (rozčtverečkováváním obrazu). Chvíli se pc zdál být ok, ale pořád to nebylo ono. Na konci roku jsem dělala zálohy, takže jsem PC rozebrala, vyčistila, a pak přeinstalovala Windows. Mám XP. Byla jsem překvapená, že i po přeinstalaci je počítač stejně pomalý jako předtím, situace s videi zůstává stejná a počítač je všeobecně líný. Disk mám pár měsíců nový, chladič funguje, větráky větrají. Už jsem tady s pomocí ostatních zakázala automatické aktualizace (problém s aktualizacemi XP), počítač se trochu zrychlil, ale nevyřešilo to problém pomalých a sekajících se videí na Internetu. Děkuji, log níže:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:00:09, on 9.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Cobian Backup 11\cbInterface.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Cobian Backup 11\cbService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Cobian Backup 11 interface] "C:\Program Files\Cobian Backup 11\cbInterface.exe" -service
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Cobian Backup 11 Stínová kopie - Requester (cbVSCService11) - CobianSoft, Luis Cobian - C:\Program Files\Cobian Backup 11\cbVSCService11.exe
O23 - Service: Cobian Backup 11 Gravity (CobianBackup11) - Luis Cobian, CobianSoft - C:\Program Files\Cobian Backup 11\cbService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4774 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Tyto postupy jsme dělali v prosinci před přeinstalací počítače. Tenkrát se problém nevyřešil. Pokud jsem počítač přeinstalovala, měla jsem za to, že se všechny problémy vyřeší....Proto jsem ho přeinstalovala. Proto jsem přeinstalací strávila několik hodin. Protože jsem už nechtěla opakovat ty postupy z prosince, stahování programů, logy, opravy... Protože nad tím jsem strávila ještě podstatně více hodin.... Existuje nějaký "tvrdý" výmaz PC, kdy by doopravdy nějaká zázračná přeinstalace tento problém vyřešila? Díky.

Čistá instalace win , musíš předtím udělat formát disku. Jinak tam mohou nákazy zůstat.

Aha, tak teď už tomu nerozumím vůbec, protože přeinstalaci Windows jsem dělala klasicky s instalačním CD a tam dotaz na formátování disku proběhl, takže formátování proběhlo...

No potom nezbývá než řešit pomocí programů. Sice je to nepravděpodobný ale mohla by za tím být i hardwarová chyba.

Dobrý den, vkládám logy z MBAM a AdwCleaner.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.12.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Jitka Trnková :: VCELICKA [administrátor]

12.1.2014 13:44:40
MBAM-log-2014-01-12 (13-54-55).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 192333
Uplynulý čas: 5 minut, 26 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 2
C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy\F6A076D1F9904C019C372C297922CA0F (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 3
C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy\F6A076D1F9904C019C372C297922CA0F\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy\F6A076D1F9904C019C372C297922CA0F\6866.ico (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy\F6A076D1F9904C019C372C297922CA0F\avg_tuht_stf_cs_2014_206_CZ.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)





# AdwCleaner v3.016 - Report created 12/01/2014 at 13:55:51
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jitka Trnková - VCELICKA
# Running from : C:\Documents and Settings\Jitka Trnková\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy
Folder Found C:\Documents and Settings\Jitka Trnková\Data aplikací\thinstall

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Documents and Settings\Jitka Trnková\Data aplikací\Mozilla\Firefox\Profiles\ggvap3r0.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [837 octets] - [12/01/2014 13:55:51]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [896 octets] ##########

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Děkuji, vkládám logy dle instrukcí výše.

# AdwCleaner v3.016 - Report created 13/01/2014 at 21:14:37
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jitka Trnková - VCELICKA
# Running from : C:\Documents and Settings\Jitka Trnková\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\Jitka Trnková\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\Jitka Trnková\Data aplikací\thinstall

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Documents and Settings\Jitka Trnková\Data aplikací\Mozilla\Firefox\Profiles\ggvap3r0.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [975 octets] - [12/01/2014 13:55:51]
AdwCleaner[R1].txt - [1034 octets] - [13/01/2014 21:13:10]
AdwCleaner[S0].txt - [965 octets] - [13/01/2014 21:14:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1024 octets] ##########




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by Jitka Trnkov  on po 13.01.2014 at 21:19:31,29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 13.01.2014 at 21:29:06,31
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Jitka Trnková [Práva správce]
Mód : Kontrola -- Datum : 01/13/2014 21:31:54
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[All Users][SUSP UNIC] ASUS WiFi-AP Solo.lnk : C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\ASUS WiFi-AP Solo.lnk [-] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD2500AAJB-00J3A0 +++++
--- User ---
[MBR] e81080347353b5ade9a0ceffb7893e61
[BSP] 7ac34b608267c31a89d9ef7591754165 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) +++++
--- User ---
[MBR] a96a44a24fe50dc89c66853010c26efe
[BSP] 9fbf27cee58291aa6b6f71aa47a3a37d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 64 | Size: 305242 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

Dokončeno : << RKreport[0]_S_01132014_213154.txt >>

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Jinak nová informace z dnešního dne. PC je pořád pomalejší a pomalejší, na to, že mám pár dní přeinstalováno, je to doopravdy katastrofa. Využití CPU neklesne pod 70% a stačí číst článek na seznamu a CPU je okamžitě na 100%. Když píšu tuhle větu, mám už dávno dopsáno a písmenka na obrazovce nabíhají tak pomalu, že bych mezitím stihla vypít kafe Jinak automatický aktualizace mám dle rady pořád vypnutý....Pomalu si začínám myslet, že nejlepší řešení bude ten počítač vyhodit z okna

Vkládám logy. Děkuji.

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Jitka Trnková [Práva správce]
Mód : Odebrat -- Datum : 01/14/2014 10:36:48
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[All Users][SUSP UNIC] ASUS WiFi-AP Solo.lnk : C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\ASUS WiFi-AP Solo.lnk [-] -> VYMAZÁNO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD2500AAJB-00J3A0 +++++
--- User ---
[MBR] e81080347353b5ade9a0ceffb7893e61
[BSP] 7ac34b608267c31a89d9ef7591754165 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_01142014_103648.txt >>
RKreport[0]_S_01142014_103627.txt







10:38:12.0828 4024 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
10:38:14.0828 4024 ============================================================
10:38:14.0828 4024 Current date / time: 2014/01/14 10:38:14.0828
10:38:14.0828 4024 SystemInfo:
10:38:14.0828 4024
10:38:14.0828 4024 OS Version: 5.1.2600 ServicePack: 3.0
10:38:14.0828 4024 Product type: Workstation
10:38:14.0828 4024 ComputerName: VCELICKA
10:38:14.0828 4024 UserName: Jitka Trnková
10:38:14.0828 4024 Windows directory: C:\WINDOWS
10:38:14.0828 4024 System windows directory: C:\WINDOWS
10:38:14.0828 4024 Processor architecture: Intel x86
10:38:14.0828 4024 Number of processors: 2
10:38:14.0828 4024 Page size: 0x1000
10:38:14.0828 4024 Boot type: Normal boot
10:38:14.0828 4024 ============================================================
10:38:16.0031 4024 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:38:16.0046 4024 ============================================================
10:38:16.0046 4024 \Device\Harddisk0\DR0:
10:38:16.0046 4024 MBR partitions:
10:38:16.0046 4024 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
10:38:16.0046 4024 ============================================================
10:38:16.0078 4024 C: <-> \Device\Harddisk0\DR0\Partition1
10:38:16.0078 4024 ============================================================
10:38:16.0078 4024 Initialize success
10:38:16.0078 4024 ============================================================
10:38:25.0531 2740 ============================================================
10:38:25.0531 2740 Scan started
10:38:25.0531 2740 Mode: Manual;
10:38:25.0531 2740 ============================================================
10:38:25.0765 2740 ================ Scan system memory ========================
10:38:25.0765 2740 System memory - ok
10:38:25.0765 2740 ================ Scan services =============================
10:38:26.0171 2740 Abiosdsk - ok
10:38:26.0187 2740 abp480n5 - ok
10:38:26.0265 2740 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:38:26.0265 2740 ACPI - ok
10:38:26.0312 2740 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
10:38:26.0312 2740 ACPIEC - ok
10:38:26.0359 2740 [ D392183CC5379E302E50CEBA635248EB ] ADIHdAudAddService C:\WINDOWS\system32\drivers\ADIHdAud.sys
10:38:26.0359 2740 ADIHdAudAddService - ok
10:38:26.0453 2740 [ 1BA1AB4141A92EB34DA99F1249CA2D4D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:38:26.0453 2740 AdobeFlashPlayerUpdateSvc - ok
10:38:26.0468 2740 adpu160m - ok
10:38:26.0500 2740 [ 9F59AE2DE835641FBB0C6AFD80D8FA9B ] AEAudioService C:\WINDOWS\system32\drivers\AEAudio.sys
10:38:26.0500 2740 AEAudioService - ok
10:38:26.0531 2740 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
10:38:26.0531 2740 aec - ok
10:38:26.0562 2740 [ 30BB1BDE595CA65FD5549462080D94E5 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
10:38:26.0562 2740 AegisP - ok
10:38:26.0609 2740 [ 322D0E36693D6E24A2398BEE62A268CD ] AFD C:\WINDOWS\System32\drivers\afd.sys
10:38:26.0625 2740 AFD - ok
10:38:26.0640 2740 Aha154x - ok
10:38:26.0656 2740 aic78u2 - ok
10:38:26.0687 2740 aic78xx - ok
10:38:26.0734 2740 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
10:38:26.0734 2740 Alerter - ok
10:38:26.0765 2740 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
10:38:26.0765 2740 ALG - ok
10:38:26.0796 2740 AliIde - ok
10:38:26.0812 2740 amsint - ok
10:38:26.0843 2740 AppMgmt - ok
10:38:26.0875 2740 asc - ok
10:38:26.0906 2740 asc3350p - ok
10:38:26.0921 2740 asc3550 - ok
10:38:27.0078 2740 [ 4EABF511B1AF176A971C3271E48FA3A8 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
10:38:27.0078 2740 aspnet_state - ok
10:38:27.0125 2740 [ F5C2CCDB273A546E9C3A15250F1D9165 ] asuskbnt C:\WINDOWS\system32\drivers\atkkbnt.sys
10:38:27.0125 2740 asuskbnt - ok
10:38:27.0156 2740 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:38:27.0156 2740 AsyncMac - ok
10:38:27.0218 2740 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
10:38:27.0218 2740 atapi - ok
10:38:27.0250 2740 Atdisk - ok
10:38:27.0281 2740 [ 9269B6C37E874EDC54A553CF6F0A32D7 ] ATKKeyboardService C:\WINDOWS\ATKKBService.exe
10:38:27.0281 2740 ATKKeyboardService - ok
10:38:27.0312 2740 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:38:27.0312 2740 Atmarpc - ok
10:38:27.0343 2740 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
10:38:27.0343 2740 AudioSrv - ok
10:38:27.0375 2740 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
10:38:27.0375 2740 audstub - ok
10:38:27.0437 2740 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
10:38:27.0437 2740 Beep - ok
10:38:27.0500 2740 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
10:38:27.0515 2740 BITS - ok
10:38:27.0546 2740 [ 249276D3EF1E74B992299CB96099E4D7 ] Browser C:\WINDOWS\System32\browser.dll
10:38:27.0546 2740 Browser - ok
10:38:27.0593 2740 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
10:38:27.0593 2740 cbidf2k - ok
10:38:27.0687 2740 [ 58BF7714A312698108A96D0DE2BB6825 ] cbVSCService11 C:\Program Files\Cobian Backup 11\cbVSCService11.exe
10:38:27.0687 2740 cbVSCService11 - ok
10:38:27.0703 2740 cd20xrnt - ok
10:38:27.0750 2740 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
10:38:27.0750 2740 Cdaudio - ok
10:38:27.0796 2740 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
10:38:27.0796 2740 Cdfs - ok
10:38:27.0843 2740 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:38:27.0859 2740 Cdrom - ok
10:38:27.0875 2740 Changer - ok
10:38:27.0906 2740 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
10:38:27.0906 2740 CiSvc - ok
10:38:27.0921 2740 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
10:38:27.0921 2740 ClipSrv - ok
10:38:27.0968 2740 [ 234B1BC2796483E1F5C3F26649FB3388 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:38:27.0968 2740 clr_optimization_v2.0.50727_32 - ok
10:38:27.0984 2740 CmdIde - ok
10:38:28.0062 2740 [ A5170716AE457155FD52A3DF4372BAFF ] CobianBackup11 C:\Program Files\Cobian Backup 11\cbService.exe
10:38:28.0062 2740 CobianBackup11 - ok
10:38:28.0093 2740 COMSysApp - ok
10:38:28.0140 2740 Cpqarray - ok
10:38:28.0171 2740 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
10:38:28.0187 2740 CryptSvc - ok
10:38:28.0203 2740 dac2w2k - ok
10:38:28.0234 2740 dac960nt - ok
10:38:28.0296 2740 [ C868F3AE15CF71A93F2AA3A32856D839 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
10:38:28.0328 2740 DcomLaunch - ok
10:38:28.0343 2740 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
10:38:28.0359 2740 Dhcp - ok
10:38:28.0375 2740 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
10:38:28.0375 2740 Disk - ok
10:38:28.0406 2740 dmadmin - ok
10:38:28.0484 2740 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
10:38:28.0484 2740 dmboot - ok
10:38:28.0531 2740 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
10:38:28.0531 2740 dmio - ok
10:38:28.0562 2740 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
10:38:28.0562 2740 dmload - ok
10:38:28.0593 2740 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
10:38:28.0593 2740 dmserver - ok
10:38:28.0625 2740 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
10:38:28.0625 2740 DMusic - ok
10:38:28.0687 2740 [ 0634B791684B84F4A331F3D3536FEEF8 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
10:38:28.0687 2740 Dnscache - ok
10:38:28.0734 2740 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
10:38:28.0734 2740 Dot3svc - ok
10:38:28.0750 2740 dpti2o - ok
10:38:28.0781 2740 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
10:38:28.0796 2740 drmkaud - ok
10:38:28.0828 2740 [ 0C51F1D7A7501FC948D35AE0FDE764A5 ] eamon C:\WINDOWS\system32\DRIVERS\eamon.sys
10:38:28.0828 2740 eamon - ok
10:38:28.0859 2740 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
10:38:28.0859 2740 EapHost - ok
10:38:28.0906 2740 [ C79916F203E1A2CBBE99F22D6E5D21DA ] ehdrv C:\WINDOWS\system32\DRIVERS\ehdrv.sys
10:38:28.0906 2740 ehdrv - ok
10:38:28.0937 2740 [ 0DAF3544804650526751C478AECCCE63 ] EIO C:\WINDOWS\system32\drivers\EIO.sys
10:38:28.0937 2740 EIO - ok
10:38:29.0031 2740 [ 4CB575D97653FA91FFB02DA3105EB084 ] ekrn C:\Program Files\ESET\ESET Smart Security\ekrn.exe
10:38:29.0046 2740 ekrn - ok
10:38:29.0078 2740 [ 4B6B2C930CD076F8BDEE683512EE05E8 ] epfw C:\WINDOWS\system32\DRIVERS\epfw.sys
10:38:29.0078 2740 epfw - ok
10:38:29.0093 2740 [ BE76566CE5E943B7529CF49025506542 ] Epfwndis C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
10:38:29.0093 2740 Epfwndis - ok
10:38:29.0125 2740 [ B964288A27843BDAFB5EE3A5CFC26A0A ] epfwtdi C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
10:38:29.0125 2740 epfwtdi - ok
10:38:29.0156 2740 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
10:38:29.0156 2740 ERSvc - ok
10:38:29.0218 2740 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] Eventlog C:\WINDOWS\system32\services.exe
10:38:29.0218 2740 Eventlog - ok
10:38:29.0234 2740 [ 260C69FD67687B0DC062FC3D31655857 ] EventSystem C:\WINDOWS\system32\es.dll
10:38:29.0250 2740 EventSystem - ok
10:38:29.0312 2740 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
10:38:29.0312 2740 Fastfat - ok
10:38:29.0328 2740 [ B927443008910B412BEC72FC41C1BAD0 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:38:29.0343 2740 FastUserSwitchingCompatibility - ok
10:38:29.0406 2740 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
10:38:29.0406 2740 Fdc - ok
10:38:29.0453 2740 [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS C:\WINDOWS\system32\DRIVERS\fetnd5.sys
10:38:29.0453 2740 FETNDIS - ok
10:38:29.0500 2740 [ A583BC166495B07F704533754CE29CBD ] FETNDISB C:\WINDOWS\system32\DRIVERS\fetnd5b.sys
10:38:29.0500 2740 FETNDISB - ok
10:38:29.0531 2740 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
10:38:29.0531 2740 Fips - ok
10:38:29.0562 2740 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
10:38:29.0562 2740 Flpydisk - ok
10:38:29.0625 2740 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:38:29.0625 2740 FltMgr - ok
10:38:29.0640 2740 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:38:29.0640 2740 Fs_Rec - ok
10:38:29.0671 2740 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:38:29.0687 2740 Ftdisk - ok
10:38:29.0703 2740 GMSIPCI - ok
10:38:29.0750 2740 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:38:29.0750 2740 Gpc - ok
10:38:29.0796 2740 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:38:29.0796 2740 HDAudBus - ok
10:38:29.0843 2740 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:38:29.0843 2740 helpsvc - ok
10:38:29.0859 2740 HidServ - ok
10:38:29.0906 2740 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
10:38:29.0906 2740 hkmsvc - ok
10:38:29.0921 2740 hpn - ok
10:38:29.0984 2740 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
10:38:29.0984 2740 HTTP - ok
10:38:30.0031 2740 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
10:38:30.0046 2740 HTTPFilter - ok
10:38:30.0062 2740 i2omgmt - ok
10:38:30.0078 2740 i2omp - ok
10:38:30.0109 2740 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:38:30.0109 2740 i8042prt - ok
10:38:30.0156 2740 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
10:38:30.0156 2740 Imapi - ok
10:38:30.0203 2740 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
10:38:30.0203 2740 ImapiService - ok
10:38:30.0234 2740 ini910u - ok
10:38:30.0281 2740 IntelIde - ok
10:38:30.0312 2740 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:38:30.0312 2740 intelppm - ok
10:38:30.0343 2740 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:38:30.0343 2740 Ip6Fw - ok
10:38:30.0375 2740 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:38:30.0375 2740 IpFilterDriver - ok
10:38:30.0390 2740 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:38:30.0390 2740 IpInIp - ok
10:38:30.0437 2740 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:38:30.0453 2740 IpNat - ok
10:38:30.0500 2740 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:38:30.0500 2740 IPSec - ok
10:38:30.0531 2740 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
10:38:30.0531 2740 IRENUM - ok
10:38:30.0593 2740 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:38:30.0593 2740 isapnp - ok
10:38:30.0640 2740 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:38:30.0640 2740 Kbdclass - ok
10:38:30.0671 2740 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
10:38:30.0671 2740 kmixer - ok
10:38:30.0703 2740 [ 1705745D900DABF2D89F90EBADDC7517 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
10:38:30.0703 2740 KSecDD - ok
10:38:30.0750 2740 [ 21920AC69594AB021237054FA728FE46 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
10:38:30.0750 2740 LanmanServer - ok
10:38:30.0812 2740 [ 5190783F51A2D7A8495202C664D7C963 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:38:30.0812 2740 lanmanworkstation - ok
10:38:30.0828 2740 lbrtfdc - ok
10:38:30.0906 2740 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
10:38:30.0906 2740 LmHosts - ok
10:38:30.0953 2740 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
10:38:30.0953 2740 Messenger - ok
10:38:31.0000 2740 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
10:38:31.0000 2740 mnmdd - ok
10:38:31.0046 2740 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
10:38:31.0046 2740 mnmsrvc - ok
10:38:31.0093 2740 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
10:38:31.0093 2740 Modem - ok
10:38:31.0125 2740 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:38:31.0125 2740 Mouclass - ok
10:38:31.0171 2740 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
10:38:31.0171 2740 MountMgr - ok
10:38:31.0203 2740 [ 3B9398E0146855B1DC0E3D9769C80F01 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
10:38:31.0218 2740 MozillaMaintenance - ok
10:38:31.0234 2740 mraid35x - ok
10:38:31.0265 2740 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:38:31.0265 2740 MRxDAV - ok
10:38:31.0296 2740 [ 68755F0FF16070178B54674FE5B847B0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:38:31.0296 2740 MRxSmb - ok
10:38:31.0359 2740 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
10:38:31.0359 2740 MSDTC - ok
10:38:31.0375 2740 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
10:38:31.0375 2740 Msfs - ok
10:38:31.0390 2740 MSICPL - ok
10:38:31.0421 2740 MSIServer - ok
10:38:31.0468 2740 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:38:31.0468 2740 MSKSSRV - ok
10:38:31.0500 2740 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:38:31.0500 2740 MSPCLOCK - ok
10:38:31.0515 2740 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
10:38:31.0515 2740 MSPQM - ok
10:38:31.0578 2740 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:38:31.0578 2740 mssmbios - ok
10:38:31.0625 2740 [ D48659BB24C48345D926ECB45C1EBDF5 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys
10:38:31.0625 2740 MTsensor - ok
10:38:31.0640 2740 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
10:38:31.0640 2740 Mup - ok
10:38:31.0703 2740 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
10:38:31.0718 2740 napagent - ok
10:38:31.0765 2740 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
10:38:31.0765 2740 NDIS - ok
10:38:31.0828 2740 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:38:31.0828 2740 NdisTapi - ok
10:38:31.0890 2740 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:38:31.0890 2740 Ndisuio - ok
10:38:31.0906 2740 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:38:31.0906 2740 NdisWan - ok
10:38:31.0937 2740 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
10:38:31.0937 2740 NDProxy - ok
10:38:31.0984 2740 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
10:38:31.0984 2740 NetBIOS - ok
10:38:32.0031 2740 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
10:38:32.0031 2740 NetBT - ok
10:38:32.0046 2740 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
10:38:32.0062 2740 NetDDE - ok
10:38:32.0078 2740 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
10:38:32.0093 2740 NetDDEdsdm - ok
10:38:32.0125 2740 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
10:38:32.0125 2740 Netlogon - ok
10:38:32.0156 2740 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
10:38:32.0156 2740 Netman - ok
10:38:32.0187 2740 [ AAC97DAB5F8A0573CF10E0EAC42A7724 ] Nla C:\WINDOWS\System32\mswsock.dll
10:38:32.0203 2740 Nla - ok
10:38:32.0218 2740 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
10:38:32.0218 2740 Npfs - ok
10:38:32.0250 2740 NTACCESS - ok
10:38:32.0296 2740 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
10:38:32.0296 2740 Ntfs - ok
10:38:32.0312 2740 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
10:38:32.0328 2740 NtLmSsp - ok
10:38:32.0375 2740 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
10:38:32.0390 2740 NtmsSvc - ok
10:38:32.0421 2740 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
10:38:32.0421 2740 Null - ok
10:38:32.0562 2740 [ 5645072033C2E51386E91BC137C0BEB5 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
10:38:32.0593 2740 nv - ok
10:38:32.0625 2740 [ 60D62603950220B51DF57E461A601659 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
10:38:32.0625 2740 NVSvc - ok
10:38:32.0671 2740 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:38:32.0687 2740 NwlnkFlt - ok
10:38:32.0703 2740 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:38:32.0703 2740 NwlnkFwd - ok
10:38:32.0812 2740 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:38:32.0812 2740 odserv - ok
10:38:32.0859 2740 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:38:32.0859 2740 ose - ok
10:38:32.0906 2740 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
10:38:32.0906 2740 Parport - ok
10:38:32.0937 2740 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
10:38:32.0937 2740 PartMgr - ok
10:38:32.0984 2740 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
10:38:32.0984 2740 ParVdm - ok
10:38:33.0031 2740 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
10:38:33.0031 2740 PCI - ok
10:38:33.0046 2740 PCIDump - ok
10:38:33.0078 2740 PCIIde - ok
10:38:33.0125 2740 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
10:38:33.0125 2740 Pcmcia - ok
10:38:33.0140 2740 PDCOMP - ok
10:38:33.0171 2740 PDFRAME - ok
10:38:33.0203 2740 PDRELI - ok
10:38:33.0234 2740 PDRFRAME - ok
10:38:33.0265 2740 perc2 - ok
10:38:33.0281 2740 perc2hib - ok
10:38:33.0406 2740 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] PlugPlay C:\WINDOWS\system32\services.exe
10:38:33.0406 2740 PlugPlay - ok
10:38:33.0421 2740 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
10:38:33.0421 2740 PolicyAgent - ok
10:38:33.0453 2740 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:38:33.0453 2740 PptpMiniport - ok
10:38:33.0484 2740 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:38:33.0484 2740 ProtectedStorage - ok
10:38:33.0515 2740 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
10:38:33.0515 2740 PSched - ok
10:38:33.0546 2740 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:38:33.0546 2740 Ptilink - ok
10:38:33.0578 2740 ql1080 - ok
10:38:33.0593 2740 Ql10wnt - ok
10:38:33.0625 2740 ql12160 - ok
10:38:33.0656 2740 ql1240 - ok
10:38:33.0687 2740 ql1280 - ok
10:38:33.0734 2740 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:38:33.0734 2740 RasAcd - ok
10:38:33.0750 2740 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
10:38:33.0765 2740 RasAuto - ok
10:38:33.0781 2740 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:38:33.0796 2740 Rasl2tp - ok
10:38:33.0828 2740 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
10:38:33.0843 2740 RasMan - ok
10:38:33.0859 2740 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:38:33.0859 2740 RasPppoe - ok
10:38:33.0890 2740 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
10:38:33.0890 2740 Raspti - ok
10:38:33.0921 2740 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:38:33.0921 2740 Rdbss - ok
10:38:33.0953 2740 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:38:33.0953 2740 RDPCDD - ok
10:38:34.0046 2740 [ 6728E45B66F93C08F11DE2E316FC70DD ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
10:38:34.0046 2740 RDPWD - ok
10:38:34.0093 2740 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
10:38:34.0093 2740 RDSessMgr - ok
10:38:34.0125 2740 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
10:38:34.0125 2740 redbook - ok
10:38:34.0171 2740 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
10:38:34.0171 2740 RemoteAccess - ok
10:38:34.0187 2740 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
10:38:34.0203 2740 RpcLocator - ok
10:38:34.0250 2740 [ C868F3AE15CF71A93F2AA3A32856D839 ] RpcSs C:\WINDOWS\system32\rpcss.dll
10:38:34.0250 2740 RpcSs - ok
10:38:34.0281 2740 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
10:38:34.0296 2740 RSVP - ok
10:38:34.0328 2740 [ E4CCB77E004662432F55DCEA046A5180 ] RTLWUSB C:\WINDOWS\system32\DRIVERS\RTL8187.sys
10:38:34.0328 2740 RTLWUSB - ok
10:38:34.0359 2740 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
10:38:34.0359 2740 SamSs - ok
10:38:34.0390 2740 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
10:38:34.0390 2740 SCardSvr - ok
10:38:34.0453 2740 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
10:38:34.0468 2740 Schedule - ok
10:38:34.0484 2740 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:38:34.0484 2740 Secdrv - ok
10:38:34.0515 2740 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
10:38:34.0531 2740 seclogon - ok
10:38:34.0578 2740 [ ECA77BEEB2BE8D573CF1B265E44FBFBD ] SenFiltService C:\WINDOWS\system32\drivers\Senfilt.sys
10:38:34.0593 2740 SenFiltService - ok
10:38:34.0609 2740 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
10:38:34.0609 2740 SENS - ok
10:38:34.0640 2740 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
10:38:34.0640 2740 serenum - ok
10:38:34.0671 2740 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
10:38:34.0671 2740 Serial - ok
10:38:34.0687 2740 SetupNTGLM7X - ok
10:38:34.0718 2740 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
10:38:34.0718 2740 Sfloppy - ok
10:38:34.0765 2740 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
10:38:34.0781 2740 SharedAccess - ok
10:38:34.0812 2740 [ B927443008910B412BEC72FC41C1BAD0 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:38:34.0812 2740 ShellHWDetection - ok
10:38:34.0828 2740 Simbad - ok
10:38:34.0890 2740 [ 3D7EF286E806F9BD9339AA52E28DCD67 ] SjyPkt C:\WINDOWS\System32\Drivers\SjyPkt.sys
10:38:34.0890 2740 SjyPkt - ok
10:38:34.0906 2740 Sparrow - ok
10:38:34.0968 2740 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
10:38:34.0968 2740 splitter - ok
10:38:34.0984 2740 [ CB1090BCA0E7B40D0B5B4E4D66531809 ] Spooler C:\WINDOWS\system32\spoolsv.exe
10:38:35.0000 2740 Spooler - ok
10:38:35.0046 2740 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
10:38:35.0046 2740 sr - ok
10:38:35.0078 2740 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
10:38:35.0093 2740 srservice - ok
10:38:35.0109 2740 [ 5252605079810904E31C332E241CD59B ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
10:38:35.0125 2740 Srv - ok
10:38:35.0156 2740 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
10:38:35.0156 2740 SSDPSRV - ok
10:38:35.0187 2740 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
10:38:35.0203 2740 stisvc - ok
10:38:35.0218 2740 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
10:38:35.0234 2740 swenum - ok
10:38:35.0250 2740 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
10:38:35.0250 2740 swmidi - ok
10:38:35.0281 2740 SwPrv - ok
10:38:35.0296 2740 symc810 - ok
10:38:35.0328 2740 symc8xx - ok
10:38:35.0359 2740 sym_hi - ok
10:38:35.0390 2740 sym_u3 - ok
10:38:35.0421 2740 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
10:38:35.0421 2740 sysaudio - ok
10:38:35.0468 2740 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
10:38:35.0468 2740 SysmonLog - ok
10:38:35.0515 2740 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
10:38:35.0531 2740 TapiSrv - ok
10:38:35.0562 2740 [ 93EA8D04EC73A85DB02EB8805988F733 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:38:35.0578 2740 Tcpip - ok
10:38:35.0609 2740 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
10:38:35.0609 2740 TDPIPE - ok
10:38:35.0640 2740 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
10:38:35.0640 2740 TDTCP - ok
10:38:35.0671 2740 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
10:38:35.0671 2740 TermDD - ok
10:38:35.0718 2740 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
10:38:35.0718 2740 TermService - ok
10:38:35.0750 2740 [ B927443008910B412BEC72FC41C1BAD0 ] Themes C:\WINDOWS\System32\shsvcs.dll
10:38:35.0765 2740 Themes - ok
10:38:35.0796 2740 TosIde - ok
10:38:35.0859 2740 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
10:38:35.0859 2740 TrkWks - ok
10:38:35.0906 2740 [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35 C:\WINDOWS\system32\DRIVERS\uagp35.sys
10:38:35.0906 2740 uagp35 - ok
10:38:35.0953 2740 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
10:38:35.0953 2740 Udfs - ok
10:38:35.0968 2740 ultra - ok
10:38:36.0015 2740 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
10:38:36.0031 2740 Update - ok
10:38:36.0062 2740 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
10:38:36.0062 2740 upnphost - ok
10:38:36.0109 2740 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
10:38:36.0109 2740 UPS - ok
10:38:36.0140 2740 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:38:36.0140 2740 usbccgp - ok
10:38:36.0187 2740 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:38:36.0187 2740 usbehci - ok
10:38:36.0203 2740 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:38:36.0203 2740 usbhub - ok
10:38:36.0250 2740 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:38:36.0250 2740 usbprint - ok
10:38:36.0281 2740 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:38:36.0281 2740 usbscan - ok
10:38:36.0312 2740 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:38:36.0312 2740 USBSTOR - ok
10:38:36.0343 2740 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:38:36.0343 2740 usbuhci - ok
10:38:36.0375 2740 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
10:38:36.0375 2740 VgaSave - ok
10:38:36.0406 2740 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
10:38:36.0406 2740 ViaIde - ok
10:38:36.0421 2740 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
10:38:36.0421 2740 VolSnap - ok
10:38:36.0468 2740 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
10:38:36.0484 2740 VSS - ok
10:38:36.0531 2740 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
10:38:36.0531 2740 W32Time - ok
10:38:36.0562 2740 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:38:36.0562 2740 Wanarp - ok
10:38:36.0593 2740 WDICA - ok
10:38:36.0625 2740 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
10:38:36.0625 2740 wdmaud - ok
10:38:36.0656 2740 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
10:38:36.0656 2740 WebClient - ok
10:38:36.0750 2740 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
10:38:36.0765 2740 winmgmt - ok
10:38:36.0843 2740 [ 6199B2AE3F9DB9CB6DB230471A1DC601 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
10:38:36.0859 2740 WmdmPmSN - ok
10:38:36.0906 2740 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:38:36.0906 2740 WmiApSrv - ok
10:38:36.0953 2740 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
10:38:36.0953 2740 wscsvc - ok
10:38:37.0000 2740 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
10:38:37.0000 2740 wuauserv - ok
10:38:37.0031 2740 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
10:38:37.0046 2740 WZCSVC - ok
10:38:37.0093 2740 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
10:38:37.0093 2740 xmlprov - ok
10:38:37.0125 2740 ================ Scan global ===============================
10:38:37.0156 2740 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
10:38:37.0171 2740 [ 77A41C497ADB0C96D1E8DF6F71D843C0 ] C:\WINDOWS\system32\winsrv.dll
10:38:37.0203 2740 [ 77A41C497ADB0C96D1E8DF6F71D843C0 ] C:\WINDOWS\system32\winsrv.dll
10:38:37.0218 2740 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] C:\WINDOWS\system32\services.exe
10:38:37.0218 2740 [Global] - ok
10:38:37.0218 2740 ================ Scan MBR ==================================
10:38:37.0250 2740 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
10:38:37.0500 2740 \Device\Harddisk0\DR0 - ok
10:38:37.0500 2740 ================ Scan VBR ==================================
10:38:37.0515 2740 [ F8C756AD2D1BB54E1F4F2F101779179B ] \Device\Harddisk0\DR0\Partition1
10:38:37.0515 2740 \Device\Harddisk0\DR0\Partition1 - ok
10:38:37.0531 2740 ============================================================
10:38:37.0531 2740 Scan finished
10:38:37.0531 2740 ============================================================
10:38:37.0578 1912 Detected object count: 0
10:38:37.0578 1912 Actual detected object count: 0








ComboFix 14-01-13.01 - Jitka Trnková 14.01.2014 10:44:52.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1534.1005 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jitka Trnkovß\Plocha\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personální firewall *Disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\hosts.ics
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-14 do 2014-01-14 )))))))))))))))))))))))))))))))
.
.
2014-01-12 12:55 . 2014-01-13 20:14 -------- d-----w- C:\AdwCleaner
2014-01-04 16:34 . 2014-01-07 09:44 -------- d-----w- C:\VČELIČKA
2014-01-04 16:29 . 2014-01-07 13:27 -------- d-----w- C:\PERSONNAL
2014-01-04 15:26 . 2014-01-14 08:18 -------- d-----w- C:\OUTLOOK pošta
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-14 09:36 . 2014-01-13 20:31 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 5376 ----a-w- c:\windows\system32\drivers\viaide.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 26368 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2014-01-14 09:36 . 2014-01-13 20:31 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 20608 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 143872 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 66048 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 4736 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 44672 ----a-w- c:\windows\system32\drivers\UAGP35.SYS.bak
2014-01-14 09:36 . 2014-01-13 20:31 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 30208 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12800 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 49408 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 361344 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 334848 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 225664 ----a-w- c:\windows\system32\drivers\tcpip6.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 96384 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 79232 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 393088 ----a-w- c:\windows\system32\drivers\senfilt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 202624 ----a-w- c:\windows\system32\drivers\RMCast.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 175872 ----a-w- c:\windows\system32\drivers\RTL8187.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 13532 ----a-w- c:\windows\system32\drivers\SjyPkt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 39680 ----a-w- c:\windows\system32\drivers\processr.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 120064 ----a-w- c:\windows\system32\drivers\pcmcia.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 88320 ----a-w- c:\windows\system32\drivers\nwlnkipx.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 46592 ----a-w- c:\windows\system32\drivers\p3.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12416 ----a-w- c:\windows\system32\drivers\nwlnkflt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 61824 ----a-w- c:\windows\system32\drivers\nic1394.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 574976 ----a-w- c:\windows\system32\drivers\ntfs.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 40576 ----a-w- c:\windows\system32\drivers\ndproxy.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 40320 ----a-w- c:\windows\system32\drivers\nmnt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 3958496 ----a-w- c:\windows\system32\drivers\nv4_mini.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 34688 ----a-w- c:\windows\system32\drivers\netbios.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 30848 ----a-w- c:\windows\system32\drivers\npfs.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 162816 ----a-w- c:\windows\system32\drivers\netbt.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 12032 ----a-w- c:\windows\system32\drivers\nikedrv.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 91520 ----a-w- c:\windows\system32\drivers\ndiswan.sys.bak
2014-01-14 09:36 . 2014-01-13 20:31 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2011-12-20 2696512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-11 7630848]
"nwiz"="nwiz.exe" [2006-08-11 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-08-11 86016]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5110672]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Cobian Backup 11 interface"="c:\program files\Cobian Backup 11\cbInterface.exe" [2012-07-31 4407808]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2006-10-26 434528]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [17.9.2013 15:17 134248]
R2 CobianBackup11;Cobian Backup 11 Gravity;c:\program files\Cobian Backup 11\cbService.exe [4.1.2014 16:10 1131008]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [12.9.2013 12:06 1337752]
R3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187.sys [4.1.2014 14:42 175872]
S2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester;c:\program files\Cobian Backup 11\cbVSCService11.exe [4.1.2014 16:10 67584]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
.
Obsah adresáře 'Naplánované úlohy'
.
2014-01-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-04 17:26]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.1.0.56 10.1.0.20
FF - ProfilePath - c:\documents and settings\Jitka Trnková\Data aplikací\Mozilla\Firefox\Profiles\ggvap3r0.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - ExtSQL: 2014-01-04 15:22; {ea61041c-1e22-4400-99a0-aea461e69d04}; c:\documents and settings\Jitka Trnková\Data aplikací\Mozilla\Firefox\Profiles\ggvap3r0.default\extensions\{ea61041c-1e22-4400-99a0-aea461e69d04}.xpi
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-01-14 10:51
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
Celkový čas: 2014-01-14 10:53:47
ComboFix-quarantined-files.txt 2014-01-14 09:53
.
Před spuštěním: Volných bajtů: 238 350 643 200
Po spuštění: Volných bajtů: 238 318 395 392
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 9D2151629C69CF68ABAF7B67414BDE41
413FC2A0C716421B3158746D63736515