DDoS útoky na sieť

[5manager5]

23:51:33.0013 4924 s1039nd5 - ok
23:51:33.0029 4924 s1039obex (134edbce4dacd749fc508afe1c512d09) C:\Windows\system32\DRIVERS\s1039obex.sys
23:51:33.0029 4924 s1039obex - ok
23:51:33.0060 4924 s1039unic (bc54b27ec3900328bc390e98bbfc9d3a) C:\Windows\system32\DRIVERS\s1039unic.sys
23:51:33.0076 4924 s1039unic - ok
23:51:33.0107 4924 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
23:51:33.0107 4924 SamSs - ok
23:51:33.0154 4924 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
23:51:33.0169 4924 sbp2port - ok
23:51:33.0201 4924 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
23:51:33.0263 4924 SCardSvr - ok
23:51:33.0294 4924 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
23:51:33.0357 4924 scfilter - ok
23:51:33.0435 4924 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
23:51:33.0528 4924 Schedule - ok
23:51:33.0559 4924 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
23:51:33.0606 4924 SCPolicySvc - ok
23:51:33.0622 4924 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
23:51:33.0684 4924 SDRSVC - ok
23:51:33.0731 4924 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
23:51:33.0809 4924 secdrv - ok
23:51:33.0840 4924 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
23:51:33.0903 4924 seclogon - ok
23:51:33.0934 4924 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
23:51:33.0996 4924 SENS - ok
23:51:34.0012 4924 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
23:51:34.0059 4924 SensrSvc - ok
23:51:34.0090 4924 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
23:51:34.0121 4924 Serenum - ok
23:51:34.0121 4924 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
23:51:34.0168 4924 Serial - ok
23:51:34.0199 4924 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
23:51:34.0230 4924 sermouse - ok
23:51:34.0277 4924 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
23:51:34.0355 4924 SessionEnv - ok
23:51:34.0386 4924 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
23:51:34.0417 4924 sffdisk - ok
23:51:34.0433 4924 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
23:51:34.0464 4924 sffp_mmc - ok
23:51:34.0495 4924 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
23:51:34.0527 4924 sffp_sd - ok
23:51:34.0573 4924 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
23:51:34.0605 4924 sfloppy - ok
23:51:34.0651 4924 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
23:51:34.0729 4924 SharedAccess - ok
23:51:34.0776 4924 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
23:51:34.0854 4924 ShellHWDetection - ok
23:51:34.0885 4924 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:51:34.0901 4924 SiSRaid2 - ok
23:51:34.0917 4924 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
23:51:34.0932 4924 SiSRaid4 - ok
23:51:34.0995 4924 SkypeUpdate (579ba0a911ff5ea70cb604cd3b744b0a) C:\Program Files (x86)\Skype\Updater\Updater.exe
23:51:35.0026 4924 SkypeUpdate - ok
23:51:35.0057 4924 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
23:51:35.0119 4924 Smb - ok
23:51:35.0151 4924 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
23:51:35.0182 4924 SNMPTRAP - ok
23:51:35.0213 4924 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
23:51:35.0229 4924 spldr - ok
23:51:35.0291 4924 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
23:51:35.0353 4924 Spooler - ok
23:51:35.0572 4924 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
23:51:35.0712 4924 sppsvc - ok
23:51:35.0790 4924 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
23:51:35.0868 4924 sppuinotify - ok
23:51:35.0977 4924 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys
23:51:35.0977 4924 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb
23:51:35.0993 4924 sptd ( LockedFile.Multi.Generic ) - warning
23:51:35.0993 4924 sptd - detected LockedFile.Multi.Generic (1)
23:51:36.0056 4924 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
23:51:36.0102 4924 srv - ok
23:51:36.0149 4924 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
23:51:36.0196 4924 srv2 - ok
23:51:36.0227 4924 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
23:51:36.0243 4924 srvnet - ok
23:51:36.0290 4924 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
23:51:36.0352 4924 SSDPSRV - ok
23:51:36.0368 4924 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
23:51:36.0430 4924 SstpSvc - ok
23:51:36.0461 4924 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
23:51:36.0477 4924 stexstor - ok
23:51:36.0555 4924 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
23:51:36.0602 4924 stisvc - ok
23:51:36.0633 4924 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
23:51:36.0648 4924 swenum - ok
23:51:36.0695 4924 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
23:51:36.0773 4924 swprv - ok
23:51:36.0820 4924 SynTP (470c47daba9ca3966f0ab3f835d7d135) C:\Windows\system32\DRIVERS\SynTP.sys
23:51:36.0851 4924 SynTP - ok
23:51:36.0976 4924 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
23:51:37.0054 4924 SysMain - ok
23:51:37.0148 4924 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
23:51:37.0210 4924 TabletInputService - ok
23:51:37.0241 4924 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
23:51:37.0304 4924 TapiSrv - ok
23:51:37.0350 4924 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
23:51:37.0397 4924 TBS - ok
23:51:37.0553 4924 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
23:51:37.0616 4924 Tcpip - ok
23:51:37.0865 4924 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
23:51:37.0928 4924 TCPIP6 - ok
23:51:38.0037 4924 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
23:51:38.0115 4924 tcpipreg - ok
23:51:38.0162 4924 tdcmdpst (fd542b661bd22fa69ca789ad0ac58c29) C:\Windows\system32\DRIVERS\tdcmdpst.sys
23:51:38.0193 4924 tdcmdpst - ok
23:51:38.0208 4924 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
23:51:38.0240 4924 TDPIPE - ok
23:51:38.0271 4924 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
23:51:38.0286 4924 TDTCP - ok
23:51:38.0318 4924 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
23:51:38.0396 4924 tdx - ok
23:51:38.0458 4924 TemproMonitoringService (1b43fdbfe5a98f6b3d90595c6b2e5277) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
23:51:38.0489 4924 TemproMonitoringService - ok
23:51:38.0536 4924 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
23:51:38.0552 4924 TermDD - ok
23:51:38.0614 4924 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
23:51:38.0692 4924 TermService - ok
23:51:38.0723 4924 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
23:51:38.0754 4924 Themes - ok
23:51:38.0786 4924 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
23:51:38.0832 4924 THREADORDER - ok
23:51:38.0895 4924 TMachInfo (28644b0523d64eff2fc7312a2ee74b0a) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
23:51:38.0910 4924 TMachInfo - ok
23:51:38.0957 4924 TODDSrv (ed32035bdfeced1ad66d459fd9cc1140) C:\Windows\system32\TODDSrv.exe
23:51:38.0973 4924 TODDSrv - ok
23:51:39.0082 4924 TosCoSrv (98c864481d62f86ec8af65be3419a95b) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
23:51:39.0098 4924 TosCoSrv - ok
23:51:39.0160 4924 TOSHIBA eco Utility Service (3e6756677e16532d235c6cb20614f369) C:\Program Files\TOSHIBA\TECO\TecoService.exe
23:51:39.0191 4924 TOSHIBA eco Utility Service - ok
23:51:39.0254 4924 TOSHIBA HDD SSD Alert Service (74c2fa8c3765ee71a9c22182ec108457) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
23:51:39.0269 4924 TOSHIBA HDD SSD Alert Service - ok
23:51:39.0363 4924 TPCHSrv (97687d094aa597da366e1194b218cc6c) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
23:51:39.0394 4924 TPCHSrv - ok
23:51:39.0488 4924 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
23:51:39.0566 4924 TrkWks - ok
23:51:39.0644 4924 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
23:51:39.0722 4924 TrustedInstaller - ok
23:51:39.0768 4924 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
23:51:39.0800 4924 tssecsrv - ok
23:51:39.0846 4924 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
23:51:39.0893 4924 TsUsbFlt - ok
23:51:39.0940 4924 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
23:51:39.0987 4924 tunnel - ok
23:51:40.0018 4924 TVALZ (550b567f9364d8f7684c3fb3ea665a72) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
23:51:40.0034 4924 TVALZ - ok
23:51:40.0065 4924 TVALZFL (9c7191f4b2e49bff47a6c1144b5923fa) C:\Windows\system32\DRIVERS\TVALZFL.sys
23:51:40.0080 4924 TVALZFL - ok
23:51:40.0096 4924 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
23:51:40.0127 4924 uagp35 - ok
23:51:40.0174 4924 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
23:51:40.0236 4924 udfs - ok
23:51:40.0283 4924 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
23:51:40.0299 4924 UI0Detect - ok
23:51:40.0330 4924 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
23:51:40.0346 4924 uliagpkx - ok
23:51:40.0392 4924 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
23:51:40.0408 4924 umbus - ok
23:51:40.0439 4924 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
23:51:40.0455 4924 UmPass - ok
23:51:40.0673 4924 UNS (cc3775100aba633984f73dfae1f55cae) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
23:51:40.0736 4924 UNS - ok
23:51:40.0829 4924 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
23:51:40.0907 4924 upnphost - ok
23:51:40.0954 4924 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
23:51:41.0016 4924 usbccgp - ok
23:51:41.0048 4924 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
23:51:41.0094 4924 usbcir - ok
23:51:41.0126 4924 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
23:51:41.0157 4924 usbehci - ok
23:51:41.0188 4924 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
23:51:41.0235 4924 usbhub - ok
23:51:41.0266 4924 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
23:51:41.0297 4924 usbohci - ok
23:51:41.0344 4924 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
23:51:41.0391 4924 usbprint - ok
23:51:41.0422 4924 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:51:41.0469 4924 USBSTOR - ok
23:51:41.0484 4924 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
23:51:41.0500 4924 usbuhci - ok
23:51:41.0547 4924 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
23:51:41.0594 4924 usbvideo - ok
23:51:41.0625 4924 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
23:51:41.0687 4924 UxSms - ok
23:51:41.0718 4924 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
23:51:41.0718 4924 VaultSvc - ok
23:51:41.0765 4924 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
23:51:41.0796 4924 vdrvroot - ok
23:51:41.0874 4924 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
23:51:41.0937 4924 vds - ok
23:51:41.0984 4924 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
23:51:41.0999 4924 vga - ok
23:51:42.0015 4924 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
23:51:42.0062 4924 VgaSave - ok
23:51:42.0108 4924 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
23:51:42.0124 4924 vhdmp - ok
23:51:42.0124 4924 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
23:51:42.0140 4924 viaide - ok
23:51:42.0155 4924 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
23:51:42.0171 4924 volmgr - ok
23:51:42.0218 4924 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
23:51:42.0233 4924 volmgrx - ok
23:51:42.0280 4924 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
23:51:42.0311 4924 volsnap - ok
23:51:42.0358 4924 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
23:51:42.0374 4924 vsmraid - ok
23:51:42.0483 4924 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
23:51:42.0576 4924 VSS - ok
23:51:42.0670 4924 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
23:51:42.0701 4924 vwifibus - ok
23:51:42.0748 4924 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
23:51:42.0779 4924 vwififlt - ok
23:51:42.0842 4924 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
23:51:42.0920 4924 W32Time - ok
23:51:42.0951 4924 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
23:51:42.0966 4924 WacomPen - ok
23:51:43.0029 4924 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
23:51:43.0122 4924 WANARP - ok
23:51:43.0154 4924 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
23:51:43.0200 4924 Wanarpv6 - ok
23:51:43.0310 4924 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
23:51:43.0356 4924 WatAdminSvc - ok
23:51:43.0466 4924 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
23:51:43.0544 4924 wbengine - ok
23:51:43.0653 4924 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
23:51:43.0715 4924 WbioSrvc - ok
23:51:43.0746 4924 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
23:51:43.0793 4924 wcncsvc - ok
23:51:43.0824 4924 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
23:51:43.0856 4924 WcsPlugInService - ok
23:51:43.0902 4924 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
23:51:43.0918 4924 Wd - ok
23:51:43.0965 4924 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
23:51:43.0996 4924 Wdf01000 - ok
23:51:44.0027 4924 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
23:51:44.0121 4924 WdiServiceHost - ok
23:51:44.0121 4924 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
23:51:44.0152 4924 WdiSystemHost - ok
23:51:44.0183 4924 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
23:51:44.0230 4924 WebClient - ok
23:51:44.0261 4924 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
23:51:44.0324 4924 Wecsvc - ok
23:51:44.0370 4924 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
23:51:44.0433 4924 wercplsupport - ok
23:51:44.0480 4924 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
23:51:44.0542 4924 WerSvc - ok
23:51:44.0573 4924 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
23:51:44.0636 4924 WfpLwf - ok
23:51:44.0667 4924 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
23:51:44.0682 4924 WIMMount - ok
23:51:44.0714 4924 WinDefend - ok
23:51:44.0714 4924 WinHttpAutoProxySvc - ok
23:51:44.0776 4924 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
23:51:44.0838 4924 Winmgmt - ok
23:51:44.0963 4924 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
23:51:45.0072 4924 WinRM - ok
23:51:45.0197 4924 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
23:51:45.0260 4924 WinUsb - ok
23:51:45.0338 4924 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
23:51:45.0400 4924 Wlansvc - ok
23:51:45.0447 4924 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:51:45.0478 4924 wlcrasvc - ok
23:51:45.0665 4924 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:51:45.0743 4924 wlidsvc - ok
23:51:45.0852 4924 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
23:51:45.0884 4924 WmiAcpi - ok
23:51:45.0946 4924 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
23:51:45.0993 4924 wmiApSrv - ok
23:51:46.0055 4924 WMPNetworkSvc - ok
23:51:46.0086 4924 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
23:51:46.0118 4924 WPCSvc - ok
23:51:46.0149 4924 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
23:51:46.0196 4924 WPDBusEnum - ok
23:51:46.0211 4924 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
23:51:46.0258 4924 ws2ifsl - ok
23:51:46.0289 4924 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
23:51:46.0320 4924 wscsvc - ok
23:51:46.0320 4924 WSearch - ok
23:51:46.0492 4924 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
23:51:46.0554 4924 wuauserv - ok
23:51:46.0664 4924 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
23:51:46.0742 4924 WudfPf - ok
23:51:46.0804 4924 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
23:51:46.0882 4924 WUDFRd - ok
23:51:46.0913 4924 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
23:51:46.0960 4924 wudfsvc - ok
23:51:46.0991 4924 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
23:51:47.0022 4924 WwanSvc - ok
23:51:47.0054 4924 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
23:51:48.0146 4924 \Device\Harddisk0\DR0 - ok
23:51:48.0177 4924 Boot (0x1200) (91b97d1a4c5b63ffb40b0cad5dd454b1) \Device\Harddisk0\DR0\Partition0
23:51:48.0177 4924 \Device\Harddisk0\DR0\Partition0 - ok
23:51:48.0208 4924 Boot (0x1200) (958c6547a98d5478388f385044bb56b4) \Device\Harddisk0\DR0\Partition1
23:51:48.0208 4924 \Device\Harddisk0\DR0\Partition1 - ok
23:51:48.0208 4924 ============================================================
23:51:48.0208 4924 Scan finished
23:51:48.0208 4924 ============================================================
23:51:48.0224 3392 Detected object count: 2
23:51:48.0224 3392 Actual detected object count: 2
23:52:36.0568 3392 OMSI download service ( UnsignedFile.Multi.Generic ) - skipped by user
23:52:36.0568 3392 OMSI download service ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:52:36.0568 3392 sptd ( LockedFile.Multi.Generic ) - skipped by user
23:52:36.0568 3392 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
23:52:53.0088 5032 Deinitialize success

[Danstahr]

Omlouvám se za zpoždění,
zkuste spustit ještě jednou MBAM a zaznamenat, ve kterých souborech našel infekci.

Co se týče těch útoků, opravdu neumím říct, nemám k dispozici dost informací. Ale je to jedna z možností. Osobně nevidím důvod, proč by někdo měl chtít složit domácí síť...

[5manager5]

No, útoky na sieť už prestali sami od seba, asi dva týždne som nič nezaznamenal. Čo sa týka MBANu našiel 2 infiltrácie, jednu vidíte tu a druhú už pri dnešnom scanovaní neukazoval, ale bol to planý poplach, ukazovalo to totiž len na keygen k nejakému programu čo som mal na ploche. Druhá infiltrácia, čo je aj v logu bol taktiež len keygen, dal som to zmazať a tak mi zobrazilo aj log.
Inak mám notebook v poriadku?

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verzia databázy: v2012.07.10.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
saul :: SAUL-TOSH [administrátor]

10. 7. 2012 14:37:51
mbam-log-2012-07-10 (14-37-51).txt

Typ kontroly: Úplná kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 344557
Uplynutý čas: 44 min, 12 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 1
C:\Users\saul\AppData\Local\Temp\Rar$EXa0.422\keygen.exe (RiskWare.Tool.CK) -> Pridanie do karantény a zmazanie úspešné.

(koniec)

[motji]

Zdravím,
ty keygeny vyhoďte, je to potencionální zdroj infekce .
Co počítač?

[5manager5]

Vymazané, no na každý SW čo má keygen mi stále ukazuje ako hrozbu. Ako to mám rozlišovať, je to pri väčšine programoch a to sťahujem len od overených užívateľov. Inak akurát mi nefunguje na NB touchpad, skúšal som dať 2 rôzne drivery je aj zapnutý a nič.

[motji]

Keygeny smažte, je to potencionálně nebezpečný program, nehledě na to, že je to nelegální.
Zkuste projít tohle, jeslti se Vám některý z tipů nebude hodit http://pc.poradna.net/q/view/234295-nefunguje-touchpad

[5manager5]

Všetko zmazané, NB funguje normálne a touchpad tiež, ďakujem.

[motji]

A jak jste ho opravil?

[5manager5]

No, on nebol pokazený ja som si nevšimol, že nebol zapnutý bol len aktívny. Stačilo dať FN+F9 a už šiel .

[motji]