Pri vypinani PC musim ukoncit proces RUN32DLL

[okno123svk]

Zdravim,

Raz mi urobilo ked som zapol PC tak CPU bolo vytazene na 100%. V procesoch to robil prave run32dll tak som ho zavrel a od vtedy.

Mi robi proble,m ked vypinam PC tak mi nabehne, ze ukoncuje proces Run32DLL a musim dat ukoncit ihned, inak sa PC samo nevypne.

Tu davam log s RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Erik at 2013-07-12 17:26:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 26 GB (23%) free of 114 GB
Total RAM: 3071 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:26:34, on 12.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\Program Files\Ask.com\Updater\Updater.exe
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\Opera\opera.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Program Files\Garena Plus\GarenaMessenger.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\rundll32.exe
D:\Documents and Settings\Erik\Desktop\RSIT.exe
D:\Program Files\trend micro\Erik.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?affID=119 ... 19661675EE
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - D:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - D:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll
O3 - Toolbar: KMPlayer Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ApnUpdater] "D:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BrowserProtect - Unknown owner - D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 7532 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Adobe Flash Player Updater.job
D:\WINDOWS\tasks\avast! Emergency Update.job
D:\WINDOWS\tasks\EPUpdater.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
D:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre7\bin\ssv.dll [2013-05-12 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
delta Helper Object - D:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll [2013-03-13 251288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
KMPlayer Toolbar - D:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-12 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{82E1477C-B154-48D3-9891-33D83C26BCD3} - Delta Toolbar - D:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll [2013-03-13 325016]
{D4027C7F-154A-4066-A1AD-4243D8127440} - KMPlayer Toolbar - D:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=D:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"avast"=D:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
""= []
"ApnUpdater"=D:\Program Files\Ask.com\Updater\Updater.exe [2013-04-01 1719944]
"Adobe ARM"=D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"RivaTunerStartupDaemon"=D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe [2009-08-22 2781184]
"RTHDCPL"=D:\WINDOWS\RTHDCPL.EXE [2006-08-01 16049664]
"Alcmtr"=D:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ATICustomerCare"=D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-11-16 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=D:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"GarenaPlus"=D:\Program Files\Garena Plus\GarenaMessenger.exe [2013-06-19 9873200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
D:\WINDOWS\system32\antiwpa.dll [2011-01-06 60416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
D:\WINDOWS\system32\Ati2evxx.dll [2012-11-16 192512]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"D:\Program Files\Opera\opera.exe"="D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"D:\Games\World_of_Tanks\WoTLauncher.exe"="D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"D:\Documents and Settings\Erik\Local Settings\Apps\2.0\CE7LRHX6.B36\AECC8Z69.CO7\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\Launcher.exe"="D:\Documents and Settings\Erik\Local Settings\Apps\2.0\CE7LRHX6.B36\AECC8Z69.CO7\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\Launcher.exe:*:Enabled:Launcher"
"D:\WINDOWS\system32\PnkBstrA.exe"="D:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"D:\WINDOWS\system32\PnkBstrB.exe"="D:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe"="D:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe:*:Enabled:GRO Client"
"D:\Documents and Settings\Erik\Application Data\uTorrent\uTorrent.exe"="D:\Documents and Settings\Erik\Application Data\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\JDownloader\jre\bin\javaw.exe"="D:\Program Files\JDownloader\jre\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\WINDOWS\system32\javaw.exe"="D:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Activision\Call of Duty - Black Ops\BlackOpsMP.exe"="D:\Program Files\Activision\Call of Duty - Black Ops\BlackOpsMP.exe:*:Enabled:BlackOpsMP"
"D:\Program Files\Garena Plus\Room\garena_room.exe"="D:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:garena_room"
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Warcraft III\Warcraft III.exe"="D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\Program Files\Warcraft III\War3.exe"="D:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"D:\Program Files\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe"="D:\Program Files\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII"
"D:\Program Files\Pando Networks\Media Booster\PMB.exe"="D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Pando Networks\Media Booster\PMB.exe"="D:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=D:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=D:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-07-12 17:26:27 ----D---- D:\Program Files\trend micro
2013-07-12 17:26:26 ----D---- D:\rsit
2013-07-11 19:31:17 ----D---- D:\Documents and Settings\Erik\Application Data\LolClient
2013-07-10 20:35:34 ----SHD---- D:\WINDOWS\system32\AI_RecycleBin
2013-07-10 20:35:28 ----D---- D:\Riot Games
2013-07-10 20:34:56 ----D---- D:\Documents and Settings\All Users\Application Data\PMB Files
2013-07-10 20:34:45 ----D---- D:\Program Files\Pando Networks
2013-07-10 20:34:02 ----D---- D:\Documents and Settings\Erik\Application Data\Riot Games
2013-06-21 08:48:46 ----D---- D:\Documents and Settings\Erik\Application Data\File Scout
2013-06-18 22:38:39 ----D---- D:\Documents and Settings\All Users\Application Data\ATI
2013-06-18 20:11:44 ----A---- D:\WINDOWS\system32\drivers\AtihdXP3.sys
2013-06-18 20:08:35 ----D---- D:\AMD
2013-06-18 19:58:15 ----D---- D:\Program Files\The KMPlayer
2013-06-18 19:44:54 ----D---- D:\Documents and Settings\Erik\Application Data\vlc
2013-06-18 19:44:05 ----D---- D:\Program Files\VideoLAN
2013-06-18 19:38:34 ----D---- D:\Program Files\MPC-HC
2013-06-18 19:36:12 ----D---- D:\Documents and Settings\Erik\Application Data\Media Player Classic
2013-06-16 22:38:21 ----D---- D:\Program Files\SystemRequirementsLab
2013-06-16 22:38:21 ----D---- D:\Documents and Settings\All Users\Application Data\SystemRequirementsLab
2013-06-16 22:38:10 ----D---- D:\WINDOWS\Sun

======List of files/folders modified in the last 1 month======

2013-07-12 17:26:27 ----RD---- D:\Program Files
2013-07-12 17:14:28 ----D---- D:\Documents and Settings\All Users\Application Data\GarenaMessenger
2013-07-12 17:14:27 ----D---- D:\Documents and Settings\Erik\Application Data\GarenaPlus
2013-07-12 17:12:18 ----D---- D:\WINDOWS\system32
2013-07-12 17:12:18 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2013-07-12 17:10:56 ----D---- D:\Documents and Settings\Erik\Application Data\Skype
2013-07-12 17:09:53 ----D---- D:\WINDOWS\Temp
2013-07-12 17:07:34 ----SD---- D:\WINDOWS\Tasks
2013-07-12 15:00:18 ----A---- D:\WINDOWS\SchedLgU.Txt
2013-07-11 19:31:12 ----D---- D:\WINDOWS\Prefetch
2013-07-11 16:26:16 ----D---- D:\WINDOWS\system32\config
2013-07-11 16:03:20 ----D---- D:\WINDOWS
2013-07-10 22:19:01 ----D---- D:\WINDOWS\system32\CatRoot2
2013-07-10 20:35:45 ----HD---- D:\WINDOWS\inf
2013-07-10 20:35:39 ----D---- D:\WINDOWS\system32\DirectX
2013-07-10 20:35:35 ----SHD---- D:\WINDOWS\Installer
2013-07-10 20:35:35 ----D---- D:\WINDOWS\Logs
2013-07-10 15:25:58 ----D---- D:\Program Files\Opera
2013-06-27 20:24:12 ----D---- D:\Documents and Settings\Erik\Application Data\abgx360
2013-06-23 20:38:00 ----D---- D:\Documents and Settings\Erik\Application Data\Bioshock
2013-06-20 01:32:49 ----D---- D:\Program Files\Warcraft III
2013-06-19 23:21:34 ----D---- D:\Program Files\Garena Plus
2013-06-18 20:13:01 ----D---- D:\WINDOWS\system32\CatRoot
2013-06-18 20:11:53 ----RSHDC---- D:\WINDOWS\system32\dllcache
2013-06-18 20:11:49 ----D---- D:\WINDOWS\system32\drivers
2013-06-18 20:11:44 ----DC---- D:\WINDOWS\system32\DRVSTORE
2013-06-18 20:11:06 ----D---- D:\WINDOWS\system32\ReinstallBackups
2013-06-15 00:55:34 ----D---- D:\Documents and Settings\Erik\Application Data\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; D:\WINDOWS\system32\drivers\aswRvrt.sys [2013-03-07 49248]
R0 nvata;nvata; D:\WINDOWS\system32\DRIVERS\nvata.sys [2006-06-28 105088]
R0 nvgts;nvgts; D:\WINDOWS\system32\DRIVERS\nvgts.sys [2008-12-14 145952]
R1 AswRdr;aswRdr; D:\WINDOWS\system32\drivers\AswRdr.sys [2013-03-07 49760]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2013-03-07 765736]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2013-03-07 368176]
R1 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2013-03-07 62376]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; D:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-04-27 242240]
R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-03-07 29816]
R2 aswMonFlt;aswMonFlt; \??\D:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-11-16 7874560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; D:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-01 4356608]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; D:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; D:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 RivaTuner32;RivaTuner32; \??\D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys []
S1 kbdhid;Keyboard HID Driver; D:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aswVmm;aswVmm; D:\WINDOWS\system32\drivers\aswVmm.sys [2013-03-07 164736]
S3 AtiHdmiService;ATI Function Driver for HDMI Service; D:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-20 93696]
S3 ENTECH;ENTECH; \??\D:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Program Files\Garena Plus\Room\safedrv.sys []
S3 GPU-Z;GPU-Z; \??\D:\DOCUME~1\Erik\LOCALS~1\Temp\GPU-Z.sys []
S3 HidUsb;Microsoft HID Class Driver; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Mouse HID Driver; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 usbccgp;Microsoft USB Generic Parent Driver; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;USB Mass Storage Driver; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\D:\Documents and Settings\Erik\Local Settings\Temp\tmp1.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2012-11-16 643072]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 BrowserProtect;BrowserProtect; D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-06-03 3085264]
R2 ForcewareWebInterface;Forceware Web Interface; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 JavaQuickStarterService;Java Quick Starter; D:\Program Files\Java\jre7\bin\jqs.exe [2013-05-12 181664]
R2 nSvcIp;ForceWare IP service; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 PnkBstrA;PnkBstrA; D:\WINDOWS\system32\PnkBstrA.exe [2013-05-17 76888]
S2 ATI Smart;ATI Smart; D:\WINDOWS\system32\ati2sgag.exe [2009-05-15 593920]
S2 gupdate;Služba Google Update (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-27 116648]
S2 SkypeUpdate;Skype Updater; D:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-27 116648]
S3 IDriverT;InstallDriver Table Manager; D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


Diky moc dopredu za pomoc.

[Reklama]

[jaro3]

Příště vlož HJT:
viewtopic.php?f=70&t=5119

MSIE: Internet Explorer v6.00 --chtělo by to aktualizovat IE.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[okno123svk]

Zdravim osprvadlnujem sa za zdrzanie.

Log s adwcleaner

# AdwCleaner v2.305 - Logfile created 07/16/2013 at 18:39:48
# Updated 11/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Erik - ERIK-91F951D550
# Boot Mode : Normal
# Running from : D:\Documents and Settings\Erik\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : BrowserProtect

***** [Files / Folders] *****

File Found : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
File Found : D:\WINDOWS\Tasks\EPUpdater.job
File Found : D:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Folder Found : D:\Documents and Settings\All Users\Application Data\Babylon
Folder Found : D:\Documents and Settings\All Users\Application Data\BrowserProtect
Folder Found : D:\Documents and Settings\Erik\Application Data\BabSolution
Folder Found : D:\Documents and Settings\Erik\Application Data\Babylon
Folder Found : D:\Documents and Settings\Erik\Application Data\delta
Folder Found : D:\Documents and Settings\Erik\Application Data\file scout
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\APN
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\AskToolbar
Folder Found : D:\Documents and Settings\Erik\Local Settings\Application Data\Bundled software uninstaller
Folder Found : D:\Program Files\Ask.com
Folder Found : D:\Program Files\delta
Folder Found : D:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Key Found : HKCU\Software\82d6debd6ae845
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\BI
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\Delta
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\82d6debd6ae845
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB61AF52AD64B6B45930BE969F316720
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Found : HKLM\Software\PIP
Key Found : HKU\S-1-5-21-1659004503-682003330-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

***** [Internet Browsers] *****

-\\ Internet Explorer v6.0.2900.5512

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE

-\\ Google Chrome v28.0.1500.72

File : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.16.1860.0

File : D:\Documents and Settings\Erik\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : D:\Documents and Settings\Administrator\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [12670 octets] - [16/07/2013 18:39:48]

########## EOF - D:\AdwCleaner[R1].txt - [12731 octets] ##########


Log s Malwarebytes' Anti-Malware

Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.07.16.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Erik :: ERIK-91F951D550 [administrátor]

Ochrana: Zapnuté

16.7.2013 18:43:49
MBAM-log-2013-07-16 (18-52-38).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 219648
Uplynutý čas: 8 min, 10 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 2
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll (Adware.BProtector) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.

Detegované registračné kľúče: 2
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (PUP.Wpakill) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (Adware.BProtector) -> Škodlivý: (d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll) Dobrý: () -> Žiadna úloha nevykonaná.

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 6
D:\Documents and Settings\All Users\Application Data\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll (Adware.BProtector) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-Activator-for-SP3.rar (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-SP3-ACTIVATION-.rar (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll4D4BD7 (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Žiadna úloha nevykonaná.

(koniec)

Diky moc dopredu za pomoc.

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[okno123svk]

Zdravim teraz pre istotu po restarte musim nahodit nova uloha explorer.exe inak ikony nenabehnu no kazdopadne tu su logy.

ADware log :

# AdwCleaner v2.305 - Logfile created 07/18/2013 at 13:39:29
# Updated 11/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Erik - ERIK-91F951D550
# Boot Mode : Normal
# Running from : D:\Documents and Settings\Erik\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : BrowserProtect

***** [Files / Folders] *****

File Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : D:\WINDOWS\Tasks\BrowserProtect.job
File Deleted : D:\WINDOWS\Tasks\EPUpdater.job
File Deleted : D:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Folder Deleted : D:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : D:\Documents and Settings\All Users\Application Data\BrowserProtect
Folder Deleted : D:\Documents and Settings\Erik\Application Data\BabSolution
Folder Deleted : D:\Documents and Settings\Erik\Application Data\Babylon
Folder Deleted : D:\Documents and Settings\Erik\Application Data\delta
Folder Deleted : D:\Documents and Settings\Erik\Application Data\file scout
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\APN
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\AskToolbar
Folder Deleted : D:\Documents and Settings\Erik\Local Settings\Application Data\Bundled software uninstaller
Folder Deleted : D:\Program Files\Ask.com
Folder Deleted : D:\Program Files\delta
Folder Deleted : D:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = d:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Key Deleted : HKCU\Software\82d6debd6ae845
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AskToolbar
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\82d6debd6ae845
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB61AF52AD64B6B45930BE969F316720
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\Software\PIP
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

***** [Internet Browsers] *****

-\\ Internet Explorer v6.0.2900.5512

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119 ... 19661675EE --> hxxp://www.google.com

-\\ Google Chrome v28.0.1500.72

File : D:\Documents and Settings\Erik\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.16.1860.0

File : D:\Documents and Settings\Erik\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : D:\Documents and Settings\Administrator\Application Data\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [12801 octets] - [16/07/2013 18:39:48]
AdwCleaner[S1].txt - [12796 octets] - [18/07/2013 13:39:29]

########## EOF - D:\AdwCleaner[S1].txt - [12857 octets] ##########

MBam log :

Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.07.18.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Erik :: ERIK-91F951D550 [administrátor]

Ochrana: Zapnuté

18.7.2013 13:45:32
mbam-log-2013-07-18 (13-45-32).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 219628
Uplynutý čas: 6 min, 11 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 1
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Bude odstránený po reštartovaní.

Detegované registračné kľúče: 2
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 5
D:\WINDOWS\system32\antiwpa.dll (PUP.Wpakill) -> Bude odstránený po reštartovaní.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-Activator-for-SP3.rar (RiskWare.Tool.CK) -> Pridanie do karantény a zmazanie úspešné.
D:\Documents and Settings\Erik\My Documents\Downloads\Windows-XP-SP3-ACTIVATION-.rar (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
D:\WINDOWS\system32\antiwpa.dll4D4BD7 (PUP.Wpakill) -> Pridanie do karantény a zmazanie úspešné.
D:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Bude odstránený po reštartovaní.

(koniec)

JRT log :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.6 (07.17.2013:4)
OS: Microsoft Windows XP x86
Ran by Erik on çt 18.07.2013 at 15:45:59,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "D:\WINDOWS\system32\ai_recyclebin"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on çt 18.07.2013 at 15:52:11,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Rougekiller log:

RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Erik [Práva Správcu]
Režim : Kontrola -- Dátum : 07/18/2013 15:54:18
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3120026AS +++++
--- User ---
[MBR] d405aa811ac8ee8638473efe0e45cde8
[BSP] 2f9add54af66ad5d4ef9e98ddec2c78d : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114455 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST3120026AS +++++
--- User ---
[MBR] 84ff06f75a50cc0707a4dc07d4191012
[BSP] b1a301ccbc8839837dc5f585b8eb07a5 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_S_07182013_155418.txt >>

[Žbeky]

Zavři všechny programy a prohlížeče.
Odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller (Pro Windows Vista nebo WIN7 klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status box zobrazuje "Scan" "
- Klikni na "Delete"
- Počkej, dokud status box zobrazuje "Smazání - Finished"
- Klikni na "Zprávy", zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [1].txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

[okno123svk]

RougeKiller log

RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Erik [Práva Správcu]
Režim : Odebrať -- Dátum : 07/18/2013 18:45:47
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST3120026AS +++++
--- User ---
[MBR] d405aa811ac8ee8638473efe0e45cde8
[BSP] 2f9add54af66ad5d4ef9e98ddec2c78d : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114455 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST3120026AS +++++
--- User ---
[MBR] 84ff06f75a50cc0707a4dc07d4191012
[BSP] b1a301ccbc8839837dc5f585b8eb07a5 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_D_07182013_184547.txt >>
RKreport[0]_S_07182013_155418.txt;RKreport[0]_S_07182013_184507.txt

TDSS log:

18:47:36.0843 3344 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:47:37.0296 3344 ============================================================
18:47:37.0296 3344 Current date / time: 2013/07/18 18:47:37.0296
18:47:37.0296 3344 SystemInfo:
18:47:37.0296 3344
18:47:37.0296 3344 OS Version: 5.1.2600 ServicePack: 3.0
18:47:37.0296 3344 Product type: Workstation
18:47:37.0296 3344 ComputerName: ERIK-91F951D550
18:47:37.0296 3344 UserName: Erik
18:47:37.0296 3344 Windows directory: D:\WINDOWS
18:47:37.0296 3344 System windows directory: D:\WINDOWS
18:47:37.0296 3344 Processor architecture: Intel x86
18:47:37.0296 3344 Number of processors: 3
18:47:37.0296 3344 Page size: 0x1000
18:47:37.0296 3344 Boot type: Normal boot
18:47:37.0296 3344 ============================================================
18:47:37.0671 3344 Drive \Device\Harddisk0\DR0 - Size: 0x1BF266DE00 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3900, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:47:37.0703 3344 Drive \Device\Harddisk1\DR1 - Size: 0x4A85C4DE00 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:47:37.0703 3344 ============================================================
18:47:37.0703 3344 \Device\Harddisk0\DR0:
18:47:37.0703 3344 MBR partitions:
18:47:37.0703 3344 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF8BA00
18:47:37.0703 3344 \Device\Harddisk1\DR1:
18:47:37.0703 3344 MBR partitions:
18:47:37.0703 3344 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x254297C1
18:47:37.0703 3344 ============================================================
18:47:37.0734 3344 C: <-> \Device\Harddisk1\DR1\Partition1
18:47:37.0765 3344 D: <-> \Device\Harddisk0\DR0\Partition1
18:47:37.0765 3344 ============================================================
18:47:37.0765 3344 Initialize success
18:47:37.0765 3344 ============================================================
18:47:41.0359 2160 ============================================================
18:47:41.0359 2160 Scan started
18:47:41.0359 2160 Mode: Manual;
18:47:41.0359 2160 ============================================================
18:47:42.0000 2160 ================ Scan system memory ========================
18:47:42.0015 2160 System memory - ok
18:47:42.0015 2160 ================ Scan services =============================
18:47:42.0078 2160 Abiosdsk - ok
18:47:42.0078 2160 abp480n5 - ok
18:47:42.0093 2160 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI D:\WINDOWS\system32\DRIVERS\ACPI.sys
18:47:42.0109 2160 ACPI - ok
18:47:42.0125 2160 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC D:\WINDOWS\system32\drivers\ACPIEC.sys
18:47:42.0125 2160 ACPIEC - ok
18:47:42.0125 2160 adpu160m - ok
18:47:42.0156 2160 [ 8BED39E3C35D6A489438B8141717A557 ] aec D:\WINDOWS\system32\drivers\aec.sys
18:47:42.0171 2160 aec - ok
18:47:42.0187 2160 [ 322D0E36693D6E24A2398BEE62A268CD ] AFD D:\WINDOWS\System32\drivers\afd.sys
18:47:42.0187 2160 AFD - ok
18:47:42.0187 2160 Aha154x - ok
18:47:42.0187 2160 aic78u2 - ok
18:47:42.0203 2160 aic78xx - ok
18:47:42.0218 2160 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter D:\WINDOWS\system32\alrsvc.dll
18:47:42.0218 2160 Alerter - ok
18:47:42.0234 2160 [ 8C515081584A38AA007909CD02020B3D ] ALG D:\WINDOWS\System32\alg.exe
18:47:42.0234 2160 ALG - ok
18:47:42.0234 2160 AliIde - ok
18:47:42.0250 2160 amsint - ok
18:47:42.0265 2160 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt D:\WINDOWS\System32\appmgmts.dll
18:47:42.0265 2160 AppMgmt - ok
18:47:42.0265 2160 asc - ok
18:47:42.0265 2160 asc3350p - ok
18:47:42.0281 2160 asc3550 - ok
18:47:42.0328 2160 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
18:47:42.0343 2160 aspnet_state - ok
18:47:42.0359 2160 [ CCDA8D84FD02AEC52E62F296433AE9DC ] aswFsBlk D:\WINDOWS\system32\drivers\aswFsBlk.sys
18:47:42.0359 2160 aswFsBlk - ok
18:47:42.0390 2160 [ A6E20E62871A28A0F1C05B1681848FA7 ] aswMonFlt D:\WINDOWS\system32\drivers\aswMonFlt.sys
18:47:42.0390 2160 aswMonFlt - ok
18:47:42.0390 2160 [ C1A411B7CCD604554D96EFDAC2F83617 ] AswRdr D:\WINDOWS\system32\drivers\AswRdr.sys
18:47:42.0390 2160 AswRdr - ok
18:47:42.0390 2160 [ 657A61979F40D67CA29716149766FFA7 ] aswRvrt D:\WINDOWS\system32\drivers\aswRvrt.sys
18:47:42.0406 2160 aswRvrt - ok
18:47:42.0437 2160 [ 0E604867FC28F00D91CB0B00D2EC830D ] aswSnx D:\WINDOWS\system32\drivers\aswSnx.sys
18:47:42.0437 2160 aswSnx - ok
18:47:42.0484 2160 [ 6FC4AA106AA505394C908D37CCCB9148 ] aswSP D:\WINDOWS\system32\drivers\aswSP.sys
18:47:42.0484 2160 aswSP - ok
18:47:42.0531 2160 [ 33E21FFB063CA6C7E00D568467DC72E4 ] aswTdi D:\WINDOWS\system32\drivers\aswTdi.sys
18:47:42.0531 2160 aswTdi - ok
18:47:42.0546 2160 [ EDB0C9BA44B748E420CCA989FD8B826E ] aswVmm D:\WINDOWS\system32\drivers\aswVmm.sys
18:47:42.0562 2160 aswVmm - ok
18:47:42.0562 2160 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac D:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:47:42.0562 2160 AsyncMac - ok
18:47:42.0578 2160 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi D:\WINDOWS\system32\DRIVERS\atapi.sys
18:47:42.0578 2160 atapi - ok
18:47:42.0578 2160 Atdisk - ok
18:47:42.0609 2160 [ 43E17DA549BC8219EEE90AA9C6480AAA ] Ati HotKey Poller D:\WINDOWS\system32\Ati2evxx.exe
18:47:42.0609 2160 Ati HotKey Poller - ok
18:47:42.0656 2160 [ 613E7ADA3279F7AD20588B919C223481 ] ATI Smart D:\WINDOWS\system32\ati2sgag.exe
18:47:42.0656 2160 ATI Smart - ok
18:47:42.0875 2160 [ 50D7EE1C07BC1E549FAE797668A90E1E ] ati2mtag D:\WINDOWS\system32\DRIVERS\ati2mtag.sys
18:47:42.0921 2160 ati2mtag - ok
18:47:42.0953 2160 [ 924971A182E07463765EF9FA8876F24F ] AtiHDAudioService D:\WINDOWS\system32\drivers\AtihdXP3.sys
18:47:42.0968 2160 AtiHDAudioService - ok
18:47:42.0984 2160 [ 41C8F0EDA10DA14378D304C20BA6E558 ] AtiHdmiService D:\WINDOWS\system32\drivers\AtiHdmi.sys
18:47:42.0984 2160 AtiHdmiService - ok
18:47:43.0000 2160 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc D:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:47:43.0000 2160 Atmarpc - ok
18:47:43.0015 2160 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv D:\WINDOWS\System32\audiosrv.dll
18:47:43.0015 2160 AudioSrv - ok
18:47:43.0031 2160 [ D9F724AA26C010A217C97606B160ED68 ] audstub D:\WINDOWS\system32\DRIVERS\audstub.sys
18:47:43.0031 2160 audstub - ok
18:47:43.0062 2160 [ 41735B82DB57E4EBE9504EC400FD120E ] avast! Antivirus D:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:47:43.0062 2160 avast! Antivirus - ok
18:47:43.0093 2160 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep D:\WINDOWS\system32\drivers\Beep.sys
18:47:43.0093 2160 Beep - ok
18:47:43.0109 2160 [ 574738F61FCA2935F5265DC4E5691314 ] BITS D:\WINDOWS\system32\qmgr.dll
18:47:43.0140 2160 BITS - ok
18:47:43.0140 2160 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser D:\WINDOWS\System32\browser.dll
18:47:43.0140 2160 Browser - ok
18:47:43.0156 2160 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k D:\WINDOWS\system32\drivers\cbidf2k.sys
18:47:43.0156 2160 cbidf2k - ok
18:47:43.0156 2160 cd20xrnt - ok
18:47:43.0171 2160 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio D:\WINDOWS\system32\drivers\Cdaudio.sys
18:47:43.0171 2160 Cdaudio - ok
18:47:43.0187 2160 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs D:\WINDOWS\system32\drivers\Cdfs.sys
18:47:43.0187 2160 Cdfs - ok
18:47:43.0187 2160 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom D:\WINDOWS\system32\DRIVERS\cdrom.sys
18:47:43.0187 2160 Cdrom - ok
18:47:43.0187 2160 Changer - ok
18:47:43.0203 2160 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc D:\WINDOWS\system32\cisvc.exe
18:47:43.0203 2160 CiSvc - ok
18:47:43.0203 2160 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv D:\WINDOWS\system32\clipsrv.exe
18:47:43.0203 2160 ClipSrv - ok
18:47:43.0234 2160 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:47:43.0265 2160 clr_optimization_v2.0.50727_32 - ok
18:47:43.0281 2160 CmdIde - ok
18:47:43.0281 2160 COMSysApp - ok
18:47:43.0281 2160 Cpqarray - ok
18:47:43.0296 2160 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc D:\WINDOWS\System32\cryptsvc.dll
18:47:43.0296 2160 CryptSvc - ok
18:47:43.0312 2160 dac2w2k - ok
18:47:43.0312 2160 dac960nt - ok
18:47:43.0343 2160 [ 2589FE6015A316C0F5D5112B4DA7B509 ] DcomLaunch D:\WINDOWS\system32\rpcss.dll
18:47:43.0343 2160 DcomLaunch - ok
18:47:43.0359 2160 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp D:\WINDOWS\System32\dhcpcsvc.dll
18:47:43.0359 2160 Dhcp - ok
18:47:43.0375 2160 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk D:\WINDOWS\system32\DRIVERS\disk.sys
18:47:43.0375 2160 Disk - ok
18:47:43.0375 2160 dmadmin - ok
18:47:43.0406 2160 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot D:\WINDOWS\system32\drivers\dmboot.sys
18:47:43.0406 2160 dmboot - ok
18:47:43.0421 2160 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio D:\WINDOWS\system32\drivers\dmio.sys
18:47:43.0421 2160 dmio - ok
18:47:43.0421 2160 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload D:\WINDOWS\system32\drivers\dmload.sys
18:47:43.0421 2160 dmload - ok
18:47:43.0437 2160 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver D:\WINDOWS\System32\dmserver.dll
18:47:43.0437 2160 dmserver - ok
18:47:43.0453 2160 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic D:\WINDOWS\system32\drivers\DMusic.sys
18:47:43.0453 2160 DMusic - ok
18:47:43.0468 2160 [ 474B4DC3983173E4B4C9740B0DAC98A6 ] Dnscache D:\WINDOWS\System32\dnsrslvr.dll
18:47:43.0468 2160 Dnscache - ok
18:47:43.0484 2160 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc D:\WINDOWS\System32\dot3svc.dll
18:47:43.0500 2160 Dot3svc - ok
18:47:43.0500 2160 dpti2o - ok
18:47:43.0515 2160 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud D:\WINDOWS\system32\drivers\drmkaud.sys
18:47:43.0515 2160 drmkaud - ok
18:47:43.0531 2160 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 D:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
18:47:43.0531 2160 dtsoftbus01 - ok
18:47:43.0546 2160 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost D:\WINDOWS\System32\eapsvc.dll
18:47:43.0546 2160 EapHost - ok
18:47:43.0562 2160 [ FD9FC82F134B1C91004FFC76A5AE494B ] ENTECH D:\WINDOWS\system32\DRIVERS\ENTECH.sys
18:47:43.0562 2160 ENTECH - ok
18:47:43.0578 2160 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc D:\WINDOWS\System32\ersvc.dll
18:47:43.0578 2160 ERSvc - ok
18:47:43.0593 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] Eventlog D:\WINDOWS\system32\services.exe
18:47:43.0593 2160 Eventlog - ok
18:47:43.0625 2160 [ 19A799805B24990867B00C120D300C3A ] EventSystem D:\WINDOWS\system32\es.dll
18:47:43.0625 2160 EventSystem - ok
18:47:43.0640 2160 [ 38D332A6D56AF32635675F132548343E ] Fastfat D:\WINDOWS\system32\drivers\Fastfat.sys
18:47:43.0640 2160 Fastfat - ok
18:47:43.0671 2160 [ 1926899BF9FFE2602B63074971700412 ] FastUserSwitchingCompatibility D:\WINDOWS\System32\shsvcs.dll
18:47:43.0671 2160 FastUserSwitchingCompatibility - ok
18:47:43.0687 2160 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc D:\WINDOWS\system32\DRIVERS\fdc.sys
18:47:43.0687 2160 Fdc - ok
18:47:43.0703 2160 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips D:\WINDOWS\system32\drivers\Fips.sys
18:47:43.0703 2160 Fips - ok
18:47:43.0718 2160 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk D:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:47:43.0718 2160 Flpydisk - ok
18:47:43.0734 2160 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr D:\WINDOWS\system32\DRIVERS\fltMgr.sys
18:47:43.0734 2160 FltMgr - ok
18:47:43.0781 2160 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:47:43.0781 2160 FontCache3.0.0.0 - ok
18:47:43.0843 2160 [ B81F8778F5BB485F3B75114F0C99A49F ] ForcewareWebInterface D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
18:47:43.0843 2160 ForcewareWebInterface - ok
18:47:43.0859 2160 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec D:\WINDOWS\system32\drivers\Fs_Rec.sys
18:47:43.0859 2160 Fs_Rec - ok
18:47:43.0875 2160 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk D:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:47:43.0875 2160 Ftdisk - ok
18:47:43.0875 2160 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum D:\WINDOWS\system32\DRIVERS\gameenum.sys
18:47:43.0890 2160 gameenum - ok
18:47:43.0921 2160 GGSAFERDriver - ok
18:47:43.0937 2160 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc D:\WINDOWS\system32\DRIVERS\msgpc.sys
18:47:43.0937 2160 Gpc - ok
18:47:44.0000 2160 GPU-Z - ok
18:47:44.0046 2160 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate D:\Program Files\Google\Update\GoogleUpdate.exe
18:47:44.0046 2160 gupdate - ok
18:47:44.0046 2160 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem D:\Program Files\Google\Update\GoogleUpdate.exe
18:47:44.0046 2160 gupdatem - ok
18:47:44.0062 2160 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus D:\WINDOWS\system32\DRIVERS\HDAudBus.sys
18:47:44.0062 2160 HDAudBus - ok
18:47:44.0109 2160 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:47:44.0109 2160 helpsvc - ok
18:47:44.0125 2160 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ D:\WINDOWS\System32\hidserv.dll
18:47:44.0125 2160 HidServ - ok
18:47:44.0140 2160 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb D:\WINDOWS\system32\DRIVERS\hidusb.sys
18:47:44.0156 2160 HidUsb - ok
18:47:44.0171 2160 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc D:\WINDOWS\System32\kmsvc.dll
18:47:44.0171 2160 hkmsvc - ok
18:47:44.0187 2160 hpn - ok
18:47:44.0203 2160 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP D:\WINDOWS\system32\Drivers\HTTP.sys
18:47:44.0203 2160 HTTP - ok
18:47:44.0234 2160 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter D:\WINDOWS\System32\w3ssl.dll
18:47:44.0250 2160 HTTPFilter - ok
18:47:44.0250 2160 i2omgmt - ok
18:47:44.0250 2160 i2omp - ok
18:47:44.0281 2160 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt D:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:47:44.0281 2160 i8042prt - ok
18:47:44.0343 2160 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:47:44.0343 2160 IDriverT - ok
18:47:44.0468 2160 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:47:44.0515 2160 idsvc - ok
18:47:44.0531 2160 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi D:\WINDOWS\system32\DRIVERS\imapi.sys
18:47:44.0531 2160 Imapi - ok
18:47:44.0546 2160 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService D:\WINDOWS\system32\imapi.exe
18:47:44.0546 2160 ImapiService - ok
18:47:44.0562 2160 ini910u - ok
18:47:44.0687 2160 [ A7D3A1B2CABDAB81EAD07C204ADB7CE1 ] IntcAzAudAddService D:\WINDOWS\system32\drivers\RtkHDAud.sys
18:47:44.0718 2160 IntcAzAudAddService - ok
18:47:44.0718 2160 IntelIde - ok
18:47:44.0718 2160 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw D:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
18:47:44.0718 2160 Ip6Fw - ok
18:47:44.0734 2160 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:47:44.0734 2160 IpFilterDriver - ok
18:47:44.0750 2160 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp D:\WINDOWS\system32\DRIVERS\ipinip.sys
18:47:44.0750 2160 IpInIp - ok
18:47:44.0765 2160 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat D:\WINDOWS\system32\DRIVERS\ipnat.sys
18:47:44.0765 2160 IpNat - ok
18:47:44.0765 2160 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec D:\WINDOWS\system32\DRIVERS\ipsec.sys
18:47:44.0765 2160 IPSec - ok
18:47:44.0781 2160 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM D:\WINDOWS\system32\DRIVERS\irenum.sys
18:47:44.0781 2160 IRENUM - ok
18:47:44.0796 2160 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp D:\WINDOWS\system32\DRIVERS\isapnp.sys
18:47:44.0796 2160 isapnp - ok
18:47:44.0859 2160 [ 5739F2821D49975CEDE6BF0153D0CF01 ] JavaQuickStarterService D:\Program Files\Java\jre7\bin\jqs.exe
18:47:44.0859 2160 JavaQuickStarterService - ok
18:47:44.0875 2160 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass D:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:47:44.0875 2160 Kbdclass - ok
18:47:44.0890 2160 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid D:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:47:44.0890 2160 kbdhid - ok
18:47:44.0906 2160 [ 692BCF44383D056AED41B045A323D378 ] kmixer D:\WINDOWS\system32\drivers\kmixer.sys
18:47:44.0906 2160 kmixer - ok
18:47:44.0906 2160 [ 1705745D900DABF2D89F90EBADDC7517 ] KSecDD D:\WINDOWS\system32\drivers\KSecDD.sys
18:47:44.0906 2160 KSecDD - ok
18:47:44.0921 2160 [ F385F4B02C535BFFE1D70CAB80838123 ] LanmanServer D:\WINDOWS\System32\srvsvc.dll
18:47:44.0937 2160 LanmanServer - ok
18:47:44.0968 2160 [ 1B67B632786FEF1C1BBAEF46C2F3F2E6 ] lanmanworkstation D:\WINDOWS\System32\wkssvc.dll
18:47:44.0968 2160 lanmanworkstation - ok
18:47:44.0968 2160 lbrtfdc - ok
18:47:44.0984 2160 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts D:\WINDOWS\System32\lmhsvc.dll
18:47:44.0984 2160 LmHosts - ok
18:47:45.0000 2160 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector D:\WINDOWS\system32\drivers\mbam.sys
18:47:45.0000 2160 MBAMProtector - ok
18:47:45.0046 2160 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:47:45.0062 2160 MBAMScheduler - ok
18:47:45.0093 2160 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
18:47:45.0093 2160 MBAMService - ok
18:47:45.0109 2160 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger D:\WINDOWS\System32\msgsvc.dll
18:47:45.0125 2160 Messenger - ok
18:47:45.0140 2160 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd D:\WINDOWS\system32\drivers\mnmdd.sys
18:47:45.0140 2160 mnmdd - ok
18:47:45.0156 2160 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc D:\WINDOWS\system32\mnmsrvc.exe
18:47:45.0156 2160 mnmsrvc - ok
18:47:45.0171 2160 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem D:\WINDOWS\system32\drivers\Modem.sys
18:47:45.0171 2160 Modem - ok
18:47:45.0171 2160 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass D:\WINDOWS\system32\DRIVERS\mouclass.sys
18:47:45.0171 2160 Mouclass - ok
18:47:45.0187 2160 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid D:\WINDOWS\system32\DRIVERS\mouhid.sys
18:47:45.0187 2160 mouhid - ok
18:47:45.0203 2160 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr D:\WINDOWS\system32\drivers\MountMgr.sys
18:47:45.0203 2160 MountMgr - ok
18:47:45.0203 2160 mraid35x - ok
18:47:45.0203 2160 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV D:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:47:45.0218 2160 MRxDAV - ok
18:47:45.0234 2160 [ 68755F0FF16070178B54674FE5B847B0 ] MRxSmb D:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:47:45.0234 2160 MRxSmb - ok
18:47:45.0265 2160 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC D:\WINDOWS\system32\msdtc.exe
18:47:45.0265 2160 MSDTC - ok
18:47:45.0281 2160 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs D:\WINDOWS\system32\drivers\Msfs.sys
18:47:45.0281 2160 Msfs - ok
18:47:45.0281 2160 MSIServer - ok
18:47:45.0312 2160 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV D:\WINDOWS\system32\drivers\MSKSSRV.sys
18:47:45.0312 2160 MSKSSRV - ok
18:47:45.0328 2160 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK D:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:47:45.0328 2160 MSPCLOCK - ok
18:47:45.0343 2160 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM D:\WINDOWS\system32\drivers\MSPQM.sys
18:47:45.0343 2160 MSPQM - ok
18:47:45.0343 2160 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios D:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:47:45.0359 2160 mssmbios - ok
18:47:45.0375 2160 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup D:\WINDOWS\system32\drivers\Mup.sys
18:47:45.0375 2160 Mup - ok
18:47:45.0406 2160 [ 0102140028FAD045756796E1C685D695 ] napagent D:\WINDOWS\System32\qagentrt.dll
18:47:45.0437 2160 napagent - ok
18:47:45.0453 2160 [ 1DF7F42665C94B825322FAE71721130D ] NDIS D:\WINDOWS\system32\drivers\NDIS.sys
18:47:45.0453 2160 NDIS - ok
18:47:45.0468 2160 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi D:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:47:45.0468 2160 NdisTapi - ok
18:47:45.0468 2160 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio D:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:47:45.0468 2160 Ndisuio - ok
18:47:45.0500 2160 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan D:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:47:45.0500 2160 NdisWan - ok
18:47:45.0515 2160 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy D:\WINDOWS\system32\drivers\NDProxy.sys
18:47:45.0515 2160 NDProxy - ok
18:47:45.0515 2160 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS D:\WINDOWS\system32\DRIVERS\netbios.sys
18:47:45.0515 2160 NetBIOS - ok
18:47:45.0531 2160 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT D:\WINDOWS\system32\DRIVERS\netbt.sys
18:47:45.0531 2160 NetBT - ok
18:47:45.0562 2160 [ B857BA82860D7FF85AE29B095645563B ] NetDDE D:\WINDOWS\system32\netdde.exe
18:47:45.0593 2160 NetDDE - ok
18:47:45.0593 2160 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm D:\WINDOWS\system32\netdde.exe
18:47:45.0609 2160 NetDDEdsdm - ok
18:47:45.0625 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon D:\WINDOWS\system32\lsass.exe
18:47:45.0625 2160 Netlogon - ok
18:47:45.0656 2160 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman D:\WINDOWS\System32\netman.dll
18:47:45.0656 2160 Netman - ok
18:47:45.0734 2160 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:47:45.0734 2160 NetTcpPortSharing - ok
18:47:45.0781 2160 [ B4138E99236F0F57D4CF49BAE98A0746 ] Nla D:\WINDOWS\System32\mswsock.dll
18:47:45.0781 2160 Nla - ok
18:47:45.0781 2160 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs D:\WINDOWS\system32\drivers\Npfs.sys
18:47:45.0796 2160 Npfs - ok
18:47:45.0828 2160 [ ADC2D25754F8CA371AFF9644B8EAA681 ] nSvcIp D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
18:47:45.0828 2160 nSvcIp - ok
18:47:45.0843 2160 [ EE0F4D3E3FD2B5DACF7EEDDDBB243973 ] nSvcLog D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
18:47:45.0843 2160 nSvcLog - ok
18:47:45.0875 2160 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs D:\WINDOWS\system32\drivers\Ntfs.sys
18:47:45.0875 2160 Ntfs - ok
18:47:45.0875 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp D:\WINDOWS\system32\lsass.exe
18:47:45.0890 2160 NtLmSsp - ok
18:47:45.0906 2160 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc D:\WINDOWS\system32\ntmssvc.dll
18:47:45.0937 2160 NtmsSvc - ok
18:47:45.0968 2160 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null D:\WINDOWS\system32\drivers\Null.sys
18:47:45.0968 2160 Null - ok
18:47:45.0968 2160 [ 9ECCD189A9554C30A0D18A429778C7BA ] nvata D:\WINDOWS\system32\DRIVERS\nvata.sys
18:47:45.0968 2160 nvata - ok
18:47:46.0000 2160 [ 4D6F0D3FB17C1BA64942F415C73ADCDB ] NVENETFD D:\WINDOWS\system32\DRIVERS\NVENETFD.sys
18:47:46.0000 2160 NVENETFD - ok
18:47:46.0031 2160 [ EA98BFE4931BD13D747D647C1859796E ] nvgts D:\WINDOWS\system32\DRIVERS\nvgts.sys
18:47:46.0031 2160 nvgts - ok
18:47:46.0046 2160 [ 921E63AA1E1A20302223D016ACAFB52B ] nvnetbus D:\WINDOWS\system32\DRIVERS\nvnetbus.sys
18:47:46.0046 2160 nvnetbus - ok
18:47:46.0062 2160 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:47:46.0062 2160 NwlnkFlt - ok
18:47:46.0062 2160 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:47:46.0062 2160 NwlnkFwd - ok
18:47:46.0140 2160 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:47:46.0171 2160 odserv - ok
18:47:46.0218 2160 [ 5A432A042DAE460ABE7199B758E8606C ] ose D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:47:46.0234 2160 ose - ok
18:47:46.0250 2160 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport D:\WINDOWS\system32\DRIVERS\parport.sys
18:47:46.0265 2160 Parport - ok
18:47:46.0265 2160 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr D:\WINDOWS\system32\drivers\PartMgr.sys
18:47:46.0265 2160 PartMgr - ok
18:47:46.0296 2160 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm D:\WINDOWS\system32\drivers\ParVdm.sys
18:47:46.0296 2160 ParVdm - ok
18:47:46.0312 2160 [ A219903CCF74233761D92BEF471A07B1 ] PCI D:\WINDOWS\system32\DRIVERS\pci.sys
18:47:46.0312 2160 PCI - ok
18:47:46.0312 2160 PCIDump - ok
18:47:46.0312 2160 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde D:\WINDOWS\system32\DRIVERS\pciide.sys
18:47:46.0312 2160 PCIIde - ok
18:47:46.0328 2160 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia D:\WINDOWS\system32\drivers\Pcmcia.sys
18:47:46.0328 2160 Pcmcia - ok
18:47:46.0328 2160 PDCOMP - ok
18:47:46.0328 2160 PDFRAME - ok
18:47:46.0328 2160 PDRELI - ok
18:47:46.0343 2160 PDRFRAME - ok
18:47:46.0343 2160 perc2 - ok
18:47:46.0343 2160 perc2hib - ok
18:47:46.0375 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] PlugPlay D:\WINDOWS\system32\services.exe
18:47:46.0375 2160 PlugPlay - ok
18:47:46.0406 2160 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA D:\WINDOWS\system32\PnkBstrA.exe
18:47:46.0406 2160 PnkBstrA - ok
18:47:46.0421 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent D:\WINDOWS\system32\lsass.exe
18:47:46.0421 2160 PolicyAgent - ok
18:47:46.0468 2160 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport D:\WINDOWS\system32\DRIVERS\raspptp.sys
18:47:46.0468 2160 PptpMiniport - ok
18:47:46.0500 2160 [ A32BEBAF723557681BFC6BD93E98BD26 ] Processor D:\WINDOWS\system32\DRIVERS\processr.sys
18:47:46.0500 2160 Processor - ok
18:47:46.0515 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage D:\WINDOWS\system32\lsass.exe
18:47:46.0515 2160 ProtectedStorage - ok
18:47:46.0515 2160 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched D:\WINDOWS\system32\DRIVERS\psched.sys
18:47:46.0515 2160 PSched - ok
18:47:46.0546 2160 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink D:\WINDOWS\system32\DRIVERS\ptilink.sys
18:47:46.0546 2160 Ptilink - ok
18:47:46.0546 2160 ql1080 - ok
18:47:46.0546 2160 Ql10wnt - ok
18:47:46.0546 2160 ql12160 - ok
18:47:46.0562 2160 ql1240 - ok
18:47:46.0562 2160 ql1280 - ok
18:47:46.0562 2160 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd D:\WINDOWS\system32\DRIVERS\rasacd.sys
18:47:46.0562 2160 RasAcd - ok
18:47:46.0578 2160 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto D:\WINDOWS\System32\rasauto.dll
18:47:46.0593 2160 RasAuto - ok
18:47:46.0593 2160 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp D:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:47:46.0593 2160 Rasl2tp - ok
18:47:46.0625 2160 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan D:\WINDOWS\System32\rasmans.dll
18:47:46.0625 2160 RasMan - ok
18:47:46.0625 2160 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe D:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:47:46.0640 2160 RasPppoe - ok
18:47:46.0640 2160 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti D:\WINDOWS\system32\DRIVERS\raspti.sys
18:47:46.0640 2160 Raspti - ok
18:47:46.0656 2160 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss D:\WINDOWS\system32\DRIVERS\rdbss.sys
18:47:46.0656 2160 Rdbss - ok
18:47:46.0671 2160 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD D:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:47:46.0671 2160 RDPCDD - ok
18:47:46.0718 2160 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr D:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:47:46.0718 2160 rdpdr - ok
18:47:46.0812 2160 [ 6728E45B66F93C08F11DE2E316FC70DD ] RDPWD D:\WINDOWS\system32\drivers\RDPWD.sys
18:47:46.0812 2160 RDPWD - ok
18:47:46.0906 2160 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr D:\WINDOWS\system32\sessmgr.exe
18:47:46.0921 2160 RDSessMgr - ok
18:47:46.0953 2160 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook D:\WINDOWS\system32\DRIVERS\redbook.sys
18:47:46.0953 2160 redbook - ok
18:47:47.0000 2160 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess D:\WINDOWS\System32\mprdim.dll
18:47:47.0015 2160 RemoteAccess - ok
18:47:47.0046 2160 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry D:\WINDOWS\system32\regsvc.dll
18:47:47.0046 2160 RemoteRegistry - ok
18:47:47.0109 2160 [ C0C8909BE3ECC9DF8089112BF9BE954E ] RivaTuner32 D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys
18:47:47.0109 2160 RivaTuner32 - ok
18:47:47.0140 2160 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator D:\WINDOWS\system32\locator.exe
18:47:47.0156 2160 RpcLocator - ok
18:47:47.0203 2160 [ 2589FE6015A316C0F5D5112B4DA7B509 ] RpcSs D:\WINDOWS\system32\rpcss.dll
18:47:47.0218 2160 RpcSs - ok
18:47:47.0265 2160 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP D:\WINDOWS\system32\rsvp.exe
18:47:47.0281 2160 RSVP - ok
18:47:47.0281 2160 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs D:\WINDOWS\system32\lsass.exe
18:47:47.0296 2160 SamSs - ok
18:47:47.0312 2160 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr D:\WINDOWS\System32\SCardSvr.exe
18:47:47.0328 2160 SCardSvr - ok
18:47:47.0375 2160 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule D:\WINDOWS\system32\schedsvc.dll
18:47:47.0375 2160 Schedule - ok
18:47:47.0421 2160 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv D:\WINDOWS\system32\DRIVERS\secdrv.sys
18:47:47.0421 2160 Secdrv - ok
18:47:47.0437 2160 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon D:\WINDOWS\System32\seclogon.dll
18:47:47.0437 2160 seclogon - ok
18:47:47.0437 2160 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS D:\WINDOWS\system32\sens.dll
18:47:47.0453 2160 SENS - ok
18:47:47.0484 2160 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum D:\WINDOWS\system32\DRIVERS\serenum.sys
18:47:47.0484 2160 serenum - ok
18:47:47.0515 2160 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial D:\WINDOWS\system32\DRIVERS\serial.sys
18:47:47.0531 2160 Serial - ok
18:47:47.0578 2160 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy D:\WINDOWS\system32\drivers\Sfloppy.sys
18:47:47.0578 2160 Sfloppy - ok
18:47:47.0625 2160 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess D:\WINDOWS\System32\ipnathlp.dll
18:47:47.0671 2160 SharedAccess - ok
18:47:47.0718 2160 [ 1926899BF9FFE2602B63074971700412 ] ShellHWDetection D:\WINDOWS\System32\shsvcs.dll
18:47:47.0734 2160 ShellHWDetection - ok
18:47:47.0734 2160 Simbad - ok
18:47:47.0781 2160 [ 2F5AF9D91D51E832773D4A9EAF65CB33 ] SkypeUpdate D:\Program Files\Skype\Updater\Updater.exe
18:47:47.0781 2160 SkypeUpdate - ok
18:47:47.0781 2160 Sparrow - ok
18:47:47.0812 2160 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter D:\WINDOWS\system32\drivers\splitter.sys
18:47:47.0812 2160 splitter - ok
18:47:47.0828 2160 [ D8E14A61ACC1D4A6CD0D38AEBAC7FA3B ] Spooler D:\WINDOWS\system32\spoolsv.exe
18:47:47.0843 2160 Spooler - ok
18:47:47.0875 2160 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr D:\WINDOWS\system32\DRIVERS\sr.sys
18:47:47.0890 2160 sr - ok
18:47:47.0921 2160 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice D:\WINDOWS\system32\srsvc.dll
18:47:47.0953 2160 srservice - ok
18:47:48.0015 2160 [ 5252605079810904E31C332E241CD59B ] Srv D:\WINDOWS\system32\DRIVERS\srv.sys
18:47:48.0015 2160 Srv - ok
18:47:48.0031 2160 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV D:\WINDOWS\System32\ssdpsrv.dll
18:47:48.0046 2160 SSDPSRV - ok
18:47:48.0109 2160 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc D:\WINDOWS\system32\wiaservc.dll
18:47:48.0156 2160 stisvc - ok
18:47:48.0187 2160 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum D:\WINDOWS\system32\DRIVERS\swenum.sys
18:47:48.0187 2160 swenum - ok
18:47:48.0218 2160 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi D:\WINDOWS\system32\drivers\swmidi.sys
18:47:48.0218 2160 swmidi - ok
18:47:48.0218 2160 SwPrv - ok
18:47:48.0218 2160 symc810 - ok
18:47:48.0218 2160 symc8xx - ok
18:47:48.0234 2160 sym_hi - ok
18:47:48.0234 2160 sym_u3 - ok
18:47:48.0265 2160 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio D:\WINDOWS\system32\drivers\sysaudio.sys
18:47:48.0265 2160 sysaudio - ok
18:47:48.0281 2160 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog D:\WINDOWS\system32\smlogsvc.exe
18:47:48.0296 2160 SysmonLog - ok
18:47:48.0312 2160 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv D:\WINDOWS\System32\tapisrv.dll
18:47:48.0312 2160 TapiSrv - ok
18:47:48.0359 2160 [ 93EA8D04EC73A85DB02EB8805988F733 ] Tcpip D:\WINDOWS\system32\DRIVERS\tcpip.sys
18:47:48.0359 2160 Tcpip - ok
18:47:48.0406 2160 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE D:\WINDOWS\system32\drivers\TDPIPE.sys
18:47:48.0406 2160 TDPIPE - ok
18:47:48.0406 2160 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP D:\WINDOWS\system32\drivers\TDTCP.sys
18:47:48.0406 2160 TDTCP - ok
18:47:48.0406 2160 [ 88155247177638048422893737429D9E ] TermDD D:\WINDOWS\system32\DRIVERS\termdd.sys
18:47:48.0421 2160 TermDD - ok
18:47:48.0453 2160 [ FF3477C03BE7201C294C35F684B3479F ] TermService D:\WINDOWS\System32\termsrv.dll
18:47:48.0453 2160 TermService - ok
18:47:48.0484 2160 [ 1926899BF9FFE2602B63074971700412 ] Themes D:\WINDOWS\System32\shsvcs.dll
18:47:48.0500 2160 Themes - ok
18:47:48.0515 2160 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr D:\WINDOWS\system32\tlntsvr.exe
18:47:48.0531 2160 TlntSvr - ok
18:47:48.0531 2160 TosIde - ok
18:47:48.0546 2160 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks D:\WINDOWS\system32\trkwks.dll
18:47:48.0562 2160 TrkWks - ok
18:47:48.0562 2160 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs D:\WINDOWS\system32\drivers\Udfs.sys
18:47:48.0578 2160 Udfs - ok
18:47:48.0578 2160 ultra - ok
18:47:48.0625 2160 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update D:\WINDOWS\system32\DRIVERS\update.sys
18:47:48.0625 2160 Update - ok
18:47:48.0656 2160 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost D:\WINDOWS\System32\upnphost.dll
18:47:48.0656 2160 upnphost - ok
18:47:48.0671 2160 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS D:\WINDOWS\System32\ups.exe
18:47:48.0687 2160 UPS - ok
18:47:48.0687 2160 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp D:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:47:48.0687 2160 usbccgp - ok
18:47:48.0703 2160 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci D:\WINDOWS\system32\DRIVERS\usbehci.sys
18:47:48.0703 2160 usbehci - ok
18:47:48.0703 2160 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub D:\WINDOWS\system32\DRIVERS\usbhub.sys
18:47:48.0718 2160 usbhub - ok
18:47:48.0718 2160 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci D:\WINDOWS\system32\DRIVERS\usbohci.sys
18:47:48.0718 2160 usbohci - ok
18:47:48.0750 2160 [ A717C8721046828520C9EDF31288FC00 ] usbprint D:\WINDOWS\system32\DRIVERS\usbprint.sys
18:47:48.0750 2160 usbprint - ok
18:47:48.0796 2160 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:47:48.0796 2160 USBSTOR - ok
18:47:48.0796 2160 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave D:\WINDOWS\System32\drivers\vga.sys
18:47:48.0796 2160 VgaSave - ok
18:47:48.0812 2160 ViaIde - ok
18:47:48.0843 2160 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap D:\WINDOWS\system32\drivers\VolSnap.sys
18:47:48.0843 2160 VolSnap - ok
18:47:48.0859 2160 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS D:\WINDOWS\System32\vssvc.exe
18:47:48.0875 2160 VSS - ok
18:47:48.0890 2160 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time D:\WINDOWS\system32\w32time.dll
18:47:48.0906 2160 W32Time - ok
18:47:48.0906 2160 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp D:\WINDOWS\system32\DRIVERS\wanarp.sys
18:47:48.0906 2160 Wanarp - ok
18:47:48.0906 2160 WDICA - ok
18:47:48.0937 2160 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud D:\WINDOWS\system32\drivers\wdmaud.sys
18:47:48.0937 2160 wdmaud - ok
18:47:48.0968 2160 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient D:\WINDOWS\System32\webclnt.dll
18:47:48.0984 2160 WebClient - ok
18:47:49.0031 2160 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt D:\WINDOWS\system32\wbem\WMIsvc.dll
18:47:49.0031 2160 winmgmt - ok
18:47:49.0031 2160 WinRing0_1_2_0 - ok
18:47:49.0046 2160 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN D:\WINDOWS\system32\mspmsnsv.dll
18:47:49.0062 2160 WmdmPmSN - ok
18:47:49.0093 2160 [ BAB489A5FE26F2D0C910CF7AF7E4CF92 ] Wmi D:\WINDOWS\System32\advapi32.dll
18:47:49.0093 2160 Wmi - ok
18:47:49.0140 2160 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv D:\WINDOWS\system32\wbem\wmiapsrv.exe
18:47:49.0156 2160 WmiApSrv - ok
18:47:49.0156 2160 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc D:\WINDOWS\system32\wscsvc.dll
18:47:49.0171 2160 wscsvc - ok
18:47:49.0203 2160 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv D:\WINDOWS\system32\wuauserv.dll
18:47:49.0203 2160 wuauserv - ok
18:47:49.0234 2160 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC D:\WINDOWS\System32\wzcsvc.dll
18:47:49.0250 2160 WZCSVC - ok
18:47:49.0265 2160 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov D:\WINDOWS\System32\xmlprov.dll
18:47:49.0265 2160 xmlprov - ok
18:47:49.0265 2160 ================ Scan global ===============================
18:47:49.0281 2160 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] D:\WINDOWS\system32\basesrv.dll
18:47:49.0312 2160 [ 1618F36D4F7F6CCCEB3EE44BA95BE85C ] D:\WINDOWS\system32\winsrv.dll
18:47:49.0343 2160 [ 1618F36D4F7F6CCCEB3EE44BA95BE85C ] D:\WINDOWS\system32\winsrv.dll
18:47:49.0359 2160 [ 0E776ED5F7CC9F94299E70461B7B8185 ] D:\WINDOWS\system32\services.exe
18:47:49.0375 2160 [Global] - ok
18:47:49.0375 2160 ================ Scan MBR ==================================
18:47:49.0375 2160 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
18:47:49.0390 2160 \Device\Harddisk0\DR0 - ok
18:47:49.0390 2160 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
18:47:49.0484 2160 \Device\Harddisk1\DR1 - ok
18:47:49.0484 2160 ================ Scan VBR ==================================
18:47:49.0484 2160 [ 38CC28010CC1CBB464F8DD888866C84D ] \Device\Harddisk0\DR0\Partition1
18:47:49.0484 2160 \Device\Harddisk0\DR0\Partition1 - ok
18:47:49.0500 2160 [ 64A56C4B320E2F3EE919F7DD4EFB16F3 ] \Device\Harddisk1\DR1\Partition1
18:47:49.0500 2160 \Device\Harddisk1\DR1\Partition1 - ok
18:47:49.0500 2160 ============================================================
18:47:49.0500 2160 Scan finished
18:47:49.0500 2160 ============================================================
18:47:49.0500 3708 Detected object count: 0
18:47:49.0500 3708 Actual detected object count: 0

[memphisto]

Ach jo... Nataháš si tam svinstvo a pak prosíš o pomoc...

Jak je na tom PC ted? Dej nový HJT na dočištění

[okno123svk]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:33:35, on 19.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Program Files\Garena Plus\GarenaMessenger.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\Program Files\Opera\opera.exe
D:\WINDOWS\system32\msiexec.exe
D:\Program Files\trend micro\HiJackThis\HiJackThis.exe
D:\WINDOWS\system32\rundll32.exe

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6492 bytes

[memphisto]

V HJT fixni:
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

Jak je na tom PC?

[okno123svk]

Zdravim fixol som to ale stale mi pri vypinani robi rovnaky problem.

log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:41:35, on 20.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\rundll32.exe
D:\Program Files\Opera\opera.exe
D:\Program Files\trend micro\HiJackThis\HiJackThis.exe

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "D:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

--
End of file - 5431 bytes

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.