Prosím o kontrolu logu Vyřešeno

[Bax]

Dobrý den, mám problém asi před týdnem mi začali hrozně pomalu načítat webové stránky v prohlížeči tak jsem volal na UPC tam je vše v pořádku, takže je problém někde u mě. Zde na foru mi bylo řečeno, že sem mám dát tohle a že mi zde poradíte co dál.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:02:40, on 14.2.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AutoKMS] C:\WINDOWS\AutoKMS.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [OEXPRESS] C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-21-1409082233-1682526488-1801674531-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O16 - DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} (Active602XMLFiller Control) - https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 2452411890
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/a ... oader6.cab
O16 - DPF: {F92211F4-3913-4DC2-A275-756374D848B0} (ERViewerOCX Control) - http://212.24.157.235/MP4DVR.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Marvell RAID Event Agent (Marvell RAID) - Unknown owner - C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
O23 - Service: MRU Web Service (MRUWebService) - Apache Software Foundation - C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 13787 bytes



Malwarebytes Anti-Malware (PRO) 1.70.0.1100
http://www.malwarebytes.org

Verze: v2013.02.14.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Aleš :: RODINKA-406D41B [administrátor]

Ochrana: Zakázána

14.2.2013 15:02:10
MBAM-log-2013-02-14 (15-17-54).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 270912
Uplynulý čas: 14 minut, 52 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|AutoKMS (Riskware.Keygen) -> Data: C:\WINDOWS\AutoKMS.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\WINDOWS\AutoKMS.exe (Riskware.Keygen) -> Nebyla provedena žádná instrukce.
C:\WINDOWS\KMSEmulator.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.

(konec)

[Reklama]

[Bax]

Jestli tam žádný problém není, tak mi to taky prosím napište, abych tu nečekal zbytečně, děkuji.

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AutoKMS] C:\WINDOWS\AutoKMS.exe
O16 - DPF: {F92211F4-3913-4DC2-A275-756374D848B0} (ERViewerOCX Control) - http://212.24.157.235/MP4DVR.cab

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Jsou nějaké problémy?

Končím , pomůžou další rádci..

[Bax]

Malwarebytes Anti-Malware (PRO) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.14.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Aleš :: RODINKA-406D41B [administrátor]

Ochrana: Povolena

15.2.2013 14:26:33
mbam-log-2013-02-15 (14-26-33).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 272182
Uplynulý čas: 13 minut, 7 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\WINDOWS\AutoKMS.exe (Riskware.Keygen) -> Přesun do karantény a smazání se zdařilo.
C:\WINDOWS\KMSEmulator.exe (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.

(konec)

[Bax]

# AdwCleaner v2.112 - Logfile created 02/15/2013 at 15:36:56
# Updated 10/02/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Aleš - RODINKA-406D41B
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Aleš\Plocha\adwcleaner0.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar

***** [Registry] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp Toolbar
Key Found : HKLM\Software\PIP
Key Found : HKU\S-1-5-21-1409082233-1682526488-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Google Chrome v24.0.1312.57

File : C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [3291 octets] - [15/02/2013 15:36:42]
AdwCleaner[R2].txt - [3222 octets] - [15/02/2013 15:36:56]

########## EOF - C:\AdwCleaner[R2].txt - [3282 octets] ##########

[Bax]

15:39:01.0234 4988 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:39:01.0421 4988 ============================================================
15:39:01.0421 4988 Current date / time: 2013/02/15 15:39:01.0421
15:39:01.0421 4988 SystemInfo:
15:39:01.0421 4988
15:39:01.0421 4988 OS Version: 5.1.2600 ServicePack: 3.0
15:39:01.0421 4988 Product type: Workstation
15:39:01.0421 4988 ComputerName: RODINKA-406D41B
15:39:01.0421 4988 UserName: Aleš
15:39:01.0421 4988 Windows directory: C:\WINDOWS
15:39:01.0421 4988 System windows directory: C:\WINDOWS
15:39:01.0421 4988 Processor architecture: Intel x86
15:39:01.0421 4988 Number of processors: 4
15:39:01.0421 4988 Page size: 0x1000
15:39:01.0421 4988 Boot type: Normal boot
15:39:01.0421 4988 ============================================================
15:39:02.0734 4988 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:39:02.0750 4988 Drive \Device\Harddisk5\DR10 - Size: 0x73467E800 (28.82 Gb), SectorSize: 0x200, Cylinders: 0xEB2, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:39:02.0750 4988 ============================================================
15:39:02.0750 4988 \Device\Harddisk0\DR0:
15:39:02.0750 4988 MBR partitions:
15:39:02.0750 4988 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41
15:39:02.0750 4988 \Device\Harddisk5\DR10:
15:39:02.0750 4988 MBR partitions:
15:39:02.0750 4988 \Device\Harddisk5\DR10\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x39A2C81
15:39:02.0750 4988 ============================================================
15:39:02.0781 4988 C: <-> \Device\Harddisk0\DR0\Partition1
15:39:02.0781 4988 ============================================================
15:39:02.0781 4988 Initialize success
15:39:02.0781 4988 ============================================================
15:39:42.0343 4880 ============================================================
15:39:42.0343 4880 Scan started
15:39:42.0343 4880 Mode: Manual;
15:39:42.0343 4880 ============================================================
15:39:42.0718 4880 ================ Scan system memory ========================
15:39:42.0734 4880 System memory - ok
15:39:42.0734 4880 ================ Scan services =============================
15:39:42.0828 4880 [ 42FAEEF297D64C132862266418DBEF7F ] 602XML Updater C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
15:39:42.0828 4880 602XML Updater - ok
15:39:42.0906 4880 [ 149A8F7ADF9742554DC323E290551E3E ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
15:39:42.0906 4880 Aavmker4 - ok
15:39:42.0906 4880 Abiosdsk - ok
15:39:42.0906 4880 abp480n5 - ok
15:39:42.0968 4880 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
15:39:42.0968 4880 ACPI - ok
15:39:43.0000 4880 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
15:39:43.0000 4880 ACPIEC - ok
15:39:43.0062 4880 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
15:39:43.0062 4880 AdobeFlashPlayerUpdateSvc - ok
15:39:43.0078 4880 adpu160m - ok
15:39:43.0078 4880 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
15:39:43.0078 4880 aec - ok
15:39:43.0109 4880 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
15:39:43.0109 4880 AFD - ok
15:39:43.0125 4880 Aha154x - ok
15:39:43.0125 4880 aic78u2 - ok
15:39:43.0125 4880 aic78xx - ok
15:39:43.0156 4880 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
15:39:43.0156 4880 Alerter - ok
15:39:43.0187 4880 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
15:39:43.0187 4880 ALG - ok
15:39:43.0187 4880 AliIde - ok
15:39:43.0187 4880 amsint - ok
15:39:43.0218 4880 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
15:39:43.0218 4880 AppMgmt - ok
15:39:43.0250 4880 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
15:39:43.0250 4880 Arp1394 - ok
15:39:43.0250 4880 asc - ok
15:39:43.0250 4880 asc3350p - ok
15:39:43.0250 4880 asc3550 - ok
15:39:43.0296 4880 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
15:39:43.0312 4880 aspnet_state - ok
15:39:43.0328 4880 [ DE6ED95AEF259979B2830450072A627B ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
15:39:43.0328 4880 aswFsBlk - ok
15:39:43.0359 4880 [ CCAFDA4AB7F3738142B3BA7DA311FFB0 ] aswFW C:\WINDOWS\system32\drivers\aswFW.sys
15:39:43.0359 4880 aswFW - ok
15:39:43.0375 4880 [ E2FEE0486D68BF85355D3EDA1A24FF68 ] aswKbd C:\WINDOWS\system32\drivers\aswKbd.sys
15:39:43.0390 4880 aswKbd - ok
15:39:43.0406 4880 [ 84F0BE324EE111338589F448C3E8BAB2 ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
15:39:43.0406 4880 aswMon2 - ok
15:39:43.0421 4880 [ 7B948E3657BEA62E437BC46CA6EF6012 ] aswNdis C:\WINDOWS\system32\DRIVERS\aswNdis.sys
15:39:43.0421 4880 aswNdis - ok
15:39:43.0421 4880 [ DCF8B68A3A6217F87CA7FA95F535B47E ] aswNdis2 C:\WINDOWS\system32\drivers\aswNdis2.sys
15:39:43.0421 4880 aswNdis2 - ok
15:39:43.0421 4880 [ 7C9F0A2AB17D52261A9252A2EB320884 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
15:39:43.0421 4880 AswRdr - ok
15:39:43.0468 4880 [ B32E9AD44A1DBB3E8095E80F8DF32B03 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
15:39:43.0468 4880 aswSnx - ok
15:39:43.0468 4880 [ 67B558895695545FB0568B7541F3BCA7 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
15:39:43.0468 4880 aswSP - ok
15:39:43.0468 4880 [ E3E73B2B73A4DFADFDDF557192C4B08A ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
15:39:43.0484 4880 aswTdi - ok
15:39:43.0484 4880 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
15:39:43.0484 4880 AsyncMac - ok
15:39:43.0500 4880 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
15:39:43.0500 4880 atapi - ok
15:39:43.0500 4880 Atdisk - ok
15:39:43.0531 4880 [ 0E4BB35C5305099AC82053AC992E3E0E ] ATITool C:\WINDOWS\system32\DRIVERS\ATITool.sys
15:39:43.0531 4880 ATITool - ok
15:39:43.0578 4880 [ 6E996CF8459A2594E0E9609D0E34D41F ] atksgt C:\WINDOWS\system32\DRIVERS\atksgt.sys
15:39:43.0578 4880 atksgt - ok
15:39:43.0593 4880 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
15:39:43.0593 4880 Atmarpc - ok
15:39:43.0625 4880 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
15:39:43.0625 4880 AudioSrv - ok
15:39:43.0671 4880 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
15:39:43.0671 4880 audstub - ok
15:39:43.0718 4880 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
15:39:43.0718 4880 avast! Antivirus - ok
15:39:43.0734 4880 [ BC0E07A768A0A14C48E3CE1875F2C377 ] avast! Firewall C:\Program Files\AVAST Software\Avast\afwServ.exe
15:39:43.0734 4880 avast! Firewall - ok
15:39:43.0781 4880 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
15:39:43.0781 4880 Beep - ok
15:39:43.0812 4880 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
15:39:43.0906 4880 BITS - ok
15:39:43.0937 4880 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
15:39:43.0937 4880 Browser - ok
15:39:43.0968 4880 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
15:39:43.0968 4880 cbidf2k - ok
15:39:43.0984 4880 [ FDC06E2ADA8C468EBB161624E03976CF ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
15:39:43.0984 4880 CCDECODE - ok
15:39:43.0984 4880 cd20xrnt - ok
15:39:44.0015 4880 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
15:39:44.0015 4880 Cdaudio - ok
15:39:44.0031 4880 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
15:39:44.0031 4880 Cdfs - ok
15:39:44.0062 4880 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
15:39:44.0062 4880 Cdrom - ok
15:39:44.0062 4880 Changer - ok
15:39:44.0078 4880 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
15:39:44.0078 4880 CiSvc - ok
15:39:44.0093 4880 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
15:39:44.0093 4880 ClipSrv - ok
15:39:44.0140 4880 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:39:44.0203 4880 clr_optimization_v2.0.50727_32 - ok
15:39:44.0203 4880 CmdIde - ok
15:39:44.0203 4880 COMSysApp - ok
15:39:44.0203 4880 Cpqarray - ok
15:39:44.0203 4880 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
15:39:44.0218 4880 CryptSvc - ok
15:39:44.0218 4880 dac2w2k - ok
15:39:44.0218 4880 dac960nt - ok
15:39:44.0281 4880 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
15:39:44.0281 4880 DcomLaunch - ok
15:39:44.0312 4880 [ 6216FD7FD227DE454238A702B218CEC7 ] dgderdrv C:\WINDOWS\system32\drivers\dgderdrv.sys
15:39:44.0312 4880 dgderdrv - ok
15:39:44.0328 4880 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
15:39:44.0343 4880 Dhcp - ok
15:39:44.0359 4880 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
15:39:44.0359 4880 Disk - ok
15:39:44.0359 4880 dmadmin - ok
15:39:44.0390 4880 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
15:39:44.0390 4880 dmboot - ok
15:39:44.0406 4880 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
15:39:44.0406 4880 dmio - ok
15:39:44.0406 4880 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
15:39:44.0406 4880 dmload - ok
15:39:44.0437 4880 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
15:39:44.0437 4880 dmserver - ok
15:39:44.0453 4880 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
15:39:44.0453 4880 DMusic - ok
15:39:44.0468 4880 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
15:39:44.0468 4880 Dnscache - ok
15:39:44.0515 4880 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
15:39:44.0515 4880 Dot3svc - ok
15:39:44.0515 4880 dpti2o - ok
15:39:44.0546 4880 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
15:39:44.0546 4880 drmkaud - ok
15:39:44.0562 4880 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
15:39:44.0562 4880 EapHost - ok
15:39:44.0578 4880 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
15:39:44.0578 4880 ERSvc - ok
15:39:44.0609 4880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
15:39:44.0625 4880 Eventlog - ok
15:39:44.0640 4880 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
15:39:44.0640 4880 EventSystem - ok
15:39:44.0656 4880 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
15:39:44.0656 4880 Fastfat - ok
15:39:44.0718 4880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
15:39:44.0718 4880 FastUserSwitchingCompatibility - ok
15:39:44.0734 4880 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
15:39:44.0734 4880 Fdc - ok
15:39:44.0734 4880 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
15:39:44.0734 4880 Fips - ok
15:39:44.0750 4880 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
15:39:44.0750 4880 Flpydisk - ok
15:39:44.0781 4880 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
15:39:44.0781 4880 FltMgr - ok
15:39:44.0859 4880 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
15:39:44.0859 4880 FontCache3.0.0.0 - ok
15:39:44.0875 4880 [ CBE5F69A5E5B918225F420BA748F3742 ] FsUsbExDisk C:\WINDOWS\system32\FsUsbExDisk.SYS
15:39:44.0890 4880 FsUsbExDisk - ok
15:39:44.0906 4880 [ 346086A99E6347C11E20D3FCBAEEAB77 ] FsUsbExService C:\WINDOWS\system32\FsUsbExService.Exe
15:39:44.0921 4880 FsUsbExService - ok
15:39:44.0921 4880 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
15:39:44.0921 4880 Fs_Rec - ok
15:39:44.0921 4880 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
15:39:44.0921 4880 Ftdisk - ok
15:39:44.0937 4880 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\WINDOWS\system32\giveio.sys
15:39:44.0937 4880 giveio - ok
15:39:44.0953 4880 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
15:39:44.0968 4880 Gpc - ok
15:39:45.0015 4880 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
15:39:45.0015 4880 gupdate - ok
15:39:45.0046 4880 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
15:39:45.0046 4880 gupdatem - ok
15:39:45.0078 4880 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
15:39:45.0078 4880 gusvc - ok
15:39:45.0109 4880 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
15:39:45.0109 4880 HDAudBus - ok
15:39:45.0156 4880 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
15:39:45.0156 4880 helpsvc - ok
15:39:45.0156 4880 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
15:39:45.0156 4880 HidServ - ok
15:39:45.0171 4880 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
15:39:45.0171 4880 hidusb - ok
15:39:45.0187 4880 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
15:39:45.0187 4880 hkmsvc - ok
15:39:45.0187 4880 hpn - ok
15:39:45.0281 4880 [ 38D6B51F04DEF7FB248FA56E4C47407E ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
15:39:45.0281 4880 hpqcxs08 - ok
15:39:45.0296 4880 [ 3EE4A63539EC04EE2D4BD293985087AB ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
15:39:45.0296 4880 hpqddsvc - ok
15:39:45.0328 4880 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
15:39:45.0328 4880 HPZid412 - ok
15:39:45.0343 4880 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
15:39:45.0343 4880 HPZipr12 - ok
15:39:45.0359 4880 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
15:39:45.0359 4880 HPZius12 - ok
15:39:45.0406 4880 [ CBD09ED9CF6822177EE85AEA4D8816A2 ] HTCAND32 C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys
15:39:45.0406 4880 HTCAND32 - ok
15:39:45.0453 4880 [ 5C8BC8A28798FD010E7ABC4E0D588CAA ] HTCMonitorService C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
15:39:45.0453 4880 HTCMonitorService - ok
15:39:45.0500 4880 [ 04E3B3554076B8192A668EFE88A682A1 ] htcnprot C:\WINDOWS\system32\DRIVERS\htcnprot.sys
15:39:45.0500 4880 htcnprot - ok
15:39:45.0531 4880 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
15:39:45.0531 4880 HTTP - ok
15:39:45.0578 4880 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
15:39:45.0593 4880 HTTPFilter - ok
15:39:45.0593 4880 i2omgmt - ok
15:39:45.0593 4880 i2omp - ok
15:39:45.0593 4880 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
15:39:45.0593 4880 i8042prt - ok
15:39:45.0671 4880 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
15:39:45.0671 4880 IDriverT - ok
15:39:45.0703 4880 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:39:45.0734 4880 idsvc - ok
15:39:45.0734 4880 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
15:39:45.0734 4880 Imapi - ok
15:39:45.0765 4880 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
15:39:45.0765 4880 ImapiService - ok
15:39:45.0781 4880 ini910u - ok
15:39:45.0890 4880 [ E37589414437A60797E94C0F57C546DB ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
15:39:45.0906 4880 IntcAzAudAddService - ok
15:39:45.0906 4880 IntelIde - ok
15:39:45.0937 4880 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
15:39:45.0953 4880 intelppm - ok
15:39:45.0968 4880 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
15:39:45.0968 4880 Ip6Fw - ok
15:39:45.0984 4880 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:39:45.0984 4880 IpFilterDriver - ok
15:39:45.0984 4880 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
15:39:46.0000 4880 IpInIp - ok
15:39:46.0015 4880 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
15:39:46.0031 4880 IpNat - ok
15:39:46.0031 4880 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
15:39:46.0031 4880 IPSec - ok
15:39:46.0062 4880 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
15:39:46.0062 4880 IRENUM - ok
15:39:46.0093 4880 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
15:39:46.0093 4880 isapnp - ok
15:39:46.0203 4880 [ A0D14B7538FA3AE9CB771B9E99CECF43 ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
15:39:46.0203 4880 JavaQuickStarterService - ok
15:39:46.0203 4880 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
15:39:46.0203 4880 Kbdclass - ok
15:39:46.0203 4880 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
15:39:46.0203 4880 kbdhid - ok
15:39:46.0218 4880 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
15:39:46.0218 4880 kmixer - ok
15:39:46.0234 4880 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
15:39:46.0234 4880 KSecDD - ok
15:39:46.0281 4880 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
15:39:46.0281 4880 lanmanserver - ok
15:39:46.0312 4880 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
15:39:46.0328 4880 lanmanworkstation - ok
15:39:46.0328 4880 lbrtfdc - ok
15:39:46.0390 4880 [ D571C606E4391449293A706588CC4BDD ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
15:39:46.0390 4880 LightScribeService - ok
15:39:46.0421 4880 [ 975B6CF65F44E95883F3855BAE8CECAF ] lirsgt C:\WINDOWS\system32\DRIVERS\lirsgt.sys
15:39:46.0421 4880 lirsgt - ok
15:39:46.0468 4880 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
15:39:46.0468 4880 LmHosts - ok
15:39:46.0515 4880 [ 4948796055B270CAA6490586DBB0F527 ] Marvell RAID C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
15:39:46.0515 4880 Marvell RAID - ok
15:39:46.0546 4880 [ A3E700D78EEC390F1208098CDCA5C6B6 ] MarvinBus C:\WINDOWS\system32\DRIVERS\MarvinBus.sys
15:39:46.0546 4880 MarvinBus - ok
15:39:46.0562 4880 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
15:39:46.0562 4880 MBAMProtector - ok
15:39:46.0578 4880 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
15:39:46.0593 4880 MBAMScheduler - ok
15:39:46.0625 4880 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
15:39:46.0625 4880 MBAMService - ok
15:39:46.0640 4880 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
15:39:46.0656 4880 Messenger - ok
15:39:46.0687 4880 Microsoft SharePoint Workspace Audit Service - ok
15:39:46.0703 4880 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
15:39:46.0718 4880 mnmdd - ok
15:39:46.0734 4880 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
15:39:46.0734 4880 mnmsrvc - ok
15:39:46.0750 4880 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
15:39:46.0750 4880 Modem - ok
15:39:46.0765 4880 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
15:39:46.0765 4880 Mouclass - ok
15:39:46.0765 4880 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
15:39:46.0765 4880 mouhid - ok
15:39:46.0781 4880 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
15:39:46.0781 4880 MountMgr - ok
15:39:46.0781 4880 mraid35x - ok
15:39:46.0812 4880 [ 70149A8B2A9B171D07C20D5595282550 ] MRUWebService C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe
15:39:46.0812 4880 MRUWebService - ok
15:39:46.0828 4880 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
15:39:46.0828 4880 MRxDAV - ok
15:39:46.0859 4880 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:39:46.0859 4880 MRxSmb - ok
15:39:46.0906 4880 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
15:39:46.0906 4880 MSDTC - ok
15:39:46.0906 4880 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
15:39:46.0906 4880 Msfs - ok
15:39:46.0906 4880 MSIServer - ok
15:39:46.0921 4880 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
15:39:46.0921 4880 MSKSSRV - ok
15:39:46.0921 4880 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
15:39:46.0921 4880 MSPCLOCK - ok
15:39:46.0921 4880 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
15:39:46.0921 4880 MSPQM - ok
15:39:46.0953 4880 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
15:39:46.0968 4880 mssmbios - ok
15:39:46.0984 4880 [ D5059366B361F0E1124753447AF08AA2 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
15:39:46.0984 4880 MSTEE - ok
15:39:47.0015 4880 [ D48659BB24C48345D926ECB45C1EBDF5 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys
15:39:47.0015 4880 MTsensor - ok
15:39:47.0031 4880 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
15:39:47.0046 4880 Mup - ok
15:39:47.0062 4880 [ 86944F540289E16298AF4F5B1C45FA4E ] mv61xx C:\WINDOWS\system32\DRIVERS\mv61xx.sys
15:39:47.0062 4880 mv61xx - ok
15:39:47.0078 4880 [ AC31B352CE5E92704056D409834BEB74 ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
15:39:47.0078 4880 NABTSFEC - ok
15:39:47.0093 4880 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
15:39:47.0109 4880 napagent - ok
15:39:47.0156 4880 [ D9C2C7AA7D811709E63C7194AD4D345F ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
15:39:47.0156 4880 NBService - ok
15:39:47.0171 4880 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
15:39:47.0171 4880 NDIS - ok
15:39:47.0203 4880 [ ABD7629CF2796250F315C1DD0B6CF7A0 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
15:39:47.0203 4880 NdisIP - ok
15:39:47.0234 4880 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:39:47.0234 4880 NdisTapi - ok
15:39:47.0250 4880 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
15:39:47.0250 4880 Ndisuio - ok
15:39:47.0250 4880 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:39:47.0250 4880 NdisWan - ok
15:39:47.0281 4880 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
15:39:47.0281 4880 NDProxy - ok
15:39:47.0312 4880 [ 51C6D8BFBD4EA5B62A1BA7F4469250D3 ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
15:39:47.0312 4880 Net Driver HPZ12 - ok
15:39:47.0312 4880 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
15:39:47.0312 4880 NetBIOS - ok
15:39:47.0328 4880 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
15:39:47.0328 4880 NetBT - ok
15:39:47.0359 4880 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
15:39:47.0375 4880 NetDDE - ok
15:39:47.0375 4880 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
15:39:47.0375 4880 NetDDEdsdm - ok
15:39:47.0406 4880 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
15:39:47.0406 4880 Netlogon - ok
15:39:47.0453 4880 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
15:39:47.0453 4880 Netman - ok
15:39:47.0484 4880 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:39:47.0484 4880 NetTcpPortSharing - ok
15:39:47.0515 4880 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
15:39:47.0515 4880 NIC1394 - ok
15:39:47.0546 4880 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
15:39:47.0546 4880 Nla - ok
15:39:47.0562 4880 [ CB3267C4CEED06A6CB1EF127522D581B ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
15:39:47.0562 4880 NMIndexingService - ok
15:39:47.0593 4880 [ F6C40E0A565EE3CE5AEEB325E10054F2 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
15:39:47.0593 4880 nmwcd - ok
15:39:47.0640 4880 [ 2A394E9E1FA3565E4B2FEA470FFE4D6B ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
15:39:47.0640 4880 nmwcdc - ok
15:39:47.0640 4880 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
15:39:47.0640 4880 Npfs - ok
15:39:47.0671 4880 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
15:39:47.0671 4880 Ntfs - ok
15:39:47.0687 4880 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
15:39:47.0687 4880 NtLmSsp - ok
15:39:47.0734 4880 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
15:39:47.0750 4880 NtmsSvc - ok
15:39:47.0781 4880 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
15:39:47.0781 4880 Null - ok
15:39:48.0062 4880 [ 625F0E2467F6800E1D939CF22F2F6C99 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
15:39:48.0109 4880 nv - ok
15:39:48.0140 4880 [ E666A28CC51F04C7D972EF8AD4234BBA ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
15:39:48.0140 4880 NVSvc - ok
15:39:48.0218 4880 [ E7973587C80CC49DAD8E88AD45D2A1CC ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
15:39:48.0234 4880 nvUpdatusService - ok
15:39:48.0265 4880 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
15:39:48.0265 4880 NwlnkFlt - ok
15:39:48.0265 4880 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
15:39:48.0265 4880 NwlnkFwd - ok
15:39:48.0281 4880 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
15:39:48.0281 4880 ohci1394 - ok
15:39:48.0296 4880 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:39:48.0296 4880 ose - ok
15:39:48.0500 4880 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:39:48.0515 4880 osppsvc - ok
15:39:48.0625 4880 [ 01907300EB52206B06FACB9608F369A9 ] PanService C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
15:39:48.0625 4880 PanService - ok
15:39:48.0640 4880 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\drivers\Parport.sys
15:39:48.0640 4880 Parport - ok
15:39:48.0640 4880 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
15:39:48.0640 4880 PartMgr - ok
15:39:48.0671 4880 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
15:39:48.0671 4880 ParVdm - ok
15:39:48.0687 4880 [ C498B680105FA9D7E5F08699A746049A ] PassThru Service C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
15:39:48.0687 4880 PassThru Service - ok
15:39:48.0718 4880 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
15:39:48.0718 4880 pccsmcfd - ok
15:39:48.0734 4880 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
15:39:48.0734 4880 PCI - ok
15:39:48.0734 4880 PCIDump - ok
15:39:48.0750 4880 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
15:39:48.0750 4880 PCIIde - ok
15:39:48.0765 4880 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
15:39:48.0765 4880 Pcmcia - ok
15:39:48.0781 4880 [ 5B6C11DE7E839C05248CED8825470FEF ] Pcouffin C:\WINDOWS\system32\Drivers\Pcouffin.sys
15:39:48.0781 4880 Pcouffin - ok
15:39:48.0796 4880 PDCOMP - ok
15:39:48.0796 4880 PDFRAME - ok
15:39:48.0796 4880 PDRELI - ok
15:39:48.0796 4880 PDRFRAME - ok
15:39:48.0796 4880 perc2 - ok
15:39:48.0796 4880 perc2hib - ok
15:39:48.0843 4880 [ C463F4E36E7A90BED38483939ADAB014 ] PinnacleMarvinAVS C:\WINDOWS\system32\DRIVERS\MarvinAVS.sys
15:39:48.0843 4880 PinnacleMarvinAVS - ok
15:39:48.0859 4880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
15:39:48.0859 4880 PlugPlay - ok
15:39:48.0875 4880 [ 79834AA2FBF9FE81EEBB229024F6F7FC ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
15:39:48.0875 4880 Pml Driver HPZ12 - ok
15:39:48.0890 4880 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
15:39:48.0890 4880 PolicyAgent - ok
15:39:48.0890 4880 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
15:39:48.0890 4880 PptpMiniport - ok
15:39:48.0906 4880 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
15:39:48.0906 4880 ProtectedStorage - ok
15:39:48.0906 4880 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
15:39:48.0906 4880 PSched - ok
15:39:48.0921 4880 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
15:39:48.0921 4880 Ptilink - ok
15:39:48.0953 4880 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
15:39:48.0953 4880 PxHelp20 - ok
15:39:48.0953 4880 ql1080 - ok
15:39:48.0953 4880 Ql10wnt - ok
15:39:48.0968 4880 ql12160 - ok
15:39:48.0968 4880 ql1240 - ok
15:39:48.0968 4880 ql1280 - ok
15:39:48.0968 4880 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
15:39:48.0968 4880 RasAcd - ok
15:39:49.0015 4880 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
15:39:49.0015 4880 RasAuto - ok
15:39:49.0031 4880 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
15:39:49.0031 4880 Rasl2tp - ok
15:39:49.0046 4880 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
15:39:49.0062 4880 RasMan - ok
15:39:49.0062 4880 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:39:49.0062 4880 RasPppoe - ok
15:39:49.0062 4880 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
15:39:49.0062 4880 Raspti - ok
15:39:49.0109 4880 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
15:39:49.0109 4880 Rdbss - ok
15:39:49.0109 4880 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
15:39:49.0125 4880 RDPCDD - ok
15:39:49.0125 4880 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
15:39:49.0125 4880 rdpdr - ok
15:39:49.0187 4880 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
15:39:49.0203 4880 RDPWD - ok
15:39:49.0234 4880 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
15:39:49.0234 4880 RDSessMgr - ok
15:39:49.0265 4880 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
15:39:49.0265 4880 redbook - ok
15:39:49.0296 4880 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
15:39:49.0296 4880 RemoteAccess - ok
15:39:49.0312 4880 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
15:39:49.0312 4880 RemoteRegistry - ok
15:39:49.0328 4880 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
15:39:49.0328 4880 RpcLocator - ok
15:39:49.0359 4880 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
15:39:49.0359 4880 RpcSs - ok
15:39:49.0390 4880 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
15:39:49.0406 4880 RSVP - ok
15:39:49.0406 4880 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
15:39:49.0406 4880 SamSs - ok
15:39:49.0421 4880 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
15:39:49.0421 4880 SCardSvr - ok
15:39:49.0453 4880 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
15:39:49.0453 4880 Schedule - ok
15:39:49.0468 4880 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
15:39:49.0468 4880 Secdrv - ok
15:39:49.0500 4880 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
15:39:49.0500 4880 seclogon - ok
15:39:49.0500 4880 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
15:39:49.0515 4880 SENS - ok
15:39:49.0531 4880 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
15:39:49.0531 4880 serenum - ok
15:39:49.0531 4880 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
15:39:49.0546 4880 Serial - ok
15:39:49.0593 4880 [ F31E9531AF225CA25350D5E87E999B31 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
15:39:49.0609 4880 ServiceLayer - ok
15:39:49.0671 4880 [ 79007F94F23218DBC563504958AC62BC ] sfdrv01 C:\WINDOWS\system32\drivers\sfdrv01.sys
15:39:49.0671 4880 sfdrv01 - ok
15:39:49.0671 4880 [ 097E8721F106DDE9217532323FCD17BE ] sfhlp02 C:\WINDOWS\system32\drivers\sfhlp02.sys
15:39:49.0671 4880 sfhlp02 - ok
15:39:49.0687 4880 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
15:39:49.0687 4880 Sfloppy - ok
15:39:49.0703 4880 [ 0D197DE41729BDC065484A123A9E3FB6 ] sfsync02 C:\WINDOWS\system32\drivers\sfsync02.sys
15:39:49.0703 4880 sfsync02 - ok
15:39:49.0718 4880 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
15:39:49.0734 4880 SharedAccess - ok
15:39:49.0750 4880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
15:39:49.0750 4880 ShellHWDetection - ok
15:39:49.0750 4880 Simbad - ok
15:39:49.0968 4880 [ 23E3C83DFF7B09A97B01A85ED8A44478 ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
15:39:49.0984 4880 Skype C2C Service - ok
15:39:50.0062 4880 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
15:39:50.0062 4880 SkypeUpdate - ok
15:39:50.0062 4880 [ 1FFC44D6787EC1EA9A2B1440A90FA5C1 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
15:39:50.0062 4880 SLIP - ok
15:39:50.0156 4880 [ 5177D14A78E60FD61DCFC6B388E7E971 ] Sony PC Companion C:\Program Files\Sony\Sony PC Companion\PCCService.exe
15:39:50.0156 4880 Sony PC Companion - ok
15:39:50.0156 4880 Sparrow - ok
15:39:50.0171 4880 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\WINDOWS\system32\speedfan.sys
15:39:50.0187 4880 speedfan - ok
15:39:50.0203 4880 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
15:39:50.0203 4880 splitter - ok
15:39:50.0218 4880 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
15:39:50.0234 4880 Spooler - ok
15:39:50.0281 4880 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\WINDOWS\system32\Drivers\sptd.sys
15:39:50.0281 4880 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
15:39:50.0281 4880 sptd ( LockedFile.Multi.Generic ) - warning
15:39:50.0281 4880 sptd - detected LockedFile.Multi.Generic (1)
15:39:50.0281 4880 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
15:39:50.0281 4880 sr - ok
15:39:50.0312 4880 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
15:39:50.0328 4880 srservice - ok
15:39:50.0343 4880 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
15:39:50.0359 4880 Srv - ok
15:39:50.0375 4880 [ B2063CE662AF3AB20045121A5B716DF6 ] sscebus C:\WINDOWS\system32\DRIVERS\sscebus.sys
15:39:50.0375 4880 sscebus - ok
15:39:50.0375 4880 [ 66799DC0AFE3DCAF8368CAE17394A762 ] sscemdfl C:\WINDOWS\system32\DRIVERS\sscemdfl.sys
15:39:50.0375 4880 sscemdfl - ok
15:39:50.0375 4880 [ CBF03FFC08F8DB547BAB2F79AA663D16 ] sscemdm C:\WINDOWS\system32\DRIVERS\sscemdm.sys
15:39:50.0390 4880 sscemdm - ok
15:39:50.0421 4880 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
15:39:50.0421 4880 SSDPSRV - ok
15:39:50.0437 4880 [ CD752FD9F4B70D00E0C984890E2DBFEB ] ssudcdf C:\WINDOWS\system32\DRIVERS\ssudcdf.sys
15:39:50.0437 4880 ssudcdf - ok
15:39:50.0453 4880 [ 3F0164FBC0BD1ADBD02DF9759181451A ] ss_bbus C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
15:39:50.0468 4880 ss_bbus - ok
15:39:50.0468 4880 [ B89D62206034E5FE573C80A24DD55675 ] ss_bmdfl C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
15:39:50.0468 4880 ss_bmdfl - ok
15:39:50.0484 4880 [ 1ED0FCEA586FE2A416EE15196E5631DD ] ss_bmdm C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
15:39:50.0484 4880 ss_bmdm - ok
15:39:50.0515 4880 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
15:39:50.0515 4880 stisvc - ok
15:39:50.0531 4880 [ A9F9FD0212E572B84EDB9EB661F6BC04 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
15:39:50.0531 4880 streamip - ok
15:39:50.0562 4880 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
15:39:50.0562 4880 swenum - ok
15:39:50.0578 4880 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
15:39:50.0578 4880 swmidi - ok
15:39:50.0578 4880 SwPrv - ok
15:39:50.0578 4880 symc810 - ok
15:39:50.0578 4880 symc8xx - ok
15:39:50.0578 4880 sym_hi - ok
15:39:50.0593 4880 sym_u3 - ok
15:39:50.0625 4880 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
15:39:50.0625 4880 sysaudio - ok
15:39:50.0656 4880 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
15:39:50.0656 4880 SysmonLog - ok
15:39:50.0671 4880 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
15:39:50.0687 4880 TapiSrv - ok
15:39:50.0703 4880 [ 04E1C782CF14B7282EBC633B0FD3ED16 ] TBPanel C:\WINDOWS\system32\drivers\TBPanel.sys
15:39:50.0703 4880 TBPanel - ok
15:39:50.0734 4880 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
15:39:50.0750 4880 Tcpip - ok
15:39:50.0765 4880 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
15:39:50.0765 4880 TDPIPE - ok
15:39:50.0781 4880 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
15:39:50.0781 4880 TDTCP - ok
15:39:50.0796 4880 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
15:39:50.0796 4880 TermDD - ok
15:39:50.0828 4880 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
15:39:50.0828 4880 TermService - ok
15:39:50.0859 4880 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
15:39:50.0859 4880 Themes - ok
15:39:50.0890 4880 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
15:39:50.0890 4880 TlntSvr - ok
15:39:50.0906 4880 TosIde - ok
15:39:50.0906 4880 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
15:39:50.0906 4880 TrkWks - ok
15:39:50.0937 4880 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
15:39:50.0937 4880 Udfs - ok
15:39:50.0953 4880 ultra - ok
15:39:50.0968 4880 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
15:39:50.0968 4880 Update - ok
15:39:51.0015 4880 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
15:39:51.0015 4880 upnphost - ok
15:39:51.0046 4880 [ 47F5F9D837D80FFD5882A14DB9DA0A67 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
15:39:51.0046 4880 upperdev - ok
15:39:51.0062 4880 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
15:39:51.0062 4880 UPS - ok
15:39:51.0093 4880 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
15:39:51.0093 4880 usbaudio - ok
15:39:51.0109 4880 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
15:39:51.0109 4880 usbccgp - ok
15:39:51.0125 4880 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
15:39:51.0125 4880 usbehci - ok
15:39:51.0125 4880 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
15:39:51.0140 4880 usbhub - ok
15:39:51.0156 4880 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
15:39:51.0156 4880 usbprint - ok
15:39:51.0171 4880 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
15:39:51.0171 4880 usbscan - ok
15:39:51.0187 4880 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
15:39:51.0187 4880 usbser - ok
15:39:51.0187 4880 [ E44F0D17BE0908B58DCC99CCB99C6C32 ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
15:39:51.0203 4880 UsbserFilt - ok
15:39:51.0218 4880 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
15:39:51.0218 4880 usbstor - ok
15:39:51.0234 4880 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
15:39:51.0234 4880 usbuhci - ok
15:39:51.0234 4880 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
15:39:51.0234 4880 usbvideo - ok
15:39:51.0281 4880 [ B6CC50279D6CD28E090A5D33244ADC9A ] usb_rndisx C:\WINDOWS\system32\DRIVERS\usb8023x.sys
15:39:51.0281 4880 usb_rndisx - ok
15:39:51.0328 4880 [ C90055BD2BB41443462EA715E0876B8D ] V0260VID C:\WINDOWS\system32\DRIVERS\V0260Vid.sys
15:39:51.0328 4880 V0260VID - ok
15:39:51.0328 4880 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
15:39:51.0328 4880 VgaSave - ok
15:39:51.0328 4880 ViaIde - ok
15:39:51.0328 4880 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
15:39:51.0343 4880 VolSnap - ok
15:39:51.0359 4880 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
15:39:51.0375 4880 VSS - ok
15:39:51.0406 4880 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
15:39:51.0421 4880 W32Time - ok
15:39:51.0421 4880 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
15:39:51.0421 4880 Wanarp - ok
15:39:51.0468 4880 [ 4A954A20A4C73D6DB13C0FE25F3F1B0C ] wceusbsh C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
15:39:51.0468 4880 wceusbsh - ok
15:39:51.0500 4880 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
15:39:51.0500 4880 Wdf01000 - ok
15:39:51.0515 4880 WDICA - ok
15:39:51.0562 4880 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
15:39:51.0562 4880 wdmaud - ok
15:39:51.0578 4880 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
15:39:51.0578 4880 WebClient - ok
15:39:51.0656 4880 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
15:39:51.0656 4880 winmgmt - ok
15:39:51.0671 4880 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
15:39:51.0687 4880 WmdmPmSN - ok
15:39:51.0718 4880 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
15:39:51.0718 4880 Wmi - ok
15:39:51.0734 4880 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
15:39:51.0734 4880 WmiApSrv - ok
15:39:51.0812 4880 [ 3739866D20ABD42F26A7B85F9E2560AF ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
15:39:51.0828 4880 WMPNetworkSvc - ok
15:39:51.0828 4880 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
15:39:51.0843 4880 WpdUsb - ok
15:39:51.0859 4880 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
15:39:51.0859 4880 wscsvc - ok
15:39:51.0859 4880 [ 233CDD1C06942115802EB7CE6669E099 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
15:39:51.0859 4880 WSTCODEC - ok
15:39:51.0890 4880 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
15:39:51.0890 4880 wuauserv - ok
15:39:51.0921 4880 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
15:39:51.0921 4880 WudfPf - ok
15:39:51.0921 4880 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
15:39:51.0921 4880 WudfRd - ok
15:39:51.0937 4880 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
15:39:51.0953 4880 WudfSvc - ok
15:39:51.0968 4880 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
15:39:52.0093 4880 WZCSVC - ok
15:39:52.0109 4880 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
15:39:52.0125 4880 xmlprov - ok
15:39:52.0156 4880 [ 9278A9870D9E919B20EBC17299FBB107 ] yukonwxp C:\WINDOWS\system32\DRIVERS\yk51x86.sys
15:39:52.0156 4880 yukonwxp - ok
15:39:52.0171 4880 ================ Scan global ===============================
15:39:52.0203 4880 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
15:39:52.0250 4880 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
15:39:52.0265 4880 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
15:39:52.0328 4880 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
15:39:52.0328 4880 [Global] - ok
15:39:52.0328 4880 ================ Scan MBR ==================================
15:39:52.0359 4880 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
15:39:52.0484 4880 \Device\Harddisk0\DR0 - ok
15:39:52.0484 4880 [ DDAE9D649DB12F6AFF24483F2C298989 ] \Device\Harddisk5\DR10
15:39:55.0656 4880 \Device\Harddisk5\DR10 - ok
15:39:55.0671 4880 ================ Scan VBR ==================================
15:39:55.0671 4880 [ 1C4A8453681E4FDE97A5CAFD0419B8F7 ] \Device\Harddisk0\DR0\Partition1
15:39:55.0671 4880 \Device\Harddisk0\DR0\Partition1 - ok
15:39:55.0671 4880 [ 2BD2C8AF256634E4DB01645C7B5AC34F ] \Device\Harddisk5\DR10\Partition1
15:39:55.0671 4880 \Device\Harddisk5\DR10\Partition1 - ok
15:39:55.0671 4880 ============================================================
15:39:55.0671 4880 Scan finished
15:39:55.0671 4880 ============================================================
15:39:55.0671 2860 Detected object count: 1
15:39:55.0671 2860 Actual detected object count: 1
15:40:50.0687 2860 sptd ( LockedFile.Multi.Generic ) - skipped by user
15:40:50.0687 2860 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
15:40:52.0796 6028 Deinitialize success

[Bax]

Mám problém s TFC jsem ho spustil dal start zmizely všechny ikony, ale pak dál nic čárka se nepohybovala tak jsem na to kliknul objevili se mi tam takový ty hodiny tak jsem čekal a čekal a pořád nic přitom vy jste psal, že to nemá trvat dlouho no tak jsem to chtěl zavřít, ale potom to napsalo že program neodpovídá tak jsem to musel tlačítkem restartovat. Po znovu zapnutí jsem to zkusil znova a stalo se to samé. Co s tím?

[Žbeky]

Tak ho nedělej

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“)
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt), jeho obsah sem celý vlož.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

[Bax]

# AdwCleaner v2.112 - Logfile created 02/15/2013 at 19:44:52
# Updated 10/02/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Aleš - RODINKA-406D41B
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Aleš\Plocha\adwcleaner0.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp Toolbar
Key Deleted : HKLM\Software\PIP
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Google Chrome v24.0.1312.57

File : C:\Documents and Settings\Aleš\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [3291 octets] - [15/02/2013 15:36:42]
AdwCleaner[R2].txt - [3351 octets] - [15/02/2013 15:36:56]
AdwCleaner[S1].txt - [3216 octets] - [15/02/2013 19:44:52]

########## EOF - C:\AdwCleaner[S1].txt - [3276 octets] ##########

[Bax]

Ten log z ComboFix tam nemám.

[Bax]

Po jednom z těch předešlých programů mi na disku C jakoby zprůhledněli některé ikony. Je to normální?

[Žbeky]

Je to možné

Combofix zkus v nouzovém režimu