PC-HELP.CZ

Seděla mi u počítače dcera a je to cele nějaké divné.



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:20:03, on 27.10.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\System32\ezSharedSvcHost.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Guard-ICQ\GuardICQ.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files\Hotspot Shield\bin\hsswd.exe
C:\PROGRA~1\ICQ6TO~1\ICQSER~1.EXE
C:\Program Files\Hotspot Shield\bin\fbwmgr.exe
C:\Program Files\Hotspot Shield\bin\fbw.exe
C:\Program Files\Hotspot Shield\bin\fbw.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Administrator\Plocha\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dts.search-results.com/sidebar.h ... stemid=406
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search-results.com/sr?src=ie ... 7104101&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search-results.com/sr?src=ie ... 7104101&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files\Funmoods\1.5.23.22\bh\escort.dll
O2 - BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL
O2 - BHO: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~1\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~1\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Xmarks] C:\Program Files\xmarkssync.exe -q
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7M\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: UPC Wifi Connect.lnk = C:\Program Files\UPC Wifi Connect\WifiConnect\UPC Wifi Connect.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra button: (no name) - {638F11AA-DF27-433b-BA2E-7281CE561D71} - C:\Program Files\xmarkssync.exe (HKCU)
O9 - Extra 'Tools' menuitem: Xmarks for IE... - {638F11AA-DF27-433b-BA2E-7281CE561D71} - C:\Program Files\xmarkssync.exe (HKCU)
O18 - Protocol: t-mobile - {C6D89159-3467-4C2F-9918-3362DA57BCD2} - C:\PROGRA~1\T-Mobile\HOTSPO~1\TMOBIL~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\WINDOWS\System32\ezSharedSvcHost.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files\Guard-ICQ\GuardICQ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: ICQ Service - Unknown owner - C:\PROGRA~1\ICQ6TO~1\ICQSER~1.EXE
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7413 bytes

Odinstaluj ICQToolBar, Search-Results Toolbar

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.27.05

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Administrator :: SESTAVA_PC [administrátor]

Ochrana: Povolena

27.10.2012 15:55:41
mbam-log-2012-10-27 (16-03-23).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 205953
Uplynulý čas: 6 minut, 22 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 8
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.FunMoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

====================================================

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.27.05

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Administrator :: SESTAVA_PC [administrátor]

Ochrana: Povolena

27.10.2012 18:25:54
mbam-log-2012-10-27 (18-25-54).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 205811
Uplynulý čas: 13 minut, 15 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 8
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.FunMoods) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Umístnění do karantény a smazání se zdařilo.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

20:22:36.0656 2060 TDSS rootkit removing tool 2.7.11.0 Feb 9 2012 10:12:57
20:22:36.0687 2060 ============================================================
20:22:36.0687 2060 Current date / time: 2012/10/27 20:22:36.0687
20:22:36.0687 2060 SystemInfo:
20:22:36.0687 2060
20:22:36.0687 2060 OS Version: 5.1.2600 ServicePack: 2.0
20:22:36.0687 2060 Product type: Workstation
20:22:36.0687 2060 ComputerName: SESTAVA_PC
20:22:36.0687 2060 UserName: Administrator
20:22:36.0687 2060 Windows directory: C:\WINDOWS
20:22:36.0687 2060 System windows directory: C:\WINDOWS
20:22:36.0687 2060 Processor architecture: Intel x86
20:22:36.0687 2060 Number of processors: 1
20:22:36.0687 2060 Page size: 0x1000
20:22:36.0687 2060 Boot type: Normal boot
20:22:36.0687 2060 ============================================================
20:22:43.0218 2060 Drive \Device\Harddisk0\DR0 - Size: 0x9516AE000 (37.27 Gb), SectorSize: 0x200, Cylinders: 0x1301, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
20:22:43.0234 2060 \Device\Harddisk0\DR0:
20:22:43.0234 2060 MBR used
20:22:43.0234 2060 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x48449EE
20:22:43.0312 2060 Initialize success
20:22:43.0312 2060 ============================================================
20:22:49.0734 3680 ============================================================
20:22:49.0734 3680 Scan started
20:22:49.0734 3680 Mode: Manual;
20:22:49.0734 3680 ============================================================
20:22:50.0375 3680 Abiosdsk - ok
20:22:50.0609 3680 abp480n5 - ok
20:22:50.0843 3680 ACPI (fa2fbcda96d2385f773b059fe5a125a6) C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:22:50.0875 3680 ACPI - ok
20:22:51.0140 3680 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
20:22:51.0156 3680 ACPIEC - ok
20:22:51.0421 3680 adpu160m - ok
20:22:51.0890 3680 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
20:22:51.0984 3680 aec - ok
20:22:52.0359 3680 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
20:22:52.0484 3680 AFD - ok
20:22:52.0859 3680 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
20:22:52.0875 3680 agp440 - ok
20:22:53.0093 3680 Aha154x - ok
20:22:53.0328 3680 aic78u2 - ok
20:22:53.0671 3680 aic78xx - ok
20:22:53.0875 3680 AliIde - ok
20:22:54.0156 3680 amsint - ok
20:22:54.0531 3680 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
20:22:54.0531 3680 Arp1394 - ok
20:22:54.0812 3680 asc - ok
20:22:55.0093 3680 asc3350p - ok
20:22:55.0359 3680 asc3550 - ok
20:22:55.0609 3680 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:22:55.0609 3680 AsyncMac - ok
20:22:55.0968 3680 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
20:22:55.0984 3680 atapi - ok
20:22:56.0250 3680 Atdisk - ok
20:22:56.0578 3680 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:22:56.0593 3680 Atmarpc - ok
20:22:56.0859 3680 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
20:22:56.0875 3680 audstub - ok
20:22:57.0203 3680 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
20:22:57.0234 3680 Beep - ok
20:22:57.0578 3680 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
20:22:57.0593 3680 cbidf2k - ok
20:22:57.0875 3680 cd20xrnt - ok
20:22:58.0140 3680 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
20:22:58.0156 3680 Cdaudio - ok
20:22:58.0578 3680 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
20:22:58.0593 3680 Cdfs - ok
20:22:58.0859 3680 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:22:58.0875 3680 Cdrom - ok
20:22:59.0109 3680 Changer - ok
20:22:59.0343 3680 CmdIde - ok
20:22:59.0562 3680 cmpci (32e211fff4eab2a2df035a4dab7f5065) C:\WINDOWS\system32\drivers\cmaudio.sys
20:22:59.0718 3680 cmpci - ok
20:23:00.0031 3680 Cpqarray - ok
20:23:00.0281 3680 dac2w2k - ok
20:23:00.0546 3680 dac960nt - ok
20:23:00.0812 3680 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
20:23:00.0828 3680 Disk - ok
20:23:01.0250 3680 dmboot (e1968edec81c430108feb23ab07bdb14) C:\WINDOWS\system32\drivers\dmboot.sys
20:23:01.0500 3680 dmboot - ok
20:23:01.0968 3680 dmio (1b1520a82e396e46b9ae9fa6b03ff6c6) C:\WINDOWS\system32\drivers\dmio.sys
20:23:02.0046 3680 dmio - ok
20:23:02.0328 3680 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
20:23:02.0343 3680 dmload - ok
20:23:02.0687 3680 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
20:23:02.0687 3680 DMusic - ok
20:23:02.0968 3680 dpti2o - ok
20:23:03.0250 3680 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
20:23:03.0265 3680 drmkaud - ok
20:23:03.0281 3680 Suspicious service (NoAccess): dywxwlujp
20:23:03.0656 3680 E100B (fe9cb643a034285031502d3369e5a869) C:\WINDOWS\system32\DRIVERS\e100b325.sys
20:23:03.0703 3680 E100B - ok
20:23:04.0140 3680 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
20:23:04.0265 3680 Fastfat - ok
20:23:04.0625 3680 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\drivers\Fdc.sys
20:23:04.0625 3680 Fdc - ok
20:23:04.0953 3680 Fips (266dab58619b17bdf37fabbd48d875ca) C:\WINDOWS\system32\drivers\Fips.sys
20:23:04.0968 3680 Fips - ok
20:23:05.0281 3680 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\drivers\Flpydisk.sys
20:23:05.0296 3680 Flpydisk - ok
20:23:05.0578 3680 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
20:23:05.0578 3680 FltMgr - ok
20:23:05.0890 3680 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
20:23:05.0890 3680 FsUsbExDisk - ok
20:23:06.0140 3680 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:23:06.0140 3680 Fs_Rec - ok
20:23:06.0500 3680 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:23:06.0531 3680 Ftdisk - ok
20:23:06.0843 3680 G400 (6e4534e9a0d511c1629f28a7b3d544b4) C:\WINDOWS\system32\DRIVERS\G400m.sys
20:23:07.0000 3680 G400 - ok
20:23:07.0265 3680 gameenum (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
20:23:07.0265 3680 gameenum - ok
20:23:07.0484 3680 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:23:07.0500 3680 Gpc - ok
20:23:07.0953 3680 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:23:07.0968 3680 hidusb - ok
20:23:08.0250 3680 hpn - ok
20:23:08.0703 3680 HTTP (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys
20:23:08.0734 3680 HTTP - ok
20:23:08.0937 3680 i2omgmt - ok
20:23:09.0234 3680 i2omp - ok
20:23:09.0515 3680 i8042prt (0f42de9909b5dbf2c48dd1a79d491af5) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:23:09.0515 3680 i8042prt - ok
20:23:09.0781 3680 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
20:23:09.0812 3680 Imapi - ok
20:23:10.0062 3680 ini910u - ok
20:23:10.0421 3680 IntelIde (ef4fda4841001a4b98c411797db8894a) C:\WINDOWS\system32\DRIVERS\intelide.sys
20:23:10.0437 3680 IntelIde - ok
20:23:10.0812 3680 intelppm (10a3ac0f0df720ad3c3fd13861d50eb9) C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:23:10.0812 3680 intelppm - ok
20:23:11.0187 3680 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
20:23:11.0203 3680 Ip6Fw - ok
20:23:11.0578 3680 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:23:11.0593 3680 IpFilterDriver - ok
20:23:11.0921 3680 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:23:11.0921 3680 IpInIp - ok
20:23:12.0312 3680 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:23:12.0328 3680 IpNat - ok
20:23:12.0703 3680 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:23:12.0703 3680 IPSec - ok
20:23:12.0953 3680 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
20:23:12.0953 3680 IRENUM - ok
20:23:13.0218 3680 isapnp (1091528512e4dd7ed5fddcc4df1c53d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:23:13.0218 3680 isapnp - ok
20:23:13.0468 3680 Kbdclass (6f877bf8dc01a550cd666f3bedb2213c) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:23:13.0484 3680 Kbdclass - ok
20:23:13.0656 3680 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
20:23:13.0671 3680 kmixer - ok
20:23:13.0859 3680 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
20:23:13.0859 3680 KSecDD - ok
20:23:14.0031 3680 lbrtfdc - ok
20:23:14.0328 3680 MBAMProtector (500d089ce760d83da2b6cba681aa9949) C:\WINDOWS\system32\drivers\mbam.sys
20:23:14.0328 3680 MBAMProtector - ok
20:23:14.0625 3680 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
20:23:14.0625 3680 mnmdd - ok
20:23:14.0781 3680 Modem (60210deb037846afe521ebf349964f6b) C:\WINDOWS\system32\drivers\Modem.sys
20:23:14.0781 3680 Modem - ok
20:23:14.0984 3680 Mouclass (b160ec94114715675509115986400fd9) C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:23:14.0984 3680 Mouclass - ok
20:23:15.0109 3680 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:23:15.0125 3680 mouhid - ok
20:23:15.0328 3680 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
20:23:15.0328 3680 MountMgr - ok
20:23:15.0531 3680 mraid35x - ok
20:23:15.0750 3680 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:23:15.0750 3680 MRxDAV - ok
20:23:16.0015 3680 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:23:16.0171 3680 MRxSmb - ok
20:23:16.0406 3680 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
20:23:16.0406 3680 Msfs - ok
20:23:16.0546 3680 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:23:16.0562 3680 MSKSSRV - ok
20:23:16.0703 3680 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:23:16.0703 3680 MSPCLOCK - ok
20:23:16.0953 3680 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
20:23:16.0953 3680 MSPQM - ok
20:23:17.0156 3680 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:23:17.0156 3680 mssmbios - ok
20:23:17.0312 3680 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
20:23:17.0328 3680 Mup - ok
20:23:17.0531 3680 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
20:23:17.0562 3680 NDIS - ok
20:23:17.0937 3680 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:23:17.0937 3680 NdisTapi - ok
20:23:18.0125 3680 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:23:18.0125 3680 Ndisuio - ok
20:23:18.0484 3680 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:23:18.0500 3680 NdisWan - ok
20:23:18.0765 3680 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
20:23:18.0781 3680 NDProxy - ok
20:23:19.0125 3680 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
20:23:19.0140 3680 NetBIOS - ok
20:23:19.0453 3680 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
20:23:19.0484 3680 NetBT - ok
20:23:19.0765 3680 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS\nic1394.sys
20:23:19.0765 3680 NIC1394 - ok
20:23:20.0140 3680 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
20:23:20.0140 3680 Npfs - ok
20:23:20.0640 3680 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
20:23:20.0875 3680 Ntfs - ok
20:23:21.0203 3680 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
20:23:21.0218 3680 Null - ok
20:23:21.0437 3680 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:23:21.0468 3680 NwlnkFlt - ok
20:23:21.0812 3680 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:23:21.0828 3680 NwlnkFwd - ok
20:23:22.0171 3680 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
20:23:22.0171 3680 ohci1394 - ok
20:23:22.0390 3680 Parport (76a18caa2fefb28a4ced38d76837e86e) C:\WINDOWS\system32\DRIVERS\parport.sys
20:23:22.0406 3680 Parport - ok
20:23:22.0906 3680 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
20:23:22.0937 3680 PartMgr - ok
20:23:23.0390 3680 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
20:23:23.0421 3680 ParVdm - ok
20:23:23.0921 3680 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
20:23:23.0937 3680 pccsmcfd - ok
20:23:24.0406 3680 PCI (b7979f37bb7b9df2230046134955e6e7) C:\WINDOWS\system32\DRIVERS\pci.sys
20:23:24.0437 3680 PCI - ok
20:23:24.0718 3680 PCIDump - ok
20:23:25.0218 3680 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\drivers\PCIIde.sys
20:23:25.0250 3680 PCIIde - ok
20:23:25.0796 3680 Pcmcia (90505755634407d4ef4c6dea60fc1df9) C:\WINDOWS\system32\drivers\Pcmcia.sys
20:23:25.0812 3680 Pcmcia - ok
20:23:25.0968 3680 PDCOMP - ok
20:23:26.0328 3680 PDFRAME - ok
20:23:26.0625 3680 PDRELI - ok
20:23:26.0843 3680 PDRFRAME - ok
20:23:27.0265 3680 perc2 - ok
20:23:27.0500 3680 perc2hib - ok
20:23:27.0687 3680 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:23:27.0703 3680 PptpMiniport - ok
20:23:27.0890 3680 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
20:23:27.0890 3680 PSched - ok
20:23:28.0171 3680 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:23:28.0171 3680 Ptilink - ok
20:23:28.0312 3680 ql1080 - ok
20:23:28.0484 3680 Ql10wnt - ok
20:23:28.0671 3680 ql12160 - ok
20:23:28.0796 3680 ql1240 - ok
20:23:28.0937 3680 ql1280 - ok
20:23:29.0031 3680 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:23:29.0031 3680 RasAcd - ok
20:23:29.0171 3680 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:23:29.0187 3680 Rasl2tp - ok
20:23:29.0437 3680 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:23:29.0437 3680 RasPppoe - ok
20:23:29.0593 3680 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
20:23:29.0593 3680 Raspti - ok
20:23:29.0703 3680 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:23:29.0718 3680 Rdbss - ok
20:23:29.0875 3680 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:23:29.0890 3680 RDPCDD - ok
20:23:30.0062 3680 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:23:30.0062 3680 rdpdr - ok
20:23:30.0265 3680 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
20:23:30.0281 3680 RDPWD - ok
20:23:30.0453 3680 redbook (aba13d33e1f888c9a68599a48a8840d6) C:\WINDOWS\system32\DRIVERS\redbook.sys
20:23:30.0453 3680 redbook - ok
20:23:30.0734 3680 Secdrv (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:23:30.0750 3680 Secdrv - ok
20:23:30.0968 3680 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
20:23:30.0984 3680 serenum - ok
20:23:31.0109 3680 Serial (c1ddbc85251551a840212999da3d95f3) C:\WINDOWS\system32\DRIVERS\serial.sys
20:23:31.0109 3680 Serial - ok
20:23:31.0250 3680 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
20:23:31.0250 3680 Sfloppy - ok
20:23:31.0406 3680 Simbad - ok
20:23:31.0562 3680 Sparrow - ok
20:23:31.0671 3680 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
20:23:31.0687 3680 splitter - ok
20:23:31.0906 3680 sr (a74035ea526db97d9d50d2143a55f5cf) C:\WINDOWS\system32\DRIVERS\sr.sys
20:23:31.0906 3680 sr - ok
20:23:32.0062 3680 Srv (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys
20:23:32.0078 3680 Srv - ok
20:23:32.0250 3680 ss_bbus (eaa66218cd39f5bb1b4853a78c67c787) C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
20:23:32.0265 3680 ss_bbus - ok
20:23:32.0562 3680 ss_bmdfl (91765f99914ed8693d8bc76524f21581) C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
20:23:32.0562 3680 ss_bmdfl - ok
20:23:32.0968 3680 ss_bmdm (840e7b738b03c10ee91d9b7d3d6eff15) C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
20:23:32.0984 3680 ss_bmdm - ok
20:23:33.0156 3680 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
20:23:33.0156 3680 swenum - ok
20:23:33.0328 3680 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
20:23:33.0328 3680 swmidi - ok
20:23:33.0437 3680 symc810 - ok
20:23:33.0500 3680 symc8xx - ok
20:23:33.0593 3680 sym_hi - ok
20:23:33.0703 3680 sym_u3 - ok
20:23:33.0859 3680 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
20:23:33.0859 3680 sysaudio - ok
20:23:34.0015 3680 taphss (fd90a16ceb10d4fdaa00aaf39b8ff58f) C:\WINDOWS\system32\DRIVERS\taphss.sys
20:23:34.0015 3680 taphss - ok
20:23:34.0203 3680 Tcpip (9f4b36614a0fc234525ba224957de55c) C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:23:34.0218 3680 Tcpip - ok
20:23:34.0343 3680 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
20:23:34.0343 3680 TDPIPE - ok
20:23:34.0515 3680 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
20:23:34.0515 3680 TDTCP - ok
20:23:34.0718 3680 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
20:23:34.0750 3680 TermDD - ok
20:23:34.0843 3680 TosIde - ok
20:23:35.0015 3680 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
20:23:35.0015 3680 Udfs - ok
20:23:35.0125 3680 ultra - ok
20:23:35.0375 3680 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
20:23:35.0406 3680 Update - ok
20:23:35.0593 3680 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:23:35.0593 3680 usbehci - ok
20:23:35.0703 3680 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:23:35.0734 3680 usbhub - ok
20:23:35.0843 3680 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:23:35.0843 3680 USBSTOR - ok
20:23:36.0156 3680 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:23:36.0171 3680 usbuhci - ok
20:23:36.0671 3680 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
20:23:36.0671 3680 VgaSave - ok
20:23:37.0000 3680 ViaIde - ok
20:23:37.0390 3680 VolSnap (cd8cce067f7e9cbd762c00bdddecaa34) C:\WINDOWS\system32\drivers\VolSnap.sys
20:23:37.0390 3680 VolSnap - ok
20:23:37.0828 3680 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:23:37.0843 3680 Wanarp - ok
20:23:38.0171 3680 WDICA - ok
20:23:38.0609 3680 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
20:23:38.0640 3680 wdmaud - ok
20:23:38.0875 3680 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
20:23:41.0734 3680 \Device\Harddisk0\DR0 - ok
20:23:41.0781 3680 Boot (0x1200) (2741259451e6e80e33bdba4f5429389f) \Device\Harddisk0\DR0\Partition0
20:23:41.0781 3680 \Device\Harddisk0\DR0\Partition0 - ok
20:23:41.0781 3680 ============================================================
20:23:41.0781 3680 Scan finished
20:23:41.0781 3680 ============================================================
20:23:41.0828 4044 Detected object count: 0
20:23:41.0828 4044 Actual detected object count: 0
20:23:57.0671 0172 Deinitialize success

Ještě ten Combofix

Tak nevím ten Combofix se spustí a provede celou kontrolu, pak se mi restartuje počítač, ale ten log nemužu nikde najít

musí se dlouho čekat na vyhotovení logu po restartu.

Když to nepůjde zkus v nouz. režimu.

Jinak jsou logy zde:
C:\