Dobrý den, před třemi měsíci nám u UPC zablokovali FTP protokol a jako důvod uvedli odesílání spamu z naší sítě. Všechny koncové stanice jsou zkontrolovány antivirovými a antispywarovými programy. Dvakrát nám UPC na žádost odblokovali FTP protokol, ale po dvou dnech opět zablokovali se stejným důvodem. Posílám vám Log z hijackthis nevíme si už rady jak se tohoto problému zbavit. Předem děkuji.
http://leteckaposta.cz/586972390
info.txt logfile of random's system information tool 1.09 2012-02-21 17:21:28
======Uninstall list======
Adobe AIR-->d:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{FDB3B167-F4FA-461D-976F-286304A57B2A}
Adobe Community Help-->msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help-->MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 11 ActiveX-->D:\Windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->D:\Windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe -maintain plugin
Adobe Media Player-->msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Media Player-->MsiExec.exe /I{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Photoshop CS5-->D:\Program Files\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="1.0" --mode="Uninstall" --mediaSignature="{15FEDA5F-141C-4127-8D7E-B962D1742728}"
Adobe Reader X (10.1.1) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA1000000001}
avast! Free Antivirus-->D:\Program Files\AVAST Software\Avast\aswRunDll.exe "D:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Battlefield 2(TM)-->RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x9 -removeonly
Counter-Strike 1.6-->D:\Program Files\Counter-Strike 1.6\Uninstal.exe
DAEMON Tools Lite-->D:\Program Files\DAEMON Tools Lite\uninst.exe
DamageCopier 3.2-->D:\Program Files\Evolution Labs\DamageCopier\Uninstal.exe
Garena Classic 2011-->D:\Program Files\Garena Classic\uninst.exe
Google Earth Plug-in-->MsiExec.exe /X{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Hide My IP 5.3-->"D:\Program Files\Hide My IP\unins000.exe"
HTC BMP USB Driver-->MsiExec.exe /I{31A559C1-9E4D-423B-9DD3-34A6C5398752}
HTC Driver Installer-->MsiExec.exe /X{6D6664A9-3342-4948-9B7E-034EFE366F0F}
HTC Sync-->MsiExec.exe /I{D5B18B60-4FC3-42AD-A629-9CA10ACC06CD}
IP Changer Premium-->D:\Program Files\IP Changer Premium\uninstall.exe
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}
Microsoft .NET Framework 4 Client Profile-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft .NET Framework 4 Extended-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{0A0CADCF-78DA-33C4-A350-CD51849B9702}
Microsoft .NET Framework 4 Multi-Targeting Pack-->MsiExec.exe /I{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}
Microsoft Advertising SDK for Windows Phone - ENU-->MsiExec.exe /X{656458ED-DA77-4C82-AF2F-1640C191A2A7}
Microsoft Expression Blend 3 SDK-->MsiExec.exe /X{256E7DAC-9BE8-494E-8DE7-7857BF96B774}
Microsoft Expression Blend 4 Add-in for Adobe FXG Import-->MsiExec.exe /X{EFBBD030-48F0-43B3-A8AD-789894DAD0B5}
Microsoft Expression Blend 4-->"d:\Program Files\Microsoft Expression\Blend 4\XSetup.exe" -x -AppLangId:1033 "-manifest:BlendManifest.cab" "-source:d:\Program Files\Microsoft Expression\Blend 4\Setup\;d:\eaf4b02b95ecf2354a5013\Setup"
Microsoft Expression Blend 4-->MsiExec.exe /X{4C6D5779-A766-45DF-9938-D6F595A66F2B}
Microsoft Expression Blend SDK for .NET 4-->MsiExec.exe /X{9B3A1C97-A361-463E-8817-444F9F88CDFE}
Microsoft Expression Blend SDK for Silverlight 4-->MsiExec.exe /X{1C997E1C-5CE9-4AF3-AAA9-DC65E6090827}
Microsoft Expression Blend SDK for Windows Phone 7-->MsiExec.exe /X{69E11501-75F7-4ACE-8103-52513DDCFE26}
Microsoft Expression Blend SDK for Windows Phone OS 7.1-->MsiExec.exe /X{12B8E200-99CC-4203-A8D1-4145FC4D0192}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{8FB1B528-E260-451E-9B55-E9152F94B80B}
Microsoft Help Viewer 1.1-->D:\Program Files\Microsoft Help Viewer\v1.0\Microsoft Help Viewer 1.1\install.exe
Microsoft Help Viewer 1.1-->MsiExec.exe /X{57BB52B7-6B7B-31F3-89F4-4EE8FE5CEF6D}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"D:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight 3 SDK-->MsiExec.exe /X{2012098D-EEE9-4769-8DD3-B038050854D4}
Microsoft Silverlight 4 SDK-->MsiExec.exe /X{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2008 R2 Management Objects-->MsiExec.exe /I{4E968D9C-21A7-4915-B698-F7AEB913541D}
Microsoft SQL Server 2008 Setup Support Files -->MsiExec.exe /X{D441BD04-E548-4F8E-97A4-1B66135BAAA8}
Microsoft SQL Server Compact 3.5 SP2 ENU-->MsiExec.exe /I{3A9FC03D-C685-4831-94CF-4EDFD3749497}
Microsoft SQL Server System CLR Types-->MsiExec.exe /I{2A2F3AE8-246A-4252-BB26-1BEB45627074}
Microsoft Visual C# 2010 Express - ENU-->D:\Program Files\Microsoft Visual Studio 10.0\Microsoft Visual C# 2010 Express - ENU\setup.exe
Microsoft Visual C# 2010 Express - ENU-->MsiExec.exe /X{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974-->MsiExec.exe /X{B7E38540-E355-3503-AFD7-635B2F2F76E1}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools-->MsiExec.exe /X{14DD7530-CCD2-3798-B37D-3839ED6A441C}
Microsoft Visual Studio 2010 Express for Windows Phone 7.1 - ENU-->MsiExec.exe /X{786D445C-F3D7-35D2-81AA-60DB61F9F552}
Microsoft XNA Framework Redistributable 4.0 Refresh-->MsiExec.exe /I{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}
Microsoft XNA Game Studio 4.0 (XnaLiveProxy)-->MsiExec.exe /I{01C79EF3-DE84-4B56-B638-8BEA0D507506}
Microsoft XNA Game Studio 4.0 Refresh (ARP entry)-->MsiExec.exe /I{EE3A5B79-C147-4BD9-952A-E894298C2ACA}
Microsoft XNA Game Studio 4.0 Refresh (Redists)-->MsiExec.exe /I{6A7387C0-B74F-47D0-A217-B384E55FE0C9}
Microsoft XNA Game Studio 4.0 Refresh (Shared Components)-->MsiExec.exe /I{A240191E-4302-435E-86FC-A5717EF0CF38}
Microsoft XNA Game Studio 4.0 Refresh (Visual Studio)-->MsiExec.exe /I{05CDC06E-4C55-4EAE-9401-8EF62F60CB69}
Microsoft XNA Game Studio 4.0 Refresh-->D:\Program Files\Microsoft XNA\XNA Game Studio\v4.0\Setup\Bootstrapper.exe en-US
Microsoft XNA Game Studio Platform Tools-->MsiExec.exe /I{89690B51-2E21-4E93-914E-F9CAC5B24A84}
Microsoft_VC80_ATL_x86-->MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86-->MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86-->MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Mozilla Firefox 8.0 (x86 cs)-->D:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP3 Parser (KB973685)-->MsiExec.exe /I{859DFA95-E4A6-48CD-B88E-A3E483E89B44}
MSXML 4.0 SP3 Parser-->MsiExec.exe /I{196467F1-C11F-4F76-858B-5812ADC83B94}
Nmap 5.51-->"D:\Program Files\Nmap\uninstall.exe"
PDF Settings CS5-->MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7E97AB83-C1FE-38DE-B848-877E0A4BD81E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DB31DEDD-BF95-31E7-A9B7-5480561CEFF3} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8DDEFC7E-0C61-3D11-AFC6-5414F2DAFD01} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile CSY Language Pack (KB2478663)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder ClientLP
Security Update for Microsoft .NET Framework 4 Client Profile CSY Language Pack (KB2518870)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder ClientLP
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {42A3562E-8B4E-39A4-B82D-CC12F82889E3} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Extended
Skype Click to Call-->MsiExec.exe /I{B6CF2967-C81E-40C0-9815-C05774FEF120}
Skype™ 5.5-->MsiExec.exe /X{AA59DDE4-B672-4621-A016-4C248204957A}
Spybot - Search & Destroy-->"D:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Terminator 2012-->"D:\Program Files\Spyware Terminator\unins000.exe"
Star Wars: The Old Republic-->D:\Program Files\Common Files\BioWare\Uninstall Star Wars - The Old Republic.exe
SweetIM for Messenger 3.6-->MsiExec.exe /X{A81A974F-8A22-43E6-9243-5198FF758DA1}
SweetIM Toolbar for Internet Explorer 4.2-->MsiExec.exe /X{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
TMbot 4.8.7-->D:\Program Files\TMbot\Uninstall.exe
TopStyle Lite (Version 3.0)-->D:\Windows\unlite3.exe "D:\Program Files\Bradbury\TopStyle3"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Uniblue DriverScanner-->"D:\Program Files\Uniblue\DriverScanner\unins000.exe"
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->D:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Client
Update for Microsoft .NET Framework 4 Extended (KB2468871)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2533523)-->d:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Extended
Vegas Pro 9.0-->MsiExec.exe /X{DC785DB7-D389-48C3-B146-96FE99BF4E2B}
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU-->MsiExec.exe /X{112C23F2-C036-4D40-BED4-0CB47BF5555C}
WCF Data Services SDK for Windows Phone-->MsiExec.exe /X{6F33C2E2-5E02-4344-90BC-ED55C48341D2}
Web Security Guard with Crawler Toolbar-->D:\PROGRA~1\Crawler\Toolbar\CToolbar.exe uninst
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows Phone Emulator - ENU-->MsiExec.exe /X{0CD62E62-BB98-358E-A807-819354016E05}
Windows Phone SDK 7.1 - ENU-->D:\Program Files\Microsoft Visual Studio 10.0\Microsoft Visual Studio 2010 Express for Windows Phone 7.1 - ENU\setup.exe
Windows Phone SDK 7.1 Add-in for Visual Studio 2010 - ENU-->MsiExec.exe /X{A721BC43-E63E-3531-B1BF-6A405F9530BD}
Windows Phone SDK 7.1 Assemblies-->MsiExec.exe /X{9E2F2BAC-A9FD-35BC-B8E0-253FEBED0F9B}
Windows Phone SDK 7.1 Extensions for XNA Game Studio 4.0-->MsiExec.exe /I{A4CC18F6-DB05-4B03-B724-4128322FA85F}
WinPcap 4.1.2-->D:\Program Files\WinPcap\uninstall.exe
WinRAR 4.01 (32-bit)-->D:\Program Files\WinRAR\uninstall.exe
Wireshark 1.6.3-->"D:\Program Files\Wireshark\uninstall.exe"
WPF Toolkit February 2010 (Version 3.5.50211.1)-->MsiExec.exe /X{5EE6E987-1B79-4A93-832B-27472C7D1579}
Xfire (remove only)-->"D:\Program Files\Xfire\uninst.exe"
Yandex.Bar v barvách Seznamu 5.4 pro Internet Explorer-->MsiExec.exe /X{7627A1A6-437E-43D1-A5D5-D4B1AFD2A3EB}
======System event log======
Computer Name: 37L4247F27-08
Event Code: 7036
Message: Stav služby Plug and Play byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101120215742.697406-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 20010
Message: Došlo ke změně jednoho nebo více podsystémů služby Plug and Play.
Povolený instalační podsystém služby PlugPlay: 'false'
Povolený podsystém mezipaměti služby PlugPlay: 'false'
Record Number: 4
Source Name: Microsoft-Windows-UserPnp
Time Written: 20101120215742.697406-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: 37L4247F27-08
Event Code: 7036
Message: Stav služby Software Protection byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101120215742.479005-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101120215742.338605-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101120215742.323005-000
Event Type: Informace
User:
=====Application event log=====
Computer Name: 37L4247F27-08
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPRequestAdditionalSoftware
Reakce: Není k dispozici
ID souboru CAB: 0
Podpis problému:
P1: x86
P2: USB\VID_09DA&PID_0080&REV_020<
P3: 6.1.1.0
P4: 0405
P5: input.inf
P6: *
P7:
P8:
P9:
P10:
Připojené soubory:
Tyto soubory mohou být k dispozici zde:
D:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x86_41daf0a789036e473d04c710ea2a2392c31db_cab_058ebb43
Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 44997ec0-f669-11e0-8f66-6cf0492e9c42
Stav hlášení: 4
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20111014133441.000000-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20111014133305.000000-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20111014133302.000000-000
Event Type: Informace
User:
Computer Name: 37L4247F27-08
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.
Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20111014133259.284800-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: 37L4247F27-08
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20111014133259.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: 37L4247F27-08
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-08$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin
Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -
Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111014133225.464000-000
Event Type: Úspěšný audit
User:
Computer Name: 37L4247F27-08
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-08$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin
Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -
Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111014133225.448400-000
Event Type: Úspěšný audit
User:
Computer Name: 37L4247F27-08
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.
Počet prvků: 0
ID zásady: 0x24195
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111014133225.152000-000
Event Type: Úspěšný audit
User:
Computer Name: 37L4247F27-08
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0
Typ přihlášení: 0
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x4
Název procesu:
Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111014133222.016400-000
Event Type: Úspěšný audit
User:
Computer Name: 37L4247F27-08
Event Code: 4608
Message: Spouští se systém Windows.
Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111014133221.704400-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=16
"PROCESSOR_IDENTIFIER"=x86 Family 16 Model 6 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=0602
"windows_tracing_logfile"=D:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"XNAGSShared"=D:\Program Files\Common Files\Microsoft Shared\XNA\
"XNAGSv4"=D:\Program Files\Microsoft XNA\XNA Game Studio\v4.0\
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problém se zablokováním internetu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Problém se zablokováním internetu
TSSkillerNaughty píše:Zdravím,
Po stažení http://eric71.geekstogo.com/tools/MbrScan.exe spusť
- prejdi na záložku Options
v nastavení ješte dooznač: Other sectors a VBR
- klik na Report
- otevře se textový soubor, který sem zkopíruj.
- spusť
- klik na volbu change parameters
- označ dole obě možnosti (klik do čtverečku)
- klik na Start scan
- po ukončení kontroly objeví se okno, kde zkontroluj, zda-li nacházi všude volby Skip
- pokud ano klik na Continue
- pokud ne, v řádcích kde není uprav na Skip, nyní klik na Continue
- na disku C se objeví textový soubor majicí přibližně tvar TDSSKiller.2.6.2.0_27.09.2011_10.16.46_log
- obsah logu vlož do příspěvku.
17:49:15.0034 5524 TDSS rootkit removing tool 2.7.13.0 Feb 15 2012 19:33:14
17:49:17.0038 5524 ============================================================
17:49:17.0039 5524 Current date / time: 2012/02/21 17:49:17.0038
17:49:17.0039 5524 SystemInfo:
17:49:17.0039 5524
17:49:17.0039 5524 OS Version: 6.1.7601 ServicePack: 1.0
17:49:17.0039 5524 Product type: Workstation
17:49:17.0039 5524 ComputerName: MAREK-PC
17:49:17.0039 5524 UserName: Marek
17:49:17.0039 5524 Windows directory: D:\Windows
17:49:17.0039 5524 System windows directory: D:\Windows
17:49:17.0039 5524 Processor architecture: Intel x86
17:49:17.0039 5524 Number of processors: 2
17:49:17.0039 5524 Page size: 0x1000
17:49:17.0039 5524 Boot type: Normal boot
17:49:17.0039 5524 ============================================================
17:49:18.0688 5524 Drive \Device\Harddisk0\DR0 - Size: 0x950AF4DE00 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
17:49:18.0704 5524 \Device\Harddisk0\DR0:
17:49:18.0704 5524 MBR used
17:49:18.0704 5524 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x63FFA80
17:49:18.0710 5524 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x63FFAFE, BlocksNum 0x44453502
17:49:18.0817 5524 Initialize success
17:49:18.0817 5524 ============================================================
17:49:48.0635 2588 ============================================================
17:49:48.0635 2588 Scan started
17:49:48.0635 2588 Mode: Manual; SigCheck; TDLFS;
17:49:48.0635 2588 ============================================================
17:49:49.0148 2588 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) D:\Windows\system32\DRIVERS\1394ohci.sys
17:49:49.0216 2588 1394ohci - ok
17:49:49.0244 2588 ACPI (cea80c80bed809aa0da6febc04733349) D:\Windows\system32\drivers\ACPI.sys
17:49:49.0268 2588 ACPI - ok
17:49:49.0284 2588 AcpiPmi (1efbc664abff416d1d07db115dcb264f) D:\Windows\system32\drivers\acpipmi.sys
17:49:49.0326 2588 AcpiPmi - ok
17:49:49.0367 2588 adp94xx (21e785ebd7dc90a06391141aac7892fb) D:\Windows\system32\drivers\adp94xx.sys
17:49:49.0430 2588 adp94xx - ok
17:49:49.0449 2588 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) D:\Windows\system32\drivers\adpahci.sys
17:49:49.0495 2588 adpahci - ok
17:49:49.0515 2588 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) D:\Windows\system32\drivers\adpu320.sys
17:49:49.0529 2588 adpu320 - ok
17:49:49.0585 2588 AFD (9ebbba55060f786f0fcaa3893bfa2806) D:\Windows\system32\drivers\afd.sys
17:49:49.0623 2588 AFD - ok
17:49:49.0651 2588 agp440 (507812c3054c21cef746b6ee3d04dd6e) D:\Windows\system32\drivers\agp440.sys
17:49:49.0664 2588 agp440 - ok
17:49:49.0679 2588 aic78xx (8b30250d573a8f6b4bd23195160d8707) D:\Windows\system32\drivers\djsvs.sys
17:49:49.0692 2588 aic78xx - ok
17:49:49.0709 2588 aliide (0d40bcf52ea90fc7df2aeab6503dea44) D:\Windows\system32\drivers\aliide.sys
17:49:49.0722 2588 aliide - ok
17:49:49.0736 2588 amdagp (3c6600a0696e90a463771c7422e23ab5) D:\Windows\system32\drivers\amdagp.sys
17:49:49.0749 2588 amdagp - ok
17:49:49.0764 2588 amdide (cd5914170297126b6266860198d1d4f0) D:\Windows\system32\drivers\amdide.sys
17:49:49.0777 2588 amdide - ok
17:49:49.0785 2588 AmdK8 (00dda200d71bac534bf56a9db5dfd666) D:\Windows\system32\drivers\amdk8.sys
17:49:49.0820 2588 AmdK8 - ok
17:49:49.0846 2588 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) D:\Windows\system32\DRIVERS\amdppm.sys
17:49:49.0911 2588 AmdPPM - ok
17:49:49.0939 2588 amdsata (d320bf87125326f996d4904fe24300fc) D:\Windows\system32\drivers\amdsata.sys
17:49:49.0953 2588 amdsata - ok
17:49:49.0969 2588 amdsbs (ea43af0c423ff267355f74e7a53bdaba) D:\Windows\system32\drivers\amdsbs.sys
17:49:49.0984 2588 amdsbs - ok
17:49:49.0999 2588 amdxata (46387fb17b086d16dea267d5be23a2f2) D:\Windows\system32\drivers\amdxata.sys
17:49:50.0011 2588 amdxata - ok
17:49:50.0027 2588 AppID (aea177f783e20150ace5383ee368da19) D:\Windows\system32\drivers\appid.sys
17:49:50.0066 2588 AppID - ok
17:49:50.0109 2588 arc (2932004f49677bd84dbc72edb754ffb3) D:\Windows\system32\drivers\arc.sys
17:49:50.0130 2588 arc - ok
17:49:50.0145 2588 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) D:\Windows\system32\drivers\arcsas.sys
17:49:50.0165 2588 arcsas - ok
17:49:50.0237 2588 aswFsBlk (054df24c92b55427e0757cfff160e4f2) D:\Windows\system32\drivers\aswFsBlk.sys
17:49:50.0264 2588 aswFsBlk - ok
17:49:50.0308 2588 aswMonFlt (258143605e77e4008f1758481d6a977d) D:\Windows\system32\drivers\aswMonFlt.sys
17:49:50.0319 2588 aswMonFlt - ok
17:49:50.0366 2588 aswRdr (352d5a48ebab35a7693b048679304831) D:\Windows\system32\drivers\aswRdr.sys
17:49:50.0377 2588 aswRdr - ok
17:49:50.0435 2588 aswSnx (8d34d2b24297e27d93e847319abfdec4) D:\Windows\system32\drivers\aswSnx.sys
17:49:50.0486 2588 aswSnx - ok
17:49:50.0533 2588 aswSP (010012597333da1f46c3243f33f8409e) D:\Windows\system32\drivers\aswSP.sys
17:49:50.0549 2588 aswSP - ok
17:49:50.0565 2588 aswTdi (f9f84364416658e9786235904d448d37) D:\Windows\system32\drivers\aswTdi.sys
17:49:50.0577 2588 aswTdi - ok
17:49:50.0585 2588 AsyncMac (add2ade1c2b285ab8378d2daaf991481) D:\Windows\system32\DRIVERS\asyncmac.sys
17:49:50.0617 2588 AsyncMac - ok
17:49:50.0634 2588 atapi (338c86357871c167a96ab976519bf59e) D:\Windows\system32\drivers\atapi.sys
17:49:50.0657 2588 atapi - ok
17:49:50.0708 2588 b06bdrv (1a231abec60fd316ec54c66715543cec) D:\Windows\system32\drivers\bxvbdx.sys
17:49:50.0758 2588 b06bdrv - ok
17:49:50.0772 2588 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) D:\Windows\system32\DRIVERS\b57nd60x.sys
17:49:50.0797 2588 b57nd60x - ok
17:49:50.0822 2588 Beep (505506526a9d467307b3c393dedaf858) D:\Windows\system32\drivers\Beep.sys
17:49:50.0859 2588 Beep - ok
17:49:50.0884 2588 blbdrive (2287078ed48fcfc477b05b20cf38f36f) D:\Windows\system32\DRIVERS\blbdrive.sys
17:49:50.0908 2588 blbdrive - ok
17:49:50.0939 2588 bowser (8f2da3028d5fcbd1a060a3de64cd6506) D:\Windows\system32\DRIVERS\bowser.sys
17:49:51.0000 2588 bowser - ok
17:49:51.0011 2588 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) D:\Windows\system32\drivers\BrFiltLo.sys
17:49:51.0065 2588 BrFiltLo - ok
17:49:51.0072 2588 BrFiltUp (56801ad62213a41f6497f96dee83755a) D:\Windows\system32\drivers\BrFiltUp.sys
17:49:51.0099 2588 BrFiltUp - ok
17:49:51.0122 2588 Brserid (845b8ce732e67f3b4133164868c666ea) D:\Windows\System32\Drivers\Brserid.sys
17:49:51.0141 2588 Brserid - ok
17:49:51.0149 2588 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) D:\Windows\System32\Drivers\BrSerWdm.sys
17:49:51.0184 2588 BrSerWdm - ok
17:49:51.0190 2588 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) D:\Windows\System32\Drivers\BrUsbMdm.sys
17:49:51.0207 2588 BrUsbMdm - ok
17:49:51.0214 2588 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) D:\Windows\System32\Drivers\BrUsbSer.sys
17:49:51.0240 2588 BrUsbSer - ok
17:49:51.0246 2588 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) D:\Windows\system32\drivers\bthmodem.sys
17:49:51.0266 2588 BTHMODEM - ok
17:49:51.0297 2588 cdfs (77ea11b065e0a8ab902d78145ca51e10) D:\Windows\system32\DRIVERS\cdfs.sys
17:49:51.0335 2588 cdfs - ok
17:49:51.0359 2588 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) D:\Windows\system32\DRIVERS\cdrom.sys
17:49:51.0377 2588 cdrom - ok
17:49:51.0403 2588 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) D:\Windows\system32\drivers\circlass.sys
17:49:51.0435 2588 circlass - ok
17:49:51.0462 2588 CLFS (635181e0e9bbf16871bf5380d71db02d) D:\Windows\system32\CLFS.sys
17:49:51.0487 2588 CLFS - ok
17:49:51.0519 2588 CmBatt (dea805815e587dad1dd2c502220b5616) D:\Windows\system32\drivers\CmBatt.sys
17:49:51.0583 2588 CmBatt - ok
17:49:51.0598 2588 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) D:\Windows\system32\drivers\cmdide.sys
17:49:51.0618 2588 cmdide - ok
17:49:51.0659 2588 CNG (6427525d76f61d0c519b008d3680e8e7) D:\Windows\system32\Drivers\cng.sys
17:49:51.0681 2588 CNG - ok
17:49:51.0697 2588 Compbatt (a6023d3823c37043986713f118a89bee) D:\Windows\system32\drivers\compbatt.sys
17:49:51.0709 2588 Compbatt - ok
17:49:51.0726 2588 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) D:\Windows\system32\DRIVERS\CompositeBus.sys
17:49:51.0743 2588 CompositeBus - ok
17:49:51.0763 2588 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) D:\Windows\system32\drivers\crcdisk.sys
17:49:51.0775 2588 crcdisk - ok
17:49:51.0817 2588 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) D:\Windows\system32\drivers\csc.sys
17:49:51.0853 2588 CSC - ok
17:49:51.0880 2588 DfsC (f024449c97ec1e464aaffda18593db88) D:\Windows\system32\Drivers\dfsc.sys
17:49:51.0917 2588 DfsC - ok
17:49:51.0933 2588 discache (1a050b0274bfb3890703d490f330c0da) D:\Windows\system32\drivers\discache.sys
17:49:51.0966 2588 discache - ok
17:49:52.0006 2588 Disk (565003f326f99802e68ca78f2a68e9ff) D:\Windows\system32\drivers\disk.sys
17:49:52.0019 2588 Disk - ok
17:49:52.0040 2588 dmvsc (2a958ef85db1b61ffca65044fa4bce9e) D:\Windows\system32\drivers\dmvsc.sys
17:49:52.0068 2588 dmvsc - ok
17:49:52.0098 2588 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) D:\Windows\system32\drivers\drmkaud.sys
17:49:52.0123 2588 drmkaud - ok
17:49:52.0169 2588 dtsoftbus01 (fb38473835476a6fb272215a1d972af9) D:\Windows\system32\DRIVERS\dtsoftbus01.sys
17:49:52.0190 2588 dtsoftbus01 - ok
17:49:52.0211 2588 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) D:\Windows\System32\drivers\dxgkrnl.sys
17:49:52.0240 2588 DXGKrnl - ok
17:49:52.0340 2588 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) D:\Windows\system32\drivers\evbdx.sys
17:49:52.0423 2588 ebdrv - ok
17:49:52.0449 2588 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) D:\Windows\system32\drivers\elxstor.sys
17:49:52.0469 2588 elxstor - ok
17:49:52.0486 2588 ErrDev (8fc3208352dd3912c94367a206ab3f11) D:\Windows\system32\drivers\errdev.sys
17:49:52.0508 2588 ErrDev - ok
17:49:52.0531 2588 exfat (2dc9108d74081149cc8b651d3a26207f) D:\Windows\system32\drivers\exfat.sys
17:49:52.0558 2588 exfat - ok
17:49:52.0570 2588 fastfat (7e0ab74553476622fb6ae36f73d97d35) D:\Windows\system32\drivers\fastfat.sys
17:49:52.0610 2588 fastfat - ok
17:49:52.0638 2588 fdc (e817a017f82df2a1f8cfdbda29388b29) D:\Windows\system32\DRIVERS\fdc.sys
17:49:52.0666 2588 fdc - ok
17:49:52.0685 2588 FileInfo (6cf00369c97f3cf563be99be983d13d8) D:\Windows\system32\drivers\fileinfo.sys
17:49:52.0728 2588 FileInfo - ok
17:49:52.0751 2588 Filetrace (42c51dc94c91da21cb9196eb64c45db9) D:\Windows\system32\drivers\filetrace.sys
17:49:52.0825 2588 Filetrace - ok
17:49:52.0832 2588 flpydisk (87907aa70cb3c56600f1c2fb8841579b) D:\Windows\system32\DRIVERS\flpydisk.sys
17:49:52.0860 2588 flpydisk - ok
17:49:52.0880 2588 FltMgr (7520ec808e0c35e0ee6f841294316653) D:\Windows\system32\drivers\fltmgr.sys
17:49:52.0903 2588 FltMgr - ok
17:49:52.0925 2588 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) D:\Windows\system32\drivers\FsDepends.sys
17:49:52.0939 2588 FsDepends - ok
17:49:52.0956 2588 Fs_Rec (a574b4360e438977038aae4bf60d79a2) D:\Windows\system32\drivers\Fs_Rec.sys
17:49:52.0968 2588 Fs_Rec - ok
17:49:52.0993 2588 fvevol (8a73e79089b282100b9393b644cb853b) D:\Windows\system32\DRIVERS\fvevol.sys
17:49:53.0017 2588 fvevol - ok
17:49:53.0034 2588 gagp30kx (65ee0c7a58b65e74ae05637418153938) D:\Windows\system32\drivers\gagp30kx.sys
17:49:53.0048 2588 gagp30kx - ok
17:49:53.0080 2588 GGSAFERDriver - ok
17:49:53.0133 2588 hcw85cir (c44e3c2bab6837db337ddee7544736db) D:\Windows\system32\drivers\hcw85cir.sys
17:49:53.0188 2588 hcw85cir - ok
17:49:53.0224 2588 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) D:\Windows\system32\drivers\HdAudio.sys
17:49:53.0281 2588 HdAudAddService - ok
17:49:53.0294 2588 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) D:\Windows\system32\DRIVERS\HDAudBus.sys
17:49:53.0320 2588 HDAudBus - ok
17:49:53.0327 2588 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) D:\Windows\system32\drivers\HidBatt.sys
17:49:53.0356 2588 HidBatt - ok
17:49:53.0365 2588 HidBth (89448f40e6df260c206a193a4683ba78) D:\Windows\system32\drivers\hidbth.sys
17:49:53.0398 2588 HidBth - ok
17:49:53.0438 2588 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) D:\Windows\system32\drivers\hidir.sys
17:49:53.0467 2588 HidIr - ok
17:49:53.0502 2588 HidUsb (10c19f8290891af023eaec0832e1eb4d) D:\Windows\system32\DRIVERS\hidusb.sys
17:49:53.0530 2588 HidUsb - ok
17:49:53.0548 2588 HpSAMD (295fdc419039090eb8b49ffdbb374549) D:\Windows\system32\drivers\HpSAMD.sys
17:49:53.0568 2588 HpSAMD - ok
17:49:53.0619 2588 htcnprot (339adefad60353f960e3ca67ce468c24) D:\Windows\system32\DRIVERS\htcnprot.sys
17:49:53.0653 2588 htcnprot - ok
17:49:53.0679 2588 HTTP (871917b07a141bff43d76d8844d48106) D:\Windows\system32\drivers\HTTP.sys
17:49:53.0732 2588 HTTP - ok
17:49:53.0744 2588 hwpolicy (0c4e035c7f105f1299258c90886c64c5) D:\Windows\system32\drivers\hwpolicy.sys
17:49:53.0757 2588 hwpolicy - ok
17:49:53.0773 2588 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) D:\Windows\system32\DRIVERS\i8042prt.sys
17:49:53.0805 2588 i8042prt - ok
17:49:53.0835 2588 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) D:\Windows\system32\drivers\iaStorV.sys
17:49:53.0858 2588 iaStorV - ok
17:49:53.0889 2588 iirsp (4173ff5708f3236cf25195fecd742915) D:\Windows\system32\drivers\iirsp.sys
17:49:53.0931 2588 iirsp - ok
17:49:53.0962 2588 intelide (a0f12f2c9ba6c72f3987ce780e77c130) D:\Windows\system32\drivers\intelide.sys
17:49:53.0984 2588 intelide - ok
17:49:53.0997 2588 intelppm (3b514d27bfc4accb4037bc6685f766e0) D:\Windows\system32\drivers\intelppm.sys
17:49:54.0012 2588 intelppm - ok
17:49:54.0022 2588 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) D:\Windows\system32\DRIVERS\ipfltdrv.sys
17:49:54.0057 2588 IpFilterDriver - ok
17:49:54.0077 2588 IPMIDRV (4bd7134618c1d2a27466a099062547bf) D:\Windows\system32\drivers\IPMIDrv.sys
17:49:54.0093 2588 IPMIDRV - ok
17:49:54.0101 2588 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) D:\Windows\system32\drivers\ipnat.sys
17:49:54.0130 2588 IPNAT - ok
17:49:54.0147 2588 IRENUM (42996cff20a3084a56017b7902307e9f) D:\Windows\system32\drivers\irenum.sys
17:49:54.0177 2588 IRENUM - ok
17:49:54.0190 2588 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) D:\Windows\system32\drivers\isapnp.sys
17:49:54.0203 2588 isapnp - ok
17:49:54.0223 2588 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) D:\Windows\system32\drivers\msiscsi.sys
17:49:54.0239 2588 iScsiPrt - ok
17:49:54.0254 2588 kbdclass (adef52ca1aeae82b50df86b56413107e) D:\Windows\system32\DRIVERS\kbdclass.sys
17:49:54.0267 2588 kbdclass - ok
17:49:54.0295 2588 kbdhid (9e3ced91863e6ee98c24794d05e27a71) D:\Windows\system32\drivers\kbdhid.sys
17:49:54.0344 2588 kbdhid - ok
17:49:54.0397 2588 KSecDD (f4647bb23db9038a7536cf6b68f4207f) D:\Windows\system32\Drivers\ksecdd.sys
17:49:54.0428 2588 KSecDD - ok
17:49:54.0443 2588 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) D:\Windows\system32\Drivers\ksecpkg.sys
17:49:54.0457 2588 KSecPkg - ok
17:49:54.0493 2588 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) D:\Windows\system32\DRIVERS\lltdio.sys
17:49:54.0527 2588 lltdio - ok
17:49:54.0558 2588 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) D:\Windows\system32\drivers\lsi_fc.sys
17:49:54.0579 2588 LSI_FC - ok
17:49:54.0592 2588 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) D:\Windows\system32\drivers\lsi_sas.sys
17:49:54.0606 2588 LSI_SAS - ok
17:49:54.0617 2588 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) D:\Windows\system32\drivers\lsi_sas2.sys
17:49:54.0631 2588 LSI_SAS2 - ok
17:49:54.0649 2588 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) D:\Windows\system32\drivers\lsi_scsi.sys
17:49:54.0672 2588 LSI_SCSI - ok
17:49:54.0686 2588 luafv (6703e366cc18d3b6e534f5cf7df39cee) D:\Windows\system32\drivers\luafv.sys
17:49:54.0722 2588 luafv - ok
17:49:54.0737 2588 megasas (0fff5b045293002ab38eb1fd1fc2fb74) D:\Windows\system32\drivers\megasas.sys
17:49:54.0751 2588 megasas - ok
17:49:54.0772 2588 MegaSR (dcbab2920c75f390caf1d29f675d03d6) D:\Windows\system32\drivers\MegaSR.sys
17:49:54.0795 2588 MegaSR - ok
17:49:54.0818 2588 Modem (f001861e5700ee84e2d4e52c712f4964) D:\Windows\system32\drivers\modem.sys
17:49:54.0859 2588 Modem - ok
17:49:54.0887 2588 monitor (79d10964de86b292320e9dfe02282a23) D:\Windows\system32\DRIVERS\monitor.sys
17:49:54.0913 2588 monitor - ok
17:49:54.0948 2588 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) D:\Windows\system32\DRIVERS\mouclass.sys
17:49:54.0992 2588 mouclass - ok
17:49:55.0022 2588 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) D:\Windows\system32\DRIVERS\mouhid.sys
17:49:55.0068 2588 mouhid - ok
17:49:55.0083 2588 mountmgr (fc8771f45ecccfd89684e38842539b9b) D:\Windows\system32\drivers\mountmgr.sys
17:49:55.0104 2588 mountmgr - ok
17:49:55.0120 2588 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) D:\Windows\system32\drivers\mpio.sys
17:49:55.0134 2588 mpio - ok
17:49:55.0146 2588 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) D:\Windows\system32\drivers\mpsdrv.sys
17:49:55.0178 2588 mpsdrv - ok
17:49:55.0202 2588 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) D:\Windows\system32\drivers\mrxdav.sys
17:49:55.0229 2588 MRxDAV - ok
17:49:55.0259 2588 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) D:\Windows\system32\DRIVERS\mrxsmb.sys
17:49:55.0281 2588 mrxsmb - ok
17:49:55.0302 2588 mrxsmb10 (6d17a4791aca19328c685d256349fefc) D:\Windows\system32\DRIVERS\mrxsmb10.sys
17:49:55.0321 2588 mrxsmb10 - ok
17:49:55.0335 2588 mrxsmb20 (b81f204d146000be76651a50670a5e9e) D:\Windows\system32\DRIVERS\mrxsmb20.sys
17:49:55.0358 2588 mrxsmb20 - ok
17:49:55.0384 2588 msahci (012c5f4e9349e711e11e0f19a8589f0a) D:\Windows\system32\drivers\msahci.sys
17:49:55.0403 2588 msahci - ok
17:49:55.0415 2588 msdsm (55055f8ad8be27a64c831322a780a228) D:\Windows\system32\drivers\msdsm.sys
17:49:55.0459 2588 msdsm - ok
17:49:55.0492 2588 Msfs (daefb28e3af5a76abcc2c3078c07327f) D:\Windows\system32\drivers\Msfs.sys
17:49:55.0563 2588 Msfs - ok
17:49:55.0579 2588 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) D:\Windows\System32\drivers\mshidkmdf.sys
17:49:55.0612 2588 mshidkmdf - ok
17:49:55.0625 2588 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) D:\Windows\system32\drivers\msisadrv.sys
17:49:55.0645 2588 msisadrv - ok
17:49:55.0664 2588 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) D:\Windows\system32\drivers\MSKSSRV.sys
17:49:55.0706 2588 MSKSSRV - ok
17:49:55.0713 2588 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) D:\Windows\system32\drivers\MSPCLOCK.sys
17:49:55.0747 2588 MSPCLOCK - ok
17:49:55.0754 2588 MSPQM (f456e973590d663b1073e9c463b40932) D:\Windows\system32\drivers\MSPQM.sys
17:49:55.0793 2588 MSPQM - ok
17:49:55.0801 2588 MsRPC (0e008fc4819d238c51d7c93e7b41e560) D:\Windows\system32\drivers\MsRPC.sys
17:49:55.0824 2588 MsRPC - ok
17:49:55.0842 2588 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) D:\Windows\system32\DRIVERS\mssmbios.sys
17:49:55.0862 2588 mssmbios - ok
17:49:55.0869 2588 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) D:\Windows\system32\drivers\MSTEE.sys
17:49:55.0903 2588 MSTEE - ok
17:49:55.0917 2588 MTConfig (33599130f44e1f34631cea241de8ac84) D:\Windows\system32\drivers\MTConfig.sys
17:49:55.0947 2588 MTConfig - ok
17:49:55.0964 2588 Mup (159fad02f64e6381758c990f753bcc80) D:\Windows\system32\Drivers\mup.sys
17:49:55.0984 2588 Mup - ok
17:49:56.0012 2588 NativeWifiP (26384429fcd85d83746f63e798ab1480) D:\Windows\system32\DRIVERS\nwifi.sys
17:49:56.0041 2588 NativeWifiP - ok
17:49:56.0072 2588 NDIS (e7c54812a2aaf43316eb6930c1ffa108) D:\Windows\system32\drivers\ndis.sys
17:49:56.0157 2588 NDIS - ok
17:49:56.0174 2588 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) D:\Windows\system32\DRIVERS\ndiscap.sys
17:49:56.0215 2588 NdisCap - ok
17:49:56.0232 2588 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) D:\Windows\system32\DRIVERS\ndistapi.sys
17:49:56.0265 2588 NdisTapi - ok
17:49:56.0274 2588 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) D:\Windows\system32\DRIVERS\ndisuio.sys
17:49:56.0312 2588 Ndisuio - ok
17:49:56.0328 2588 NdisWan (38fbe267e7e6983311179230facb1017) D:\Windows\system32\DRIVERS\ndiswan.sys
17:49:56.0373 2588 NdisWan - ok
17:49:56.0385 2588 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) D:\Windows\system32\drivers\NDProxy.sys
17:49:56.0418 2588 NDProxy - ok
17:49:56.0440 2588 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) D:\Windows\system32\DRIVERS\netbios.sys
17:49:56.0486 2588 NetBIOS - ok
17:49:56.0507 2588 NetBT (280122ddcf04b378edd1ad54d71c1e54) D:\Windows\system32\DRIVERS\netbt.sys
17:49:56.0598 2588 NetBT - ok
17:49:56.0663 2588 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) D:\Windows\system32\drivers\nfrd960.sys
17:49:56.0684 2588 nfrd960 - ok
17:49:56.0752 2588 NPF (b48dc6abcd3aeff8618350ccbdc6b09a) D:\Windows\system32\drivers\npf.sys
17:49:56.0770 2588 NPF - ok
17:49:56.0780 2588 Npfs (1db262a9f8c087e8153d89bef3d2235f) D:\Windows\system32\drivers\Npfs.sys
17:49:56.0814 2588 Npfs - ok
17:49:56.0828 2588 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) D:\Windows\system32\drivers\nsiproxy.sys
17:49:56.0872 2588 nsiproxy - ok
17:49:56.0925 2588 Ntfs (81189c3d7763838e55c397759d49007a) D:\Windows\system32\drivers\Ntfs.sys
17:49:56.0981 2588 Ntfs - ok
17:49:56.0994 2588 Null (f9756a98d69098dca8945d62858a812c) D:\Windows\system32\drivers\Null.sys
17:49:57.0029 2588 Null - ok
17:49:57.0204 2588 nvlddmkm (b0881dda5a8160422561ffab7f0008b1) D:\Windows\system32\DRIVERS\nvlddmkm.sys
17:49:57.0549 2588 nvlddmkm - ok
17:49:57.0579 2588 nvraid (b3e25ee28883877076e0e1ff877d02e0) D:\Windows\system32\drivers\nvraid.sys
17:49:57.0601 2588 nvraid - ok
17:49:57.0614 2588 nvstor (4380e59a170d88c4f1022eff6719a8a4) D:\Windows\system32\drivers\nvstor.sys
17:49:57.0636 2588 nvstor - ok
17:49:57.0650 2588 nv_agp (5a0983915f02bae73267cc2a041f717d) D:\Windows\system32\drivers\nv_agp.sys
17:49:57.0664 2588 nv_agp - ok
17:49:57.0674 2588 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) D:\Windows\system32\drivers\ohci1394.sys
17:49:57.0709 2588 ohci1394 - ok
17:49:57.0749 2588 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) D:\Windows\system32\drivers\parport.sys
17:49:57.0772 2588 Parport - ok
17:49:57.0783 2588 partmgr (bf8f6af06da75b336f07e23aef97d93b) D:\Windows\system32\drivers\partmgr.sys
17:49:57.0803 2588 partmgr - ok
17:49:57.0816 2588 Parvdm (eb0a59f29c19b86479d36b35983daadc) D:\Windows\system32\drivers\parvdm.sys
17:49:57.0847 2588 Parvdm - ok
17:49:57.0876 2588 pci (673e55c3498eb970088e812ea820aa8f) D:\Windows\system32\drivers\pci.sys
17:49:57.0898 2588 pci - ok
17:49:57.0907 2588 pciide (afe86f419014db4e5593f69ffe26ce0a) D:\Windows\system32\drivers\pciide.sys
17:49:57.0927 2588 pciide - ok
17:49:57.0941 2588 pcmcia (f396431b31693e71e8a80687ef523506) D:\Windows\system32\drivers\pcmcia.sys
17:49:57.0964 2588 pcmcia - ok
17:49:57.0981 2588 pcw (250f6b43d2b613172035c6747aeeb19f) D:\Windows\system32\drivers\pcw.sys
17:49:58.0025 2588 pcw - ok
17:49:58.0060 2588 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) D:\Windows\system32\drivers\peauth.sys
17:49:58.0137 2588 PEAUTH - ok
17:49:58.0183 2588 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) D:\Windows\system32\DRIVERS\raspptp.sys
17:49:58.0229 2588 PptpMiniport - ok
17:49:58.0240 2588 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) D:\Windows\system32\drivers\processr.sys
17:49:58.0274 2588 Processor - ok
17:49:58.0302 2588 Psched (6270ccae2a86de6d146529fe55b3246a) D:\Windows\system32\DRIVERS\pacer.sys
17:49:58.0347 2588 Psched - ok
17:49:58.0383 2588 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) D:\Windows\system32\drivers\ql2300.sys
17:49:58.0438 2588 ql2300 - ok
17:49:58.0451 2588 ql40xx (b4dd51dd25182244b86737dc51af2270) D:\Windows\system32\drivers\ql40xx.sys
17:49:58.0473 2588 ql40xx - ok
17:49:58.0486 2588 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) D:\Windows\system32\drivers\qwavedrv.sys
17:49:58.0512 2588 QWAVEdrv - ok
17:49:58.0525 2588 RasAcd (30a81b53c766d0133bb86d234e5556ab) D:\Windows\system32\DRIVERS\rasacd.sys
17:49:58.0618 2588 RasAcd - ok
17:49:58.0644 2588 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) D:\Windows\system32\DRIVERS\AgileVpn.sys
17:49:58.0678 2588 RasAgileVpn - ok
17:49:58.0696 2588 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) D:\Windows\system32\DRIVERS\rasl2tp.sys
17:49:58.0743 2588 Rasl2tp - ok
17:49:58.0765 2588 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) D:\Windows\system32\DRIVERS\raspppoe.sys
17:49:58.0805 2588 RasPppoe - ok
17:49:58.0821 2588 RasSstp (44101f495a83ea6401d886e7fd70096b) D:\Windows\system32\DRIVERS\rassstp.sys
17:49:58.0862 2588 RasSstp - ok
17:49:58.0880 2588 rdbss (d528bc58a489409ba40334ebf96a311b) D:\Windows\system32\DRIVERS\rdbss.sys
17:49:58.0921 2588 rdbss - ok
17:49:58.0939 2588 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) D:\Windows\system32\DRIVERS\rdpbus.sys
17:49:58.0964 2588 rdpbus - ok
17:49:58.0974 2588 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) D:\Windows\system32\DRIVERS\RDPCDD.sys
17:49:59.0006 2588 RDPCDD - ok
17:49:59.0029 2588 RDPDR (b973fcfc50dc1434e1970a146f7e3885) D:\Windows\system32\drivers\rdpdr.sys
17:49:59.0054 2588 RDPDR - ok
17:49:59.0077 2588 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) D:\Windows\system32\drivers\rdpencdd.sys
17:49:59.0119 2588 RDPENCDD - ok
17:49:59.0133 2588 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) D:\Windows\system32\drivers\rdprefmp.sys
17:49:59.0173 2588 RDPREFMP - ok
17:49:59.0188 2588 RDPWD (288b06960d78428ff89e811632684e20) D:\Windows\system32\drivers\RDPWD.sys
17:49:59.0232 2588 RDPWD - ok
17:49:59.0257 2588 rdyboost (518395321dc96fe2c9f0e96ac743b656) D:\Windows\system32\drivers\rdyboost.sys
17:49:59.0280 2588 rdyboost - ok
17:49:59.0345 2588 rspndr (032b0d36ad92b582d869879f5af5b928) D:\Windows\system32\DRIVERS\rspndr.sys
17:49:59.0424 2588 rspndr - ok
17:49:59.0448 2588 RTL8167 (7dfd48e24479b68b258d8770121155a0) D:\Windows\system32\DRIVERS\Rt86win7.sys
17:49:59.0483 2588 RTL8167 - ok
17:49:59.0499 2588 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) D:\Windows\system32\drivers\vms3cap.sys
17:49:59.0525 2588 s3cap - ok
17:49:59.0548 2588 sbp2port (05d860da1040f111503ac416ccef2bca) D:\Windows\system32\drivers\sbp2port.sys
17:49:59.0568 2588 sbp2port - ok
17:49:59.0622 2588 scfilter (0693b5ec673e34dc147e195779a4dcf6) D:\Windows\system32\DRIVERS\scfilter.sys
17:49:59.0657 2588 scfilter - ok
17:49:59.0683 2588 secdrv (90a3935d05b494a5a39d37e71f09a677) D:\Windows\system32\drivers\secdrv.sys
17:49:59.0727 2588 secdrv - ok
17:49:59.0761 2588 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) D:\Windows\system32\DRIVERS\serenum.sys
17:49:59.0809 2588 Serenum - ok
17:49:59.0834 2588 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) D:\Windows\system32\DRIVERS\serial.sys
17:49:59.0898 2588 Serial - ok
17:49:59.0916 2588 sermouse (79bffb520327ff916a582dfea17aa813) D:\Windows\system32\drivers\sermouse.sys
17:49:59.0939 2588 sermouse - ok
17:49:59.0962 2588 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) D:\Windows\system32\drivers\sffdisk.sys
17:49:59.0999 2588 sffdisk - ok
17:50:00.0007 2588 sffp_mmc (932a68ee27833cfd57c1639d375f2731) D:\Windows\system32\drivers\sffp_mmc.sys
17:50:00.0031 2588 sffp_mmc - ok
17:50:00.0040 2588 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) D:\Windows\system32\drivers\sffp_sd.sys
17:50:00.0068 2588 sffp_sd - ok
17:50:00.0075 2588 sfloppy (db96666cc8312ebc45032f30b007a547) D:\Windows\system32\drivers\sfloppy.sys
17:50:00.0101 2588 sfloppy - ok
17:50:00.0114 2588 sisagp (2565cac0dc9fe0371bdce60832582b2e) D:\Windows\system32\drivers\sisagp.sys
17:50:00.0135 2588 sisagp - ok
17:50:00.0152 2588 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) D:\Windows\system32\drivers\SiSRaid2.sys
17:50:00.0173 2588 SiSRaid2 - ok
17:50:00.0187 2588 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) D:\Windows\system32\drivers\sisraid4.sys
17:50:00.0208 2588 SiSRaid4 - ok
17:50:00.0229 2588 Smb (3e21c083b8a01cb70ba1f09303010fce) D:\Windows\system32\DRIVERS\smb.sys
17:50:00.0265 2588 Smb - ok
17:50:00.0298 2588 spldr (95cf1ae7527fb70f7816563cbc09d942) D:\Windows\system32\drivers\spldr.sys
17:50:00.0318 2588 spldr - ok
17:50:00.0376 2588 sp_rsdrv2 (7b426b8e809edf081d771ef429345528) D:\Windows\system32\drivers\sp_rsdrv2.sys
17:50:00.0412 2588 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - warning
17:50:00.0412 2588 sp_rsdrv2 - detected UnsignedFile.Multi.Generic (1)
17:50:00.0459 2588 srv (e4c2764065d66ea1d2d3ebc28fe99c46) D:\Windows\system32\DRIVERS\srv.sys
17:50:00.0502 2588 srv - ok
17:50:00.0517 2588 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) D:\Windows\system32\DRIVERS\srv2.sys
17:50:00.0554 2588 srv2 - ok
17:50:00.0590 2588 srvnet (be6bd660caa6f291ae06a718a4fa8abc) D:\Windows\system32\DRIVERS\srvnet.sys
17:50:00.0625 2588 srvnet - ok
17:50:00.0664 2588 stexstor (db32d325c192b801df274bfd12a7e72b) D:\Windows\system32\drivers\stexstor.sys
17:50:00.0684 2588 stexstor - ok
17:50:00.0725 2588 storflt (472af0311073dceceaa8fa18ba2bdf89) D:\Windows\system32\drivers\vmstorfl.sys
17:50:00.0745 2588 storflt - ok
17:50:00.0775 2588 storvsc (dcaffd62259e0bdb433dd67b5bb37619) D:\Windows\system32\drivers\storvsc.sys
17:50:00.0794 2588 storvsc - ok
17:50:00.0807 2588 swenum (e58c78a848add9610a4db6d214af5224) D:\Windows\system32\DRIVERS\swenum.sys
17:50:00.0827 2588 swenum - ok
17:50:00.0902 2588 Tcpip (65d10b191c59c5501a1263fc33f6894b) D:\Windows\system32\drivers\tcpip.sys
17:50:00.0958 2588 Tcpip - ok
17:50:00.0983 2588 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) D:\Windows\system32\DRIVERS\tcpip.sys
17:50:01.0018 2588 TCPIP6 - ok
17:50:01.0033 2588 tcpipreg (cca24162e055c3714ce5a88b100c64ed) D:\Windows\system32\drivers\tcpipreg.sys
17:50:01.0131 2588 tcpipreg - ok
17:50:01.0155 2588 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) D:\Windows\system32\drivers\tdpipe.sys
17:50:01.0198 2588 TDPIPE - ok
17:50:01.0205 2588 TDTCP (2c10395baa4847f83042813c515cc289) D:\Windows\system32\drivers\tdtcp.sys
17:50:01.0244 2588 TDTCP - ok
17:50:01.0262 2588 tdx (b459575348c20e8121d6039da063c704) D:\Windows\system32\DRIVERS\tdx.sys
17:50:01.0305 2588 tdx - ok
17:50:01.0317 2588 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) D:\Windows\system32\DRIVERS\termdd.sys
17:50:01.0336 2588 TermDD - ok
17:50:01.0371 2588 tssecsrv (254bb140eee3c59d6114c1a86b636877) D:\Windows\system32\DRIVERS\tssecsrv.sys
17:50:01.0414 2588 tssecsrv - ok
17:50:01.0425 2588 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) D:\Windows\system32\drivers\tsusbflt.sys
17:50:01.0454 2588 TsUsbFlt - ok
17:50:01.0461 2588 TsUsbGD (01246f0baad7b68ec0f472aa41e33282) D:\Windows\system32\drivers\TsUsbGD.sys
17:50:01.0490 2588 TsUsbGD - ok
17:50:01.0511 2588 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) D:\Windows\system32\DRIVERS\tunnel.sys
17:50:01.0544 2588 tunnel - ok
17:50:01.0562 2588 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) D:\Windows\system32\drivers\uagp35.sys
17:50:01.0582 2588 uagp35 - ok
17:50:01.0593 2588 udfs (ee43346c7e4b5e63e54f927babbb32ff) D:\Windows\system32\DRIVERS\udfs.sys
17:50:01.0629 2588 udfs - ok
17:50:01.0651 2588 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) D:\Windows\system32\drivers\uliagpkx.sys
17:50:01.0684 2588 uliagpkx - ok
17:50:01.0704 2588 umbus (d295bed4b898f0fd999fcfa9b32b071b) D:\Windows\system32\DRIVERS\umbus.sys
17:50:01.0762 2588 umbus - ok
17:50:01.0775 2588 UmPass (7550ad0c6998ba1cb4843e920ee0feac) D:\Windows\system32\drivers\umpass.sys
17:50:01.0806 2588 UmPass - ok
17:50:01.0832 2588 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) D:\Windows\system32\DRIVERS\usbccgp.sys
17:50:01.0855 2588 usbccgp - ok
17:50:01.0872 2588 usbcir (04ec7cec62ec3b6d9354eee93327fc82) D:\Windows\system32\drivers\usbcir.sys
17:50:01.0897 2588 usbcir - ok
17:50:01.0910 2588 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) D:\Windows\system32\DRIVERS\usbehci.sys
17:50:01.0941 2588 usbehci - ok
17:50:01.0960 2588 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) D:\Windows\system32\DRIVERS\usbhub.sys
17:50:01.0993 2588 usbhub - ok
17:50:02.0109 2588 usbohci (e185d44fac515a18d9deddc23c2cdf44) D:\Windows\system32\DRIVERS\usbohci.sys
17:50:02.0157 2588 usbohci - ok
17:50:02.0176 2588 usbprint (797d862fe0875e75c7cc4c1ad7b30252) D:\Windows\system32\DRIVERS\usbprint.sys
17:50:02.0205 2588 usbprint - ok
17:50:02.0239 2588 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) D:\Windows\system32\DRIVERS\usbscan.sys
17:50:02.0267 2588 usbscan - ok
17:50:02.0285 2588 USBSTOR (f991ab9cc6b908db552166768176896a) D:\Windows\system32\DRIVERS\USBSTOR.SYS
17:50:02.0316 2588 USBSTOR - ok
17:50:02.0328 2588 usbuhci (68df884cf41cdada664beb01daf67e3d) D:\Windows\system32\drivers\usbuhci.sys
17:50:02.0357 2588 usbuhci - ok
17:50:02.0411 2588 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) D:\Windows\system32\Drivers\usbvideo.sys
17:50:02.0472 2588 usbvideo - ok
17:50:02.0510 2588 usb_rndisx (d82f43d15fdaa666856c0190cb73e7c9) D:\Windows\system32\DRIVERS\usb8023x.sys
17:50:02.0538 2588 usb_rndisx - ok
17:50:02.0565 2588 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) D:\Windows\system32\drivers\vdrvroot.sys
17:50:02.0585 2588 vdrvroot - ok
17:50:02.0607 2588 vga (17c408214ea61696cec9c66e388b14f3) D:\Windows\system32\DRIVERS\vgapnp.sys
17:50:02.0636 2588 vga - ok
17:50:02.0656 2588 VgaSave (8e38096ad5c8570a6f1570a61e251561) D:\Windows\System32\drivers\vga.sys
17:50:02.0691 2588 VgaSave - ok
17:50:02.0700 2588 vhdmp (5461686cca2fda57b024547733ab42e3) D:\Windows\system32\drivers\vhdmp.sys
17:50:02.0722 2588 vhdmp - ok
17:50:02.0784 2588 viaagp (c829317a37b4bea8f39735d4b076e923) D:\Windows\system32\drivers\viaagp.sys
17:50:02.0805 2588 viaagp - ok
17:50:02.0820 2588 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) D:\Windows\system32\drivers\viac7.sys
17:50:02.0853 2588 ViaC7 - ok
17:50:02.0870 2588 viaide (e43574f6a56a0ee11809b48c09e4fd3c) D:\Windows\system32\drivers\viaide.sys
17:50:02.0890 2588 viaide - ok
17:50:02.0914 2588 vmbus (c2f2911156fdc7817c52829c86da494e) D:\Windows\system32\drivers\vmbus.sys
17:50:02.0937 2588 vmbus - ok
17:50:02.0954 2588 VMBusHID (d4d77455211e204f370d08f4963063ce) D:\Windows\system32\drivers\VMBusHID.sys
17:50:02.0984 2588 VMBusHID - ok
17:50:03.0027 2588 vmm (c01604eaea9c89035cff58cdb322476c) D:\Windows\system32\Drivers\vmm.sys
17:50:03.0047 2588 vmm - ok
17:50:03.0062 2588 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) D:\Windows\system32\drivers\volmgr.sys
17:50:03.0082 2588 volmgr - ok
17:50:03.0105 2588 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) D:\Windows\system32\drivers\volmgrx.sys
17:50:03.0168 2588 volmgrx - ok
17:50:03.0203 2588 volsnap (f497f67932c6fa693d7de2780631cfe7) D:\Windows\system32\drivers\volsnap.sys
17:50:03.0236 2588 volsnap - ok
17:50:03.0258 2588 vsmraid (9dfa0cc2f8855a04816729651175b631) D:\Windows\system32\drivers\vsmraid.sys
17:50:03.0281 2588 vsmraid - ok
17:50:03.0300 2588 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) D:\Windows\System32\drivers\vwifibus.sys
17:50:03.0334 2588 vwifibus - ok
17:50:03.0353 2588 WacomPen (de3721e89c653aa281428c8a69745d90) D:\Windows\system32\drivers\wacompen.sys
17:50:03.0381 2588 WacomPen - ok
17:50:03.0401 2588 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) D:\Windows\system32\DRIVERS\wanarp.sys
17:50:03.0444 2588 WANARP - ok
17:50:03.0447 2588 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) D:\Windows\system32\DRIVERS\wanarp.sys
17:50:03.0483 2588 Wanarpv6 - ok
17:50:03.0523 2588 Wd (1112a9badacb47b7c0bb0392e3158dff) D:\Windows\system32\drivers\wd.sys
17:50:03.0544 2588 Wd - ok
17:50:03.0566 2588 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) D:\Windows\system32\drivers\Wdf01000.sys
17:50:03.0593 2588 Wdf01000 - ok
17:50:03.0632 2588 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) D:\Windows\system32\DRIVERS\wfplwf.sys
17:50:03.0668 2588 WfpLwf - ok
17:50:03.0686 2588 WIMMount (5cf95b35e59e2a38023836fff31be64c) D:\Windows\system32\drivers\wimmount.sys
17:50:03.0730 2588 WIMMount - ok
17:50:03.0809 2588 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) D:\Windows\system32\DRIVERS\wmiacpi.sys
17:50:03.0839 2588 WmiAcpi - ok
17:50:03.0870 2588 ws2ifsl (6db3276587b853bf886b69528fdb048c) D:\Windows\system32\drivers\ws2ifsl.sys
17:50:03.0913 2588 ws2ifsl - ok
17:50:03.0942 2588 WudfPf (e714a1c0354636837e20ccbf00888ee7) D:\Windows\system32\drivers\WudfPf.sys
17:50:03.0983 2588 WudfPf - ok
17:50:04.0002 2588 WUDFRd (1023ee888c9b47178c5293ed5336ab69) D:\Windows\system32\DRIVERS\WUDFRd.sys
17:50:04.0044 2588 WUDFRd - ok
17:50:04.0083 2588 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
17:50:04.0174 2588 \Device\Harddisk0\DR0 - ok
17:50:04.0177 2588 Boot (0x1200) (0dddb50c7fab442f4ebc34547eb94930) \Device\Harddisk0\DR0\Partition0
17:50:04.0178 2588 \Device\Harddisk0\DR0\Partition0 - ok
17:50:04.0182 2588 Boot (0x1200) (6ae2d3c6a0770eaa0d47a05ba3fca4b8) \Device\Harddisk0\DR0\Partition1
17:50:04.0183 2588 \Device\Harddisk0\DR0\Partition1 - ok
17:50:04.0184 2588 ============================================================
17:50:04.0184 2588 Scan finished
17:50:04.0184 2588 ============================================================
17:50:04.0198 5144 Detected object count: 1
17:50:04.0198 5144 Actual detected object count: 1
17:50:19.0678 5144 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - skipped by user
17:50:19.0678 5144 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
v.1.1.1 eric
Kód: Vybrat vše
MBRScan v1.1.1
OS : Windows 7 Service Pack 1 (32 bit)
PROCESSOR : x86 Family 16 Model 6 Stepping 2, AuthenticAMD
BOOT : Normal Boot
DATE : 2012/02/21 (ISO 8601) at 17:52:20
________________________________________________________________________________
DISK : Device\Harddisk0\DR0 __WDC WD6400AAKS-00A7B2 (01.03B01)
BUS_TYPE : (0x03) P-ATA
USE_PIO : NO
MAX_TRANSFER : 128 Kb
ALIGNMENT_MASK : word aligned
________________________________________________________________________________
Device\Harddisk0\DR0 596.2 Go [Fixed] ==> 7 MBR Code
MBR_MD5 : 996BA4CD7E74CAF00A6FE317CFD179E9
MBR_SHA1 : 56A722A02C4F32ADEDB0252D043BB7134AB630C1
Device\Harddisk0\Partition1 50.00 Go 0x07 NTFS / HPFS __ BOOTABLE __
Device\Harddisk0\Partition2 546.2 Go 0x07 NTFS / HPFS
________________________________________________________________________________
############################### Additional scan ################################
DRIVER : D:\Windows\System32\Drivers\dump_dumpata.sys => Invisible on the disk
ADDRESS : 0x9A370000
SIZE : 44.0 Ko
DRIVER : D:\Windows\System32\Drivers\dump_atapi.sys => Invisible on the disk
ADDRESS : 0x9A37B000
SIZE : 36.0 Ko
DRIVER : D:\Windows\System32\Drivers\dump_dumpfve.sys => Invisible on the disk
ADDRESS : 0x9A384000
SIZE : 68.0 Ko
DRIVER : D:\Windows\system32\drivers\24986061.sys => Invisible on the disk
ADDRESS : 0xB2C8A000
SIZE : 92.0 Ko
BCD EmsSettings {0CE4991B-E6B3-4B16-B23C-5E0D9250E5D9} => BcdLibraryBoolean_EmsEnabled (16000020)
SystemStartOptions : NOEXECUTE=OPTIN
________________________________________________________________________________
_______MBR \Device\Harddisk0\DR0
0x00000000 33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00 3À.м.|.À.ؾ.|¿.
0x00000010 06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00 .¹..üó¤Ph..Ëû¹..
0x00000020 BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10 ½¾..~..|......Å.
0x00000030 E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00 âñÍ..V.UÆF..ÆF..
0x00000040 B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09 ´A»ªUÍ.]r..ûUªu.
0x00000050 F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74 ÷Á..t.þF.f`.~..t
0x00000060 26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00 &fh....f.v.h..h.
0x00000070 7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13 |h..h..´B.V..ôÍ.
0x00000080 9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00 ..Ä..ë.¸..».|.V.
0x00000090 8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE .v..N..n.Í.fas.þ
0x000000A0 4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84 N.u..~......².ë.
0x000000B0 55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55 U2ä.V.Í.]ë..>þ}U
0x000000C0 AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64 ªun.v.è..u.ú°Ñæd
0x000000D0 E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75 è..°ßæ`è|.°.ædèu
0x000000E0 00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54 .û¸.»Í.f#Àu;f.ûT
0x000000F0 43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00 CPAu2.ù..r,fh.».
0x00000100 00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66 .fh....fh....fSf
0x00000110 53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66 SfUfh....fh.|..f
0x00000120 61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD ah...Í.Z2öê.|..Í
0x00000130 18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4 ..·.ë..¶.ë..µ.2ä
0x00000140 05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD ....ð¬<.t.»..´.Í
0x00000150 10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8 .ëòôëý+Éädë.$.àø
0x00000160 24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69 $.ÃInvalid parti
0x00000170 74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72 tion table.Error
0x00000180 20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69 loading operati
0x00000190 6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E ng system.Missin
0x000001A0 67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 g operating syst
0x000001B0 65 6D 00 00 00 63 7B 9A FE 28 FF 28 00 00 80 01 em...c{.þ(.(....
0x000001C0 01 00 07 FE FF FF 3F 00 00 00 80 FA 3F 06 00 FE ...þ..?....ú?..þ
0x000001D0 FF FF 0F FE FF FF BF FA 3F 06 41 35 45 44 00 00 ...þ..¿ú?.A5ED..
0x000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Re: Problém se zablokováním internetu
ComboFix 12-02-21.02 - Marek 21.02.2012 18:33:39.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3327.2335 [GMT 1:00]
Spuštěný z: d:\users\Marek\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
D:\install.exe
D:\readme.txt
d:\users\Marek\Desktop\Setup.exe
d:\users\Marek\Documents\~WRD0000.tmp
d:\users\Marek\Documents\~WRD0001.tmp
d:\windows\pkunzip.pif
d:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-21 do 2012-02-21 )))))))))))))))))))))))))))))))
.
.
2012-02-21 17:40 . 2012-02-21 17:40 -------- d-----w- d:\users\Mamka\AppData\Local\temp
2012-02-21 17:40 . 2012-02-21 17:40 -------- d-----w- d:\users\Default\AppData\Local\temp
2012-02-21 16:21 . 2012-02-21 16:21 -------- d-----w- d:\program files\trend micro
2012-02-21 16:21 . 2012-02-21 16:21 -------- d-----w- D:\rsit
2012-02-21 06:35 . 2012-02-08 06:03 6552120 ----a-w- d:\programdata\Microsoft\Windows Defender\Definition Updates\{662A520C-7332-4286-A11F-E1A82E6FFA07}\mpengine.dll
2012-02-15 20:01 . 2012-02-15 20:01 -------- d-----w- d:\program files\Crawler
2012-02-15 20:01 . 2011-06-21 10:24 32768 ----a-w- d:\windows\system32\drivers\sp_rsdrv2.sys
2012-02-15 20:01 . 2012-02-21 12:27 -------- d-----w- d:\programdata\Spyware Terminator
2012-02-15 20:01 . 2012-02-15 20:01 -------- d-----w- d:\users\Marek\AppData\Roaming\Spyware Terminator
2012-02-15 19:58 . 2012-02-15 20:01 -------- d-----w- d:\program files\Spyware Terminator
2012-02-15 10:19 . 2011-12-14 02:56 1427456 ----a-w- d:\windows\system32\inetcpl.cpl
2012-02-15 09:50 . 2011-12-30 05:27 478720 ----a-w- d:\windows\system32\timedate.cpl
2012-02-15 09:50 . 2011-12-16 07:52 690688 ----a-w- d:\windows\system32\msvcrt.dll
2012-02-15 09:50 . 2012-01-04 08:58 442880 ----a-w- d:\windows\system32\ntshrui.dll
2012-02-15 09:50 . 2012-01-14 03:35 2343424 ----a-w- d:\windows\system32\win32k.sys
2012-02-13 16:58 . 2012-02-13 18:23 -------- d-----w- d:\programdata\Spybot - Search & Destroy
2012-02-13 16:58 . 2012-02-13 16:58 -------- d-----w- d:\program files\Spybot - Search & Destroy
2012-02-08 16:14 . 2012-02-08 16:14 -------- d-----w- d:\users\Marek\AppData\Roaming\TeamViewer
2012-02-05 09:40 . 2012-02-05 13:34 -------- d-----w- D:\lucky filmy2
2012-01-31 09:01 . 2011-11-17 05:41 67440 ----a-w- d:\windows\system32\drivers\ksecdd.sys
2012-01-31 09:01 . 2011-11-17 05:41 134000 ----a-w- d:\windows\system32\drivers\ksecpkg.sys
2012-01-31 09:01 . 2011-11-17 05:39 369352 ----a-w- d:\windows\system32\drivers\cng.sys
2012-01-31 09:01 . 2011-11-17 05:35 314880 ----a-w- d:\windows\system32\webio.dll
2012-01-31 09:01 . 2011-11-17 05:34 100352 ----a-w- d:\windows\system32\sspicli.dll
2012-01-31 09:01 . 2011-11-17 05:34 224768 ----a-w- d:\windows\system32\schannel.dll
2012-01-31 09:01 . 2011-11-17 05:34 22016 ----a-w- d:\windows\system32\secur32.dll
2012-01-31 09:01 . 2011-11-17 05:32 1038848 ----a-w- d:\windows\system32\lsasrv.dll
2012-01-31 09:01 . 2011-11-17 05:29 22528 ----a-w- d:\windows\system32\lsass.exe
2012-01-31 09:01 . 2011-11-17 05:34 15872 ----a-w- d:\windows\system32\sspisrv.dll
2012-01-30 14:30 . 2012-01-30 14:30 -------- d-----w- D:\TMbot
2012-01-28 13:08 . 2012-02-07 15:00 -------- d-----w- d:\program files\TMbot
2012-01-26 15:32 . 2012-01-19 07:23 339320 ----a-w- d:\windows\system32\HMIPCore.dll
2012-01-26 15:32 . 2012-01-26 15:32 -------- d-----w- d:\program files\Hide My IP
2012-01-26 15:25 . 2012-01-26 15:25 -------- d-----w- d:\program files\IP Changer Premium
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-29 04:10 . 2011-10-14 14:12 237072 ------w- d:\windows\system32\MpSigStub.exe
2011-12-25 14:22 . 2011-11-02 20:47 414368 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
2011-12-10 18:18 . 2011-12-10 15:22 190848 ----a-w- d:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2011-12-10 13:51 . 2011-12-10 13:51 86528 ----a-w- d:\windows\system32\iesysprep.dll
2011-12-10 13:51 . 2011-12-10 13:51 76800 ----a-w- d:\windows\system32\SetIEInstalledDate.exe
2011-12-10 13:51 . 2011-12-10 13:51 74752 ----a-w- d:\windows\system32\RegisterIEPKEYs.exe
2011-12-10 13:51 . 2011-12-10 13:51 74752 ----a-w- d:\windows\system32\iesetup.dll
2011-12-10 13:51 . 2011-12-10 13:51 63488 ----a-w- d:\windows\system32\tdc.ocx
2011-12-10 13:51 . 2011-12-10 13:51 48640 ----a-w- d:\windows\system32\mshtmler.dll
2011-12-10 13:51 . 2011-12-10 13:51 420864 ----a-w- d:\windows\system32\vbscript.dll
2011-12-10 13:51 . 2011-12-10 13:51 367104 ----a-w- d:\windows\system32\html.iec
2011-12-10 13:51 . 2011-12-10 13:51 35840 ----a-w- d:\windows\system32\imgutil.dll
2011-12-10 13:51 . 2011-12-10 13:51 23552 ----a-w- d:\windows\system32\licmgr10.dll
2011-12-10 13:51 . 2011-12-10 13:51 161792 ----a-w- d:\windows\system32\msls31.dll
2011-12-10 13:51 . 2011-12-10 13:51 152064 ----a-w- d:\windows\system32\wextract.exe
2011-12-10 13:51 . 2011-12-10 13:51 150528 ----a-w- d:\windows\system32\iexpress.exe
2011-12-10 13:51 . 2011-12-10 13:51 142848 ----a-w- d:\windows\system32\ieUnatt.exe
2011-12-10 13:51 . 2011-12-10 13:51 11776 ----a-w- d:\windows\system32\mshta.exe
2011-12-10 13:51 . 2011-12-10 13:51 110592 ----a-w- d:\windows\system32\IEAdvpack.dll
2011-12-10 13:51 . 2011-12-10 13:51 101888 ----a-w- d:\windows\system32\admparse.dll
2011-12-03 21:53 . 2011-12-03 21:53 239168 ----a-w- d:\windows\system32\drivers\dtsoftbus01.sys
2011-11-29 18:19 . 2011-11-29 18:19 192768 ----a-w- d:\programdata\Microsoft\VPDExpress\10.0\1033\ResourceCache.dll
2011-11-28 18:01 . 2011-12-04 15:36 41184 ----a-w- d:\windows\avastSS.scr
2011-11-28 18:01 . 2011-12-04 15:36 199816 ----a-w- d:\windows\system32\aswBoot.exe
2011-11-28 17:53 . 2011-12-04 15:37 435032 ----a-w- d:\windows\system32\drivers\aswSnx.sys
2011-11-28 17:53 . 2011-12-04 15:37 314456 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-11-28 17:52 . 2011-12-04 15:37 34392 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-11-28 17:52 . 2011-12-04 15:37 52952 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-11-28 17:52 . 2011-12-04 15:37 55128 ----a-w- d:\windows\system32\drivers\aswMonFlt.sys
2011-11-28 17:51 . 2011-12-04 15:37 20568 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-11-05 07:07 . 2011-11-15 15:53 134104 ----a-w- d:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
2011-10-13 14:51 2697528 ----a-w- d:\program files\Yandex\YandexBarIE\fastdial.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 17:21 1299248 ----a-r- d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- d:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"="d:\program files\Zrychleni Pocitace\PCSpeedUp.lnk" [2011-10-14 2396]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
"DriverScanner"="d:\program files\Uniblue\DriverScanner\launcher.exe" [2011-10-20 338296]
"SpybotSD TeaTimer"="d:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="d:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"avast"="d:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"AdobeAAMUpdater-1.0"="d:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="d:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="d:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"SweetIM"="d:\program files\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"HTC Sync Loader"="d:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-08-22 593920]
"SpywareTerminatorShield"="d:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2012-01-10 2775728]
"SpywareTerminatorUpdater"="d:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2012-01-10 3609776]
.
d:\users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - d:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 136176]
R3 dmvsc;dmvsc;d:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 GGSAFERDriver;GGSAFER Driver;d:\program files\Garena Classic\safedrv.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 136176]
R3 htcnprot;HTC NDIS Protocol Driver;d:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 SwitchBoard;SwitchBoard;d:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;d:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;d:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Technologie aktivace Windows;d:\windows\system32\Wat\WatAdminSvc.exe [2011-10-20 1343400]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;d:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-12-03 239168]
S1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;d:\windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
S2 AdobeARMservice;Adobe Acrobat Update Service;d:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;d:\windows\system32\drivers\aswMonFlt.sys [2011-11-28 55128]
S2 NPF;NetGroup Packet Filter Driver;d:\windows\system32\drivers\npf.sys [2010-06-25 35088]
S2 PassThru Service;Internet Pass-Through Service;d:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2011-08-12 87040]
S2 SBSDWSCService;SBSD Security Center Service;d:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;d:\program files\Spyware Terminator\st_rsser.exe [2012-01-10 482992]
S3 HideMyIpSRV;HideMyIpSRV;d:\program files\Hide My IP\HideMyIpSrv.exe [2012-01-19 3337216]
S3 RTL8167;Ovladač Realtek 8167 NT;d:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 72397826
*Deregistered* - 72397826
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-21 d:\windows\Tasks\DriverScanner.job
- d:\program files\Uniblue\DriverScanner\dsmonitor.exe [2011-12-18 13:43]
.
2012-02-21 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 14:27]
.
2012-02-21 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 14:27]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=6826
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Search the Web - d:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
LSP: d:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 213.109.68.247 213.109.73.249
TCP: Interfaces\{F07DD54C-B032-40C1-AA58-96DF7E5E2409}: NameServer = 8.8.8.8
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - d:\progra~1\Crawler\Toolbar\ctbr.dll
FF - ProfilePath - d:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\yemjbjc3.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{91397D20-1446-11D4-8AF4-0040CA1127B6} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-02-21 18:42:37
ComboFix-quarantined-files.txt 2012-02-21 17:42
.
Před spuštěním: Volných bajtů: 122 379 554 816
Po spuštění: Volných bajtů: 130 306 609 152
.
- - End Of File - - 463ECB6FE966C506F8FFE49C4237751C
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3327.2335 [GMT 1:00]
Spuštěný z: d:\users\Marek\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
D:\install.exe
D:\readme.txt
d:\users\Marek\Desktop\Setup.exe
d:\users\Marek\Documents\~WRD0000.tmp
d:\users\Marek\Documents\~WRD0001.tmp
d:\windows\pkunzip.pif
d:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-21 do 2012-02-21 )))))))))))))))))))))))))))))))
.
.
2012-02-21 17:40 . 2012-02-21 17:40 -------- d-----w- d:\users\Mamka\AppData\Local\temp
2012-02-21 17:40 . 2012-02-21 17:40 -------- d-----w- d:\users\Default\AppData\Local\temp
2012-02-21 16:21 . 2012-02-21 16:21 -------- d-----w- d:\program files\trend micro
2012-02-21 16:21 . 2012-02-21 16:21 -------- d-----w- D:\rsit
2012-02-21 06:35 . 2012-02-08 06:03 6552120 ----a-w- d:\programdata\Microsoft\Windows Defender\Definition Updates\{662A520C-7332-4286-A11F-E1A82E6FFA07}\mpengine.dll
2012-02-15 20:01 . 2012-02-15 20:01 -------- d-----w- d:\program files\Crawler
2012-02-15 20:01 . 2011-06-21 10:24 32768 ----a-w- d:\windows\system32\drivers\sp_rsdrv2.sys
2012-02-15 20:01 . 2012-02-21 12:27 -------- d-----w- d:\programdata\Spyware Terminator
2012-02-15 20:01 . 2012-02-15 20:01 -------- d-----w- d:\users\Marek\AppData\Roaming\Spyware Terminator
2012-02-15 19:58 . 2012-02-15 20:01 -------- d-----w- d:\program files\Spyware Terminator
2012-02-15 10:19 . 2011-12-14 02:56 1427456 ----a-w- d:\windows\system32\inetcpl.cpl
2012-02-15 09:50 . 2011-12-30 05:27 478720 ----a-w- d:\windows\system32\timedate.cpl
2012-02-15 09:50 . 2011-12-16 07:52 690688 ----a-w- d:\windows\system32\msvcrt.dll
2012-02-15 09:50 . 2012-01-04 08:58 442880 ----a-w- d:\windows\system32\ntshrui.dll
2012-02-15 09:50 . 2012-01-14 03:35 2343424 ----a-w- d:\windows\system32\win32k.sys
2012-02-13 16:58 . 2012-02-13 18:23 -------- d-----w- d:\programdata\Spybot - Search & Destroy
2012-02-13 16:58 . 2012-02-13 16:58 -------- d-----w- d:\program files\Spybot - Search & Destroy
2012-02-08 16:14 . 2012-02-08 16:14 -------- d-----w- d:\users\Marek\AppData\Roaming\TeamViewer
2012-02-05 09:40 . 2012-02-05 13:34 -------- d-----w- D:\lucky filmy2
2012-01-31 09:01 . 2011-11-17 05:41 67440 ----a-w- d:\windows\system32\drivers\ksecdd.sys
2012-01-31 09:01 . 2011-11-17 05:41 134000 ----a-w- d:\windows\system32\drivers\ksecpkg.sys
2012-01-31 09:01 . 2011-11-17 05:39 369352 ----a-w- d:\windows\system32\drivers\cng.sys
2012-01-31 09:01 . 2011-11-17 05:35 314880 ----a-w- d:\windows\system32\webio.dll
2012-01-31 09:01 . 2011-11-17 05:34 100352 ----a-w- d:\windows\system32\sspicli.dll
2012-01-31 09:01 . 2011-11-17 05:34 224768 ----a-w- d:\windows\system32\schannel.dll
2012-01-31 09:01 . 2011-11-17 05:34 22016 ----a-w- d:\windows\system32\secur32.dll
2012-01-31 09:01 . 2011-11-17 05:32 1038848 ----a-w- d:\windows\system32\lsasrv.dll
2012-01-31 09:01 . 2011-11-17 05:29 22528 ----a-w- d:\windows\system32\lsass.exe
2012-01-31 09:01 . 2011-11-17 05:34 15872 ----a-w- d:\windows\system32\sspisrv.dll
2012-01-30 14:30 . 2012-01-30 14:30 -------- d-----w- D:\TMbot
2012-01-28 13:08 . 2012-02-07 15:00 -------- d-----w- d:\program files\TMbot
2012-01-26 15:32 . 2012-01-19 07:23 339320 ----a-w- d:\windows\system32\HMIPCore.dll
2012-01-26 15:32 . 2012-01-26 15:32 -------- d-----w- d:\program files\Hide My IP
2012-01-26 15:25 . 2012-01-26 15:25 -------- d-----w- d:\program files\IP Changer Premium
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-29 04:10 . 2011-10-14 14:12 237072 ------w- d:\windows\system32\MpSigStub.exe
2011-12-25 14:22 . 2011-11-02 20:47 414368 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
2011-12-10 18:18 . 2011-12-10 15:22 190848 ----a-w- d:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2011-12-10 13:51 . 2011-12-10 13:51 86528 ----a-w- d:\windows\system32\iesysprep.dll
2011-12-10 13:51 . 2011-12-10 13:51 76800 ----a-w- d:\windows\system32\SetIEInstalledDate.exe
2011-12-10 13:51 . 2011-12-10 13:51 74752 ----a-w- d:\windows\system32\RegisterIEPKEYs.exe
2011-12-10 13:51 . 2011-12-10 13:51 74752 ----a-w- d:\windows\system32\iesetup.dll
2011-12-10 13:51 . 2011-12-10 13:51 63488 ----a-w- d:\windows\system32\tdc.ocx
2011-12-10 13:51 . 2011-12-10 13:51 48640 ----a-w- d:\windows\system32\mshtmler.dll
2011-12-10 13:51 . 2011-12-10 13:51 420864 ----a-w- d:\windows\system32\vbscript.dll
2011-12-10 13:51 . 2011-12-10 13:51 367104 ----a-w- d:\windows\system32\html.iec
2011-12-10 13:51 . 2011-12-10 13:51 35840 ----a-w- d:\windows\system32\imgutil.dll
2011-12-10 13:51 . 2011-12-10 13:51 23552 ----a-w- d:\windows\system32\licmgr10.dll
2011-12-10 13:51 . 2011-12-10 13:51 161792 ----a-w- d:\windows\system32\msls31.dll
2011-12-10 13:51 . 2011-12-10 13:51 152064 ----a-w- d:\windows\system32\wextract.exe
2011-12-10 13:51 . 2011-12-10 13:51 150528 ----a-w- d:\windows\system32\iexpress.exe
2011-12-10 13:51 . 2011-12-10 13:51 142848 ----a-w- d:\windows\system32\ieUnatt.exe
2011-12-10 13:51 . 2011-12-10 13:51 11776 ----a-w- d:\windows\system32\mshta.exe
2011-12-10 13:51 . 2011-12-10 13:51 110592 ----a-w- d:\windows\system32\IEAdvpack.dll
2011-12-10 13:51 . 2011-12-10 13:51 101888 ----a-w- d:\windows\system32\admparse.dll
2011-12-03 21:53 . 2011-12-03 21:53 239168 ----a-w- d:\windows\system32\drivers\dtsoftbus01.sys
2011-11-29 18:19 . 2011-11-29 18:19 192768 ----a-w- d:\programdata\Microsoft\VPDExpress\10.0\1033\ResourceCache.dll
2011-11-28 18:01 . 2011-12-04 15:36 41184 ----a-w- d:\windows\avastSS.scr
2011-11-28 18:01 . 2011-12-04 15:36 199816 ----a-w- d:\windows\system32\aswBoot.exe
2011-11-28 17:53 . 2011-12-04 15:37 435032 ----a-w- d:\windows\system32\drivers\aswSnx.sys
2011-11-28 17:53 . 2011-12-04 15:37 314456 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-11-28 17:52 . 2011-12-04 15:37 34392 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-11-28 17:52 . 2011-12-04 15:37 52952 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-11-28 17:52 . 2011-12-04 15:37 55128 ----a-w- d:\windows\system32\drivers\aswMonFlt.sys
2011-11-28 17:51 . 2011-12-04 15:37 20568 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-11-05 07:07 . 2011-11-15 15:53 134104 ----a-w- d:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
2011-10-13 14:51 2697528 ----a-w- d:\program files\Yandex\YandexBarIE\fastdial.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 17:21 1299248 ----a-r- d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "d:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- d:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"="d:\program files\Zrychleni Pocitace\PCSpeedUp.lnk" [2011-10-14 2396]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
"DriverScanner"="d:\program files\Uniblue\DriverScanner\launcher.exe" [2011-10-20 338296]
"SpybotSD TeaTimer"="d:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="d:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"avast"="d:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"AdobeAAMUpdater-1.0"="d:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="d:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="d:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"SweetIM"="d:\program files\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"HTC Sync Loader"="d:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-08-22 593920]
"SpywareTerminatorShield"="d:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2012-01-10 2775728]
"SpywareTerminatorUpdater"="d:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2012-01-10 3609776]
.
d:\users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - d:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 136176]
R3 dmvsc;dmvsc;d:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 GGSAFERDriver;GGSAFER Driver;d:\program files\Garena Classic\safedrv.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 136176]
R3 htcnprot;HTC NDIS Protocol Driver;d:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 SwitchBoard;SwitchBoard;d:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;d:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;d:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Technologie aktivace Windows;d:\windows\system32\Wat\WatAdminSvc.exe [2011-10-20 1343400]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;d:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-12-03 239168]
S1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;d:\windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
S2 AdobeARMservice;Adobe Acrobat Update Service;d:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;d:\windows\system32\drivers\aswMonFlt.sys [2011-11-28 55128]
S2 NPF;NetGroup Packet Filter Driver;d:\windows\system32\drivers\npf.sys [2010-06-25 35088]
S2 PassThru Service;Internet Pass-Through Service;d:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2011-08-12 87040]
S2 SBSDWSCService;SBSD Security Center Service;d:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;d:\program files\Spyware Terminator\st_rsser.exe [2012-01-10 482992]
S3 HideMyIpSRV;HideMyIpSRV;d:\program files\Hide My IP\HideMyIpSrv.exe [2012-01-19 3337216]
S3 RTL8167;Ovladač Realtek 8167 NT;d:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 72397826
*Deregistered* - 72397826
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-21 d:\windows\Tasks\DriverScanner.job
- d:\program files\Uniblue\DriverScanner\dsmonitor.exe [2011-12-18 13:43]
.
2012-02-21 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 14:27]
.
2012-02-21 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-12-25 14:27]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=6826
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Search the Web - d:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
LSP: d:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 213.109.68.247 213.109.73.249
TCP: Interfaces\{F07DD54C-B032-40C1-AA58-96DF7E5E2409}: NameServer = 8.8.8.8
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - d:\progra~1\Crawler\Toolbar\ctbr.dll
FF - ProfilePath - d:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\yemjbjc3.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{91397D20-1446-11D4-8AF4-0040CA1127B6} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-02-21 18:42:37
ComboFix-quarantined-files.txt 2012-02-21 17:42
.
Před spuštěním: Volných bajtů: 122 379 554 816
Po spuštění: Volných bajtů: 130 306 609 152
.
- - End Of File - - 463ECB6FE966C506F8FFE49C4237751C
Re: Problém se zablokováním internetu
Bohužel nevím kde která aplikace využívá tyhle porty. Mám tyhle testy provést na všech počítačích v síti?Naughty píše:nevidím ani v jednom logu náznak firewallu, doinstaluj. Ve fw krom Tobě známe aplikace nepovoluj žadnou apolikaci, která bude žádat o přistup na portech 20,21 a 69. Jestli se pokusí, prosím o zdělení jejího názvu.
Logy krom blbůstek neukázaly vyloženě na nic konkrétního prstem.
Dej vědět dle potřeby napiši co dál, ju?
Re: Problém se zablokováním internetu
Vůbec ho nepoužívámNaughty píše:Kolik pc je v síti? Protože tenhle vypadá čistý, to může dělat kterýkoliv.
jen sem koukal na DNSka Rsuke federace a googlu viz řádky:
TCP: DhcpNameServer = 213.109.68.247 213.109.73.249
TCP: Interfaces\{F07DD54C-B032-40C1-AA58-96DF7E5E2409}: NameServer = 8.8.8.8
za normálních okolností bych je sestřelil, jenže proč je v danem pc Hide IP program? (bab raď)
. Používal jsem ho akorát na travian 
, který už nehraju. 8 pc je v síti z toho vím, že 4jsou čisté, protože jsem je reinstaloval kvůli tohohle problému.Re: Problém se zablokováním internetu
V pohodě když jsem počkal 3měsíce tak 1den mě nezabijeNaughty píše:Na zbyvající aplikuj CF-TD- MS, az budes met vsechny logy zabal do jednoho archiv souboru rar/zip a postni do prilohy, mrknu, ale za zitra, soryr az nepsani diakritiky, jsem an jinem pc.
. A diakritiku už vůbec nemusíš řešit .Re: Problém se zablokováním internetu
Omlouvám se za včerejší ne-aktivitu dneska vše zkontroluji. Zatím posílám jeden další pc, který jsem zkontroloval. Ostatní budou až kolem šesté večer až přijdu z práce.Naughty píše:Ok, takže zítra.
- Přílohy
-
- Scany.rar
- PC od bráchy
- (23.64 KiB) Staženo 25 x
Re: Problém se zablokováním internetu
Tak tady jsou všechny pc co nejsou reinstalované a celé naformátované.Naughty píše:Vpohodě, až budeš mít, nahaž je sem.
- Přílohy
-
- Scanyall.rar
- (78.03 KiB) Staženo 18 x
Re: Problém se zablokováním internetu
Omlouvám se, ale nevím jak tyto soubory zabalit. Můžu vás poprosit o radu?Naughty píše:18:03:35.0171 0240 ComputerName: TONDA-DCA974E9A
Device\Harddisk1\DR3 465.8 Go [Fixed] ==> Possible Whistler MBR Code .
MBR_MD5 : 4E5296F7B27B4DE7C1455F4C070E136F
MBR_SHA1 : 003F61053838FA245FD95108B58FF153E696096A
18:04:02.0578 2424 Detected object count: 1
18:04:02.0578 2424 Actual detected object count: 1
18:04:08.0828 2424 \Device\Harddisk1\DR3 ( Rootkit.Boot.Wistler.a ) - skipped by user
18:04:08.0828 2424 \Device\Harddisk1\DR3 ( Rootkit.Boot.Wistler.a ) - User select action: Skip
tento pocitasc nech odpojeny od site, a zazadej ISp o povoleni portu.
Na Tondovym pc se objevily po spusteny MBRScanu dump soubory, ty zabal a upni je (zatim ponecham bez lecby, at se ujistim zdali skutecne to byl on)
Naposledy upravil(a) tygriczka dne 25 úno 2012 09:23, celkem upraveno 1 x.
Re: Problém se zablokováním internetu
Tady jsou ty Dump soubory
- Přílohy
-
- Marek (1).rar
- (1.49 KiB) Staženo 15 x
Re: Problém se zablokováním internetu
Ještě žádná odezva od poskytovatele trvá jim to vždycky tak +-1den než opět odblokují porty. Včera večer jsem jim posílal email. PC je odpojen od sítě.
Re: Problém se zablokováním internetu
Hotovo 
zítra nám povolí UPC ty porty tak uvidíme. Většinou to blokli zpět do dvou dnů, takže ve středu vám dám echo.
zítra nám povolí UPC ty porty tak uvidíme. Většinou to blokli zpět do dvou dnů, takže ve středu vám dám echo.Re: Problém se zablokováním internetu
Nastal trošku jinčí problém ten počítač kde se odstranil ten soubor. Tak se strašně spomalil a všechny stránky jdou, ale jakmile se mám někde přihlásit tak to napíše nelze se připojit. Přitom na ostatních pc to jde.
Re: Problém se zablokováním internetu
Jak tak poslouchám tak se to stalo už v ten pátek po použití všech těch třech programů.
- Přílohy
-
- TDSSKiller_Quarantine.rar
- (92.68 KiB) Staženo 14 x
Přispějete na provoz fóra?