Kontrola Vyřešeno

[Ben]

Prosim o kontrolu

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:55:14, on 13.7.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\FixCamera.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\vsnp325.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\SoftGate\SoftGate Download Manager\SoftGate.DownloadManagerUI.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Boda\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SoftGate.DownloadManager.IE.DownloadManagerPlugin - {a1acb83b-3713-4784-b2b3-64c6d06565e9} - mscoree.dll (file missing)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Data aplikací\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LinkMagic for magicolor 1680MF] C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Boda\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Nova Stahovák - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{35D05F0F-4C2E-41B7-B113-F3A1195F8F8E}: NameServer = 10.102.0.252,10.102.0.253
O17 - HKLM\System\CS1\Services\Tcpip\..\{35D05F0F-4C2E-41B7-B113-F3A1195F8F8E}: NameServer = 10.102.0.252,10.102.0.253
O17 - HKLM\System\CS2\Services\Tcpip\..\{35D05F0F-4C2E-41B7-B113-F3A1195F8F8E}: NameServer = 10.102.0.252,10.102.0.253
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 14667 bytes

[Reklama]

[Žbeky]

Odinstaluj Seatch settings, ICQ toolbar a SweetIM toolbar

Fixni:

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SoftGate.DownloadManager.IE.DownloadManagerPlugin - {a1acb83b-3713-4784-b2b3-64c6d06565e9} - mscoree.dll (file missing)
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Data aplikací\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Boda\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O9 - Extra button: (no name) - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Nova Stahovák - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

[Ben]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.07.11.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Boda :: BODA-PC [administrátor]

Ochrana: Zakázána

13.7.2012 15:42:11
mbam-log-2012-07-13 (15-42-11).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 201876
Uplynulý čas: 9 minut,

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[Žbeky]

Problémy?

[Ben]

Nemohl jsem se pripojit na internet prez sitovku a prez wifi ano . Prez sitovku to pridelilo IP adresu a zadna stranka se nezobrazovala apak to spadlo a sitovka hlasila pripojeni omezeno a prez wifi to slapalon vpohode Malwarebytes Anti-Malware nasel predtim nez jsem vam psal trojan BHO a to 8x ale to jsem smazal . potom jsem to ToolsCleaner2 a pripojil jsem se i pres sitovku . Ale nedalo mne a dal jsem log a ted jsem tu .

[jaro3]

Stáhni si TDSSKiller

Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[Ben]

00:54:20.0468 3000 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35
00:54:20.0640 3000 ============================================================
00:54:20.0640 3000 Current date / time: 2012/07/14 00:54:20.0640
00:54:20.0640 3000 SystemInfo:
00:54:20.0640 3000
00:54:20.0640 3000 OS Version: 5.1.2600 ServicePack: 3.0
00:54:20.0640 3000 Product type: Workstation
00:54:20.0640 3000 ComputerName: BODA-PC
00:54:20.0640 3000 UserName: Boda
00:54:20.0640 3000 Windows directory: C:\WINDOWS
00:54:20.0640 3000 System windows directory: C:\WINDOWS
00:54:20.0640 3000 Processor architecture: Intel x86
00:54:20.0640 3000 Number of processors: 2
00:54:20.0640 3000 Page size: 0x1000
00:54:20.0640 3000 Boot type: Normal boot
00:54:20.0640 3000 ============================================================
00:54:22.0640 3000 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
00:54:22.0656 3000 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
00:54:22.0671 3000 Drive \Device\Harddisk2\DR6 - Size: 0xF7800000 (3.87 Gb), SectorSize: 0x200, Cylinders: 0x1F8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
00:54:22.0687 3000 ============================================================
00:54:22.0687 3000 \Device\Harddisk1\DR1:
00:54:22.0687 3000 MBR partitions:
00:54:22.0687 3000 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D2ABBBD
00:54:22.0703 3000 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x1D2ABC3B, BlocksNum 0x1D0D9006
00:54:22.0703 3000 \Device\Harddisk0\DR0:
00:54:22.0718 3000 MBR partitions:
00:54:22.0718 3000 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xFFFAC05
00:54:22.0734 3000 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xFFFAC83, BlocksNum 0xD1C98FE
00:54:22.0734 3000 \Device\Harddisk2\DR6:
00:54:22.0734 3000 MBR partitions:
00:54:22.0734 3000 ============================================================
00:54:22.0734 3000 D: <-> \Device\Harddisk1\DR1\Partition0
00:54:22.0750 3000 F: <-> \Device\Harddisk0\DR0\Partition1
00:54:22.0765 3000 G: <-> \Device\Harddisk1\DR1\Partition1
00:54:22.0796 3000 C: <-> \Device\Harddisk0\DR0\Partition0
00:54:22.0796 3000 ============================================================
00:54:22.0796 3000 Initialize success
00:54:22.0796 3000 ============================================================
00:54:27.0218 2776 ============================================================
00:54:27.0218 2776 Scan started
00:54:27.0218 2776 Mode: Manual;
00:54:27.0218 2776 ============================================================
00:54:28.0109 2776 Aavmker4 (0b27ae82c113d3687024d18459440426) C:\WINDOWS\system32\drivers\Aavmker4.sys
00:54:28.0109 2776 Aavmker4 - ok
00:54:28.0125 2776 Abiosdsk - ok
00:54:28.0140 2776 abp480n5 - ok
00:54:28.0234 2776 ACDaemon (adc420616c501b45d26c0fd3ef1e54e4) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
00:54:28.0234 2776 ACDaemon - ok
00:54:28.0281 2776 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
00:54:28.0312 2776 ACPI - ok
00:54:28.0328 2776 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
00:54:28.0328 2776 ACPIEC - ok
00:54:28.0375 2776 ADIHdAudAddService (d392183cc5379e302e50ceba635248eb) C:\WINDOWS\system32\drivers\ADIHdAud.sys
00:54:28.0375 2776 ADIHdAudAddService - ok
00:54:28.0375 2776 adpu160m - ok
00:54:28.0421 2776 AEAudioService (9f59ae2de835641fbb0c6afd80d8fa9b) C:\WINDOWS\system32\drivers\AEAudio.sys
00:54:28.0468 2776 AEAudioService - ok
00:54:28.0515 2776 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
00:54:28.0515 2776 aec - ok
00:54:28.0562 2776 AegisP (2f7f3e8da380325866e566f5d5ec23d5) C:\WINDOWS\system32\DRIVERS\AegisP.sys
00:54:28.0562 2776 AegisP - ok
00:54:28.0593 2776 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
00:54:28.0609 2776 AFD - ok
00:54:28.0625 2776 Aha154x - ok
00:54:28.0640 2776 aic78u2 - ok
00:54:28.0656 2776 aic78xx - ok
00:54:28.0703 2776 Alerter (e0a6fa244b8624d78fe5ff6f56a33bae) C:\WINDOWS\system32\alrsvc.dll
00:54:28.0703 2776 Alerter - ok
00:54:28.0734 2776 ALG (88842de939a827577bf24243699ac80a) C:\WINDOWS\System32\alg.exe
00:54:28.0734 2776 ALG - ok
00:54:28.0734 2776 AliIde - ok
00:54:28.0781 2776 AmdLLD (ad8fa28d8ed0d0a689a0559085ce0f18) C:\WINDOWS\system32\DRIVERS\AmdLLD.sys
00:54:28.0781 2776 AmdLLD - ok
00:54:28.0796 2776 amsint - ok
00:54:28.0812 2776 AppMgmt - ok
00:54:28.0843 2776 asc - ok
00:54:28.0859 2776 asc3350p - ok
00:54:28.0875 2776 asc3550 - ok
00:54:28.0968 2776 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
00:54:28.0968 2776 aspnet_state - ok
00:54:28.0984 2776 asuskbnt (f5c2ccdb273a546e9c3a15250f1d9165) C:\WINDOWS\system32\drivers\atkkbnt.sys
00:54:29.0000 2776 asuskbnt - ok
00:54:29.0015 2776 aswFsBlk (1c1f3d6dddc046c920c493a779649f66) C:\WINDOWS\system32\drivers\aswFsBlk.sys
00:54:29.0015 2776 aswFsBlk - ok
00:54:29.0046 2776 aswMon2 (9e912fe7b41650701ef2b227aca440f3) C:\WINDOWS\system32\drivers\aswMon2.sys
00:54:29.0046 2776 aswMon2 - ok
00:54:29.0078 2776 aswRdr (982e275d1c5801042fe94209fb0160fb) C:\WINDOWS\system32\drivers\aswRdr.sys
00:54:29.0078 2776 aswRdr - ok
00:54:29.0140 2776 aswSnx (73dbcf808e00580f2a47f93dd9b03876) C:\WINDOWS\system32\drivers\aswSnx.sys
00:54:29.0156 2776 aswSnx - ok
00:54:29.0187 2776 aswSP (6cbd7d3a33f498d09c831cdd732da2e0) C:\WINDOWS\system32\drivers\aswSP.sys
00:54:29.0203 2776 aswSP - ok
00:54:29.0218 2776 aswTdi (7109a9aa551f37cd168c02368465957e) C:\WINDOWS\system32\drivers\aswTdi.sys
00:54:29.0218 2776 aswTdi - ok
00:54:29.0250 2776 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
00:54:29.0265 2776 AsyncMac - ok
00:54:29.0265 2776 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
00:54:29.0281 2776 atapi - ok
00:54:29.0296 2776 Atdisk - ok
00:54:29.0328 2776 ATKKeyboardService (fd2c83a58feab0751e723b1676bdbf46) C:\WINDOWS\ATKKBService.exe
00:54:29.0359 2776 ATKKeyboardService - ok
00:54:29.0375 2776 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
00:54:29.0375 2776 Atmarpc - ok
00:54:29.0421 2776 AudioSrv (de31b88962a8645dba5a37b993e7b0f1) C:\WINDOWS\System32\audiosrv.dll
00:54:29.0421 2776 AudioSrv - ok
00:54:29.0453 2776 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
00:54:29.0468 2776 audstub - ok
00:54:29.0515 2776 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
00:54:29.0515 2776 avast! Antivirus - ok
00:54:29.0546 2776 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
00:54:29.0546 2776 Beep - ok
00:54:29.0609 2776 BITS (19395d092fd85ddc2d9c7729cf5a2ac8) C:\WINDOWS\system32\qmgr.dll
00:54:29.0625 2776 BITS - ok
00:54:29.0656 2776 Browser (249276d3ef1e74b992299cb96099e4d7) C:\WINDOWS\System32\browser.dll
00:54:29.0656 2776 Browser - ok
00:54:29.0765 2776 btaudio (faba1418646a2b433c0bded6ff92d2fa) C:\WINDOWS\system32\drivers\btaudio.sys
00:54:29.0875 2776 btaudio - ok
00:54:30.0000 2776 BTKRNL (aef038061bc1cafb4865d43a85beb1a1) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
00:54:30.0031 2776 BTKRNL - ok
00:54:30.0078 2776 btwdins (f20629ff9ed48efa98fdc5d99919e8c0) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
00:54:30.0125 2776 btwdins - ok
00:54:30.0156 2776 BTWUSB (179a37c86fd2b9cc28eb93d093d394c7) C:\WINDOWS\system32\Drivers\btwusb.sys
00:54:30.0156 2776 BTWUSB - ok
00:54:30.0171 2776 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
00:54:30.0171 2776 cbidf2k - ok
00:54:30.0203 2776 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
00:54:30.0203 2776 CCDECODE - ok
00:54:30.0203 2776 cd20xrnt - ok
00:54:30.0234 2776 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
00:54:30.0234 2776 Cdaudio - ok
00:54:30.0265 2776 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
00:54:30.0265 2776 Cdfs - ok
00:54:30.0281 2776 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
00:54:30.0281 2776 Cdrom - ok
00:54:30.0296 2776 Changer - ok
00:54:30.0328 2776 CiSvc (e390dc1d7c461d7d56ec53402f329928) C:\WINDOWS\system32\cisvc.exe
00:54:30.0328 2776 CiSvc - ok
00:54:30.0359 2776 ClipSrv (064507a8dfa8c5c7e2ffddd3e6f424fa) C:\WINDOWS\system32\clipsrv.exe
00:54:30.0359 2776 ClipSrv - ok
00:54:30.0390 2776 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:54:30.0406 2776 clr_optimization_v2.0.50727_32 - ok
00:54:30.0406 2776 CmdIde - ok
00:54:30.0437 2776 COMSysApp - ok
00:54:30.0468 2776 Cpqarray - ok
00:54:30.0500 2776 CryptSvc (f3ab0933cbd166d271992f411c27ccaf) C:\WINDOWS\System32\cryptsvc.dll
00:54:30.0500 2776 CryptSvc - ok
00:54:30.0515 2776 dac2w2k - ok
00:54:30.0531 2776 dac960nt - ok
00:54:30.0593 2776 DcomLaunch (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\system32\rpcss.dll
00:54:30.0640 2776 DcomLaunch - ok
00:54:30.0687 2776 Dhcp (8c9a53e285ac5e6704844d0459ec85be) C:\WINDOWS\System32\dhcpcsvc.dll
00:54:30.0703 2776 Dhcp - ok
00:54:30.0718 2776 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
00:54:30.0734 2776 Disk - ok
00:54:30.0750 2776 dmadmin - ok
00:54:30.0828 2776 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
00:54:30.0875 2776 dmboot - ok
00:54:30.0906 2776 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
00:54:30.0906 2776 dmio - ok
00:54:30.0921 2776 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
00:54:30.0921 2776 dmload - ok
00:54:30.0953 2776 dmserver (2bfefe9e865655a76982f050450b9591) C:\WINDOWS\System32\dmserver.dll
00:54:30.0953 2776 dmserver - ok
00:54:30.0968 2776 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
00:54:30.0984 2776 DMusic - ok
00:54:31.0000 2776 Dnscache (dfaa406bf19f4ee806a6f8d4342137f7) C:\WINDOWS\System32\dnsrslvr.dll
00:54:31.0015 2776 Dnscache - ok
00:54:31.0046 2776 Dot3svc (4a3e2bd20157a0946751229e92eb8621) C:\WINDOWS\System32\dot3svc.dll
00:54:31.0062 2776 Dot3svc - ok
00:54:31.0078 2776 dpti2o - ok
00:54:31.0109 2776 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
00:54:31.0109 2776 drmkaud - ok
00:54:31.0140 2776 EapHost (0887d9c2be8d940778cad1e3b85f2a41) C:\WINDOWS\System32\eapsvc.dll
00:54:31.0156 2776 EapHost - ok
00:54:31.0171 2776 EIO (6f41da43aa4806a7bdbb2f9a8b05023e) C:\WINDOWS\system32\drivers\EIO.sys
00:54:31.0171 2776 EIO - ok
00:54:31.0203 2776 ElbyCDIO (44996a2addd2db7454f2ca40b67d8941) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
00:54:31.0203 2776 ElbyCDIO - ok
00:54:31.0234 2776 ERSvc (a2a4912798f2be706abadd3d30800d16) C:\WINDOWS\System32\ersvc.dll
00:54:31.0234 2776 ERSvc - ok
00:54:31.0265 2776 Eventlog (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
00:54:31.0281 2776 Eventlog - ok
00:54:31.0328 2776 EventSystem (a371f11ef07653591c8de26afb13ce7f) C:\WINDOWS\system32\es.dll
00:54:31.0343 2776 EventSystem - ok
00:54:31.0375 2776 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
00:54:31.0390 2776 Fastfat - ok
00:54:31.0421 2776 FastUserSwitchingCompatibility (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
00:54:31.0421 2776 FastUserSwitchingCompatibility - ok
00:54:31.0437 2776 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
00:54:31.0453 2776 Fdc - ok
00:54:31.0484 2776 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
00:54:31.0484 2776 Fips - ok
00:54:31.0500 2776 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
00:54:31.0500 2776 Flpydisk - ok
00:54:31.0546 2776 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
00:54:31.0546 2776 FltMgr - ok
00:54:31.0640 2776 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
00:54:31.0640 2776 FontCache3.0.0.0 - ok
00:54:31.0671 2776 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
00:54:31.0671 2776 Fs_Rec - ok
00:54:31.0703 2776 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
00:54:31.0703 2776 Ftdisk - ok
00:54:31.0718 2776 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
00:54:31.0734 2776 Gpc - ok
00:54:31.0812 2776 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
00:54:31.0828 2776 gupdate - ok
00:54:31.0828 2776 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
00:54:31.0843 2776 gupdatem - ok
00:54:31.0875 2776 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
00:54:31.0921 2776 HDAudBus - ok
00:54:31.0984 2776 helpsvc (fcfe31fb75f8a6295b6b0af87a626282) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
00:54:31.0984 2776 helpsvc - ok
00:54:32.0015 2776 HidServ (00e25ee90166b3e1be6e74aebf858306) C:\WINDOWS\System32\hidserv.dll
00:54:32.0015 2776 HidServ - ok
00:54:32.0031 2776 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
00:54:32.0046 2776 HidUsb - ok
00:54:32.0078 2776 hkmsvc (7a6b320928f86bc851530d63c82965d9) C:\WINDOWS\System32\kmsvc.dll
00:54:32.0078 2776 hkmsvc - ok
00:54:32.0093 2776 hpn - ok
00:54:32.0125 2776 HPZid412 (30ca91e657cede2f95359d6ef186f650) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
00:54:32.0125 2776 HPZid412 - ok
00:54:32.0171 2776 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
00:54:32.0171 2776 HPZipr12 - ok
00:54:32.0187 2776 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
00:54:32.0187 2776 HPZius12 - ok
00:54:32.0234 2776 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
00:54:32.0281 2776 HTTP - ok
00:54:32.0312 2776 HTTPFilter (58fe2f2da3bc5573f4a35b3760d3125f) C:\WINDOWS\System32\w3ssl.dll
00:54:32.0328 2776 HTTPFilter - ok
00:54:32.0328 2776 i2omgmt - ok
00:54:32.0359 2776 i2omp - ok
00:54:32.0390 2776 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
00:54:32.0390 2776 i8042prt - ok
00:54:32.0484 2776 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:54:32.0515 2776 idsvc - ok
00:54:32.0546 2776 imagedrv (25edd75e23c5ef6b33d0fbcce125a601) C:\WINDOWS\system32\Drivers\imagedrv.sys
00:54:32.0546 2776 imagedrv - ok
00:54:32.0578 2776 imagesrv (9c4bbacf4e9b9543c3ce23f1fe556941) C:\WINDOWS\system32\DRIVERS\imagesrv.sys
00:54:32.0578 2776 imagesrv - ok
00:54:32.0609 2776 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
00:54:32.0625 2776 Imapi - ok
00:54:32.0656 2776 ImapiService (f7b93aafad33b2320954c17e26c8d361) C:\WINDOWS\system32\imapi.exe
00:54:32.0703 2776 ImapiService - ok
00:54:32.0718 2776 InCDFs - ok
00:54:32.0734 2776 InCDPass - ok
00:54:32.0750 2776 InCDRm - ok
00:54:32.0781 2776 ini910u - ok
00:54:32.0812 2776 IntelIde - ok
00:54:32.0859 2776 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
00:54:32.0859 2776 intelppm - ok
00:54:32.0890 2776 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
00:54:32.0890 2776 Ip6Fw - ok
00:54:32.0921 2776 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
00:54:32.0921 2776 IpFilterDriver - ok
00:54:32.0953 2776 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
00:54:32.0953 2776 IpInIp - ok
00:54:32.0968 2776 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
00:54:32.0968 2776 IpNat - ok
00:54:33.0000 2776 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
00:54:33.0015 2776 IPSec - ok
00:54:33.0046 2776 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
00:54:33.0046 2776 IRENUM - ok
00:54:33.0078 2776 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
00:54:33.0078 2776 isapnp - ok
00:54:33.0140 2776 JavaQuickStarterService (c2c1660ddcc9bd67eb98d6d5f91c107f) C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
00:54:33.0156 2776 JavaQuickStarterService - ok
00:54:33.0171 2776 JGOGO (c995c0e8b4503fac38793bb0236ad246) C:\WINDOWS\system32\DRIVERS\JGOGO.sys
00:54:33.0171 2776 JGOGO - ok
00:54:33.0187 2776 JRAID (bd29e1a6fcdf66f5e3875da88728feb1) C:\WINDOWS\system32\DRIVERS\jraid.sys
00:54:33.0187 2776 JRAID - ok
00:54:33.0234 2776 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
00:54:33.0234 2776 Kbdclass - ok
00:54:33.0250 2776 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
00:54:33.0250 2776 kbdhid - ok
00:54:33.0296 2776 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
00:54:33.0296 2776 kmixer - ok
00:54:33.0312 2776 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
00:54:33.0312 2776 KSecDD - ok
00:54:33.0359 2776 LanmanServer (3428e8f86f8add36b42fb23542c7b3e4) C:\WINDOWS\System32\srvsvc.dll
00:54:33.0375 2776 LanmanServer - ok
00:54:33.0406 2776 lanmanworkstation (936c1d110232d23b621cb0196e4f80f0) C:\WINDOWS\System32\wkssvc.dll
00:54:33.0453 2776 lanmanworkstation - ok
00:54:33.0453 2776 lbrtfdc - ok
00:54:33.0515 2776 LmHosts (0ab159f536e3e8f7f07113702a07cca5) C:\WINDOWS\System32\lmhsvc.dll
00:54:33.0515 2776 LmHosts - ok
00:54:33.0562 2776 MBAMProtector (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
00:54:33.0562 2776 MBAMProtector - ok
00:54:33.0625 2776 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
00:54:33.0671 2776 MBAMService - ok
00:54:33.0687 2776 Messenger (221cd1c815b8a6b79389c3f5d1018de8) C:\WINDOWS\System32\msgsvc.dll
00:54:33.0703 2776 Messenger - ok
00:54:33.0750 2776 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
00:54:33.0750 2776 Microsoft Office Groove Audit Service - ok
00:54:33.0781 2776 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
00:54:33.0781 2776 mnmdd - ok
00:54:33.0828 2776 mnmsrvc (9a57d046f88f4b69751b11fd40088a61) C:\WINDOWS\system32\mnmsrvc.exe
00:54:33.0828 2776 mnmsrvc - ok
00:54:33.0859 2776 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
00:54:33.0859 2776 Modem - ok
00:54:33.0890 2776 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
00:54:33.0890 2776 Mouclass - ok
00:54:33.0906 2776 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
00:54:33.0906 2776 mouhid - ok
00:54:33.0937 2776 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
00:54:33.0937 2776 MountMgr - ok
00:54:33.0953 2776 mraid35x - ok
00:54:33.0984 2776 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
00:54:33.0984 2776 MRxDAV - ok
00:54:34.0031 2776 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
00:54:34.0078 2776 MRxSmb - ok
00:54:34.0109 2776 MSDTC (6db4d1521caba9a5ffab54ade0ae867d) C:\WINDOWS\system32\msdtc.exe
00:54:34.0125 2776 MSDTC - ok
00:54:34.0140 2776 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
00:54:34.0140 2776 Msfs - ok
00:54:34.0156 2776 MSIServer - ok
00:54:34.0203 2776 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
00:54:34.0203 2776 MSKSSRV - ok
00:54:34.0218 2776 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
00:54:34.0218 2776 MSPCLOCK - ok
00:54:34.0234 2776 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
00:54:34.0234 2776 MSPQM - ok
00:54:34.0281 2776 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
00:54:34.0281 2776 mssmbios - ok
00:54:34.0296 2776 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
00:54:34.0312 2776 MSTEE - ok
00:54:34.0328 2776 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
00:54:34.0343 2776 MTsensor - ok
00:54:34.0359 2776 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
00:54:34.0359 2776 Mup - ok
00:54:34.0406 2776 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
00:54:34.0406 2776 NABTSFEC - ok
00:54:34.0453 2776 napagent (6ea362e9db03d44f6b996f4d8be237e9) C:\WINDOWS\System32\qagentrt.dll
00:54:34.0484 2776 napagent - ok
00:54:34.0515 2776 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
00:54:34.0515 2776 NDIS - ok
00:54:34.0531 2776 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
00:54:34.0531 2776 NdisIP - ok
00:54:34.0562 2776 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
00:54:34.0562 2776 NdisTapi - ok
00:54:34.0609 2776 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
00:54:34.0609 2776 Ndisuio - ok
00:54:34.0640 2776 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:54:34.0640 2776 NdisWan - ok
00:54:34.0687 2776 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
00:54:34.0687 2776 NDProxy - ok
00:54:34.0687 2776 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
00:54:34.0703 2776 NetBIOS - ok
00:54:34.0734 2776 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
00:54:34.0734 2776 NetBT - ok
00:54:34.0765 2776 NetDDE (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
00:54:34.0765 2776 NetDDE - ok
00:54:34.0781 2776 NetDDEdsdm (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
00:54:34.0796 2776 NetDDEdsdm - ok
00:54:34.0828 2776 Netlogon (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
00:54:34.0828 2776 Netlogon - ok
00:54:34.0859 2776 Netman (72e1e9e2977be08bdeedb6d8fd9d4d40) C:\WINDOWS\System32\netman.dll
00:54:34.0875 2776 Netman - ok
00:54:35.0140 2776 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
00:54:35.0203 2776 NetTcpPortSharing - ok
00:54:35.0484 2776 Nla (39ee7c3bfbc64ba87cc8cf67386e814c) C:\WINDOWS\System32\mswsock.dll
00:54:35.0484 2776 Nla - ok
00:54:35.0500 2776 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
00:54:35.0500 2776 Npfs - ok
00:54:35.0562 2776 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
00:54:35.0578 2776 Ntfs - ok
00:54:35.0593 2776 NtLmSsp (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
00:54:35.0593 2776 NtLmSsp - ok
00:54:35.0640 2776 NtmsSvc (023dd70573d644f3d9c8b1258a7bfd08) C:\WINDOWS\system32\ntmssvc.dll
00:54:35.0656 2776 NtmsSvc - ok
00:54:35.0687 2776 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
00:54:35.0687 2776 Null - ok
00:54:36.0234 2776 nv (ed9816dbaf6689542ea7d022631906a1) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
00:54:36.0484 2776 nv - ok
00:54:36.0593 2776 NVSvc (a2322c6207ebb0761a6c8cc9003ebacf) C:\WINDOWS\system32\nvsvc32.exe
00:54:36.0609 2776 NVSvc - ok
00:54:36.0656 2776 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
00:54:36.0671 2776 NwlnkFlt - ok
00:54:36.0687 2776 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
00:54:36.0687 2776 NwlnkFwd - ok
00:54:36.0781 2776 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
00:54:36.0812 2776 odserv - ok
00:54:36.0843 2776 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:54:36.0843 2776 ose - ok
00:54:36.0890 2776 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\DRIVERS\parport.sys
00:54:36.0906 2776 Parport - ok
00:54:36.0921 2776 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
00:54:36.0921 2776 PartMgr - ok
00:54:36.0953 2776 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
00:54:36.0968 2776 ParVdm - ok
00:54:37.0000 2776 pccsmcfd (f451dcacbaa67f3307305ebd4a39ea07) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
00:54:37.0000 2776 pccsmcfd - ok
00:54:37.0031 2776 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
00:54:37.0031 2776 PCI - ok
00:54:37.0046 2776 PCIDump - ok
00:54:37.0078 2776 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
00:54:37.0078 2776 PCIIde - ok
00:54:37.0109 2776 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
00:54:37.0109 2776 Pcmcia - ok
00:54:37.0125 2776 PDCOMP - ok
00:54:37.0140 2776 PDFRAME - ok
00:54:37.0171 2776 PDRELI - ok
00:54:37.0187 2776 PDRFRAME - ok
00:54:37.0203 2776 perc2 - ok
00:54:37.0218 2776 perc2hib - ok
00:54:37.0312 2776 PlugPlay (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
00:54:37.0312 2776 PlugPlay - ok
00:54:37.0343 2776 Pml Driver HPZ12 (2d091a99624fb9e7eef0a86d872ec0c3) C:\WINDOWS\system32\HPZipm12.exe
00:54:37.0359 2776 Pml Driver HPZ12 - ok
00:54:37.0359 2776 PolicyAgent (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
00:54:37.0375 2776 PolicyAgent - ok
00:54:37.0390 2776 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
00:54:37.0406 2776 PptpMiniport - ok
00:54:37.0406 2776 ProtectedStorage (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
00:54:37.0421 2776 ProtectedStorage - ok
00:54:37.0437 2776 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
00:54:37.0437 2776 PSched - ok
00:54:37.0468 2776 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
00:54:37.0468 2776 Ptilink - ok
00:54:37.0484 2776 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
00:54:37.0500 2776 PxHelp20 - ok
00:54:37.0515 2776 ql1080 - ok
00:54:37.0531 2776 Ql10wnt - ok
00:54:37.0546 2776 ql12160 - ok
00:54:37.0562 2776 ql1240 - ok
00:54:37.0578 2776 ql1280 - ok
00:54:37.0625 2776 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
00:54:37.0625 2776 RasAcd - ok
00:54:37.0640 2776 RasAuto (2b5e44ea009f2f374b980e1e9a70635d) C:\WINDOWS\System32\rasauto.dll
00:54:37.0671 2776 RasAuto - ok
00:54:37.0687 2776 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
00:54:37.0687 2776 Rasl2tp - ok
00:54:37.0718 2776 RasMan (d57554c664b64604bd1ee13ea2c07e77) C:\WINDOWS\System32\rasmans.dll
00:54:37.0750 2776 RasMan - ok
00:54:37.0765 2776 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
00:54:37.0765 2776 RasPppoe - ok
00:54:37.0781 2776 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
00:54:37.0796 2776 Raspti - ok
00:54:37.0812 2776 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
00:54:37.0828 2776 Rdbss - ok
00:54:37.0843 2776 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
00:54:37.0843 2776 RDPCDD - ok
00:54:37.0906 2776 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
00:54:37.0921 2776 RDPWD - ok
00:54:37.0968 2776 RDSessMgr (c0d9d9711cb74ee9bc66353d8cbdab0e) C:\WINDOWS\system32\sessmgr.exe
00:54:38.0000 2776 RDSessMgr - ok
00:54:38.0015 2776 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
00:54:38.0015 2776 redbook - ok
00:54:38.0046 2776 RemoteAccess (127c26b5371651043450e52542099aba) C:\WINDOWS\System32\mprdim.dll
00:54:38.0062 2776 RemoteAccess - ok
00:54:38.0078 2776 RpcLocator (718b3bdc0bc3c2f7d065a53d26202af9) C:\WINDOWS\system32\locator.exe
00:54:38.0078 2776 RpcLocator - ok
00:54:38.0125 2776 RpcSs (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\system32\rpcss.dll
00:54:38.0140 2776 RpcSs - ok
00:54:38.0156 2776 RSVP (09ab2e71e58b078038e3bfdba7ffc984) C:\WINDOWS\system32\rsvp.exe
00:54:38.0171 2776 RSVP - ok
00:54:38.0218 2776 RT73 (7436bfd3a542cf6ff55097200031b293) C:\WINDOWS\system32\DRIVERS\rt73.sys
00:54:38.0218 2776 RT73 - ok
00:54:38.0250 2776 RTL8023xp (c8b370b2b520ac1b8bc66203fcec73db) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
00:54:38.0250 2776 RTL8023xp - ok
00:54:38.0296 2776 s0017bus (594ff5620661d1386475406e78cb6f2f) C:\WINDOWS\system32\DRIVERS\s0017bus.sys
00:54:38.0296 2776 s0017bus - ok
00:54:38.0343 2776 s0017mdfl (7258f550419d543bc5c8e80c578a5d54) C:\WINDOWS\system32\DRIVERS\s0017mdfl.sys
00:54:38.0343 2776 s0017mdfl - ok
00:54:38.0375 2776 s0017mdm (1de4f6607feb17a15dbd4f1b139e6d2f) C:\WINDOWS\system32\DRIVERS\s0017mdm.sys
00:54:38.0421 2776 s0017mdm - ok
00:54:38.0453 2776 s0017mgmt (9814e6bacc06d2526cd52981c7eeedf0) C:\WINDOWS\system32\DRIVERS\s0017mgmt.sys
00:54:38.0453 2776 s0017mgmt - ok
00:54:38.0468 2776 s0017nd5 (2c62cd58225973f26682cd4f783ddede) C:\WINDOWS\system32\DRIVERS\s0017nd5.sys
00:54:38.0468 2776 s0017nd5 - ok
00:54:38.0500 2776 s0017obex (f87c3422e84b2fb1b43e0a26247ad5a5) C:\WINDOWS\system32\DRIVERS\s0017obex.sys
00:54:38.0546 2776 s0017obex - ok
00:54:38.0562 2776 s0017unic (df5e7360a0afa5956bf75da683d0679f) C:\WINDOWS\system32\DRIVERS\s0017unic.sys
00:54:38.0578 2776 s0017unic - ok
00:54:38.0609 2776 s1018bus (1c5c2cb892553d2cf3f45a4bb323fcd6) C:\WINDOWS\system32\DRIVERS\s1018bus.sys
00:54:38.0609 2776 s1018bus - ok
00:54:38.0640 2776 s1018mdfl (38f5ea219593f19b6b3a1b9c169e3b61) C:\WINDOWS\system32\DRIVERS\s1018mdfl.sys
00:54:38.0640 2776 s1018mdfl - ok
00:54:38.0687 2776 s1018mdm (666af6b64fc7df92d3ca4819ea91631d) C:\WINDOWS\system32\DRIVERS\s1018mdm.sys
00:54:38.0734 2776 s1018mdm - ok
00:54:38.0765 2776 s1018mgmt (f4ceda6e2ddff2af8bd745615a7ca9c0) C:\WINDOWS\system32\DRIVERS\s1018mgmt.sys
00:54:38.0796 2776 s1018mgmt - ok
00:54:38.0812 2776 s1018nd5 (3622d9ff2253dcbe885b10736609a4ca) C:\WINDOWS\system32\DRIVERS\s1018nd5.sys
00:54:38.0812 2776 s1018nd5 - ok
00:54:38.0843 2776 s1018obex (49431efda842b474531c29ffae9f5d09) C:\WINDOWS\system32\DRIVERS\s1018obex.sys
00:54:38.0875 2776 s1018obex - ok
00:54:38.0921 2776 s1018unic (ac6b514cb4474f4c867d7cdc9cd54f05) C:\WINDOWS\system32\DRIVERS\s1018unic.sys
00:54:38.0921 2776 s1018unic - ok
00:54:38.0968 2776 s217bus (0266151de3f36429f6ac3c4b28085061) C:\WINDOWS\system32\DRIVERS\s217bus.sys
00:54:38.0968 2776 s217bus - ok
00:54:39.0015 2776 s217mdfl (a43c0af0e46be7ef0c7e8ccf0f058600) C:\WINDOWS\system32\DRIVERS\s217mdfl.sys
00:54:39.0015 2776 s217mdfl - ok
00:54:39.0062 2776 s217mdm (005f5ded1ed8f8a9d2399d765ead20f1) C:\WINDOWS\system32\DRIVERS\s217mdm.sys
00:54:39.0109 2776 s217mdm - ok
00:54:39.0140 2776 s217mgmt (de9562ad0c91e1857d11f65a91ee1a47) C:\WINDOWS\system32\DRIVERS\s217mgmt.sys
00:54:39.0171 2776 s217mgmt - ok
00:54:39.0203 2776 s217nd5 (11cc5d7f992799e7e75d018e9c018563) C:\WINDOWS\system32\DRIVERS\s217nd5.sys
00:54:39.0203 2776 s217nd5 - ok
00:54:39.0250 2776 s217obex (0f9f4045799afb66b85eef999d0609ec) C:\WINDOWS\system32\DRIVERS\s217obex.sys
00:54:39.0281 2776 s217obex - ok
00:54:39.0328 2776 s217unic (1c91e1023f07b6407d84b5a43537d984) C:\WINDOWS\system32\DRIVERS\s217unic.sys
00:54:39.0328 2776 s217unic - ok
00:54:39.0359 2776 SamSs (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
00:54:39.0375 2776 SamSs - ok
00:54:39.0406 2776 SCardSvr (410046e401eb11e1e6749e9deea41d4a) C:\WINDOWS\System32\SCardSvr.exe
00:54:39.0421 2776 SCardSvr - ok
00:54:39.0453 2776 Schedule (3ff232a7731621b8902d81d42418c93c) C:\WINDOWS\system32\schedsvc.dll
00:54:39.0484 2776 Schedule - ok
00:54:39.0515 2776 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
00:54:39.0515 2776 Secdrv - ok
00:54:39.0562 2776 seclogon (477e2c3cc5e4a0d635bcb0ea8dcac3c6) C:\WINDOWS\System32\seclogon.dll
00:54:39.0562 2776 seclogon - ok
00:54:39.0609 2776 seehcri (e5b56569a9f79b70314fede6c953641e) C:\WINDOWS\system32\DRIVERS\seehcri.sys
00:54:39.0609 2776 seehcri - ok
00:54:39.0656 2776 SenFiltService (eca77beeb2be8d573cf1b265e44fbfbd) C:\WINDOWS\system32\drivers\Senfilt.sys
00:54:39.0671 2776 SenFiltService - ok
00:54:39.0703 2776 SENS (a530b75c10c23c9ab28fdb6ce719e21f) C:\WINDOWS\system32\sens.dll
00:54:39.0718 2776 SENS - ok
00:54:39.0734 2776 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
00:54:39.0734 2776 serenum - ok
00:54:39.0781 2776 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
00:54:39.0781 2776 Serial - ok
00:54:39.0906 2776 ServiceLayer (c3bb6cf8f9ee199005a2aae2815ad756) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
00:54:39.0937 2776 ServiceLayer - ok
00:54:40.0000 2776 sfdrv01 (00de597b81b381053cb5b21a7f20e365) C:\WINDOWS\system32\drivers\sfdrv01.sys
00:54:40.0015 2776 sfdrv01 - ok
00:54:40.0015 2776 sfhlp02 (64b9ab76f1b16eb059cb6cdd906c067a) C:\WINDOWS\system32\drivers\sfhlp02.sys
00:54:40.0031 2776 sfhlp02 - ok
00:54:40.0046 2776 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
00:54:40.0062 2776 Sfloppy - ok
00:54:40.0062 2776 sfsync02 (798d918d8f20380008277ce3ce5319d1) C:\WINDOWS\system32\drivers\sfsync02.sys
00:54:40.0078 2776 sfsync02 - ok
00:54:40.0125 2776 SharedAccess (f58faca9621d2db01bd0927d9a0a208e) C:\WINDOWS\System32\ipnathlp.dll
00:54:40.0140 2776 SharedAccess - ok
00:54:40.0187 2776 ShellHWDetection (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
00:54:40.0203 2776 ShellHWDetection - ok
00:54:40.0203 2776 Simbad - ok
00:54:40.0453 2776 Skype C2C Service (4ca43b85f22c7739311788b651a779cb) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
00:54:40.0515 2776 Skype C2C Service - ok
00:54:40.0562 2776 SkypeUpdate (c70aebd3608ed9fcea2a1bae83567ffc) C:\Program Files\Skype\Updater\Updater.exe
00:54:40.0578 2776 SkypeUpdate - ok
00:54:40.0703 2776 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
00:54:40.0703 2776 SLIP - ok
00:54:41.0250 2776 SNP325 (7aec975d1e0fe3b92276b120d05fa065) C:\WINDOWS\system32\DRIVERS\snp325.sys
00:54:41.0500 2776 SNP325 - ok
00:54:41.0531 2776 Sparrow - ok
00:54:41.0578 2776 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
00:54:41.0578 2776 splitter - ok
00:54:41.0609 2776 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
00:54:41.0609 2776 Spooler - ok
00:54:41.0625 2776 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
00:54:41.0625 2776 sr - ok
00:54:41.0671 2776 srservice (35b91147124f64ac8081a2edb9ea4dee) C:\WINDOWS\system32\srsvc.dll
00:54:41.0687 2776 srservice - ok
00:54:41.0734 2776 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
00:54:41.0750 2776 Srv - ok
00:54:41.0796 2776 SSDPSRV (becd5271dc4e3b7c3d035f790fcbc1e5) C:\WINDOWS\System32\ssdpsrv.dll
00:54:41.0796 2776 SSDPSRV - ok
00:54:41.0843 2776 stisvc (c1cdd9275f6a115bb0ae1d55d8d27ba6) C:\WINDOWS\system32\wiaservc.dll
00:54:41.0875 2776 stisvc - ok
00:54:41.0906 2776 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
00:54:41.0906 2776 streamip - ok
00:54:41.0953 2776 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
00:54:41.0953 2776 swenum - ok
00:54:42.0000 2776 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
00:54:42.0000 2776 swmidi - ok
00:54:42.0000 2776 SwPrv - ok
00:54:42.0031 2776 symc810 - ok
00:54:42.0046 2776 symc8xx - ok
00:54:42.0062 2776 sym_hi - ok
00:54:42.0093 2776 sym_u3 - ok
00:54:42.0125 2776 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
00:54:42.0140 2776 sysaudio - ok
00:54:42.0171 2776 SysmonLog (ce06f01b88ace199a1bf460cac29c110) C:\WINDOWS\system32\smlogsvc.exe
00:54:42.0187 2776 SysmonLog - ok
00:54:42.0234 2776 TapiSrv (c2546cd7a398476f9df5614b2ae160e8) C:\WINDOWS\System32\tapisrv.dll
00:54:42.0250 2776 TapiSrv - ok
00:54:42.0312 2776 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
00:54:42.0359 2776 Tcpip - ok
00:54:42.0406 2776 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
00:54:42.0406 2776 TDPIPE - ok
00:54:42.0437 2776 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
00:54:42.0437 2776 TDTCP - ok
00:54:42.0468 2776 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
00:54:42.0468 2776 TermDD - ok
00:54:42.0531 2776 TermService (a75dd6fc3dbee4fff5ebc9f2c28bb66e) C:\WINDOWS\System32\termsrv.dll
00:54:42.0578 2776 TermService - ok
00:54:42.0593 2776 Themes (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
00:54:42.0609 2776 Themes - ok
00:54:42.0625 2776 TosIde - ok
00:54:42.0671 2776 TrkWks (38853304ccb938d30e0c4cde8d2c2a8a) C:\WINDOWS\system32\trkwks.dll
00:54:42.0687 2776 TrkWks - ok
00:54:42.0718 2776 uagp35 (d85938f272d1bcf3db3a31fc0a048928) C:\WINDOWS\system32\DRIVERS\uagp35.sys
00:54:42.0734 2776 uagp35 - ok
00:54:42.0750 2776 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
00:54:42.0750 2776 Udfs - ok
00:54:42.0781 2776 ultra - ok
00:54:42.0828 2776 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
00:54:42.0890 2776 Update - ok
00:54:42.0921 2776 upnphost (651bd90dcee5b7bdc74a2eb7c9266f9e) C:\WINDOWS\System32\upnphost.dll
00:54:42.0953 2776 upnphost - ok
00:54:42.0968 2776 UPS (20a0f6a11959e92908717d09e87d670d) C:\WINDOWS\System32\ups.exe
00:54:42.0984 2776 UPS - ok
00:54:43.0031 2776 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
00:54:43.0031 2776 usbaudio - ok
00:54:43.0062 2776 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
00:54:43.0062 2776 usbccgp - ok
00:54:43.0109 2776 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
00:54:43.0109 2776 usbehci - ok
00:54:43.0125 2776 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
00:54:43.0140 2776 usbhub - ok
00:54:43.0140 2776 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
00:54:43.0156 2776 usbprint - ok
00:54:43.0187 2776 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
00:54:43.0203 2776 usbscan - ok
00:54:43.0234 2776 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\DRIVERS\usbser.sys
00:54:43.0250 2776 usbser - ok
00:54:43.0281 2776 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
00:54:43.0281 2776 usbstor - ok
00:54:43.0296 2776 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
00:54:43.0296 2776 usbuhci - ok
00:54:43.0328 2776 VClone (94d73b62e458fb56c9ce60aa96d914f9) C:\WINDOWS\system32\DRIVERS\VClone.sys
00:54:43.0328 2776 VClone - ok
00:54:43.0359 2776 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
00:54:43.0359 2776 VgaSave - ok
00:54:43.0375 2776 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
00:54:43.0375 2776 ViaIde - ok
00:54:43.0406 2776 videX32 (c8ee49fa76eb7c41a9cddfe58151a74e) C:\WINDOWS\system32\DRIVERS\videX32.sys
00:54:43.0406 2776 videX32 - ok
00:54:43.0421 2776 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
00:54:43.0421 2776 VolSnap - ok
00:54:43.0468 2776 VSS (d6ba1a63d9e00933f1cd2a885573afb2) C:\WINDOWS\System32\vssvc.exe
00:54:43.0515 2776 VSS - ok
00:54:43.0562 2776 W32Time (fa4e1cdba256787f2149f4aad07bc91f) C:\WINDOWS\system32\w32time.dll
00:54:43.0593 2776 W32Time - ok
00:54:43.0625 2776 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
00:54:43.0625 2776 Wanarp - ok
00:54:43.0671 2776 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys
00:54:43.0718 2776 Wdf01000 - ok
00:54:43.0734 2776 WDICA - ok
00:54:43.0781 2776 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
00:54:43.0781 2776 wdmaud - ok
00:54:43.0812 2776 WebClient (47ae51048a82dfa1cd6b51d369f7e169) C:\WINDOWS\System32\webclnt.dll
00:54:43.0828 2776 WebClient - ok
00:54:43.0906 2776 winmgmt (e488332126e3b1182d2b8a0c35408ec6) C:\WINDOWS\system32\wbem\WMIsvc.dll
00:54:43.0906 2776 winmgmt - ok
00:54:43.0968 2776 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
00:54:43.0968 2776 WmdmPmSN - ok
00:54:44.0000 2776 WmiApSrv (23f6f03272f7e5679f1f050aed5acee6) C:\WINDOWS\system32\wbem\wmiapsrv.exe
00:54:44.0015 2776 WmiApSrv - ok
00:54:44.0140 2776 WMPNetworkSvc (3739866d20abd42f26a7b85f9e2560af) C:\Program Files\Windows Media Player\WMPNetwk.exe
00:54:44.0203 2776 WMPNetworkSvc - ok
00:54:44.0250 2776 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
00:54:44.0250 2776 WpdUsb - ok
00:54:44.0296 2776 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
00:54:44.0296 2776 WS2IFSL - ok
00:54:44.0328 2776 wscsvc (4c86d5faf78194995af9cc1075f65dd3) C:\WINDOWS\system32\wscsvc.dll
00:54:44.0359 2776 wscsvc - ok
00:54:44.0359 2776 WSearch - ok
00:54:44.0406 2776 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
00:54:44.0421 2776 WSTCODEC - ok
00:54:44.0453 2776 wuauserv (c1364564800ee9784192145324a23308) C:\WINDOWS\system32\wuauserv.dll
00:54:44.0484 2776 wuauserv - ok
00:54:44.0515 2776 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
00:54:44.0562 2776 WudfPf - ok
00:54:44.0578 2776 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
00:54:44.0609 2776 WudfRd - ok
00:54:44.0640 2776 WudfSvc (ddee3682fe97037c45f4d7ab467cb8b6) C:\WINDOWS\System32\WUDFSvc.dll
00:54:44.0656 2776 WudfSvc - ok
00:54:44.0703 2776 WZCSVC (a27d4ba7264c0bf52f32d10405bea1d4) C:\WINDOWS\System32\wzcsvc.dll
00:54:44.0750 2776 WZCSVC - ok
00:54:44.0781 2776 xfilt (fcbc27869092850cdb75139f3818653a) C:\WINDOWS\system32\DRIVERS\xfilt.sys
00:54:44.0796 2776 xfilt - ok
00:54:44.0812 2776 xmlprov (eaa4bb9edb3fb10cf8979fe65e63658f) C:\WINDOWS\System32\xmlprov.dll
00:54:44.0843 2776 xmlprov - ok
00:54:44.0921 2776 MBR (0x1B8) (671b81004fdd1588fa9ed1331c9ceca9) \Device\Harddisk1\DR1
00:54:44.0937 2776 \Device\Harddisk1\DR1 - ok
00:54:44.0968 2776 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
00:54:45.0375 2776 \Device\Harddisk0\DR0 - ok
00:54:45.0390 2776 MBR (0x1B8) (abf45ae911bc71b2108b6614a8fe4e54) \Device\Harddisk2\DR6
00:54:52.0000 2776 \Device\Harddisk2\DR6 - ok
00:54:52.0015 2776 Boot (0x1200) (340699ec94e0bf3aa4a87032ec725676) \Device\Harddisk1\DR1\Partition0
00:54:52.0015 2776 \Device\Harddisk1\DR1\Partition0 - ok
00:54:52.0031 2776 Boot (0x1200) (c4b854714dd8794a7809abf7869105d4) \Device\Harddisk1\DR1\Partition1
00:54:52.0031 2776 \Device\Harddisk1\DR1\Partition1 - ok
00:54:52.0062 2776 Boot (0x1200) (f8a6c0ce77b5b4e9face56c49b33c7bc) \Device\Harddisk0\DR0\Partition0
00:54:52.0062 2776 \Device\Harddisk0\DR0\Partition0 - ok
00:54:52.0093 2776 Boot (0x1200) (178f088ccd3b4ced4ce191e7eb58ebaa) \Device\Harddisk0\DR0\Partition1
00:54:52.0093 2776 \Device\Harddisk0\DR0\Partition1 - ok
00:54:52.0093 2776 ============================================================
00:54:52.0093 2776 Scan finished
00:54:52.0093 2776 ============================================================
00:54:52.0140 2772 Detected object count: 0
00:54:52.0140 2772 Actual detected object count: 0

[Ben]

ComboFix 12-07-13.03 - Boda 14.07.2012 1:05.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1266 [GMT 2:00]
Spuštěný z: c:\documents and settings\Boda\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\config.ini
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\separator.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\SearchSettingsKit.exe
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\windows\IsUn0405.exe
c:\windows\system32\tmp10F6.tmp
c:\windows\system32\tmp10F7.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-13 do 2012-07-13 )))))))))))))))))))))))))))))))
.
.
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\documents and settings\Boda\Data aplikací\Malwarebytes
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-07-11 17:05 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-11 07:48 . 2012-07-11 13:28 -------- d-----w- c:\documents and settings\Boda\Data aplikací\.minecraft
2012-07-09 06:40 . 2012-07-09 06:40 -------- d-----w- c:\program files\Terraria
2012-07-05 04:40 . 2012-07-05 04:40 -------- d-----w- c:\program files\Common Files\PCSuite
2012-07-05 04:40 . 2012-07-05 04:40 -------- d-----w- c:\program files\Common Files\Nokia
2012-07-05 04:39 . 2012-06-11 09:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2012-07-05 04:38 . 2012-07-05 04:38 -------- d-----w- c:\program files\PC Connectivity Solution
2012-07-05 04:22 . 2012-07-06 23:27 -------- d-----w- c:\program files\ICQ7.5
2012-07-05 04:20 . 2012-07-05 04:20 -------- d-----w- c:\program files\Oracle
2012-06-17 09:39 . 2012-06-17 09:39 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-03 16:21 . 2011-08-17 14:48 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-07-03 16:21 . 2011-08-17 14:48 353688 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-07-03 16:21 . 2011-08-17 14:48 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-07-03 16:21 . 2011-08-17 14:48 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-07-03 16:21 . 2011-08-17 14:48 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-07-03 16:21 . 2011-08-17 14:48 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-07-03 16:21 . 2011-08-17 14:48 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-07-03 16:21 . 2011-08-17 14:48 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-07-03 16:21 . 2011-08-17 14:48 41224 ----a-w- c:\windows\avastSS.scr
2012-07-03 16:21 . 2011-08-17 14:48 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-06-13 13:55 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 12:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-09-19 11:01 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-09-19 11:01 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-09-19 11:01 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-09-19 11:01 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-09-19 11:01 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 12:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 12:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-09-19 11:01 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-09-19 11:01 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2010-08-08 13:54 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2010-08-08 13:54 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 13:18 . 2010-08-08 13:54 214256 ----a-w- c:\windows\system32\muweb.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:09 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:44 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:44 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2008-04-14 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-05-05 03:14 . 2008-04-14 12:00 2150400 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-05 03:14 . 2008-04-14 08:06 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-04 17:29 . 2012-06-09 07:08 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-05-04 17:29 . 2012-06-09 07:08 772504 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-05-04 17:29 . 2010-10-10 09:55 687504 ----a-w- c:\windows\system32\deployJava1.dll
2012-05-02 13:46 . 2009-09-19 10:59 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-03-18 17:55 . 2011-04-10 16:34 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-07-03 16:21 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LinkMagic for magicolor 1680MF"="c:\program files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe" [2008-08-26 5005312]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 1516632]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]
"FixCamera"="c:\windows\FixCamera.exe" [2007-02-12 20480]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2009-10-20 111928]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2008-06-10 29984]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2008-06-10 46368]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-07-07 1753192]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"tsnp325"="c:\windows\tsnp325.exe" [2006-10-10 270336]
"snp325"="c:\windows\vsnp325.exe" [2006-10-10 827392]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-07-03 4273976]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-4-14 596584]
Ralink Wireless Utility.lnk - c:\program files\RALINK\Common\RaUI.exe [2009-9-25 589824]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\E:\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Codemasters\\F1 2010\\F1_2010_game.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Boiling Point - Cesta do pekel\\XENUS.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Program Files\\Activision\\Mat Hoffman's Pro BMX\\BMX.exe"=
"c:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\FarCry.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [17.8.2011 16:48 721000]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.8.2011 16:48 353688]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.8.2011 16:48 21256]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [11.7.2012 19:05 654408]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [11.7.2012 19:05 22344]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [22.12.2009 15:01 27632]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1.8.2010 14:44 136176]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [30.5.2012 13:56 3048136]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [5.6.2012 15:17 160944]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [1.8.2010 14:44 136176]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\drivers\s0017bus.sys [7.1.2011 0:34 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\drivers\s0017mdfl.sys [7.1.2011 0:34 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\drivers\s0017mdm.sys [7.1.2011 0:34 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0017mgmt.sys [7.1.2011 0:34 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\drivers\s0017nd5.sys [7.1.2011 0:34 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\drivers\s0017obex.sys [7.1.2011 0:34 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\drivers\s0017unic.sys [7.1.2011 0:34 109736]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [7.1.2011 0:34 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\drivers\s1018mdfl.sys [7.1.2011 0:34 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\drivers\s1018mdm.sys [7.1.2011 0:34 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [7.1.2011 0:34 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [7.1.2011 0:34 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [7.1.2011 0:34 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [7.1.2011 0:34 109864]
S3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\drivers\snp325.sys [21.11.2010 17:30 10251904]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 76271248
*Deregistered* - 76271248
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2012-07-13 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-08 16:21]
.
2012-07-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-01 12:43]
.
2012-07-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-01 12:43]
.
2012-07-10 c:\windows\Tasks\Norton Security Scan for Boda.job
- c:\progra~1\NORTON~2\Engine\351~1.6\Nss.exe [2011-08-24 00:45]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{35D05F0F-4C2E-41B7-B113-F3A1195F8F8E}: NameServer = 10.102.0.252,10.102.0.253
FF - ProfilePath - c:\documents and settings\Boda\Data aplikací\Mozilla\Firefox\Profiles\uzyts08r.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... r=1.1.9&q=
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
HKCU-Run-ICQ - ~c:\program files\ICQ7.2\ICQ.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0405.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-14 01:13
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\avast! sandbox
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-117609710-1004336348-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%
 *]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-117609710-1004336348-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%
 *\OpenWithList]
@Class="Shell"
.
Celkový čas: 2012-07-14 01:16:04
ComboFix-quarantined-files.txt 2012-07-13 23:16
.
Před spuštěním: Volných bajtů: 53 159 325 696
Po spuštění: Volných bajtů: 53 534 482 432
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
.
- - End Of File - - E6E899C2471AB484A47A7BCE14A46DF8

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Skype\Updater\Updater.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\Norton Security Scan for Boda.job
c:\progra~1\NORTON~2\Engine\351~1.6\Nss.exe

Driver::
gupdate
SkypeUpdate
gupdatem

Folder::
c:\progra~1\NORTON~2

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000

Firefox::
FF - ProfilePath - c:\documents and settings\Boda\Data aplikací\Mozilla\Firefox\Profiles\uzyts08r.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... r=1.1.9&q=


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Ben]

ComboFix 12-07-13.03 - Boda 14.07.2012 17:17:22.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1452 [GMT 2:00]
Spuštěný z: c:\documents and settings\Boda\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Boda\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
FILE ::
"c:\progra~1\NORTON~2\Engine\351~1.6\Nss.exe"
"c:\program files\Google\Update\GoogleUpdate.exe"
"c:\program files\Skype\Updater\Updater.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\Norton Security Scan for Boda.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\progra~1\NORTON~2
c:\progra~1\NORTON~2\Engine\3.5.1.6\{2A85E335-7417-424d-AD89-31DED1689794}.dat
c:\progra~1\NORTON~2\Engine\3.5.1.6\{71B3DD3A-BC1F-40cc-A74F-C0C30DFCE7D5}.dat
c:\progra~1\NORTON~2\Engine\3.5.1.6\{F8D07955-00ED-4093-88AA-0A0F69AFD83C}.dat
c:\progra~1\NORTON~2\Engine\3.5.1.6\BilBDRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ccL100U.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ccScanw.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ccVrTrst.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\Config.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\dec_abi.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\DefUtDCD.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\diLueCbk.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ecmldr32.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\HeartBt.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\help.htm
c:\progra~1\NORTON~2\Engine\3.5.1.6\InstWrap.exe
c:\progra~1\NORTON~2\Engine\3.5.1.6\InstWRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\Microsoft.VC90.CRT.manifest
c:\progra~1\NORTON~2\Engine\3.5.1.6\msl.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\msvcp90.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\msvcr90.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\Nss.exe
c:\progra~1\NORTON~2\Engine\3.5.1.6\patch25d.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\pePIDyn.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\pePIRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\PrdDtRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ReputationCacheDB.db
c:\progra~1\NORTON~2\Engine\3.5.1.6\RevList.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\RptCdRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SAUpdt.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ScanCore.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ScanRes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\ScanText.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SKU.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SKURes.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\symbos.exe
c:\progra~1\NORTON~2\Engine\3.5.1.6\SymCCIS.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SymCCISE.exe
c:\progra~1\NORTON~2\Engine\3.5.1.6\SymDltCl.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SymHTML.dll
c:\progra~1\NORTON~2\Engine\3.5.1.6\SymInstallStub.exe
c:\progra~1\NORTON~2\isolate.ini
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE
-------\Legacy_SKYPEUPDATE
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-14 do 2012-07-14 )))))))))))))))))))))))))))))))
.
.
2012-07-14 04:27 . 2012-07-14 04:27 292700 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-07-14 04:27 . 2012-07-14 04:27 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-07-14 04:27 . 2012-07-14 04:27 292700 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\documents and settings\Boda\Data aplikací\Malwarebytes
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-07-11 17:05 . 2012-07-11 17:05 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-07-11 17:05 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-11 07:48 . 2012-07-11 13:28 -------- d-----w- c:\documents and settings\Boda\Data aplikací\.minecraft
2012-07-09 06:40 . 2012-07-09 06:40 -------- d-----w- c:\program files\Terraria
2012-07-05 16:45 . 2012-07-05 16:45 5030088 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-07-05 04:40 . 2012-07-05 04:40 -------- d-----w- c:\program files\Common Files\PCSuite
2012-07-05 04:40 . 2012-07-05 04:40 -------- d-----w- c:\program files\Common Files\Nokia
2012-07-05 04:39 . 2012-06-11 09:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2012-07-05 04:38 . 2012-07-05 04:38 -------- d-----w- c:\program files\PC Connectivity Solution
2012-07-05 04:22 . 2012-07-06 23:27 -------- d-----w- c:\program files\ICQ7.5
2012-07-05 04:20 . 2012-07-05 04:20 -------- d-----w- c:\program files\Oracle
2012-06-17 09:39 . 2012-06-17 09:39 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-03 16:21 . 2011-08-17 14:48 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-07-03 16:21 . 2011-08-17 14:48 353688 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-07-03 16:21 . 2011-08-17 14:48 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-07-03 16:21 . 2011-08-17 14:48 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-07-03 16:21 . 2011-08-17 14:48 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-07-03 16:21 . 2011-08-17 14:48 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-07-03 16:21 . 2011-08-17 14:48 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-07-03 16:21 . 2011-08-17 14:48 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-07-03 16:21 . 2011-08-17 14:48 41224 ----a-w- c:\windows\avastSS.scr
2012-07-03 16:21 . 2011-08-17 14:48 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-06-13 13:55 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 12:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-09-19 11:01 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-09-19 11:01 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-09-19 11:01 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-09-19 11:01 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-09-19 11:01 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 12:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 12:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-09-19 11:01 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-09-19 11:01 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2010-08-08 13:54 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2010-08-08 13:54 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 13:18 . 2010-08-08 13:54 214256 ----a-w- c:\windows\system32\muweb.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:09 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:44 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:44 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2008-04-14 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-05-05 03:14 . 2008-04-14 12:00 2150400 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-05 03:14 . 2008-04-14 08:06 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-04 17:29 . 2012-06-09 07:08 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-05-04 17:29 . 2012-06-09 07:08 772504 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-05-04 17:29 . 2010-10-10 09:55 687504 ----a-w- c:\windows\system32\deployJava1.dll
2012-05-02 13:46 . 2009-09-19 10:59 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-03-18 17:55 . 2011-04-10 16:34 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-07-13_23.13.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-07-14 15:27 . 2012-07-14 15:27 16384 c:\windows\Temp\Perflib_Perfdata_770.dat
+ 2012-02-09 20:40 . 2012-02-09 20:40 65536 c:\windows\system32\OpenCL.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 881984 c:\windows\system32\nvgenco32.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 1000256 c:\windows\system32\nvdispco32.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 2522944 c:\windows\system32\nvcuvid.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 2437440 c:\windows\system32\nvcuvenc.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 5918720 c:\windows\system32\nvcuda.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 2292224 c:\windows\system32\nvapi.dll
+ 2006-02-13 13:05 . 2012-02-09 20:40 4309760 c:\windows\system32\nv4_disp.dll
+ 2006-02-13 13:05 . 2012-02-09 20:40 4309760 c:\windows\system32\dllcache\nv4_disp.dll
+ 2012-07-14 04:38 . 2012-07-14 04:38 1259008 c:\windows\Installer\f59ff.msi
+ 2012-02-09 20:40 . 2012-02-09 20:40 18620416 c:\windows\system32\nvoglnt.dll
+ 2012-02-09 20:40 . 2012-02-09 20:40 17534976 c:\windows\system32\nvcompiler.dll
+ 2006-02-13 13:05 . 2012-02-09 20:40 13415040 c:\windows\system32\drivers\nv4_mini.sys
+ 2006-02-13 13:05 . 2012-02-09 20:40 13415040 c:\windows\system32\dllcache\nv4_mini.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-07-03 16:21 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LinkMagic for magicolor 1680MF"="c:\program files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe" [2008-08-26 5005312]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 1516632]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]
"FixCamera"="c:\windows\FixCamera.exe" [2007-02-12 20480]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2009-10-20 111928]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2008-06-10 29984]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2008-06-10 46368]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"tsnp325"="c:\windows\tsnp325.exe" [2006-10-10 270336]
"snp325"="c:\windows\vsnp325.exe" [2006-10-10 827392]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-07-03 4273976]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-4-14 596584]
Ralink Wireless Utility.lnk - c:\program files\RALINK\Common\RaUI.exe [2009-9-25 589824]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\E:\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Codemasters\\F1 2010\\F1_2010_game.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Boiling Point - Cesta do pekel\\XENUS.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Program Files\\Activision\\Mat Hoffman's Pro BMX\\BMX.exe"=
"c:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\FarCry.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [17.8.2011 16:48 721000]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.8.2011 16:48 353688]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.8.2011 16:48 21256]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [11.7.2012 19:05 654408]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [5.7.2012 18:41 3048136]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [11.7.2012 19:05 22344]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [22.12.2009 15:01 27632]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\drivers\s0017bus.sys [7.1.2011 0:34 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\drivers\s0017mdfl.sys [7.1.2011 0:34 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\drivers\s0017mdm.sys [7.1.2011 0:34 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0017mgmt.sys [7.1.2011 0:34 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\drivers\s0017nd5.sys [7.1.2011 0:34 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\drivers\s0017obex.sys [7.1.2011 0:34 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\drivers\s0017unic.sys [7.1.2011 0:34 109736]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [7.1.2011 0:34 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\drivers\s1018mdfl.sys [7.1.2011 0:34 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\drivers\s1018mdm.sys [7.1.2011 0:34 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [7.1.2011 0:34 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [7.1.2011 0:34 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [7.1.2011 0:34 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [7.1.2011 0:34 109864]
S3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\drivers\snp325.sys [21.11.2010 17:30 10251904]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2012-07-14 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-08 16:21]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-01 12:43]
.
2012-07-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-01 12:43]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{35D05F0F-4C2E-41B7-B113-F3A1195F8F8E}: NameServer = 10.102.0.252,10.102.0.253
FF - ProfilePath - c:\documents and settings\Boda\Data aplikací\Mozilla\Firefox\Profiles\uzyts08r.default\
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-NSS - c:\progra~1\NORTON~2\Engine\351~1.6\InstWrap.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-14 17:28
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-117609710-1004336348-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%
 *]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-117609710-1004336348-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%
 *\OpenWithList]
@Class="Shell"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2644)
c:\windows\system32\msi.dll
c:\windows\system32\btmmhook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\windows\ATKKBService.exe
c:\program files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\SearchIndexer.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
.
**************************************************************************
.
Celkový čas: 2012-07-14 17:32:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-14 15:32
ComboFix2.txt 2012-07-13 23:16
.
Před spuštěním: Volných bajtů: 52 895 260 672
Po spuštění: Volných bajtů: 52 846 469 120
.
- - End Of File - - EB0E562E2DE83F103174ABEB67EE43E0

[Ben]

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-07-14 17:53:06
-----------------------------
17:53:06.000 OS Version: Windows 5.1.2600 Service Pack 3
17:53:06.000 Number of processors: 2 586 0x604
17:53:06.000 ComputerName: BODA-PC UserName: Boda
17:53:07.218 Initialize success
17:53:07.312 AVAST engine defs: 12071401
17:53:13.312 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
17:53:13.312 Disk 0 Vendor: WDC_WD2500KS-00MJB0 02.01C03 Size: 238475MB BusType: 3
17:53:13.312 Disk 1 \Device\Harddisk1\DR1 -> \Device\Scsi\JRAID1Port4Path0Target0Lun0
17:53:13.312 Disk 1 Vendor: SATA__ST Size: 476940MB BusType: 1
17:53:13.343 Disk 0 MBR read successfully
17:53:13.343 Disk 0 MBR scan
17:53:13.359 Disk 0 Windows XP default MBR code
17:53:13.390 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 131061 MB offset 63
17:53:13.406 Disk 0 Partition - 00 0F Extended LBA 107411 MB offset 268414020
17:53:13.421 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 107411 MB offset 268414083
17:53:13.468 Disk 0 scanning sectors +488392065
17:53:13.640 Disk 0 scanning C:\WINDOWS\system32\drivers
17:53:19.843 Service scanning
17:53:31.109 Modules scanning
17:53:36.781 Disk 0 trace - called modules:
17:53:36.796 ntkrnlpa.exe CLASSPNP.SYS disk.sys xfilt.sys ACPI.sys hal.dll sfsync02.sys atapi.sys videX32.sys PCIIDEX.SYS
17:53:36.796 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x89ddc9c0]
17:53:36.812 3 CLASSPNP.SYS[b80f8fd7] -> nt!IofCallDriver -> [0x89d90ed0]
17:53:36.812 5 xfilt.sys[b8349026] -> nt!IofCallDriver -> \Device\00000080[0x89e1ea38]
17:53:36.812 7 ACPI.sys[b7f5f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x89e1eb50]
17:53:36.812 \Driver\atapi[0x89dadf38] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> sfsync02.sys[0xb8340d60]
17:53:37.484 AVAST engine scan C:\WINDOWS
17:53:40.906 AVAST engine scan C:\WINDOWS\system32
17:55:25.671 AVAST engine scan C:\WINDOWS\system32\drivers
17:55:42.000 AVAST engine scan C:\Documents and Settings\Boda
17:59:31.468 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Boda\Plocha\MBR.dat"
17:59:31.484 The log file has been saved successfully to "C:\Documents and Settings\Boda\Plocha\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj antivir a antispyware ,následně T-Cleaner smaž a zapni si znovu antivir a antispyware.


Jak to vypadá nyní?