Prosím o kontrolu logu z HJT

[kiara152]

Prosím Vás o kontrolu logu z HJT. NOD32 občas hlási potencionálne nebezpečné aplikácie.
Vopred ďakujem.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:15:29, on 10. 12. 2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
D:\TP-LINK\COMMON\TWCU.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WJATH\AthServer.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
D:\TP-LINK\COMMON\RaRegistry.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O4 - Global Startup: TP-LINK Wireless Utility.lnk = D:\TP-LINK\COMMON\TWCU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate1c9a431eebad346) (gupdate1c9a431eebad346) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - wireless - C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - D:\TP-LINK\COMMON\RaRegistry.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6513 bytes

[Reklama]

[Orcus]

Fixni:

Kód: Vybrat vše

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[kiara152]

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verzia databázy: v2013.01.04.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
lubi :: PRIVAT-522D1200 [administrátor]

10. 12. 2012 20:19:49
MBAM-log-2012-12-10 (20-25-49).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 286846
Uplynutý čas: 5 min, 12 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 115
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.IECookiesManager.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.IECookiesManager (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.DataControl.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.DataControl (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HTMLMenu.2 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HTMLMenu (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.HTMLPanel.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.HTMLPanel (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.PopSwatterSettingsControl.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.PopSwatterSettingsControl (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.PseudoTransparentPlugin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.PopSwatterBarButton.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.PopSwatterBarButton (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HTMLMenu.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\ScreenSaverControl.ScreenSaverInstaller.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\ScreenSaverControl.ScreenSaverInstaller (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.OutlookAddin.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.KillerObjManager.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.KillerObjManager (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HistoryKillerScheduler.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HistoryKillerScheduler (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HistorySwatterControlBar.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\FunWebProducts.HistorySwatterControlBar (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\TypeLib\{E79DFBC0-5697-4fbd-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.ChatSessionPlugin.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearch.ChatSessionPlugin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Typelib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FD31ED6-7C94-4BBC-8E95-F927F4D3A949} (Adware.180Solutions) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearchToolBar.SettingsPlugin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearchToolBar.SettingsPlugin.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearchToolBar.ToolbarPlugin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCR\MyWebSearchToolBar.ToolbarPlugin.1 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\FocusInteractive (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 2
HKLM\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources|f3PopularScreensavers (PUP.MyWebSearch) -> Dáta: C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform|FunWebProducts (PUP.MyWebSearch) -> Dáta: -> Žiadna úloha nevykonaná.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 20
C:\Program Files\FunWebProducts (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\ScreenSaver (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\ScreenSaver\Images (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared\Cache (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\1.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Avatar (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Game (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\History (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Message (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Settings (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\SrchAstt (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\SrchAstt\1.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\SrchAstt\2.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.

Detegované súbory: 78
C:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\WINDOWS\system32\f3PSSavr.scr (PUP.FunWebProducts) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\moddo\Local Settings\Temp\Dočasný adresár 1 pre Ahead.Nero.Burning.ROM.v6.6.0.16.Ultra.Edition.WinALL.Incl.Keymake.zip\Ahead.Nero.Burning.ROM.v6.6.0.16.Ultra.Edition.WinALL.Incl.Keymaker-CORE\keygen.exe (Malware.Packer.Gen) -> Žiadna úloha nevykonaná.
C:\WINDOWS\system32\f3PSSavr.scr (Trojan.Agent) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\ScreenSaver\Images\002A41B0.urr (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3BKGERR.JPG (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCHMON.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3SPACER.WMV (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\FWPBUDDY.PNG (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.MANIFEST (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.MANIFEST (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\0001911F (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\000CF69A (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\002998AE.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\00299A92.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\00299CA6.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\00299DDE.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\003016DA.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\00301841.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\003019B8.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\00301B00.bin (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Cache\files.ini (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\History\search3 (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (PUP.MyWebSearch) -> Žiadna úloha nevykonaná.

(koniec)

[kiara152]

ATF Cleaner som použila. Posielam Vám log z Malwarebytes Anti-Malware.
Prosím o kontrolu.
Zatiaľ ďakujem.

[memphisto]

- Takže spus znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je oznaèen pro odstranění, stačí restartovat počítač.

[kiara152]

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verzia databázy: v2013.01.06.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
lubi :: PRIVAT-522D1200 [administrátor]

6. 1. 2013 16:14:04
mbam-log-2013-01-06 (16-14-04).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 287473
Uplynutý čas: 4 min, 12 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 115
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.IECookiesManager.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.IECookiesManager (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.DataControl.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.DataControl (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HTMLMenu.2 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HTMLMenu (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.HTMLPanel.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.HTMLPanel (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.PopSwatterSettingsControl.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.PopSwatterSettingsControl (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.PseudoTransparentPlugin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.PopSwatterBarButton.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.PopSwatterBarButton (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HTMLMenu.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\ScreenSaverControl.ScreenSaverInstaller.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\ScreenSaverControl.ScreenSaverInstaller (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.OutlookAddin.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.KillerObjManager.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.KillerObjManager (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HistoryKillerScheduler.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HistoryKillerScheduler (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HistorySwatterControlBar.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\FunWebProducts.HistorySwatterControlBar (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\TypeLib\{E79DFBC0-5697-4fbd-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.ChatSessionPlugin.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearch.ChatSessionPlugin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Typelib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FD31ED6-7C94-4BBC-8E95-F927F4D3A949} (Adware.180Solutions) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearchToolBar.SettingsPlugin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearchToolBar.SettingsPlugin.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearchToolBar.ToolbarPlugin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCR\MyWebSearchToolBar.ToolbarPlugin.1 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\FocusInteractive (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 2
HKLM\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources|f3PopularScreensavers (PUP.MyWebSearch) -> Dáta: C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform|FunWebProducts (PUP.MyWebSearch) -> Dáta: -> Pridanie do karantény a zmazanie úspešné.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 20
C:\Program Files\FunWebProducts (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\ScreenSaver (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\ScreenSaver\Images (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared\Cache (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\1.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Avatar (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Game (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\History (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Message (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Settings (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\SrchAstt (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\SrchAstt\1.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\SrchAstt\2.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.

Detegované súbory: 78
C:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\WINDOWS\system32\f3PSSavr.scr (PUP.FunWebProducts) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\moddo\Local Settings\Temp\Dočasný adresár 1 pre Ahead.Nero.Burning.ROM.v6.6.0.16.Ultra.Edition.WinALL.Incl.Keymake.zip\Ahead.Nero.Burning.ROM.v6.6.0.16.Ultra.Edition.WinALL.Incl.Keymaker-CORE\keygen.exe (Malware.Packer.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\WINDOWS\system32\f3PSSavr.scr (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\ScreenSaver\Images\002A41B0.urr (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3BKGERR.JPG (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCHMON.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3SPACER.WMV (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\FWPBUDDY.PNG (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.MANIFEST (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.MANIFEST (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\0001911F (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\000CF69A (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\002998AE.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\00299A92.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\00299CA6.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\00299DDE.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\003016DA.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\00301841.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\003019B8.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\00301B00.bin (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Cache\files.ini (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\History\search3 (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (PUP.MyWebSearch) -> Pridanie do karantény a zmazanie úspešné.

(koniec)

[kiara152]

16:28:21.0609 2848 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
16:28:23.0609 2848 ============================================================
16:28:23.0609 2848 Current date / time: 2013/01/06 16:28:23.0609
16:28:23.0609 2848 SystemInfo:
16:28:23.0609 2848
16:28:23.0609 2848 OS Version: 5.1.2600 ServicePack: 3.0
16:28:23.0609 2848 Product type: Workstation
16:28:23.0609 2848 ComputerName: PRIVAT-522D1200
16:28:23.0609 2848 UserName: lubi
16:28:23.0609 2848 Windows directory: C:\WINDOWS
16:28:23.0609 2848 System windows directory: C:\WINDOWS
16:28:23.0609 2848 Processor architecture: Intel x86
16:28:23.0609 2848 Number of processors: 2
16:28:23.0609 2848 Page size: 0x1000
16:28:23.0609 2848 Boot type: Normal boot
16:28:23.0609 2848 ============================================================
16:28:24.0671 2848 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
16:28:24.0671 2848 Drive \Device\Harddisk1\DR4 - Size: 0x1D2400000 (7.29 Gb), SectorSize: 0x200, Cylinders: 0x3B7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
16:28:24.0671 2848 ============================================================
16:28:24.0671 2848 \Device\Harddisk0\DR0:
16:28:24.0671 2848 MBR partitions:
16:28:24.0671 2848 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
16:28:24.0687 2848 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0xC34F28D
16:28:24.0703 2848 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x124F6C71, BlocksNum 0x12F32B8F
16:28:24.0703 2848 \Device\Harddisk1\DR4:
16:28:24.0703 2848 MBR partitions:
16:28:24.0703 2848 \Device\Harddisk1\DR4\Partition1: MBR, Type 0xB, StartLBA 0xFF, BlocksNum 0xE91F01
16:28:24.0703 2848 ============================================================
16:28:24.0718 2848 C: <-> \Device\Harddisk0\DR0\Partition1
16:28:24.0750 2848 D: <-> \Device\Harddisk0\DR0\Partition2
16:28:24.0781 2848 E: <-> \Device\Harddisk0\DR0\Partition3
16:28:24.0781 2848 ============================================================
16:28:24.0781 2848 Initialize success
16:28:24.0781 2848 ============================================================
16:28:27.0296 3196 ============================================================
16:28:27.0296 3196 Scan started
16:28:27.0296 3196 Mode: Manual;
16:28:27.0296 3196 ============================================================
16:28:27.0968 3196 ================ Scan system memory ========================
16:28:27.0968 3196 System memory - ok
16:28:27.0968 3196 ================ Scan services =============================
16:28:28.0062 3196 Abiosdsk - ok
16:28:28.0078 3196 abp480n5 - ok
16:28:28.0093 3196 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:28:28.0093 3196 ACPI - ok
16:28:28.0109 3196 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
16:28:28.0125 3196 ACPIEC - ok
16:28:28.0156 3196 [ 5AC144F03B31AFAB6717AD3622D1680D ] ACS C:\WINDOWS\system32\acs.exe
16:28:28.0156 3196 ACS - ok
16:28:28.0203 3196 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
16:28:28.0203 3196 AdobeFlashPlayerUpdateSvc - ok
16:28:28.0218 3196 adpu160m - ok
16:28:28.0234 3196 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
16:28:28.0250 3196 aec - ok
16:28:28.0265 3196 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
16:28:28.0265 3196 AFD - ok
16:28:28.0281 3196 Aha154x - ok
16:28:28.0281 3196 aic78u2 - ok
16:28:28.0281 3196 aic78xx - ok
16:28:28.0312 3196 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
16:28:28.0312 3196 Alerter - ok
16:28:28.0328 3196 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
16:28:28.0328 3196 ALG - ok
16:28:28.0328 3196 AliIde - ok
16:28:28.0328 3196 amsint - ok
16:28:28.0359 3196 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
16:28:28.0359 3196 AppMgmt - ok
16:28:28.0406 3196 [ 7141E281D840699D9D79B18F4062DD58 ] AR9271 C:\WINDOWS\system32\DRIVERS\athuw.sys
16:28:28.0437 3196 AR9271 - ok
16:28:28.0453 3196 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
16:28:28.0453 3196 Arp1394 - ok
16:28:28.0468 3196 asc - ok
16:28:28.0468 3196 asc3350p - ok
16:28:28.0468 3196 asc3550 - ok
16:28:28.0484 3196 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:28:28.0484 3196 AsyncMac - ok
16:28:28.0500 3196 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
16:28:28.0500 3196 atapi - ok
16:28:28.0515 3196 Atdisk - ok
16:28:28.0531 3196 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:28:28.0546 3196 Atmarpc - ok
16:28:28.0562 3196 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
16:28:28.0562 3196 AudioSrv - ok
16:28:28.0578 3196 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
16:28:28.0578 3196 audstub - ok
16:28:28.0609 3196 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:28:28.0609 3196 Beep - ok
16:28:28.0640 3196 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
16:28:28.0687 3196 BITS - ok
16:28:28.0718 3196 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll
16:28:28.0718 3196 Browser - ok
16:28:28.0734 3196 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
16:28:28.0734 3196 cbidf2k - ok
16:28:28.0750 3196 cd20xrnt - ok
16:28:28.0750 3196 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
16:28:28.0750 3196 Cdaudio - ok
16:28:28.0765 3196 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
16:28:28.0765 3196 Cdfs - ok
16:28:28.0796 3196 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:28:28.0796 3196 Cdrom - ok
16:28:28.0796 3196 Changer - ok
16:28:28.0828 3196 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
16:28:28.0828 3196 CiSvc - ok
16:28:28.0843 3196 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
16:28:28.0843 3196 ClipSrv - ok
16:28:28.0859 3196 CmdIde - ok
16:28:28.0859 3196 COMSysApp - ok
16:28:28.0859 3196 Cpqarray - ok
16:28:28.0890 3196 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
16:28:28.0890 3196 CryptSvc - ok
16:28:28.0890 3196 dac2w2k - ok
16:28:28.0906 3196 dac960nt - ok
16:28:28.0937 3196 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
16:28:28.0937 3196 DcomLaunch - ok
16:28:28.0968 3196 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
16:28:28.0968 3196 Dhcp - ok
16:28:28.0984 3196 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
16:28:28.0984 3196 Disk - ok
16:28:29.0000 3196 dmadmin - ok
16:28:29.0015 3196 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
16:28:29.0031 3196 dmboot - ok
16:28:29.0046 3196 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
16:28:29.0046 3196 dmio - ok
16:28:29.0062 3196 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
16:28:29.0062 3196 dmload - ok
16:28:29.0093 3196 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
16:28:29.0093 3196 dmserver - ok
16:28:29.0093 3196 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
16:28:29.0093 3196 DMusic - ok
16:28:29.0109 3196 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
16:28:29.0109 3196 Dnscache - ok
16:28:29.0125 3196 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
16:28:29.0125 3196 Dot3svc - ok
16:28:29.0140 3196 dpti2o - ok
16:28:29.0140 3196 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
16:28:29.0140 3196 drmkaud - ok
16:28:29.0171 3196 [ 63A53BB2A85DD22A5E8D6C5CB6273043 ] eamon C:\WINDOWS\system32\DRIVERS\eamon.sys
16:28:29.0171 3196 eamon - ok
16:28:29.0187 3196 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
16:28:29.0187 3196 EapHost - ok
16:28:29.0203 3196 [ 4F72DD48A2ED63A57C1210228A472020 ] ehdrv C:\WINDOWS\system32\DRIVERS\ehdrv.sys
16:28:29.0203 3196 ehdrv - ok
16:28:29.0281 3196 [ E95AB781773870BD68ABE1AE1B57A8AC ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
16:28:29.0296 3196 ekrn - ok
16:28:29.0312 3196 [ 1079517E33044BFA7FF3C1B9A86F05BF ] epfwtdir C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
16:28:29.0312 3196 epfwtdir - ok
16:28:29.0328 3196 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
16:28:29.0328 3196 ERSvc - ok
16:28:29.0343 3196 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
16:28:29.0359 3196 Eventlog - ok
16:28:29.0375 3196 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
16:28:29.0375 3196 EventSystem - ok
16:28:29.0390 3196 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
16:28:29.0390 3196 Fastfat - ok
16:28:29.0406 3196 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
16:28:29.0421 3196 FastUserSwitchingCompatibility - ok
16:28:29.0421 3196 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
16:28:29.0421 3196 Fdc - ok
16:28:29.0437 3196 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
16:28:29.0437 3196 Fips - ok
16:28:29.0484 3196 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:28:29.0484 3196 Flpydisk - ok
16:28:29.0531 3196 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
16:28:29.0578 3196 FltMgr - ok
16:28:29.0593 3196 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:28:29.0593 3196 Fs_Rec - ok
16:28:29.0656 3196 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:28:29.0656 3196 Ftdisk - ok
16:28:29.0656 3196 GMSIPCI - ok
16:28:29.0687 3196 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:28:29.0687 3196 Gpc - ok
16:28:29.0718 3196 [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9a431eebad346 C:\Program Files\Google\Update\GoogleUpdate.exe
16:28:29.0718 3196 gupdate1c9a431eebad346 - ok
16:28:29.0718 3196 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
16:28:29.0718 3196 gupdatem - ok
16:28:29.0734 3196 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
16:28:29.0734 3196 HDAudBus - ok
16:28:29.0781 3196 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:28:29.0781 3196 helpsvc - ok
16:28:29.0796 3196 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
16:28:29.0796 3196 HidServ - ok
16:28:29.0812 3196 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:28:29.0812 3196 HidUsb - ok
16:28:29.0828 3196 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
16:28:29.0828 3196 hkmsvc - ok
16:28:29.0828 3196 hpn - ok
16:28:29.0859 3196 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
16:28:29.0859 3196 HTTP - ok
16:28:29.0890 3196 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
16:28:29.0890 3196 HTTPFilter - ok
16:28:29.0890 3196 hwdatacard - ok
16:28:29.0906 3196 hwusbdev - ok
16:28:29.0906 3196 i2omgmt - ok
16:28:29.0921 3196 i2omp - ok
16:28:29.0921 3196 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:28:29.0921 3196 i8042prt - ok
16:28:29.0984 3196 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
16:28:29.0984 3196 IDriverT - ok
16:28:30.0000 3196 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
16:28:30.0000 3196 Imapi - ok
16:28:30.0015 3196 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
16:28:30.0031 3196 ImapiService - ok
16:28:30.0031 3196 ini910u - ok
16:28:30.0125 3196 [ A30685283F90AE02F1CD50972C6065E3 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:28:30.0156 3196 IntcAzAudAddService - ok
16:28:30.0156 3196 IntelIde - ok
16:28:30.0171 3196 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:28:30.0171 3196 intelppm - ok
16:28:30.0187 3196 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
16:28:30.0187 3196 Ip6Fw - ok
16:28:30.0203 3196 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
16:28:30.0203 3196 IpFilterDriver - ok
16:28:30.0218 3196 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:28:30.0218 3196 IpInIp - ok
16:28:30.0250 3196 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:28:30.0250 3196 IpNat - ok
16:28:30.0265 3196 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:28:30.0281 3196 IPSec - ok
16:28:30.0281 3196 [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda C:\WINDOWS\system32\DRIVERS\irda.sys
16:28:30.0281 3196 irda - ok
16:28:30.0296 3196 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
16:28:30.0296 3196 IRENUM - ok
16:28:30.0312 3196 [ 49CC4533CE897CB2E93C1E84A818FDE5 ] Irmon C:\WINDOWS\System32\irmon.dll
16:28:30.0312 3196 Irmon - ok
16:28:30.0328 3196 [ 0501F0B9AB08425F8C0EACBDCC04AA32 ] irsir C:\WINDOWS\system32\DRIVERS\irsir.sys
16:28:30.0328 3196 irsir - ok
16:28:30.0359 3196 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:28:30.0359 3196 isapnp - ok
16:28:30.0421 3196 [ 112325F53AB720CA77825726D427FBDC ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
16:28:30.0421 3196 JavaQuickStarterService - ok
16:28:30.0437 3196 [ C995C0E8B4503FAC38793BB0236AD246 ] JGOGO C:\WINDOWS\system32\DRIVERS\JGOGO.sys
16:28:30.0437 3196 JGOGO - ok
16:28:30.0437 3196 [ D8619261B2BE23CCB3F4F5FBD2CE4408 ] JRAID C:\WINDOWS\system32\DRIVERS\jraid.sys
16:28:30.0437 3196 JRAID - ok
16:28:30.0546 3196 [ FFDB868A2A069F8D58C0E9A1203378C5 ] jswpsapi C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
16:28:30.0593 3196 jswpsapi - ok
16:28:30.0609 3196 [ AD67795900AA8C05CC4570F5349E0639 ] JSWSCIMD C:\WINDOWS\system32\DRIVERS\jswscimd.sys
16:28:30.0625 3196 JSWSCIMD - ok
16:28:30.0625 3196 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:28:30.0640 3196 Kbdclass - ok
16:28:30.0656 3196 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:28:30.0656 3196 kbdhid - ok
16:28:30.0671 3196 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
16:28:30.0671 3196 kmixer - ok
16:28:30.0687 3196 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
16:28:30.0687 3196 KSecDD - ok
16:28:30.0718 3196 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
16:28:30.0718 3196 lanmanserver - ok
16:28:30.0750 3196 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
16:28:30.0750 3196 lanmanworkstation - ok
16:28:30.0750 3196 lbrtfdc - ok
16:28:30.0796 3196 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
16:28:30.0796 3196 LmHosts - ok
16:28:30.0812 3196 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
16:28:30.0812 3196 MDM - ok
16:28:30.0843 3196 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
16:28:30.0843 3196 Messenger - ok
16:28:30.0859 3196 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
16:28:30.0859 3196 mnmdd - ok
16:28:30.0875 3196 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
16:28:30.0875 3196 mnmsrvc - ok
16:28:30.0890 3196 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
16:28:30.0890 3196 Modem - ok
16:28:30.0906 3196 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:28:30.0906 3196 Mouclass - ok
16:28:30.0906 3196 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:28:30.0906 3196 mouhid - ok
16:28:30.0921 3196 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
16:28:30.0921 3196 MountMgr - ok
16:28:30.0953 3196 [ 46297FA8E30A6007F14118FC2B942FBC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
16:28:30.0953 3196 MozillaMaintenance - ok
16:28:30.0968 3196 mraid35x - ok
16:28:30.0984 3196 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:28:30.0984 3196 MRxDAV - ok
16:28:31.0015 3196 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:28:31.0015 3196 MRxSmb - ok
16:28:31.0031 3196 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
16:28:31.0031 3196 MSDTC - ok
16:28:31.0031 3196 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
16:28:31.0031 3196 Msfs - ok
16:28:31.0031 3196 MSIServer - ok
16:28:31.0046 3196 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:28:31.0046 3196 MSKSSRV - ok
16:28:31.0078 3196 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:28:31.0078 3196 MSPCLOCK - ok
16:28:31.0093 3196 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
16:28:31.0093 3196 MSPQM - ok
16:28:31.0109 3196 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:28:31.0125 3196 mssmbios - ok
16:28:31.0125 3196 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
16:28:31.0125 3196 Mup - ok
16:28:31.0156 3196 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
16:28:31.0156 3196 napagent - ok
16:28:31.0234 3196 [ 87A00FAEDD703D8D2BDCB29CE5EEEA6B ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
16:28:31.0250 3196 NBService - ok
16:28:31.0265 3196 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
16:28:31.0265 3196 NDIS - ok
16:28:31.0281 3196 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:28:31.0281 3196 NdisTapi - ok
16:28:31.0296 3196 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:28:31.0312 3196 Ndisuio - ok
16:28:31.0328 3196 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:28:31.0328 3196 NdisWan - ok
16:28:31.0343 3196 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
16:28:31.0343 3196 NDProxy - ok
16:28:31.0359 3196 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
16:28:31.0359 3196 NetBIOS - ok
16:28:31.0375 3196 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
16:28:31.0375 3196 NetBT - ok
16:28:31.0390 3196 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
16:28:31.0390 3196 NetDDE - ok
16:28:31.0406 3196 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
16:28:31.0406 3196 NetDDEdsdm - ok
16:28:31.0437 3196 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
16:28:31.0437 3196 Netlogon - ok
16:28:31.0453 3196 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
16:28:31.0453 3196 Netman - ok
16:28:31.0484 3196 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
16:28:31.0484 3196 NIC1394 - ok
16:28:31.0515 3196 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
16:28:31.0515 3196 Nla - ok
16:28:31.0531 3196 [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm C:\WINDOWS\system32\DRIVERS\NMnt.sys
16:28:31.0546 3196 nm - ok
16:28:31.0546 3196 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
16:28:31.0546 3196 Npfs - ok
16:28:31.0609 3196 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
16:28:31.0625 3196 Ntfs - ok
16:28:31.0625 3196 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
16:28:31.0625 3196 NtLmSsp - ok
16:28:31.0656 3196 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
16:28:31.0671 3196 NtmsSvc - ok
16:28:31.0671 3196 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
16:28:31.0687 3196 Null - ok
16:28:31.0781 3196 [ 1C93B80DB6C4428C86D51A3DFB01666D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
16:28:31.0859 3196 nv - ok
16:28:31.0875 3196 [ 5D75D02B37D56406F6AA6AC670E5F69D ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
16:28:31.0875 3196 NVSvc - ok
16:28:31.0921 3196 [ 2C2FD0E6B0180F94C260DD26706AA5F4 ] NWCWorkstation C:\WINDOWS\System32\nwwks.dll
16:28:31.0921 3196 NWCWorkstation - ok
16:28:31.0937 3196 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:28:31.0953 3196 NwlnkFlt - ok
16:28:31.0953 3196 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:28:31.0953 3196 NwlnkFwd - ok
16:28:31.0968 3196 [ 8B8B1BE2DBA4025DA6786C645F77F123 ] NwlnkIpx C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
16:28:31.0968 3196 NwlnkIpx - ok
16:28:31.0984 3196 [ 56D34A67C05E94E16377C60609741FF8 ] NwlnkNb C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
16:28:31.0984 3196 NwlnkNb - ok
16:28:31.0984 3196 [ C0BB7D1615E1ACBDC99757F6CEAF8CF0 ] NwlnkSpx C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
16:28:31.0984 3196 NwlnkSpx - ok
16:28:32.0000 3196 [ 36B9B950E3D2E100970A48D8BAD86740 ] NWRDR C:\WINDOWS\system32\DRIVERS\nwrdr.sys
16:28:32.0015 3196 NWRDR - ok
16:28:32.0109 3196 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
16:28:32.0125 3196 odserv - ok
16:28:32.0140 3196 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
16:28:32.0140 3196 ohci1394 - ok
16:28:32.0187 3196 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:28:32.0187 3196 ose - ok
16:28:32.0218 3196 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
16:28:32.0218 3196 Parport - ok
16:28:32.0234 3196 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
16:28:32.0234 3196 PartMgr - ok
16:28:32.0265 3196 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
16:28:32.0265 3196 ParVdm - ok
16:28:32.0281 3196 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
16:28:32.0281 3196 PCI - ok
16:28:32.0296 3196 PCIDump - ok
16:28:32.0312 3196 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
16:28:32.0312 3196 PCIIde - ok
16:28:32.0343 3196 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
16:28:32.0343 3196 Pcmcia - ok
16:28:32.0343 3196 PDCOMP - ok
16:28:32.0343 3196 PDFRAME - ok
16:28:32.0359 3196 PDRELI - ok
16:28:32.0359 3196 PDRFRAME - ok
16:28:32.0359 3196 perc2 - ok
16:28:32.0359 3196 perc2hib - ok
16:28:32.0390 3196 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
16:28:32.0390 3196 PlugPlay - ok
16:28:32.0390 3196 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
16:28:32.0390 3196 PolicyAgent - ok
16:28:32.0421 3196 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:28:32.0421 3196 PptpMiniport - ok
16:28:32.0421 3196 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
16:28:32.0421 3196 ProtectedStorage - ok
16:28:32.0437 3196 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
16:28:32.0437 3196 PSched - ok
16:28:32.0453 3196 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:28:32.0453 3196 Ptilink - ok
16:28:32.0468 3196 [ D86B4A68565E444D76457F14172C875A ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
16:28:32.0468 3196 PxHelp20 - ok
16:28:32.0484 3196 ql1080 - ok
16:28:32.0484 3196 Ql10wnt - ok
16:28:32.0484 3196 ql12160 - ok
16:28:32.0484 3196 ql1240 - ok
16:28:32.0500 3196 ql1280 - ok
16:28:32.0562 3196 [ 583608EE65AABF971117A61AEE4BCAAE ] RalinkRegistryWriter D:\TP-LINK\COMMON\RaRegistry.exe
16:28:32.0562 3196 RalinkRegistryWriter - ok
16:28:32.0593 3196 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:28:32.0593 3196 RasAcd - ok
16:28:32.0609 3196 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
16:28:32.0609 3196 RasAuto - ok
16:28:32.0625 3196 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
16:28:32.0625 3196 Rasirda - ok
16:28:32.0640 3196 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:28:32.0640 3196 Rasl2tp - ok
16:28:32.0671 3196 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
16:28:32.0671 3196 RasMan - ok
16:28:32.0671 3196 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:28:32.0671 3196 RasPppoe - ok
16:28:32.0687 3196 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
16:28:32.0687 3196 Raspti - ok
16:28:32.0703 3196 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:28:32.0703 3196 Rdbss - ok
16:28:32.0718 3196 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:28:32.0718 3196 RDPCDD - ok
16:28:32.0750 3196 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:28:32.0750 3196 rdpdr - ok
16:28:32.0765 3196 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
16:28:32.0765 3196 RDPWD - ok
16:28:32.0796 3196 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
16:28:32.0796 3196 RDSessMgr - ok
16:28:32.0812 3196 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
16:28:32.0812 3196 redbook - ok
16:28:32.0828 3196 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:28:32.0828 3196 RemoteAccess - ok
16:28:32.0859 3196 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:28:32.0859 3196 RemoteRegistry - ok
16:28:32.0875 3196 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
16:28:32.0875 3196 RpcLocator - ok
16:28:32.0890 3196 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\system32\rpcss.dll
16:28:32.0890 3196 RpcSs - ok
16:28:32.0906 3196 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
16:28:32.0921 3196 RSVP - ok
16:28:32.0953 3196 [ 487FC03649653349ACE757571EFC3EC9 ] rt2870 C:\WINDOWS\system32\DRIVERS\rt2870.sys
16:28:32.0984 3196 rt2870 - ok
16:28:33.0000 3196 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
16:28:33.0000 3196 SamSs - ok
16:28:33.0000 3196 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
16:28:33.0000 3196 SCardSvr - ok
16:28:33.0031 3196 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:28:33.0031 3196 Schedule - ok
16:28:33.0046 3196 [ F34C06D1C706A6D9433570B087A18B02 ] Scutum50 C:\WINDOWS\system32\Drivers\Scutum50.sys
16:28:33.0046 3196 Scutum50 - ok
16:28:33.0078 3196 [ 97EC6C60112EBD40C07FE295A38AB1EA ] SE2Ebus C:\WINDOWS\system32\DRIVERS\SE2Ebus.sys
16:28:33.0078 3196 SE2Ebus - ok
16:28:33.0109 3196 [ ABFE402BA200E82568A5606719397AFA ] SE2Emdfl C:\WINDOWS\system32\DRIVERS\SE2Emdfl.sys
16:28:33.0109 3196 SE2Emdfl - ok
16:28:33.0125 3196 [ 4ACFE8A2A3C1624964429E83BC7148A4 ] SE2Emdm C:\WINDOWS\system32\DRIVERS\SE2Emdm.sys
16:28:33.0125 3196 SE2Emdm - ok
16:28:33.0156 3196 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:28:33.0156 3196 Secdrv - ok
16:28:33.0171 3196 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
16:28:33.0171 3196 seclogon - ok
16:28:33.0187 3196 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
16:28:33.0187 3196 SENS - ok
16:28:33.0203 3196 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
16:28:33.0203 3196 serenum - ok
16:28:33.0218 3196 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
16:28:33.0218 3196 Serial - ok
16:28:33.0281 3196 [ 9D38320BB32230349379DF5DDBBF7FCE ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
16:28:33.0296 3196 ServiceLayer - ok
16:28:33.0312 3196 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
16:28:33.0312 3196 Sfloppy - ok
16:28:33.0343 3196 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:28:33.0343 3196 SharedAccess - ok
16:28:33.0359 3196 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:28:33.0359 3196 ShellHWDetection - ok
16:28:33.0359 3196 Simbad - ok
16:28:33.0375 3196 Sparrow - ok
16:28:33.0375 3196 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
16:28:33.0375 3196 splitter - ok
16:28:33.0390 3196 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
16:28:33.0406 3196 Spooler - ok
16:28:33.0421 3196 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
16:28:33.0421 3196 sr - ok
16:28:33.0437 3196 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
16:28:33.0437 3196 srservice - ok
16:28:33.0453 3196 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
16:28:33.0453 3196 Srv - ok
16:28:33.0484 3196 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:28:33.0484 3196 SSDPSRV - ok
16:28:33.0515 3196 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
16:28:33.0515 3196 stisvc - ok
16:28:33.0531 3196 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
16:28:33.0531 3196 swenum - ok
16:28:33.0531 3196 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
16:28:33.0531 3196 swmidi - ok
16:28:33.0546 3196 SwPrv - ok
16:28:33.0546 3196 symc810 - ok
16:28:33.0546 3196 symc8xx - ok
16:28:33.0562 3196 sym_hi - ok
16:28:33.0562 3196 sym_u3 - ok
16:28:33.0562 3196 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
16:28:33.0578 3196 sysaudio - ok
16:28:33.0578 3196 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
16:28:33.0593 3196 SysmonLog - ok
16:28:33.0609 3196 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:28:33.0609 3196 TapiSrv - ok
16:28:33.0640 3196 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:28:33.0656 3196 Tcpip - ok
16:28:33.0671 3196 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
16:28:33.0671 3196 TDPIPE - ok
16:28:33.0703 3196 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
16:28:33.0703 3196 TDTCP - ok
16:28:33.0718 3196 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
16:28:33.0718 3196 TermDD - ok
16:28:33.0765 3196 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
16:28:33.0781 3196 TermService - ok
16:28:33.0796 3196 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
16:28:33.0796 3196 Themes - ok
16:28:33.0859 3196 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
16:28:33.0875 3196 TlntSvr - ok
16:28:33.0875 3196 TosIde - ok
16:28:33.0906 3196 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
16:28:33.0906 3196 TrkWks - ok
16:28:33.0968 3196 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
16:28:33.0984 3196 Udfs - ok
16:28:33.0984 3196 ultra - ok
16:28:34.0000 3196 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
16:28:34.0000 3196 Update - ok
16:28:34.0031 3196 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:28:34.0031 3196 upnphost - ok
16:28:34.0046 3196 upperdev - ok
16:28:34.0046 3196 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
16:28:34.0046 3196 UPS - ok
16:28:34.0078 3196 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:28:34.0078 3196 usbccgp - ok
16:28:34.0109 3196 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:28:34.0109 3196 usbehci - ok
16:28:34.0140 3196 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:28:34.0140 3196 usbhub - ok
16:28:34.0171 3196 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
16:28:34.0171 3196 usbscan - ok
16:28:34.0203 3196 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:28:34.0203 3196 USBSTOR - ok
16:28:34.0234 3196 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:28:34.0234 3196 usbuhci - ok
16:28:34.0250 3196 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
16:28:34.0250 3196 VgaSave - ok
16:28:34.0265 3196 ViaIde - ok
16:28:34.0296 3196 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
16:28:34.0296 3196 VolSnap - ok
16:28:34.0312 3196 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
16:28:34.0312 3196 VSS - ok
16:28:34.0328 3196 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll
16:28:34.0343 3196 W32Time - ok
16:28:34.0375 3196 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:28:34.0375 3196 Wanarp - ok
16:28:34.0406 3196 [ FD47474BD21794508AF449D9D91AF6E6 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
16:28:34.0421 3196 Wdf01000 - ok
16:28:34.0437 3196 WDICA - ok
16:28:34.0453 3196 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
16:28:34.0453 3196 wdmaud - ok
16:28:34.0468 3196 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:28:34.0468 3196 WebClient - ok
16:28:34.0500 3196 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
16:28:34.0500 3196 winmgmt - ok
16:28:34.0531 3196 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
16:28:34.0531 3196 WmdmPmSN - ok
16:28:34.0562 3196 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
16:28:34.0578 3196 Wmi - ok
16:28:34.0593 3196 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
16:28:34.0593 3196 WmiApSrv - ok
16:28:34.0656 3196 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
16:28:34.0671 3196 WMPNetworkSvc - ok
16:28:34.0703 3196 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
16:28:34.0703 3196 wscsvc - ok
16:28:34.0718 3196 [ 0091D78C5F8FDE0CDF2B214823DE6E48 ] WSIMD C:\WINDOWS\system32\DRIVERS\wsimd.sys
16:28:34.0718 3196 WSIMD - ok
16:28:34.0750 3196 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
16:28:34.0765 3196 wuauserv - ok
16:28:34.0781 3196 [ 50EB9E21963B4F06FD010D007D54351B ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
16:28:34.0781 3196 WudfPf - ok
16:28:34.0796 3196 [ 6E209664BDEA8A15B5E8E480D6C607C2 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
16:28:34.0796 3196 WudfRd - ok
16:28:34.0812 3196 [ AE93084D2D236887BA56467AE42B4955 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
16:28:34.0812 3196 WudfSvc - ok
16:28:34.0859 3196 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
16:28:34.0890 3196 WZCSVC - ok
16:28:34.0906 3196 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
16:28:34.0906 3196 xmlprov - ok
16:28:34.0937 3196 [ 936A0E2D44ADF93CE0DF8E92AAB29C6E ] yukonwxp C:\WINDOWS\system32\DRIVERS\yk51x86.sys
16:28:34.0937 3196 yukonwxp - ok
16:28:34.0953 3196 ================ Scan global ===============================
16:28:34.0968 3196 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:28:35.0000 3196 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:28:35.0000 3196 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:28:35.0015 3196 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:28:35.0015 3196 [Global] - ok
16:28:35.0015 3196 ================ Scan MBR ==================================
16:28:35.0031 3196 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
16:28:35.0171 3196 \Device\Harddisk0\DR0 - ok
16:28:35.0171 3196 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR4
16:28:35.0187 3196 \Device\Harddisk1\DR4 - ok
16:28:35.0187 3196 ================ Scan VBR ==================================
16:28:35.0187 3196 [ 17F82C070E4B6A62AA95BC3CCC0DABBE ] \Device\Harddisk0\DR0\Partition1
16:28:35.0187 3196 \Device\Harddisk0\DR0\Partition1 - ok
16:28:35.0203 3196 [ CC809F3EA8248AA14CC2294272449565 ] \Device\Harddisk0\DR0\Partition2
16:28:35.0203 3196 \Device\Harddisk0\DR0\Partition2 - ok
16:28:35.0218 3196 [ 45E41887E0FC4AD0B2B4F442D9AF3C38 ] \Device\Harddisk0\DR0\Partition3
16:28:35.0218 3196 \Device\Harddisk0\DR0\Partition3 - ok
16:28:35.0234 3196 [ 28802CC6EF7E9C9EFCD6272EB822AEAE ] \Device\Harddisk1\DR4\Partition1
16:28:35.0234 3196 \Device\Harddisk1\DR4\Partition1 - ok
16:28:35.0234 3196 ============================================================
16:28:35.0234 3196 Scan finished
16:28:35.0234 3196 ============================================================
16:28:35.0234 3068 Detected object count: 0
16:28:35.0234 3068 Actual detected object count: 0
16:28:38.0843 2404 Deinitialize success

[kiara152]

ComboFix 13-01-05.01 - lubi . 01. 2013 16:53:07.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.1022.457 [GMT 1:00]
Running from: c:\documents and settings\lubi\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 6.0 *Disabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Created a new restore point
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\lubi\Favorites\Download programs.url
c:\documents and settings\lubi\Favorites\Games.url
c:\documents and settings\lubi\Favorites\Translator.url
c:\documents and settings\lubi\Favorites\Videos.url
c:\documents and settings\lubi\Start Menu\Programs\Download programs.url
c:\documents and settings\lubi\Start Menu\Programs\Games.url
c:\documents and settings\lubi\Start Menu\Programs\Translator.url
c:\documents and settings\lubi\Start Menu\Programs\Videos.url
c:\documents and settings\moddo\WINDOWS
c:\windows\system32\MUI\041b\tourstart.exe
c:\windows\system32\SET39.tmp
c:\windows\system32\SET3D.tmp
c:\windows\system32\SET45.tmp
c:\windows\system32\WinSys.exe
E:\autorun.inf
.
.
((((((((((((((((((((((((( Files Created from 2012-12-06 to 2013-01-06 )))))))))))))))))))))))))))))))
.
.
2012-12-11 12:26 . 2012-12-11 12:29 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-11 12:26 . 2012-12-11 12:29 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-11 12:23 . 2012-12-11 12:23 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\Opera
2012-12-11 12:22 . 2012-12-11 12:23 -------- d-----w- c:\program files\Opera
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\documents and settings\lubi\Application Data\Malwarebytes
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes
2012-12-09 23:27 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-09 22:47 . 2012-12-09 22:47 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\Microsoft Help
2012-12-09 22:47 . 2012-12-09 22:50 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft Help
2012-12-09 22:46 . 2012-12-09 22:46 -------- d-----r- C:\MSOCache
2012-12-09 22:41 . 2012-12-09 22:44 -------- d-----w- c:\program files\CCleaner
2012-12-09 22:32 . 2012-12-09 22:32 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\GHISLER
2012-12-08 22:20 . 2012-12-08 22:20 388096 ----a-r- c:\documents and settings\lubi\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-12-08 22:20 . 2012-12-08 22:20 -------- d-----w- c:\program files\Trend Micro
2012-12-08 22:12 . 2012-12-08 22:12 -------- d-----w- c:\documents and settings\LocalService.NT AUTHORITY\Local Settings\Application Data\ESET
2012-12-08 22:07 . 2012-12-08 22:07 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\ESET
2012-12-08 22:06 . 2012-12-08 22:06 -------- d-----w- c:\program files\ESET
2012-12-08 22:06 . 2012-12-08 22:06 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\ESET
2012-12-08 21:17 . 2012-12-08 21:17 -------- d-----w- c:\documents and settings\lubi\Application Data\TeamViewer
2012-12-08 19:41 . 2012-12-08 19:47 -------- d-----w- c:\documents and settings\lubi\Application Data\TP-LINK
2012-12-08 19:39 . 2011-07-28 18:06 1763584 ----a-w- c:\windows\system32\drivers\athuw.sys
2012-12-08 19:39 . 2011-07-28 18:06 1763584 ----a-w- c:\windows\system32\athuw.sys
2012-12-08 19:38 . 2012-12-08 19:40 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\TP-LINK
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2004-08-04 01:07 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-11-13 01:25 . 2004-08-04 01:07 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-02 02:02 . 2004-08-04 01:07 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2004-08-04 01:07 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2004-08-04 01:07 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-11-01 12:17 . 2004-08-04 01:07 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2004-08-04 01:07 385024 ----a-w- c:\windows\system32\html.iec
2009-08-13 12:31 . 2009-08-13 12:31 774144 -c--a-w- c:\program files\RngInterstitial.dll
2012-07-14 00:15 . 2006-11-02 23:45 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-04-06 385024]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-08 7630848]
"nwiz"="nwiz.exe" [2006-08-08 1519616]
"SW20"="c:\windows\system32\sw20.exe" [2006-06-01 208896]
"SW24"="c:\windows\system32\sw24.exe" [2006-06-01 69632]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-08-08 86016]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 14854144]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-11-26 5074384]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\moddo\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
America Online 5.0 Tray Icon.lnk - c:\america online 5.0\aoltray.exe [N/A]
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2009-7-28 139776]
.
c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
TP-LINK Wireless Configuration Utility.lnk - c:\program files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe [2012-12-8 788992]
TP-LINK Wireless Utility.lnk - d:\tp-link\COMMON\TWCU.exe [2006-2-26 1638400]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [8. 10. 2012 8:21 121216]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [8. 10. 2012 8:21 104736]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [26. 11. 2012 13:34 1329304]
R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [26. 2. 2006 0:14 19072]
R3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [8. 12. 2012 20:39 1763584]
R3 JSWSCIMD;jswscimd Service;c:\windows\system32\drivers\jswscimd.sys [8. 12. 2012 20:40 57440]
S2 gupdate1c9a431eebad346;Služba Google Update (gupdate1c9a431eebad346);c:\program files\Google\Update\GoogleUpdate.exe [14. 3. 2009 0:17 133104]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys --> c:\windows\system32\DRIVERS\ewusbdev.sys [?]
S3 jswpsapi;JumpStart Wi-Fi Protected Setup;c:\program files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe [8. 12. 2012 20:41 360529]
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-11 12:29]
.
2013-01-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-13 23:17]
.
2012-12-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-13 23:17]
.
2013-01-06 c:\windows\Tasks\User_Feed_Synchronization-{793CB2D2-03DF-4636-A457-FFAF26122B4A}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.43.1
FF - ProfilePath - c:\documents and settings\lubi\Application Data\Mozilla\Firefox\Profiles\js2jnr7v.default\
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-OMP Transylvania 3D_is1 - h:\garmin\Openmaps\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-06 16:58
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2013-01-06 17:00:51
ComboFix-quarantined-files.txt 2013-01-06 16:00
.
Pre-Run: 10 243 985 408 bytes free
Post-Run: 11 291 717 632 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 69F1B5D47518412AFBBE7A1DF51DC2BD

[kiara152]

Posielam log z Malwarebytes' Anti-Malware, TDSSKiller a ComboFix.
Zatiaľ ďakujem za pomoc.

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Driver::
gupdate1c9a431eebad346

Folder::
c:\program files\Google\Update


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[kiara152]

ComboFix 13-01-06.01 - lubi . 01. 2013 16:53:41.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.1022.438 [GMT 1:00]
Running from: c:\documents and settings\lubi\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\lubi\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 6.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.21.123\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.21.123\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.21.123\GoogleUpdate.exe
c:\program files\Google\Update\1.3.21.123\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.21.123\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.21.123\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.21.123\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.21.123\goopdate.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_am.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ar.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_bg.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_bn.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ca.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_cs.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_da.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_de.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_el.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_en.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_es.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_et.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_fa.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_fi.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_fil.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_fr.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_gu.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_hi.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_hr.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_hu.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_id.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_is.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_it.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_iw.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ja.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_kn.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ko.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_lt.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_lv.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ml.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_mr.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ms.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_nl.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_no.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_pl.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ro.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ru.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_sk.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_sl.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_sr.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_sv.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_sw.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ta.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_te.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_th.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_tr.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_uk.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_ur.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_vi.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.21.123\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.21.123\psmachine.dll
c:\program files\Google\Update\1.3.21.123\psuser.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.123\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\23.0.1271.97\23.0.1271.97_chrome_installer.exe
c:\program files\Google\Update\Download\{E35DE50B-008A-45B1-B48B-5D3A04A97C08}\GoogleUpdateSetup.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE1C9A431EEBAD346
-------\Service_gupdate1c9a431eebad346
-------\Legacy_gupdatem
-------\Legacy_gupdatem
-------\Service_gupdatem
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Files Created from 2012-12-07 to 2013-01-07 )))))))))))))))))))))))))))))))
.
.
2013-01-06 16:10 . 2013-01-06 16:16 -------- d-----w- c:\program files\totalcmd
2013-01-06 16:10 . 2012-08-03 07:01 545 ----a-w- c:\windows\UC.PIF
2013-01-06 16:10 . 2012-08-03 07:01 545 ----a-w- c:\windows\RAR.PIF
2013-01-06 16:10 . 2012-08-03 07:01 545 ----a-w- c:\windows\LHA.PIF
2013-01-06 16:10 . 2012-08-03 07:01 545 ----a-w- c:\windows\ARJ.PIF
2012-12-11 12:26 . 2012-12-11 12:29 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-11 12:26 . 2012-12-11 12:29 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-11 12:23 . 2012-12-11 12:23 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\Opera
2012-12-11 12:22 . 2012-12-11 12:23 -------- d-----w- c:\program files\Opera
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\documents and settings\lubi\Application Data\Malwarebytes
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes
2012-12-09 23:27 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-09 23:27 . 2012-12-09 23:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-09 22:47 . 2012-12-09 22:47 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\Microsoft Help
2012-12-09 22:47 . 2012-12-09 22:50 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft Help
2012-12-09 22:46 . 2012-12-09 22:46 -------- d-----r- C:\MSOCache
2012-12-09 22:41 . 2012-12-09 22:44 -------- d-----w- c:\program files\CCleaner
2012-12-09 22:32 . 2013-01-06 16:13 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\GHISLER
2012-12-08 22:20 . 2012-12-08 22:20 388096 ----a-r- c:\documents and settings\lubi\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-12-08 22:20 . 2012-12-08 22:20 -------- d-----w- c:\program files\Trend Micro
2012-12-08 22:12 . 2012-12-08 22:12 -------- d-----w- c:\documents and settings\LocalService.NT AUTHORITY\Local Settings\Application Data\ESET
2012-12-08 22:07 . 2012-12-08 22:07 -------- d-----w- c:\documents and settings\lubi\Local Settings\Application Data\ESET
2012-12-08 22:06 . 2012-12-08 22:06 -------- d-----w- c:\program files\ESET
2012-12-08 22:06 . 2012-12-08 22:06 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\ESET
2012-12-08 21:17 . 2012-12-08 21:17 -------- d-----w- c:\documents and settings\lubi\Application Data\TeamViewer
2012-12-08 19:41 . 2012-12-08 19:47 -------- d-----w- c:\documents and settings\lubi\Application Data\TP-LINK
2012-12-08 19:39 . 2011-07-28 18:06 1763584 ----a-w- c:\windows\system32\drivers\athuw.sys
2012-12-08 19:39 . 2011-07-28 18:06 1763584 ----a-w- c:\windows\system32\athuw.sys
2012-12-08 19:38 . 2012-12-08 19:40 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\TP-LINK
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2004-08-04 01:07 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-11-13 01:25 . 2004-08-04 01:07 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-02 02:02 . 2004-08-04 01:07 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2004-08-04 01:07 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2004-08-04 01:07 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-11-01 12:17 . 2004-08-04 01:07 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2004-08-04 01:07 385024 ----a-w- c:\windows\system32\html.iec
2009-08-13 12:31 . 2009-08-13 12:31 774144 -c--a-w- c:\program files\RngInterstitial.dll
2012-07-14 00:15 . 2006-11-02 23:45 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-04-06 385024]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-08 7630848]
"nwiz"="nwiz.exe" [2006-08-08 1519616]
"SW20"="c:\windows\system32\sw20.exe" [2006-06-01 208896]
"SW24"="c:\windows\system32\sw24.exe" [2006-06-01 69632]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-08-08 86016]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 14854144]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-11-26 5074384]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\moddo\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
America Online 5.0 Tray Icon.lnk - c:\america online 5.0\aoltray.exe [N/A]
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2009-7-28 139776]
.
c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
TP-LINK Wireless Configuration Utility.lnk - c:\program files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe [2012-12-8 788992]
TP-LINK Wireless Utility.lnk - d:\tp-link\COMMON\TWCU.exe [2006-2-26 1638400]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [8. 10. 2012 8:21 121216]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [8. 10. 2012 8:21 104736]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [26. 11. 2012 13:34 1329304]
R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [26. 2. 2006 0:14 19072]
R3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [8. 12. 2012 20:39 1763584]
R3 JSWSCIMD;jswscimd Service;c:\windows\system32\drivers\jswscimd.sys [8. 12. 2012 20:40 57440]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys --> c:\windows\system32\DRIVERS\ewusbdev.sys [?]
S3 jswpsapi;JumpStart Wi-Fi Protected Setup;c:\program files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe [8. 12. 2012 20:41 360529]
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-11 12:29]
.
2013-01-07 c:\windows\Tasks\User_Feed_Synchronization-{793CB2D2-03DF-4636-A457-FFAF26122B4A}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\lubi\Application Data\Mozilla\Firefox\Profiles\js2jnr7v.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-07 17:02
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(2864)
c:\windows\system32\WININET.dll
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSSK.DLL
c:\windows\system32\nvwddi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\acs.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\nvsvc32.exe
d:\tp-link\COMMON\RaRegistry.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2013-01-07 17:04:07 - machine was rebooted
ComboFix-quarantined-files.txt 2013-01-07 16:04
ComboFix2.txt 2013-01-06 16:00
.
Pre-Run: 10 770 030 592 bytes free
Post-Run: 9 adresárov, 10 668 466 176 voľných bajtov
.
- - End Of File - - B71750E1FA940FD8AF2F9AE868FF17D9

[kiara152]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:18:22, on 7. 1. 2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\TP-LINK\COMMON\RaRegistry.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WJATH\AthServer.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O4 - Global Startup: TP-LINK Wireless Utility.lnk = D:\TP-LINK\COMMON\TWCU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - wireless - C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - D:\TP-LINK\COMMON\RaRegistry.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5764 bytes