Prosím o kontrolu logu nejde google vyhledávač
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Prosím o kontrolu logu nejde google vyhledávač
Dobrý den,
Prosím o kontrolu logu vůbec mi nenačítají stránky Google. Děkuji
Logfile of random's system information tool 1.09 (written by random/random)
Run by ilona at 2013-05-24 13:45:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (19%) free of 50 GB
Total RAM: 768 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:45:18, on 24.5.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\YourFileDownloader\YourFileUpdater.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\ilona\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\ilona.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/?ocid=ie8fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchamong.com/searchview.p ... s&bar=true
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.searchamong.com/searchview.p ... s&bar=true
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchamong.com/searchview.p ... s&bar=true
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=tbb&s={searchTerms}&f=4
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://internet-explorer.uk.msn.com/IE8/welcome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by MSN and Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - (no file)
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [kX Mixer] C:\Program Files\kX Audio Driver\3550\kxmixer.exe --startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverScanner] "C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe" delay 20000
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 9324 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\DriverScanner.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1770027372-1801674531-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1770027372-1801674531-1003UA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{DDE9B9DB-C88E-4571-A4BA-79BB238E0D15}.job
C:\WINDOWS\tasks\YourFile DownloaderUpdate.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.11.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
C:\Program Files\Mozilla Firefox\searchplugins\
avg-secure-search.xml
babylon.xml
fcmdSrch.xml
Search_Results.xml
C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\extensions\
battlefieldplay4free@ea.com
{ea614400-e918-4741-9a97-7a972ff7c30b}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-15 461216]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-15 170912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TaskTray"= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2000-01-01 13529088]
"nwiz"=nwiz.exe /install []
"HTpatch"=C:\WINDOWS\htpatch.exe [2003-03-27 28672]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2000-01-01 86016]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"kX Mixer"=C:\Program Files\kX Audio Driver\3550\kxmixer.exe --startup []
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DriverScanner"=C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe [2012-04-23 338808]
"Google Update"=C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2013-05-19 116648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\ilona\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Documents and Settings\ilona\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe [2012-04-23 338808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12]
C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe /PROMPT /CMPID=roc_dec12 []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Windows KeyHook]
C:\WINDOWS\system32\keyhook.exe [2004-05-12 249856]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2013-04-19 18678376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SlimDrivers]
C:\Program Files\SlimDrivers\SlimDrivers.exe [2012-02-01 27481952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smart PC Cleaner]
C:\Program Files\Smart PC Cleaner\SPCLauncher.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2012-05-29 115032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sweetpacks Communicator]
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-08-15 231768]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-09-25 113664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\309042~1.318\SSSCHE~1.EXE [2013-02-05 272248]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Disabled:metin2client"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe"="C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe:*:Enabled:BFP4f"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade 1.1"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Firefly Studios\Stronghold Crusader Multiplayer Demo\Stronghold Crusader multiplayer demo.exe"="C:\Program Files\Firefly Studios\Stronghold Crusader Multiplayer Demo\Stronghold Crusader multiplayer demo.exe:*:Enabled:Stronghold Crusader multiplayer demo"
"C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe"="C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"C:\Documents and Settings\ilona\Local Settings\Temp\6.tmp"="C:\Documents and Settings\ilona\Local Settings\Temp\6.tmp:*:Enabled:6"
"C:\rk\rk.exe"="C:\rk\rk.exe:*:Enabled:rk"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Counter-Strike 1.6\csko.exe"="C:\Counter-Strike 1.6\csko.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\QuadCoreM2\pack\core.bin"="C:\Program Files\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe"="C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Profibot\OpenStealth 1.21\OpenStealth.exe"="C:\Program Files\Profibot\OpenStealth 1.21\OpenStealth.exe:*:Enabled:OpenStealth"
"Client Server Runtime Process"="C:\Documents and Settings\ilona\Data aplikací\csrss.exe"
"Host-process Windows (Rundll32.exe)"="C:\Documents and Settings\ilona\Data aplikací\System32\csrss.exe"
"Service Host Process for Windows"="C:\Documents and Settings\ilona\Data aplikací\svchost.exe"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\ilona\Local Settings\Temp\open.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\open.exe:*:Enabled:Promo"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\KBot\KBot 6.91\KBotc.exe"="C:\Program Files\KBot\KBot 6.91\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 6.97\KBotc.exe"="C:\Program Files\KBot\KBot 6.97\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 6.99\KBotc.exe"="C:\Program Files\KBot\KBot 6.99\KBotc.exe:*:Enabled:KBot control center"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX72.888\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX72.888\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX83.152\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX83.152\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX24.968\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX24.968\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX84.952\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX84.952\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX55.408\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX55.408\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX11.640\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX11.640\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX88.944\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX88.944\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX41.984\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX41.984\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX77.304\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX77.304\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\KBot\KBot 7.02\KBotc.exe"="C:\Program Files\KBot\KBot 7.02\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.04\KBotc.exe"="C:\Program Files\KBot\KBot 7.04\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\Profibot\OpenStealth 1.88\OpenStealth.exe"="C:\Program Files\Profibot\OpenStealth 1.88\OpenStealth.exe:*:Enabled:OpenStealth"
"C:\Program Files\KBot\KBot 7.05\KBotc.exe"="C:\Program Files\KBot\KBot 7.05\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.07\KBotc.exe"="C:\Program Files\KBot\KBot 7.07\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\Counter-Strike Source\hl2.exe"="C:\Program Files\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"D:\Program Files\Cossacks - Napoleonic Wars\Data\engine.exe"="D:\Program Files\Cossacks - Napoleonic Wars\Data\engine.exe:*:Enabled:Cossacks 2: Napoleonic Wars"
"C:\Program Files\KBot\KBot 7.14\KBotc.exe"="C:\Program Files\KBot\KBot 7.14\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.16\KBotc.exe"="C:\Program Files\KBot\KBot 7.16\KBotc.exe:*:Enabled:KBot control center"
"C:\Counter-Strike 1.6\hl.exe"="C:\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6\csko.exe"="C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6\csko.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=ctwdm32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=ctwdm32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=ctwdm32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=ctwdm32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=ctwdm32.dll
======List of files/folders created in the last 1 month======
2013-05-24 13:45:10 ----D---- C:\Program Files\trend micro
2013-05-24 13:45:09 ----D---- C:\rsit
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\VDLL.DLL
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\system32\runouce.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\rundll16.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\RUNDL132.EXE
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\logo1_.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\logo_1.exe
2013-05-19 19:44:45 ----A---- C:\WINDOWS\system32\msvcr80.dll
2013-05-19 19:44:44 ----A---- C:\WINDOWS\system32\msvcp80.dll
2013-05-19 19:44:43 ----A---- C:\WINDOWS\system32\eEmpty.exe
2013-05-19 19:44:41 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\system32\T.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\REGEDIT.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\R.COM
2013-05-19 19:44:39 ----D---- C:\Program Files\Common Files\MicroWorld
2013-05-19 19:44:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2013-05-19 19:25:39 ----ASH---- C:\hiberfil.sys
2013-05-19 19:20:09 ----A---- C:\WINDOWS\ntbtlog.txt
2013-05-19 19:09:53 ----D---- C:\Documents and Settings\ilona\Data aplikací\Malwarebytes
2013-05-19 19:09:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-05-19 19:09:42 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-05-19 19:09:42 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2013-05-19 19:06:26 ----D---- C:\Program Files\Mozilla Firefox
2013-05-04 16:35:23 ----D---- C:\Documents and Settings\ilona\Data aplikací\Wargaming.net
2013-05-04 10:43:40 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2013-05-04 10:43:40 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2013-05-04 10:43:39 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2013-05-04 10:43:39 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2013-05-04 10:43:38 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2013-05-04 10:43:36 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2013-05-04 10:43:33 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2013-05-04 10:43:30 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2013-05-04 10:43:28 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2013-05-04 10:43:28 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2013-05-04 10:43:27 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2013-05-04 10:43:27 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2013-05-04 10:43:26 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2013-05-04 10:43:25 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2013-05-04 10:43:24 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2013-05-04 10:43:21 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2013-05-04 10:43:18 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2013-05-04 10:43:18 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2013-05-04 10:43:14 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2013-05-04 10:43:14 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2013-05-04 10:43:11 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2013-05-04 10:43:11 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2013-05-04 10:43:09 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2013-05-04 10:43:09 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2013-05-04 10:43:08 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2013-05-04 10:43:08 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2013-05-04 10:43:07 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2013-05-04 10:43:07 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2013-05-04 10:43:04 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2013-05-04 10:43:02 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2013-05-04 10:43:01 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2013-05-04 10:43:01 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2013-05-04 10:43:00 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2013-05-04 10:41:28 ----D---- C:\WINDOWS\Logs
2013-05-02 20:12:15 ----D---- C:\Documents and Settings\ilona\Data aplikací\Minecraft Version Changer
======List of files/folders modified in the last 1 month======
2013-05-24 13:45:10 ----RD---- C:\Program Files
2013-05-24 13:40:04 ----D---- C:\WINDOWS\Temp
2013-05-24 07:14:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-05-24 07:09:46 ----D---- C:\Documents and Settings\ilona\Data aplikací\Skype
2013-05-24 07:05:09 ----D---- C:\WINDOWS\Microsoft.NET
2013-05-23 20:08:24 ----D---- C:\WINDOWS\Prefetch
2013-05-23 15:52:13 ----D---- C:\Program Files\KBot
2013-05-22 22:17:13 ----D---- C:\Documents and Settings\ilona\Data aplikací\vlc
2013-05-22 18:16:16 ----SHD---- C:\WINDOWS\Installer
2013-05-22 18:16:07 ----SHD---- C:\Config.Msi
2013-05-22 18:15:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-05-22 18:15:34 ----RD---- C:\Program Files\Skype
2013-05-21 18:28:53 ----RSD---- C:\WINDOWS\assembly
2013-05-21 18:28:43 ----D---- C:\WINDOWS\WinSxS
2013-05-21 18:28:08 ----D---- C:\WINDOWS\system32
2013-05-21 18:10:21 ----D---- C:\WINDOWS\system32\en-US
2013-05-21 17:45:05 ----D---- C:\WINDOWS
2013-05-21 16:47:47 ----SD---- C:\WINDOWS\Tasks
2013-05-20 06:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-05-20 06:22:32 ----D---- C:\WINDOWS\system32\drivers
2013-05-19 19:44:39 ----D---- C:\Program Files\Common Files
2013-05-19 19:42:58 ----SH---- C:\boot.ini
2013-05-19 19:42:58 ----A---- C:\WINDOWS\win.ini
2013-05-19 19:42:58 ----A---- C:\WINDOWS\system.ini
2013-05-19 19:42:02 ----D---- C:\WINDOWS\Registration
2013-05-19 19:25:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_2$
2013-05-19 19:06:51 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-05-19 18:57:18 ----D---- C:\WINDOWS\Minidump
2013-05-19 08:15:38 ----D---- C:\Documents and Settings\ilona\Data aplikací\Seznam.cz
2013-05-19 08:10:54 ----D---- C:\WINDOWS\system32\CatRoot2
2013-05-15 08:53:51 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-05-04 15:17:25 ----D---- C:\Documents and Settings\ilona\Data aplikací\.minecraft
2013-05-04 12:28:18 ----D---- C:\WINDOWS\system32\DirectX
2013-05-04 12:28:05 ----HD---- C:\WINDOWS\inf
2013-05-04 10:41:22 ----D---- C:\Games
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sisagp;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-18 36992]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2004-05-12 12416]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-09-20 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-09-20 55936]
R2 SetupNT;SetupNT; C:\WINDOWS\system32\SetupNT.sys [2000-10-25 3000]
R3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
R3 emu10k1;Creative Interface Manager Driver (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2000-01-01 6555104]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sfman;Creative SoundFont Manager Driver (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-04 32768]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S1 nyqgiqbn;nyqgiqbn; \??\C:\WINDOWS\system32\drivers\nyqgiqbn.sys []
S2 5689;5689; \??\C:\DOCUME~1\ilona\LOCALS~1\Temp\5689.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2000-01-01 4122368]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 kxwdmdrv;kX WDM Driver Service; C:\WINDOWS\system32\drivers\kx.sys [2004-02-17 571776]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-20 12160]
S3 NPF;WinPcap Packet Driver (NPF); C:\WINDOWS\system32\drivers\NPF.sys [2012-10-25 50704]
S3 rtl8139;Realtek RTL8139/810X Family PCI Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2000-01-01 25434]
S3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-05-14 217600]
S3 SiS7018;Služba pro ovladač vzorků AC'97 (WDM); C:\WINDOWS\system32\drivers\ac97sis.sys [2001-08-17 297728]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VIAudio;Zvukový řadič VIA AC'97 (WDM); C:\WINDOWS\system32\drivers\ac97via.sys [2008-04-13 84480]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-01-15 170912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2000-01-01 159812]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2013-04-05 76888]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-05-14 3289208]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-15 256904]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-19 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Prosím o kontrolu logu vůbec mi nenačítají stránky Google. Děkuji
Logfile of random's system information tool 1.09 (written by random/random)
Run by ilona at 2013-05-24 13:45:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (19%) free of 50 GB
Total RAM: 768 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:45:18, on 24.5.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\YourFileDownloader\YourFileUpdater.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\ilona\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\ilona.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/?ocid=ie8fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchamong.com/searchview.p ... s&bar=true
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.searchamong.com/searchview.p ... s&bar=true
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchamong.com/searchview.p ... s&bar=true
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=tbb&s={searchTerms}&f=4
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://internet-explorer.uk.msn.com/IE8/welcome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by MSN and Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - (no file)
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [kX Mixer] C:\Program Files\kX Audio Driver\3550\kxmixer.exe --startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverScanner] "C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe" delay 20000
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 9324 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\DriverScanner.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1770027372-1801674531-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1770027372-1801674531-1003UA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{DDE9B9DB-C88E-4571-A4BA-79BB238E0D15}.job
C:\WINDOWS\tasks\YourFile DownloaderUpdate.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.11.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
C:\Program Files\Mozilla Firefox\searchplugins\
avg-secure-search.xml
babylon.xml
fcmdSrch.xml
Search_Results.xml
C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\extensions\
battlefieldplay4free@ea.com
{ea614400-e918-4741-9a97-7a972ff7c30b}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-15 461216]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-15 170912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TaskTray"= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2000-01-01 13529088]
"nwiz"=nwiz.exe /install []
"HTpatch"=C:\WINDOWS\htpatch.exe [2003-03-27 28672]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2000-01-01 86016]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"kX Mixer"=C:\Program Files\kX Audio Driver\3550\kxmixer.exe --startup []
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DriverScanner"=C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe [2012-04-23 338808]
"Google Update"=C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2013-05-19 116648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\ilona\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Documents and Settings\ilona\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
C:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe [2012-04-23 338808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12]
C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe /PROMPT /CMPID=roc_dec12 []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Windows KeyHook]
C:\WINDOWS\system32\keyhook.exe [2004-05-12 249856]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2013-04-19 18678376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SlimDrivers]
C:\Program Files\SlimDrivers\SlimDrivers.exe [2012-02-01 27481952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smart PC Cleaner]
C:\Program Files\Smart PC Cleaner\SPCLauncher.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2012-05-29 115032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sweetpacks Communicator]
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-08-15 231768]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-09-25 113664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\309042~1.318\SSSCHE~1.EXE [2013-02-05 272248]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Disabled:metin2client"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe"="C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe:*:Enabled:BFP4f"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade 1.1"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Firefly Studios\Stronghold Crusader Multiplayer Demo\Stronghold Crusader multiplayer demo.exe"="C:\Program Files\Firefly Studios\Stronghold Crusader Multiplayer Demo\Stronghold Crusader multiplayer demo.exe:*:Enabled:Stronghold Crusader multiplayer demo"
"C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe"="C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"C:\Documents and Settings\ilona\Local Settings\Temp\6.tmp"="C:\Documents and Settings\ilona\Local Settings\Temp\6.tmp:*:Enabled:6"
"C:\rk\rk.exe"="C:\rk\rk.exe:*:Enabled:rk"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Counter-Strike 1.6\csko.exe"="C:\Counter-Strike 1.6\csko.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\QuadCoreM2\pack\core.bin"="C:\Program Files\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe"="C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Profibot\OpenStealth 1.21\OpenStealth.exe"="C:\Program Files\Profibot\OpenStealth 1.21\OpenStealth.exe:*:Enabled:OpenStealth"
"Client Server Runtime Process"="C:\Documents and Settings\ilona\Data aplikací\csrss.exe"
"Host-process Windows (Rundll32.exe)"="C:\Documents and Settings\ilona\Data aplikací\System32\csrss.exe"
"Service Host Process for Windows"="C:\Documents and Settings\ilona\Data aplikací\svchost.exe"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\ilona\Local Settings\Temp\open.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\open.exe:*:Enabled:Promo"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\KBot\KBot 6.91\KBotc.exe"="C:\Program Files\KBot\KBot 6.91\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 6.97\KBotc.exe"="C:\Program Files\KBot\KBot 6.97\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 6.99\KBotc.exe"="C:\Program Files\KBot\KBot 6.99\KBotc.exe:*:Enabled:KBot control center"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX72.888\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX72.888\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX83.152\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX83.152\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX24.968\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX24.968\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX84.952\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX84.952\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX55.408\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX55.408\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX11.640\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX11.640\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX88.944\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX88.944\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX41.984\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX41.984\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX77.304\Age Of Empires II CZ\empires2.exe"="C:\Documents and Settings\ilona\Local Settings\Temp\Rar$EX77.304\Age Of Empires II CZ\empires2.exe:*:Enabled:Age of Empires II"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\KBot\KBot 7.02\KBotc.exe"="C:\Program Files\KBot\KBot 7.02\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.04\KBotc.exe"="C:\Program Files\KBot\KBot 7.04\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\Profibot\OpenStealth 1.88\OpenStealth.exe"="C:\Program Files\Profibot\OpenStealth 1.88\OpenStealth.exe:*:Enabled:OpenStealth"
"C:\Program Files\KBot\KBot 7.05\KBotc.exe"="C:\Program Files\KBot\KBot 7.05\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.07\KBotc.exe"="C:\Program Files\KBot\KBot 7.07\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\Counter-Strike Source\hl2.exe"="C:\Program Files\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"D:\Program Files\Cossacks - Napoleonic Wars\Data\engine.exe"="D:\Program Files\Cossacks - Napoleonic Wars\Data\engine.exe:*:Enabled:Cossacks 2: Napoleonic Wars"
"C:\Program Files\KBot\KBot 7.14\KBotc.exe"="C:\Program Files\KBot\KBot 7.14\KBotc.exe:*:Enabled:KBot control center"
"C:\Program Files\KBot\KBot 7.16\KBotc.exe"="C:\Program Files\KBot\KBot 7.16\KBotc.exe:*:Enabled:KBot control center"
"C:\Counter-Strike 1.6\hl.exe"="C:\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6\csko.exe"="C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6\csko.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Documents and Settings\ilona\Plocha\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=ctwdm32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=ctwdm32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=ctwdm32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=ctwdm32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=ctwdm32.dll
======List of files/folders created in the last 1 month======
2013-05-24 13:45:10 ----D---- C:\Program Files\trend micro
2013-05-24 13:45:09 ----D---- C:\rsit
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\VDLL.DLL
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\system32\runouce.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\rundll16.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\RUNDL132.EXE
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\logo1_.exe
2013-05-19 19:48:04 ----AD---- C:\WINDOWS\logo_1.exe
2013-05-19 19:44:45 ----A---- C:\WINDOWS\system32\msvcr80.dll
2013-05-19 19:44:44 ----A---- C:\WINDOWS\system32\msvcp80.dll
2013-05-19 19:44:43 ----A---- C:\WINDOWS\system32\eEmpty.exe
2013-05-19 19:44:41 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\system32\T.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\REGEDIT.COM
2013-05-19 19:44:41 ----A---- C:\WINDOWS\R.COM
2013-05-19 19:44:39 ----D---- C:\Program Files\Common Files\MicroWorld
2013-05-19 19:44:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2013-05-19 19:25:39 ----ASH---- C:\hiberfil.sys
2013-05-19 19:20:09 ----A---- C:\WINDOWS\ntbtlog.txt
2013-05-19 19:09:53 ----D---- C:\Documents and Settings\ilona\Data aplikací\Malwarebytes
2013-05-19 19:09:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-05-19 19:09:42 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-05-19 19:09:42 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2013-05-19 19:06:26 ----D---- C:\Program Files\Mozilla Firefox
2013-05-04 16:35:23 ----D---- C:\Documents and Settings\ilona\Data aplikací\Wargaming.net
2013-05-04 10:43:40 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2013-05-04 10:43:40 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2013-05-04 10:43:39 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2013-05-04 10:43:39 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2013-05-04 10:43:38 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2013-05-04 10:43:36 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2013-05-04 10:43:33 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2013-05-04 10:43:30 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2013-05-04 10:43:28 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2013-05-04 10:43:28 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2013-05-04 10:43:27 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2013-05-04 10:43:27 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2013-05-04 10:43:26 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2013-05-04 10:43:25 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2013-05-04 10:43:24 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2013-05-04 10:43:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2013-05-04 10:43:21 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2013-05-04 10:43:20 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2013-05-04 10:43:19 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2013-05-04 10:43:18 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2013-05-04 10:43:18 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2013-05-04 10:43:17 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2013-05-04 10:43:16 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2013-05-04 10:43:15 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2013-05-04 10:43:14 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2013-05-04 10:43:14 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2013-05-04 10:43:13 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2013-05-04 10:43:12 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2013-05-04 10:43:11 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2013-05-04 10:43:11 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2013-05-04 10:43:10 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2013-05-04 10:43:09 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2013-05-04 10:43:09 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2013-05-04 10:43:08 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2013-05-04 10:43:08 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2013-05-04 10:43:07 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2013-05-04 10:43:07 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2013-05-04 10:43:06 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2013-05-04 10:43:05 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2013-05-04 10:43:04 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2013-05-04 10:43:02 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2013-05-04 10:43:01 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2013-05-04 10:43:01 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2013-05-04 10:43:00 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2013-05-04 10:41:28 ----D---- C:\WINDOWS\Logs
2013-05-02 20:12:15 ----D---- C:\Documents and Settings\ilona\Data aplikací\Minecraft Version Changer
======List of files/folders modified in the last 1 month======
2013-05-24 13:45:10 ----RD---- C:\Program Files
2013-05-24 13:40:04 ----D---- C:\WINDOWS\Temp
2013-05-24 07:14:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-05-24 07:09:46 ----D---- C:\Documents and Settings\ilona\Data aplikací\Skype
2013-05-24 07:05:09 ----D---- C:\WINDOWS\Microsoft.NET
2013-05-23 20:08:24 ----D---- C:\WINDOWS\Prefetch
2013-05-23 15:52:13 ----D---- C:\Program Files\KBot
2013-05-22 22:17:13 ----D---- C:\Documents and Settings\ilona\Data aplikací\vlc
2013-05-22 18:16:16 ----SHD---- C:\WINDOWS\Installer
2013-05-22 18:16:07 ----SHD---- C:\Config.Msi
2013-05-22 18:15:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-05-22 18:15:34 ----RD---- C:\Program Files\Skype
2013-05-21 18:28:53 ----RSD---- C:\WINDOWS\assembly
2013-05-21 18:28:43 ----D---- C:\WINDOWS\WinSxS
2013-05-21 18:28:08 ----D---- C:\WINDOWS\system32
2013-05-21 18:10:21 ----D---- C:\WINDOWS\system32\en-US
2013-05-21 17:45:05 ----D---- C:\WINDOWS
2013-05-21 16:47:47 ----SD---- C:\WINDOWS\Tasks
2013-05-20 06:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-05-20 06:22:32 ----D---- C:\WINDOWS\system32\drivers
2013-05-19 19:44:39 ----D---- C:\Program Files\Common Files
2013-05-19 19:42:58 ----SH---- C:\boot.ini
2013-05-19 19:42:58 ----A---- C:\WINDOWS\win.ini
2013-05-19 19:42:58 ----A---- C:\WINDOWS\system.ini
2013-05-19 19:42:02 ----D---- C:\WINDOWS\Registration
2013-05-19 19:25:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_2$
2013-05-19 19:06:51 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-05-19 18:57:18 ----D---- C:\WINDOWS\Minidump
2013-05-19 08:15:38 ----D---- C:\Documents and Settings\ilona\Data aplikací\Seznam.cz
2013-05-19 08:10:54 ----D---- C:\WINDOWS\system32\CatRoot2
2013-05-15 08:53:51 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-05-04 15:17:25 ----D---- C:\Documents and Settings\ilona\Data aplikací\.minecraft
2013-05-04 12:28:18 ----D---- C:\WINDOWS\system32\DirectX
2013-05-04 12:28:05 ----HD---- C:\WINDOWS\inf
2013-05-04 10:41:22 ----D---- C:\Games
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sisagp;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-18 36992]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2004-05-12 12416]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-09-20 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-09-20 55936]
R2 SetupNT;SetupNT; C:\WINDOWS\system32\SetupNT.sys [2000-10-25 3000]
R3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
R3 emu10k1;Creative Interface Manager Driver (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2000-01-01 6555104]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sfman;Creative SoundFont Manager Driver (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-04 32768]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S1 nyqgiqbn;nyqgiqbn; \??\C:\WINDOWS\system32\drivers\nyqgiqbn.sys []
S2 5689;5689; \??\C:\DOCUME~1\ilona\LOCALS~1\Temp\5689.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2000-01-01 4122368]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 kxwdmdrv;kX WDM Driver Service; C:\WINDOWS\system32\drivers\kx.sys [2004-02-17 571776]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-20 12160]
S3 NPF;WinPcap Packet Driver (NPF); C:\WINDOWS\system32\drivers\NPF.sys [2012-10-25 50704]
S3 rtl8139;Realtek RTL8139/810X Family PCI Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2000-01-01 25434]
S3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-05-14 217600]
S3 SiS7018;Služba pro ovladač vzorků AC'97 (WDM); C:\WINDOWS\system32\drivers\ac97sis.sys [2001-08-17 297728]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VIAudio;Zvukový řadič VIA AC'97 (WDM); C:\WINDOWS\system32\drivers\ac97via.sys [2008-04-13 84480]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-01-15 170912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2000-01-01 159812]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2013-04-05 76888]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-05-14 3289208]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-15 256904]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-19 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Re: Prosím o kontrolu logu nejde google vyhledávač
ahoj,
1.
Presun ComboFix
na plochu (ak tam este nie je)
otvor si Poznamkovy blok - notepad
do neho zkopiruj skript z nasledujiceho okna:
uloz vytvoreny textovy soubor ako CFScript.txt na plochu
po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

po aplikacii by mal vzniknut dalsi log, ten vloz sem
2. vycisti PC s ADWCleanerom - volba delete
1.
Presun ComboFix
na plochu (ak tam este nie je)
otvor si Poznamkovy blok - notepad
do neho zkopiruj skript z nasledujiceho okna:
Kód: Vybrat vše
Driver::
nyqgiqbn
5689
po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

po aplikacii by mal vzniknut dalsi log, ten vloz sem
2. vycisti PC s ADWCleanerom - volba delete
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu nejde google vyhledávač
1.
ComboFix 13-05-24.01 - ilona 24.05.2013 14:01:48.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.768.376 [GMT 2:00]
Spuštěný z: c:\documents and settings\ilona\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\ilona\Plocha\CFScript.txt
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\ilona\Data aplikací\Identities\{FF4A1C5E-14B1-4758-BB05-481F1F49F42C}\drill.dll
c:\documents and settings\ilona\WINDOWS
c:\windows\IsUn0405.exe
c:\windows\iun6002.exe
c:\windows\keys.ini
c:\windows\msmqinst.log
c:\windows\regedit.com
c:\windows\system32\Cache
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\a8c3a63c3ade6882.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\e0de16f883bea794.fb
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\Packet.dll
c:\windows\system32\SET40.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET42.tmp
c:\windows\system32\SET46.tmp
c:\windows\system32\SET47.tmp
c:\windows\system32\SET48.tmp
c:\windows\system32\SET4C.tmp
c:\windows\system32\SET4E.tmp
c:\windows\system32\SET66.tmp
c:\windows\system32\SET6A.tmp
c:\windows\system32\SET6B.tmp
c:\windows\system32\SET72.tmp
c:\windows\system32\SETBA.tmp
c:\windows\system32\taskmgr.com
c:\windows\system32\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_5689
-------\Legacy_NPF
-------\Service_5689
-------\Service_NPF
-------\Service_nyqgiqbn
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-24 do 2013-05-24 )))))))))))))))))))))))))))))))
.
.
2013-05-24 11:45 . 2013-05-24 11:45 -------- d-----w- c:\program files\trend micro
2013-05-24 11:45 . 2013-05-24 11:45 -------- d-----w- C:\rsit
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\VDLL.DLL
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\system32\runouce.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\rundll16.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\RUNDL132.EXE
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\logo1_.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\logo_1.exe
2013-05-19 17:44 . 2013-05-19 17:44 632064 ----a-w- c:\windows\system32\msvcr80.dll
2013-05-19 17:44 . 2013-05-19 17:44 554240 ----a-w- c:\windows\system32\msvcp80.dll
2013-05-19 17:44 . 2013-05-19 17:44 34048 ----a-w- c:\windows\system32\eEmpty.exe
2013-05-19 17:44 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2013-05-19 17:44 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2013-05-19 17:44 . 2013-05-19 17:44 -------- d-----w- c:\program files\Common Files\MicroWorld
2013-05-19 17:44 . 2013-05-19 17:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MicroWorld
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Malwarebytes
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-05-19 17:09 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-05-04 14:35 . 2013-05-04 14:35 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Wargaming.net
2013-05-04 08:41 . 2013-05-19 16:57 -------- d-----w- c:\windows\Logs
2013-05-02 18:12 . 2013-05-02 18:14 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Minecraft Version Changer
2013-05-02 18:12 . 2013-05-02 18:12 -------- d-----w- c:\documents and settings\ilona\Local Settings\Data aplikací\http___www.minecraftversi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 06:53 . 2012-06-14 15:55 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-15 06:53 . 2011-08-01 16:03 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-21 15:35 . 2011-07-15 17:01 139424 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2013-04-21 15:34 . 2011-07-15 17:07 282104 ----a-w- c:\windows\system32\PnkBstrB.xtr
2013-04-21 15:34 . 2011-07-15 17:00 282104 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-04-21 12:41 . 2011-07-15 17:00 282104 ----a-w- c:\windows\system32\PnkBstrB.ex0
2013-04-05 16:16 . 2011-07-15 17:00 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2013-04-05 16:06 . 2011-07-15 17:01 138056 ----a-w- c:\documents and settings\ilona\Data aplikací\PnkBstrK.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DriverScanner"="c:\progra~1\Uniblue\DRIVER~1\launcher.exe" [2012-04-23 338808]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2000-01-01 13529088]
"nwiz"="nwiz.exe" [2000-01-01 1630208]
"HTpatch"="c:\windows\htpatch.exe" [2003-03-27 28672]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2000-01-01 86016]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Utility Tray.lnk - c:\windows\system32\sistray.exe [2011-10-3 335872]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"173.245.61.58,255.255.255.255,94.113.236.112,1"=""
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk
backup=c:\windows\pss\McAfee Security Scan Plus.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-03 07:35 946352 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
c:\documents and settings\ilona\Data aplikací\Seznam.cz\bin\wszndesktop.exe [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
2012-04-23 12:07 338808 ----a-w- c:\progra~1\Uniblue\DRIVER~1\Launcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 23:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 --sh--w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2012-09-13 13:24 1009288 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Windows KeyHook]
2004-05-12 14:22 249856 ----a-w- c:\windows\system32\Keyhook.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2013-04-19 13:19 18678376 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SlimDrivers]
2012-02-01 12:42 27481952 ----a-w- c:\program files\SlimDrivers\SlimDrivers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
2012-05-29 13:50 115032 ----a-r- c:\program files\SweetIM\Messenger\SweetIM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sweetpacks Communicator]
2012-08-15 17:08 231768 ----a-w- c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\SweetIM\\Communicator\\SweetPacksUpdateManager.exe"=
"c:\\WINDOWS\\system32\\javaw.exe"=
"Client Server Runtime Process"= c:\documents and settings\ilona\Data aplikací\csrss.exe
"Host-process Windows (Rundll32.exe)"= c:\documents and settings\ilona\Data aplikací\System32\csrss.exe
"Service Host Process for Windows"= c:\documents and settings\ilona\Data aplikací\svchost.exe
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\KBot\\KBot 6.91\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 6.97\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 6.99\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.02\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.04\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.05\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.07\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.14\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.16\\KBotc.exe"=
"c:\\Documents and Settings\\ilona\\Plocha\\Counter-Strike 1.6 Non-Steam\\hl.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8612:TCP"= 8612:TCP:Generic Host Process
"8088:TCP"= 8088:TCP:Generic Host Process
"53:UDP"= 53:UDP:Promo
.
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [14.5.2013 13:26 3289208]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [19.5.2013 19:09 22856]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [19.5.2013 19:09 701512]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [28.2.2013 18:45 161384]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 kxwdmdrv;kX WDM Driver Service;c:\windows\system32\drivers\kx.sys [17.2.2004 0:19 571776]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 06:53]
.
2013-05-24 c:\windows\Tasks\DriverScanner.job
- c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2012-10-03 12:07]
.
2013-05-24 c:\windows\Tasks\User_Feed_Synchronization-{DDE9B9DB-C88E-4571-A4BA-79BB238E0D15}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uSearchAssistant = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\
FF - prefs.js: network.proxy.type - 4
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
HKLM-Run-TaskTray - (no file)
HKLM-Run-kX Mixer - c:\program files\kX Audio Driver\3550\kxmixer.exe
HKU-Default-Run-Dr Ident - c:\documents and settings\ilona\Data aplikací\Identities\{FF4A1C5E-14B1-4758-BB05-481F1F49F42C}\drill.dll
MSConfigStartUp-cz.seznam.software - c:\documents and settings\ilona\Data aplikací\Seznam.cz\szninstall.exe
MSConfigStartUp-ROC_roc_dec12 - c:\program files\AVG Secure Search\ROC_roc_dec12.exe
MSConfigStartUp-Smart PC Cleaner - c:\program files\Smart PC Cleaner\SPCLauncher.exe
AddRemove-Adobe Photoshop 7.0 CE - c:\windows\ISUN0405.EXE
AddRemove-Counter-Strike 1.6 Non-Steam 1.0 - c:\program files\Counter-Strike 1.6 Non-Steam\Uninstall.exe
AddRemove-FA-18 Operation Iraqi Freedom DemoVersion 1.0 - c:\windows\iun6002.exe
AddRemove-Counter-Strike 1.6_is1 - c:\counter-strike 1.6\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-05-24 14:27
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HTpatch = c:\windows\htpatch.exe?ows\CurrentVersion\Run?htinst?HLP??????([??([??????????????????%[??%[?^????([$?????%[????????????S?%[????????m?%[???w????(???{??w???w???????w???w??%[????????d???b6%[%?%[??([????"?%[A?%[??'[.??wZ?%[?3%[?3%[????st.I??????&[????d???0=%[?K%[
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(248)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\program files\Microsoft Office\Office12\1029\GrooveIntlResource.dll
c:\windows\system32\nvcpl.dll
c:\windows\system32\NVRSCS.DLL
c:\windows\system32\nvapi.dll
c:\windows\system32\nvshell.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\devldr32.exe
.
**************************************************************************
.
Celkový čas: 2013-05-24 14:30:51 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-24 12:30
.
Před spuštěním: Volných bajtů: 10 454 646 784
Po spuštění: Volných bajtů: 10 936 057 856
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 5C967F5C6151EF4D299233458D790937
2.
http://forum.viry.cz/viewtopic.php?f=13&t=130441
# AdwCleaner v2.301 - Log vytvooen 24/05/2013 v 14:31:27
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : ilona - ILONA-AD29401A2
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\ilona\Plocha\adwcleaner.exe
# Volba [Vymazat]
***** [Služby] *****
***** [Soubory / Složky] *****
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Ask
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\searchquband
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\yourfiledownloader
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Conduit
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Ilivid Player
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\PackageAware
Složka Vymazáno : C:\Program Files\Free Offers from Freeze.com
Složka Vymazáno : C:\Program Files\Ilivid
Složka Vymazáno : C:\Program Files\SweetIM
Složka Vymazáno : C:\WINDOWS\Installer\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Složka Vymazáno : C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
Soubor Vymazáno : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Vymazáno poi restartu : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Vymazáno poi restartu : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
***** [Registry] *****
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Klíe Vymazáno : HKCU\Software\ilivid
Klíe Vymazáno : HKCU\Software\InstallCore
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{154D339E-CCAA-49A5-9B38-6878AD4220BC}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKCU\Software\YourFileDownloader
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\ilivid
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Klíe Vymazáno : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\sim-packages
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Klíe Vymazáno : HKLM\Software\ilivid
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{154D339E-CCAA-49A5-9B38-6878AD4220BC}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetPacks Communicator
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{774C0434-9948-4DEE-A14E-69CDD316E36C}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Klíe Vymazáno : HKLM\Software\YourFileDownloader
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v8.0.6001.18702
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
-\\ Mozilla Firefox v21.0 (cs)
Soubor : C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\prefs.js
[OK] Soubor je eistý.
-\\ Google Chrome v27.0.1453.94
Soubor : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
Vymazáno [l.1] : icon_url ={"browser":{"window_placement":{"bottom":824,"left":10,"maximized":false,"right":1060,"top":10,"work[...]
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Documents and Settings\ilona\Data aplikací\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[S1].txt - [21409 octets] - [24/05/2013 14:31:27]
########## EOF - C:\AdwCleaner[S1].txt - [21470 octets] ##########
ComboFix 13-05-24.01 - ilona 24.05.2013 14:01:48.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.768.376 [GMT 2:00]
Spuštěný z: c:\documents and settings\ilona\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\ilona\Plocha\CFScript.txt
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\ilona\Data aplikací\Identities\{FF4A1C5E-14B1-4758-BB05-481F1F49F42C}\drill.dll
c:\documents and settings\ilona\WINDOWS
c:\windows\IsUn0405.exe
c:\windows\iun6002.exe
c:\windows\keys.ini
c:\windows\msmqinst.log
c:\windows\regedit.com
c:\windows\system32\Cache
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\a8c3a63c3ade6882.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\e0de16f883bea794.fb
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\Packet.dll
c:\windows\system32\SET40.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET42.tmp
c:\windows\system32\SET46.tmp
c:\windows\system32\SET47.tmp
c:\windows\system32\SET48.tmp
c:\windows\system32\SET4C.tmp
c:\windows\system32\SET4E.tmp
c:\windows\system32\SET66.tmp
c:\windows\system32\SET6A.tmp
c:\windows\system32\SET6B.tmp
c:\windows\system32\SET72.tmp
c:\windows\system32\SETBA.tmp
c:\windows\system32\taskmgr.com
c:\windows\system32\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_5689
-------\Legacy_NPF
-------\Service_5689
-------\Service_NPF
-------\Service_nyqgiqbn
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-24 do 2013-05-24 )))))))))))))))))))))))))))))))
.
.
2013-05-24 11:45 . 2013-05-24 11:45 -------- d-----w- c:\program files\trend micro
2013-05-24 11:45 . 2013-05-24 11:45 -------- d-----w- C:\rsit
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\VDLL.DLL
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\system32\runouce.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\rundll16.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\RUNDL132.EXE
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\logo1_.exe
2013-05-19 17:48 . 2013-05-19 17:48 -------- d---a-w- c:\windows\logo_1.exe
2013-05-19 17:44 . 2013-05-19 17:44 632064 ----a-w- c:\windows\system32\msvcr80.dll
2013-05-19 17:44 . 2013-05-19 17:44 554240 ----a-w- c:\windows\system32\msvcp80.dll
2013-05-19 17:44 . 2013-05-19 17:44 34048 ----a-w- c:\windows\system32\eEmpty.exe
2013-05-19 17:44 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2013-05-19 17:44 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2013-05-19 17:44 . 2013-05-19 17:44 -------- d-----w- c:\program files\Common Files\MicroWorld
2013-05-19 17:44 . 2013-05-19 17:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MicroWorld
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Malwarebytes
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-05-19 17:09 . 2013-05-19 17:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-05-19 17:09 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-05-04 14:35 . 2013-05-04 14:35 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Wargaming.net
2013-05-04 08:41 . 2013-05-19 16:57 -------- d-----w- c:\windows\Logs
2013-05-02 18:12 . 2013-05-02 18:14 -------- d-----w- c:\documents and settings\ilona\Data aplikací\Minecraft Version Changer
2013-05-02 18:12 . 2013-05-02 18:12 -------- d-----w- c:\documents and settings\ilona\Local Settings\Data aplikací\http___www.minecraftversi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 06:53 . 2012-06-14 15:55 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-15 06:53 . 2011-08-01 16:03 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-21 15:35 . 2011-07-15 17:01 139424 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2013-04-21 15:34 . 2011-07-15 17:07 282104 ----a-w- c:\windows\system32\PnkBstrB.xtr
2013-04-21 15:34 . 2011-07-15 17:00 282104 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-04-21 12:41 . 2011-07-15 17:00 282104 ----a-w- c:\windows\system32\PnkBstrB.ex0
2013-04-05 16:16 . 2011-07-15 17:00 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2013-04-05 16:06 . 2011-07-15 17:01 138056 ----a-w- c:\documents and settings\ilona\Data aplikací\PnkBstrK.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DriverScanner"="c:\progra~1\Uniblue\DRIVER~1\launcher.exe" [2012-04-23 338808]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2000-01-01 13529088]
"nwiz"="nwiz.exe" [2000-01-01 1630208]
"HTpatch"="c:\windows\htpatch.exe" [2003-03-27 28672]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2000-01-01 86016]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Utility Tray.lnk - c:\windows\system32\sistray.exe [2011-10-3 335872]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"173.245.61.58,255.255.255.255,94.113.236.112,1"=""
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk
backup=c:\windows\pss\McAfee Security Scan Plus.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-03 07:35 946352 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
c:\documents and settings\ilona\Data aplikací\Seznam.cz\bin\wszndesktop.exe [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
2012-04-23 12:07 338808 ----a-w- c:\progra~1\Uniblue\DRIVER~1\Launcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 23:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 --sh--w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2012-09-13 13:24 1009288 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Windows KeyHook]
2004-05-12 14:22 249856 ----a-w- c:\windows\system32\Keyhook.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2013-04-19 13:19 18678376 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SlimDrivers]
2012-02-01 12:42 27481952 ----a-w- c:\program files\SlimDrivers\SlimDrivers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
2012-05-29 13:50 115032 ----a-r- c:\program files\SweetIM\Messenger\SweetIM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sweetpacks Communicator]
2012-08-15 17:08 231768 ----a-w- c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\SweetIM\\Communicator\\SweetPacksUpdateManager.exe"=
"c:\\WINDOWS\\system32\\javaw.exe"=
"Client Server Runtime Process"= c:\documents and settings\ilona\Data aplikací\csrss.exe
"Host-process Windows (Rundll32.exe)"= c:\documents and settings\ilona\Data aplikací\System32\csrss.exe
"Service Host Process for Windows"= c:\documents and settings\ilona\Data aplikací\svchost.exe
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\KBot\\KBot 6.91\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 6.97\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 6.99\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.02\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.04\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.05\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.07\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.14\\KBotc.exe"=
"c:\\Program Files\\KBot\\KBot 7.16\\KBotc.exe"=
"c:\\Documents and Settings\\ilona\\Plocha\\Counter-Strike 1.6 Non-Steam\\hl.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8612:TCP"= 8612:TCP:Generic Host Process
"8088:TCP"= 8088:TCP:Generic Host Process
"53:UDP"= 53:UDP:Promo
.
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [14.5.2013 13:26 3289208]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [19.5.2013 19:09 22856]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [19.5.2013 19:09 701512]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [28.2.2013 18:45 161384]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 kxwdmdrv;kX WDM Driver Service;c:\windows\system32\drivers\kx.sys [17.2.2004 0:19 571776]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 06:53]
.
2013-05-24 c:\windows\Tasks\DriverScanner.job
- c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2012-10-03 12:07]
.
2013-05-24 c:\windows\Tasks\User_Feed_Synchronization-{DDE9B9DB-C88E-4571-A4BA-79BB238E0D15}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uSearchAssistant = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\
FF - prefs.js: network.proxy.type - 4
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
HKLM-Run-TaskTray - (no file)
HKLM-Run-kX Mixer - c:\program files\kX Audio Driver\3550\kxmixer.exe
HKU-Default-Run-Dr Ident - c:\documents and settings\ilona\Data aplikací\Identities\{FF4A1C5E-14B1-4758-BB05-481F1F49F42C}\drill.dll
MSConfigStartUp-cz.seznam.software - c:\documents and settings\ilona\Data aplikací\Seznam.cz\szninstall.exe
MSConfigStartUp-ROC_roc_dec12 - c:\program files\AVG Secure Search\ROC_roc_dec12.exe
MSConfigStartUp-Smart PC Cleaner - c:\program files\Smart PC Cleaner\SPCLauncher.exe
AddRemove-Adobe Photoshop 7.0 CE - c:\windows\ISUN0405.EXE
AddRemove-Counter-Strike 1.6 Non-Steam 1.0 - c:\program files\Counter-Strike 1.6 Non-Steam\Uninstall.exe
AddRemove-FA-18 Operation Iraqi Freedom DemoVersion 1.0 - c:\windows\iun6002.exe
AddRemove-Counter-Strike 1.6_is1 - c:\counter-strike 1.6\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-05-24 14:27
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HTpatch = c:\windows\htpatch.exe?ows\CurrentVersion\Run?htinst?HLP??????([??([??????????????????%[??%[?^????([$?????%[????????????S?%[????????m?%[???w????(???{??w???w???????w???w??%[????????d???b6%[%?%[??([????"?%[A?%[??'[.??wZ?%[?3%[?3%[????st.I??????&[????d???0=%[?K%[
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(248)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\program files\Microsoft Office\Office12\1029\GrooveIntlResource.dll
c:\windows\system32\nvcpl.dll
c:\windows\system32\NVRSCS.DLL
c:\windows\system32\nvapi.dll
c:\windows\system32\nvshell.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\devldr32.exe
.
**************************************************************************
.
Celkový čas: 2013-05-24 14:30:51 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-24 12:30
.
Před spuštěním: Volných bajtů: 10 454 646 784
Po spuštění: Volných bajtů: 10 936 057 856
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 5C967F5C6151EF4D299233458D790937
2.
http://forum.viry.cz/viewtopic.php?f=13&t=130441
# AdwCleaner v2.301 - Log vytvooen 24/05/2013 v 14:31:27
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : ilona - ILONA-AD29401A2
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\ilona\Plocha\adwcleaner.exe
# Volba [Vymazat]
***** [Služby] *****
***** [Soubory / Složky] *****
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Ask
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\searchquband
Složka Vymazáno : C:\Documents and Settings\ilona\Data aplikací\yourfiledownloader
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Conduit
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Ilivid Player
Složka Vymazáno : C:\Documents and Settings\ilona\Local Settings\Data aplikací\PackageAware
Složka Vymazáno : C:\Program Files\Free Offers from Freeze.com
Složka Vymazáno : C:\Program Files\Ilivid
Složka Vymazáno : C:\Program Files\SweetIM
Složka Vymazáno : C:\WINDOWS\Installer\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Složka Vymazáno : C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
Soubor Vymazáno : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Vymazáno poi restartu : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Vymazáno poi restartu : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
***** [Registry] *****
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Klíe Vymazáno : HKCU\Software\ilivid
Klíe Vymazáno : HKCU\Software\InstallCore
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{154D339E-CCAA-49A5-9B38-6878AD4220BC}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKCU\Software\YourFileDownloader
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\ilivid
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Klíe Vymazáno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Klíe Vymazáno : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\sim-packages
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Klíe Vymazáno : HKLM\Software\ilivid
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{154D339E-CCAA-49A5-9B38-6878AD4220BC}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetPacks Communicator
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{774C0434-9948-4DEE-A14E-69CDD316E36C}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547B38670606DF14AA57B0BB83F3AE4D
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Klíe Vymazáno : HKLM\Software\YourFileDownloader
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v8.0.6001.18702
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://www.searchamong.com/searchview.php?quer ... s&bar=true --> hxxp://www.google.com
-\\ Mozilla Firefox v21.0 (cs)
Soubor : C:\Documents and Settings\ilona\Data aplikací\Mozilla\Firefox\Profiles\lkb3k32a.default-1354363552265\prefs.js
[OK] Soubor je eistý.
-\\ Google Chrome v27.0.1453.94
Soubor : C:\Documents and Settings\ilona\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
Vymazáno [l.1] : icon_url ={"browser":{"window_placement":{"bottom":824,"left":10,"maximized":false,"right":1060,"top":10,"work[...]
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Documents and Settings\ilona\Data aplikací\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[S1].txt - [21409 octets] - [24/05/2013 14:31:27]
########## EOF - C:\AdwCleaner[S1].txt - [21470 octets] ##########
Re: Prosím o kontrolu logu nejde google vyhledávač
tak to bol "riadon svincik"
je to lepsie, alebo pokracujeme
je to lepsie, alebo pokracujeme
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu nejde google vyhledávač
Bohužel jsem nepocítil žádnou změnu a google vyhledávač stále nejde 
Re: Prosím o kontrolu logu nejde google vyhledávač
pozri to s RK http://forum.viry.cz/viewtopic.php?f=24&t=120452
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu nejde google vyhledávač
Ok tady to je RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/
Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : ilona [Práva správce]
Mód : Kontrola -- Datum : 05/24/2013 15:08:05
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy: : 1 ¤¤¤
[SUSP PATH] htpatch.exe -- C:\WINDOWS\htpatch.exe [-] -> SMAZÁNO [TermProc]
¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\Run : HTpatch (C:\WINDOWS\htpatch.exe) [-] -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
¤¤¤ Zvláštní soubory / Složky: ¤¤¤
¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
_INLINE_ : NtResumeThread -> HOOKED (Unknown @ 0x000000CC)
IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : atapi.sys -> HOOKED ([INLINE] atapi.sys @ 0xF74B7852)
¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: WDC WD1600AAJB-00PVA0 +++++
--- User ---
[MBR] dd5f5cfdff0fbf1280775e435efd018c
[BSP] e7d33ae730c11440ae872e2305d685ce : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 49999 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 102398310 | Size: 102618 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončeno : << RKreport[1]_S_05242013_02d1508.txt >>
RKreport[1]_S_05242013_02d1508.txt
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/
Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : ilona [Práva správce]
Mód : Kontrola -- Datum : 05/24/2013 15:08:05
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy: : 1 ¤¤¤
[SUSP PATH] htpatch.exe -- C:\WINDOWS\htpatch.exe [-] -> SMAZÁNO [TermProc]
¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\Run : HTpatch (C:\WINDOWS\htpatch.exe) [-] -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
¤¤¤ Zvláštní soubory / Složky: ¤¤¤
¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
_INLINE_ : NtResumeThread -> HOOKED (Unknown @ 0x000000CC)
IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : atapi.sys -> HOOKED ([INLINE] atapi.sys @ 0xF74B7852)
¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: WDC WD1600AAJB-00PVA0 +++++
--- User ---
[MBR] dd5f5cfdff0fbf1280775e435efd018c
[BSP] e7d33ae730c11440ae872e2305d685ce : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 49999 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 102398310 | Size: 102618 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončeno : << RKreport[1]_S_05242013_02d1508.txt >>
RKreport[1]_S_05242013_02d1508.txt
Re: Prosím o kontrolu logu nejde google vyhledávač
vloz este TDSSKiller log, ja dnes koncim, dufam, ze sa Ta ujme niekto z kolegov 
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu nejde google vyhledávač
Jaký Log přes jaký program?
Re: Prosím o kontrolu logu nejde google vyhledávač
TDSSKiller mam v podpise
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu nejde google vyhledávač
15:20:14.0843 2044 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:20:15.0109 2044 ============================================================
15:20:15.0109 2044 Current date / time: 2013/05/24 15:20:15.0109
15:20:15.0109 2044 SystemInfo:
15:20:15.0109 2044
15:20:15.0109 2044 OS Version: 5.1.2600 ServicePack: 3.0
15:20:15.0109 2044 Product type: Workstation
15:20:15.0125 2044 ComputerName: ILONA-AD29401A2
15:20:15.0125 2044 UserName: ilona
15:20:15.0125 2044 Windows directory: C:\WINDOWS
15:20:15.0125 2044 System windows directory: C:\WINDOWS
15:20:15.0125 2044 Processor architecture: Intel x86
15:20:15.0125 2044 Number of processors: 1
15:20:15.0125 2044 Page size: 0x1000
15:20:15.0125 2044 Boot type: Normal boot
15:20:15.0125 2044 ============================================================
15:20:16.0359 2044 BG loaded
15:20:16.0828 2044 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:20:16.0828 2044 ============================================================
15:20:16.0828 2044 \Device\Harddisk0\DR0:
15:20:16.0828 2044 MBR partitions:
15:20:16.0828 2044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:20:16.0843 2044 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x61A7927
15:20:16.0859 2044 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC34F30B, BlocksNum 0x66C58F5
15:20:16.0859 2044 ============================================================
15:20:16.0890 2044 C: <-> \Device\Harddisk0\DR0\Partition1
15:20:16.0953 2044 D: <-> \Device\Harddisk0\DR0\Partition2
15:20:17.0000 2044 E: <-> \Device\Harddisk0\DR0\Partition3
15:20:17.0015 2044 ============================================================
15:20:17.0015 2044 Initialize success
15:20:17.0031 2044 ============================================================
15:20:15.0109 2044 ============================================================
15:20:15.0109 2044 Current date / time: 2013/05/24 15:20:15.0109
15:20:15.0109 2044 SystemInfo:
15:20:15.0109 2044
15:20:15.0109 2044 OS Version: 5.1.2600 ServicePack: 3.0
15:20:15.0109 2044 Product type: Workstation
15:20:15.0125 2044 ComputerName: ILONA-AD29401A2
15:20:15.0125 2044 UserName: ilona
15:20:15.0125 2044 Windows directory: C:\WINDOWS
15:20:15.0125 2044 System windows directory: C:\WINDOWS
15:20:15.0125 2044 Processor architecture: Intel x86
15:20:15.0125 2044 Number of processors: 1
15:20:15.0125 2044 Page size: 0x1000
15:20:15.0125 2044 Boot type: Normal boot
15:20:15.0125 2044 ============================================================
15:20:16.0359 2044 BG loaded
15:20:16.0828 2044 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:20:16.0828 2044 ============================================================
15:20:16.0828 2044 \Device\Harddisk0\DR0:
15:20:16.0828 2044 MBR partitions:
15:20:16.0828 2044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:20:16.0843 2044 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x61A7927
15:20:16.0859 2044 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC34F30B, BlocksNum 0x66C58F5
15:20:16.0859 2044 ============================================================
15:20:16.0890 2044 C: <-> \Device\Harddisk0\DR0\Partition1
15:20:16.0953 2044 D: <-> \Device\Harddisk0\DR0\Partition2
15:20:17.0000 2044 E: <-> \Device\Harddisk0\DR0\Partition3
15:20:17.0015 2044 ============================================================
15:20:17.0015 2044 Initialize success
15:20:17.0031 2044 ============================================================
- cernohous13
- VIP in memoriam

- Příspěvky: 8720
- Registrován: 09 Pro 2006 06:19
- Místo/Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu nejde google vyhledávač
Zdravím,
log není celý - buď jsi jej zkopíroval jen částečně nebo nenechal program doběhnout do konce
zkus to napravit
zkus to napravit
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím

-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Prosím o kontrolu logu nejde google vyhledávač
15:20:14.0843 2044 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:20:15.0109 2044 ============================================================
15:20:15.0109 2044 Current date / time: 2013/05/24 15:20:15.0109
15:20:15.0109 2044 SystemInfo:
15:20:15.0109 2044
15:20:15.0109 2044 OS Version: 5.1.2600 ServicePack: 3.0
15:20:15.0109 2044 Product type: Workstation
15:20:15.0125 2044 ComputerName: ILONA-AD29401A2
15:20:15.0125 2044 UserName: ilona
15:20:15.0125 2044 Windows directory: C:\WINDOWS
15:20:15.0125 2044 System windows directory: C:\WINDOWS
15:20:15.0125 2044 Processor architecture: Intel x86
15:20:15.0125 2044 Number of processors: 1
15:20:15.0125 2044 Page size: 0x1000
15:20:15.0125 2044 Boot type: Normal boot
15:20:15.0125 2044 ============================================================
15:20:16.0359 2044 BG loaded
15:20:16.0828 2044 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:20:16.0828 2044 ============================================================
15:20:16.0828 2044 \Device\Harddisk0\DR0:
15:20:16.0828 2044 MBR partitions:
15:20:16.0828 2044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:20:16.0843 2044 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x61A7927
15:20:16.0859 2044 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC34F30B, BlocksNum 0x66C58F5
15:20:16.0859 2044 ============================================================
15:20:16.0890 2044 C: <-> \Device\Harddisk0\DR0\Partition1
15:20:16.0953 2044 D: <-> \Device\Harddisk0\DR0\Partition2
15:20:17.0000 2044 E: <-> \Device\Harddisk0\DR0\Partition3
15:20:17.0015 2044 ============================================================
15:20:17.0015 2044 Initialize success
15:20:17.0031 2044 ============================================================
18:19:59.0140 3092 ============================================================
18:19:59.0140 3092 Scan started
18:19:59.0140 3092 Mode: Manual;
18:19:59.0140 3092 ============================================================
18:19:59.0390 3092 ================ Scan system memory ========================
18:19:59.0390 3092 System memory - ok
18:19:59.0406 3092 ================ Scan services =============================
18:19:59.0578 3092 Abiosdsk - ok
18:19:59.0593 3092 abp480n5 - ok
18:19:59.0656 3092 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
18:19:59.0671 3092 ACPI - ok
18:19:59.0703 3092 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
18:19:59.0703 3092 ACPIEC - ok
18:19:59.0765 3092 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:19:59.0765 3092 AdobeFlashPlayerUpdateSvc - ok
18:19:59.0781 3092 adpu160m - ok
18:19:59.0828 3092 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
18:19:59.0828 3092 aec - ok
18:19:59.0890 3092 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
18:19:59.0890 3092 AFD - ok
18:19:59.0921 3092 Aha154x - ok
18:20:00.0000 3092 aic78u2 - ok
18:20:00.0015 3092 aic78xx - ok
18:20:00.0234 3092 [ DD8520280304B6145A6BE31008748C7C ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
18:20:00.0421 3092 ALCXWDM - ok
18:20:00.0468 3092 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
18:20:00.0468 3092 Alerter - ok
18:20:00.0500 3092 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
18:20:00.0500 3092 ALG - ok
18:20:00.0515 3092 AliIde - ok
18:20:00.0531 3092 amsint - ok
18:20:00.0593 3092 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
18:20:00.0609 3092 AppMgmt - ok
18:20:00.0625 3092 asc - ok
18:20:00.0656 3092 asc3350p - ok
18:20:00.0671 3092 asc3550 - ok
18:20:00.0765 3092 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
18:20:00.0828 3092 aspnet_state - ok
18:20:00.0875 3092 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:20:00.0906 3092 AsyncMac - ok
18:20:00.0937 3092 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
18:20:00.0953 3092 atapi - ok
18:20:00.0968 3092 Atdisk - ok
18:20:01.0000 3092 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:20:01.0000 3092 Atmarpc - ok
18:20:01.0046 3092 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
18:20:01.0046 3092 AudioSrv - ok
18:20:01.0078 3092 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
18:20:01.0078 3092 audstub - ok
18:20:01.0125 3092 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
18:20:01.0125 3092 Beep - ok
18:20:01.0187 3092 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
18:20:01.0218 3092 BITS - ok
18:20:01.0281 3092 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
18:20:01.0281 3092 Browser - ok
18:20:01.0296 3092 catchme - ok
18:20:01.0343 3092 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
18:20:01.0343 3092 cbidf2k - ok
18:20:01.0359 3092 cd20xrnt - ok
18:20:01.0406 3092 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
18:20:01.0406 3092 Cdaudio - ok
18:20:01.0437 3092 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
18:20:01.0437 3092 Cdfs - ok
18:20:01.0453 3092 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
18:20:01.0453 3092 Cdrom - ok
18:20:01.0484 3092 Changer - ok
18:20:01.0515 3092 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
18:20:01.0515 3092 CiSvc - ok
18:20:01.0562 3092 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
18:20:01.0562 3092 ClipSrv - ok
18:20:01.0640 3092 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:20:01.0640 3092 clr_optimization_v2.0.50727_32 - ok
18:20:01.0703 3092 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:20:01.0734 3092 clr_optimization_v4.0.30319_32 - ok
18:20:01.0750 3092 CmdIde - ok
18:20:01.0765 3092 COMSysApp - ok
18:20:01.0796 3092 Cpqarray - ok
18:20:01.0843 3092 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
18:20:01.0843 3092 CryptSvc - ok
18:20:01.0875 3092 [ 71007BD2E1E26927FE3E4EB00C0BEEDF ] ctljystk C:\WINDOWS\system32\DRIVERS\ctljystk.sys
18:20:01.0875 3092 ctljystk - ok
18:20:01.0921 3092 dac2w2k - ok
18:20:01.0953 3092 dac960nt - ok
18:20:02.0000 3092 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
18:20:02.0031 3092 DcomLaunch - ok
18:20:02.0078 3092 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
18:20:02.0078 3092 Dhcp - ok
18:20:02.0093 3092 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
18:20:02.0093 3092 Disk - ok
18:20:02.0109 3092 dmadmin - ok
18:20:02.0187 3092 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
18:20:02.0218 3092 dmboot - ok
18:20:02.0250 3092 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
18:20:02.0250 3092 dmio - ok
18:20:02.0296 3092 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
18:20:02.0296 3092 dmload - ok
18:20:02.0312 3092 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
18:20:02.0328 3092 dmserver - ok
18:20:02.0359 3092 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
18:20:02.0375 3092 DMusic - ok
18:20:02.0406 3092 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
18:20:02.0406 3092 Dnscache - ok
18:20:02.0468 3092 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
18:20:02.0468 3092 Dot3svc - ok
18:20:02.0484 3092 dpti2o - ok
18:20:02.0531 3092 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
18:20:02.0531 3092 drmkaud - ok
18:20:02.0546 3092 EagleNT - ok
18:20:02.0562 3092 EagleXNt - ok
18:20:02.0625 3092 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
18:20:02.0625 3092 EapHost - ok
18:20:02.0656 3092 [ 01F83E1B5DCE05F5CB7D99113CA9E890 ] emu10k C:\WINDOWS\system32\drivers\emu10k1m.sys
18:20:02.0671 3092 emu10k - ok
18:20:02.0718 3092 [ 7FFA171CCE6A8BFC774862A578BA39A2 ] emu10k1 C:\WINDOWS\system32\drivers\ctlfacem.sys
18:20:02.0718 3092 emu10k1 - ok
18:20:02.0765 3092 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
18:20:02.0765 3092 ERSvc - ok
18:20:02.0812 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
18:20:02.0812 3092 Eventlog - ok
18:20:02.0890 3092 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
18:20:02.0921 3092 EventSystem - ok
18:20:02.0968 3092 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
18:20:02.0984 3092 Fastfat - ok
18:20:03.0031 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
18:20:03.0031 3092 FastUserSwitchingCompatibility - ok
18:20:03.0062 3092 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
18:20:03.0062 3092 Fdc - ok
18:20:03.0093 3092 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
18:20:03.0093 3092 Fips - ok
18:20:03.0140 3092 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:20:03.0140 3092 Flpydisk - ok
18:20:03.0218 3092 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
18:20:03.0218 3092 FltMgr - ok
18:20:03.0281 3092 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:20:03.0281 3092 FontCache3.0.0.0 - ok
18:20:03.0296 3092 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:20:03.0296 3092 Fs_Rec - ok
18:20:03.0328 3092 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:20:03.0328 3092 Ftdisk - ok
18:20:03.0343 3092 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
18:20:03.0343 3092 gameenum - ok
18:20:03.0375 3092 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
18:20:03.0375 3092 Gpc - ok
18:20:03.0453 3092 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:20:03.0453 3092 helpsvc - ok
18:20:03.0484 3092 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
18:20:03.0484 3092 HidServ - ok
18:20:03.0500 3092 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
18:20:03.0500 3092 hidusb - ok
18:20:03.0546 3092 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
18:20:03.0562 3092 hkmsvc - ok
18:20:03.0578 3092 hpn - ok
18:20:03.0625 3092 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
18:20:03.0640 3092 HTTP - ok
18:20:03.0687 3092 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
18:20:03.0703 3092 HTTPFilter - ok
18:20:03.0718 3092 i2omgmt - ok
18:20:03.0734 3092 i2omp - ok
18:20:03.0750 3092 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:20:03.0750 3092 i8042prt - ok
18:20:03.0843 3092 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:20:03.0843 3092 IDriverT - ok
18:20:03.0953 3092 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:20:03.0984 3092 idsvc - ok
18:20:04.0015 3092 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
18:20:04.0015 3092 Imapi - ok
18:20:04.0078 3092 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
18:20:04.0078 3092 ImapiService - ok
18:20:04.0109 3092 ini910u - ok
18:20:04.0140 3092 IntelIde - ok
18:20:04.0171 3092 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
18:20:04.0171 3092 intelppm - ok
18:20:04.0203 3092 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
18:20:04.0203 3092 Ip6Fw - ok
18:20:04.0250 3092 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:20:04.0250 3092 IpFilterDriver - ok
18:20:04.0265 3092 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
18:20:04.0265 3092 IpInIp - ok
18:20:04.0312 3092 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
18:20:04.0328 3092 IpNat - ok
18:20:04.0328 3092 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
18:20:04.0343 3092 IPSec - ok
18:20:04.0375 3092 [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda C:\WINDOWS\system32\DRIVERS\irda.sys
18:20:04.0390 3092 irda - ok
18:20:04.0406 3092 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
18:20:04.0406 3092 IRENUM - ok
18:20:04.0437 3092 [ 8024EA8C5B2D2A4D201F418B0AADB804 ] Irmon C:\WINDOWS\System32\irmon.dll
18:20:04.0453 3092 Irmon - ok
18:20:04.0500 3092 [ 0501F0B9AB08425F8C0EACBDCC04AA32 ] irsir C:\WINDOWS\system32\DRIVERS\irsir.sys
18:20:04.0500 3092 irsir - ok
18:20:04.0515 3092 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
18:20:04.0515 3092 isapnp - ok
18:20:04.0593 3092 [ 7FBFEEE245821925129C9F86470BF33C ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
18:20:04.0609 3092 JavaQuickStarterService - ok
18:20:04.0656 3092 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:20:04.0671 3092 Kbdclass - ok
18:20:04.0687 3092 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:20:04.0687 3092 kbdhid - ok
18:20:04.0734 3092 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
18:20:04.0734 3092 kmixer - ok
18:20:04.0765 3092 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
18:20:04.0765 3092 KSecDD - ok
18:20:04.0828 3092 [ 2404B1C9C1F4F7E3F43FC0050608F490 ] kxwdmdrv C:\WINDOWS\system32\drivers\kx.sys
18:20:04.0859 3092 kxwdmdrv - ok
18:20:04.0890 3092 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
18:20:04.0906 3092 lanmanserver - ok
18:20:04.0953 3092 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
18:20:04.0953 3092 lanmanworkstation - ok
18:20:04.0968 3092 lbrtfdc - ok
18:20:05.0031 3092 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
18:20:05.0031 3092 LmHosts - ok
18:20:05.0078 3092 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
18:20:05.0078 3092 MBAMProtector - ok
18:20:05.0171 3092 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:20:05.0203 3092 MBAMScheduler - ok
18:20:05.0281 3092 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
18:20:05.0312 3092 MBAMService - ok
18:20:05.0328 3092 MBAMSwissArmy - ok
18:20:05.0359 3092 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
18:20:05.0375 3092 Messenger - ok
18:20:05.0437 3092 [ FAFE367D032ED82E9332B4C741A20216 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
18:20:05.0453 3092 Microsoft Office Groove Audit Service - ok
18:20:05.0484 3092 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
18:20:05.0484 3092 mnmdd - ok
18:20:05.0531 3092 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
18:20:05.0531 3092 mnmsrvc - ok
18:20:05.0562 3092 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
18:20:05.0562 3092 Modem - ok
18:20:05.0609 3092 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
18:20:05.0609 3092 Mouclass - ok
18:20:05.0625 3092 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
18:20:05.0640 3092 mouhid - ok
18:20:05.0656 3092 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
18:20:05.0656 3092 MountMgr - ok
18:20:05.0734 3092 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:20:05.0734 3092 MozillaMaintenance - ok
18:20:05.0750 3092 mraid35x - ok
18:20:05.0781 3092 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:20:05.0796 3092 MRxDAV - ok
18:20:05.0859 3092 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:20:05.0906 3092 MRxSmb - ok
18:20:05.0937 3092 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
18:20:05.0953 3092 MSDTC - ok
18:20:05.0984 3092 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
18:20:05.0984 3092 Msfs - ok
18:20:06.0000 3092 MSIServer - ok
18:20:06.0031 3092 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:20:06.0046 3092 MSKSSRV - ok
18:20:06.0078 3092 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:20:06.0078 3092 MSPCLOCK - ok
18:20:06.0109 3092 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
18:20:06.0109 3092 MSPQM - ok
18:20:06.0156 3092 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:20:06.0156 3092 mssmbios - ok
18:20:06.0203 3092 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
18:20:06.0203 3092 Mup - ok
18:20:06.0265 3092 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
18:20:06.0281 3092 napagent - ok
18:20:06.0343 3092 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
18:20:06.0359 3092 NDIS - ok
18:20:06.0390 3092 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:20:06.0390 3092 NdisTapi - ok
18:20:06.0406 3092 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:20:06.0406 3092 Ndisuio - ok
18:20:06.0437 3092 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:20:06.0453 3092 NdisWan - ok
18:20:06.0484 3092 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
18:20:06.0500 3092 NDProxy - ok
18:20:06.0515 3092 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
18:20:06.0515 3092 NetBIOS - ok
18:20:06.0546 3092 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
18:20:06.0546 3092 NetBT - ok
18:20:06.0609 3092 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
18:20:06.0609 3092 NetDDE - ok
18:20:06.0640 3092 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
18:20:06.0640 3092 NetDDEdsdm - ok
18:20:06.0687 3092 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
18:20:06.0687 3092 Netlogon - ok
18:20:06.0750 3092 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
18:20:06.0765 3092 Netman - ok
18:20:06.0796 3092 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:20:06.0828 3092 NetTcpPortSharing - ok
18:20:06.0859 3092 [ 1289B7611CCD6CB27596AE92CBF03E35 ] Nla C:\WINDOWS\System32\mswsock.dll
18:20:06.0890 3092 Nla - ok
18:20:06.0937 3092 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
18:20:06.0937 3092 Npfs - ok
18:20:06.0984 3092 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
18:20:07.0015 3092 Ntfs - ok
18:20:07.0031 3092 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
18:20:07.0031 3092 NtLmSsp - ok
18:20:07.0093 3092 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
18:20:07.0125 3092 NtmsSvc - ok
18:20:07.0156 3092 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
18:20:07.0156 3092 Null - ok
18:20:07.0484 3092 [ 597A5167C509547FC691416887171079 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
18:20:07.0796 3092 nv - ok
18:20:07.0828 3092 [ 4A290F88C42DD1037A46CD1867308D82 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
18:20:07.0843 3092 NVSvc - ok
18:20:07.0906 3092 [ ADB82FBC435AE7504082B3C714C3885D ] NWCWorkstation C:\WINDOWS\System32\nwwks.dll
18:20:07.0906 3092 NWCWorkstation - ok
18:20:07.0953 3092 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:20:07.0953 3092 NwlnkFlt - ok
18:20:07.0968 3092 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:20:07.0968 3092 NwlnkFwd - ok
18:20:08.0015 3092 [ 8B8B1BE2DBA4025DA6786C645F77F123 ] NwlnkIpx C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
18:20:08.0015 3092 NwlnkIpx - ok
18:20:08.0046 3092 [ 56D34A67C05E94E16377C60609741FF8 ] NwlnkNb C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
18:20:08.0046 3092 NwlnkNb - ok
18:20:08.0078 3092 [ C0BB7D1615E1ACBDC99757F6CEAF8CF0 ] NwlnkSpx C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
18:20:08.0078 3092 NwlnkSpx - ok
18:20:08.0109 3092 [ 36B9B950E3D2E100970A48D8BAD86740 ] NWRDR C:\WINDOWS\system32\DRIVERS\nwrdr.sys
18:20:08.0125 3092 NWRDR - ok
18:20:08.0250 3092 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:20:08.0265 3092 odserv - ok
18:20:08.0328 3092 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:20:08.0328 3092 ose - ok
18:20:08.0390 3092 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
18:20:08.0390 3092 Parport - ok
18:20:08.0421 3092 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
18:20:08.0421 3092 PartMgr - ok
18:20:08.0468 3092 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
18:20:08.0468 3092 ParVdm - ok
18:20:08.0515 3092 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
18:20:08.0515 3092 PCI - ok
18:20:08.0531 3092 PCIDump - ok
18:20:08.0578 3092 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
18:20:08.0578 3092 PCIIde - ok
18:20:08.0609 3092 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
18:20:08.0625 3092 Pcmcia - ok
18:20:08.0640 3092 PDCOMP - ok
18:20:08.0656 3092 PDFRAME - ok
18:20:08.0671 3092 PDRELI - ok
18:20:08.0687 3092 PDRFRAME - ok
18:20:08.0718 3092 perc2 - ok
18:20:08.0734 3092 perc2hib - ok
18:20:08.0796 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
18:20:08.0796 3092 PlugPlay - ok
18:20:08.0859 3092 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
18:20:08.0859 3092 PnkBstrA - ok
18:20:08.0906 3092 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
18:20:08.0906 3092 PolicyAgent - ok
18:20:08.0968 3092 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
18:20:08.0968 3092 PptpMiniport - ok
18:20:08.0984 3092 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
18:20:08.0984 3092 ProtectedStorage - ok
18:20:09.0015 3092 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
18:20:09.0015 3092 PSched - ok
18:20:09.0046 3092 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
18:20:09.0046 3092 Ptilink - ok
18:20:09.0078 3092 ql1080 - ok
18:20:09.0093 3092 Ql10wnt - ok
18:20:09.0109 3092 ql12160 - ok
18:20:09.0125 3092 ql1240 - ok
18:20:09.0140 3092 ql1280 - ok
18:20:09.0171 3092 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:20:09.0187 3092 RasAcd - ok
18:20:09.0234 3092 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
18:20:09.0234 3092 RasAuto - ok
18:20:09.0281 3092 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
18:20:09.0281 3092 Rasirda - ok
18:20:09.0312 3092 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:20:09.0312 3092 Rasl2tp - ok
18:20:09.0359 3092 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
18:20:09.0375 3092 RasMan - ok
18:20:09.0406 3092 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:20:09.0406 3092 RasPppoe - ok
18:20:09.0421 3092 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
18:20:09.0421 3092 Raspti - ok
18:20:09.0453 3092 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:20:09.0453 3092 Rdbss - ok
18:20:09.0484 3092 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:20:09.0484 3092 RDPCDD - ok
18:20:09.0515 3092 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:20:09.0531 3092 rdpdr - ok
18:20:09.0578 3092 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
18:20:09.0593 3092 RDPWD - ok
18:20:09.0640 3092 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
18:20:09.0656 3092 RDSessMgr - ok
18:20:09.0703 3092 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
18:20:09.0703 3092 redbook - ok
18:20:09.0750 3092 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
18:20:09.0750 3092 RemoteAccess - ok
18:20:09.0796 3092 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
18:20:09.0796 3092 RemoteRegistry - ok
18:20:09.0828 3092 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
18:20:09.0828 3092 RpcLocator - ok
18:20:09.0906 3092 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
18:20:09.0921 3092 RpcSs - ok
18:20:09.0968 3092 [ 99F13D7E9AAEC74A5B7D10AB780D9D6F ] RSVP C:\WINDOWS\system32\rsvp.exe
18:20:09.0968 3092 RSVP - ok
18:20:10.0031 3092 [ 8BE348F9AEEB4DA0005B7F500F46F6AD ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
18:20:10.0031 3092 rtl8139 - ok
18:20:10.0046 3092 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
18:20:10.0046 3092 SamSs - ok
18:20:10.0093 3092 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
18:20:10.0093 3092 SCardSvr - ok
18:20:10.0125 3092 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
18:20:10.0140 3092 Schedule - ok
18:20:10.0203 3092 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
18:20:10.0203 3092 Secdrv - ok
18:20:10.0234 3092 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
18:20:10.0250 3092 seclogon - ok
18:20:10.0265 3092 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
18:20:10.0281 3092 SENS - ok
18:20:10.0312 3092 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
18:20:10.0312 3092 serenum - ok
18:20:10.0328 3092 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
18:20:10.0328 3092 Serial - ok
18:20:10.0437 3092 [ 549EA830A5D9EDD9CD14311126C2849B ] SetupNT C:\WINDOWS\system32\SetupNT.sys
18:20:10.0453 3092 SetupNT - ok
18:20:10.0484 3092 [ 4C0D673281178CB496011A2E28571FC8 ] sfdrv01 C:\WINDOWS\system32\drivers\sfdrv01.sys
18:20:10.0484 3092 sfdrv01 - ok
18:20:10.0531 3092 [ 15BE2B5E4DC5B8623CF167720682ABC9 ] sfhlp02 C:\WINDOWS\system32\drivers\sfhlp02.sys
18:20:10.0531 3092 sfhlp02 - ok
18:20:10.0687 3092 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
18:20:10.0687 3092 Sfloppy - ok
18:20:10.0718 3092 [ 0B1A5E9CACB5CDD54A2815107BD7C772 ] sfman C:\WINDOWS\system32\drivers\sfmanm.sys
18:20:10.0734 3092 sfman - ok
18:20:10.0953 3092 [ D5A7E09D2C6A702809E49190D52ADC9F ] sfvfs02 C:\WINDOWS\system32\drivers\sfvfs02.sys
18:20:10.0953 3092 sfvfs02 - ok
18:20:11.0015 3092 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
18:20:11.0250 3092 SharedAccess - ok
18:20:11.0281 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
18:20:11.0281 3092 ShellHWDetection - ok
18:20:11.0437 3092 Simbad - ok
18:20:11.0609 3092 [ 322315F6A8C1F21575CBE92DD473DA16 ] SiS315 C:\WINDOWS\system32\DRIVERS\sisgrp.sys
18:20:11.0781 3092 SiS315 - ok
18:20:12.0078 3092 [ D3BA744433F14E5C77107D9D82297801 ] SiS7018 C:\WINDOWS\system32\drivers\ac97sis.sys
18:20:12.0140 3092 SiS7018 - ok
18:20:12.0171 3092 [ 61CA562DEF09A782D26B3E7EDEC5369A ] sisagp C:\WINDOWS\system32\DRIVERS\SISAGPX.sys
18:20:12.0343 3092 sisagp - ok
18:20:12.0359 3092 [ 88F7D6DB34FF421F8AE07AE16E6659AC ] SiSkp C:\WINDOWS\system32\DRIVERS\srvkp.sys
18:20:12.0359 3092 SiSkp - ok
18:20:12.0390 3092 [ 3FBB6EF8B5A71A2FA11F5F461BB73219 ] SISNIC C:\WINDOWS\system32\DRIVERS\sisnic.sys
18:20:12.0390 3092 SISNIC - ok
18:20:12.0671 3092 [ EB17DF573B4423DF0B3B2EE3B268A6DE ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
18:20:12.0828 3092 Skype C2C Service - ok
18:20:13.0031 3092 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
18:20:13.0328 3092 SkypeUpdate - ok
18:20:13.0343 3092 Sparrow - ok
18:20:13.0375 3092 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
18:20:13.0375 3092 splitter - ok
18:20:13.0406 3092 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
18:20:13.0421 3092 Spooler - ok
18:20:13.0437 3092 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
18:20:13.0437 3092 sr - ok
18:20:13.0484 3092 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
18:20:13.0500 3092 srservice - ok
18:20:13.0531 3092 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
18:20:13.0546 3092 Srv - ok
18:20:13.0562 3092 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
18:20:13.0578 3092 SSDPSRV - ok
18:20:13.0593 3092 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
18:20:13.0625 3092 stisvc - ok
18:20:13.0656 3092 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
18:20:13.0656 3092 swenum - ok
18:20:13.0687 3092 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
18:20:13.0687 3092 swmidi - ok
18:20:13.0703 3092 SwPrv - ok
18:20:13.0703 3092 symc810 - ok
18:20:13.0718 3092 symc8xx - ok
18:20:13.0734 3092 sym_hi - ok
18:20:13.0734 3092 sym_u3 - ok
18:20:13.0765 3092 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
18:20:13.0781 3092 sysaudio - ok
18:20:13.0796 3092 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
18:20:13.0812 3092 SysmonLog - ok
18:20:13.0828 3092 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
18:20:13.0843 3092 TapiSrv - ok
18:20:13.0921 3092 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:20:13.0937 3092 Tcpip - ok
18:20:13.0968 3092 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
18:20:13.0968 3092 TDPIPE - ok
18:20:13.0984 3092 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
18:20:13.0984 3092 TDTCP - ok
18:20:14.0015 3092 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
18:20:14.0015 3092 TermDD - ok
18:20:14.0046 3092 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
18:20:14.0062 3092 TermService - ok
18:20:14.0078 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
18:20:14.0078 3092 Themes - ok
18:20:14.0125 3092 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
18:20:14.0125 3092 TlntSvr - ok
18:20:14.0125 3092 TosIde - ok
18:20:14.0156 3092 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
18:20:14.0171 3092 TrkWks - ok
18:20:14.0187 3092 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
18:20:14.0187 3092 Udfs - ok
18:20:14.0187 3092 ultra - ok
18:20:14.0250 3092 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
18:20:14.0281 3092 Update - ok
18:20:14.0296 3092 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
18:20:14.0359 3092 upnphost - ok
18:20:14.0406 3092 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
18:20:14.0421 3092 UPS - ok
18:20:14.0468 3092 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:20:14.0500 3092 usbccgp - ok
18:20:14.0640 3092 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
18:20:14.0640 3092 usbehci - ok
18:20:14.0656 3092 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
18:20:14.0656 3092 usbhub - ok
18:20:14.0687 3092 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
18:20:14.0687 3092 usbohci - ok
18:20:14.0765 3092 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
18:20:14.0765 3092 usbscan - ok
18:20:14.0796 3092 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:20:14.0796 3092 USBSTOR - ok
18:20:14.0796 3092 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
18:20:14.0812 3092 VgaSave - ok
18:20:14.0812 3092 ViaIde - ok
18:20:14.0921 3092 [ 819BF44085104BE6527B86A88ACF856B ] VIAudio C:\WINDOWS\system32\drivers\ac97via.sys
18:20:14.0921 3092 VIAudio - ok
18:20:14.0937 3092 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
18:20:14.0937 3092 VolSnap - ok
18:20:15.0015 3092 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
18:20:15.0031 3092 VSS - ok
18:20:15.0062 3092 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
18:20:15.0125 3092 W32Time - ok
18:20:15.0187 3092 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
18:20:15.0187 3092 Wanarp - ok
18:20:15.0187 3092 WDICA - ok
18:20:15.0250 3092 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
18:20:15.0250 3092 wdmaud - ok
18:20:15.0328 3092 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
18:20:15.0343 3092 WebClient - ok
18:20:15.0453 3092 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
18:20:15.0468 3092 winmgmt - ok
18:20:15.0500 3092 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
18:20:15.0515 3092 WmdmPmSN - ok
18:20:15.0656 3092 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
18:20:15.0781 3092 Wmi - ok
18:20:15.0968 3092 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
18:20:15.0968 3092 WmiApSrv - ok
18:20:15.0984 3092 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
18:20:16.0015 3092 WpdUsb - ok
18:20:16.0500 3092 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
18:20:17.0562 3092 WPFFontCache_v0400 - ok
18:20:17.0609 3092 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
18:20:17.0734 3092 WS2IFSL - ok
18:20:17.0859 3092 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
18:20:17.0921 3092 wscsvc - ok
18:20:17.0953 3092 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
18:20:17.0968 3092 wuauserv - ok
18:20:18.0031 3092 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
18:20:18.0062 3092 WudfPf - ok
18:20:18.0078 3092 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
18:20:18.0093 3092 WudfRd - ok
18:20:18.0171 3092 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
18:20:18.0187 3092 WudfSvc - ok
18:20:18.0531 3092 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
18:20:18.0578 3092 WZCSVC - ok
18:20:18.0734 3092 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
18:20:19.0140 3092 xmlprov - ok
18:20:19.0156 3092 ================ Scan global ===============================
18:20:19.0281 3092 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
18:20:19.0828 3092 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:20:20.0281 3092 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:20:20.0312 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
18:20:20.0312 3092 [Global] - ok
18:20:20.0312 3092 ================ Scan MBR ==================================
18:20:20.0328 3092 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
18:20:22.0015 3092 \Device\Harddisk0\DR0 - ok
18:20:22.0015 3092 ================ Scan VBR ==================================
18:20:22.0015 3092 [ 70B3863952C87B34782A9E92B6C07E6E ] \Device\Harddisk0\DR0\Partition1
18:20:22.0015 3092 \Device\Harddisk0\DR0\Partition1 - ok
18:20:22.0031 3092 [ 920B383A6F0B66BF8B0D4919646DFEA7 ] \Device\Harddisk0\DR0\Partition2
18:20:22.0046 3092 \Device\Harddisk0\DR0\Partition2 - ok
18:20:22.0062 3092 [ A7A1830FB4CB752AC732C43C9DA7220E ] \Device\Harddisk0\DR0\Partition3
18:20:22.0062 3092 \Device\Harddisk0\DR0\Partition3 - ok
18:20:22.0062 3092 ============================================================
18:20:22.0062 3092 Scan finished
18:20:22.0062 3092 ============================================================
18:20:22.0078 3080 Detected object count: 0
18:20:22.0078 3080 Actual detected object count: 0
15:20:15.0109 2044 ============================================================
15:20:15.0109 2044 Current date / time: 2013/05/24 15:20:15.0109
15:20:15.0109 2044 SystemInfo:
15:20:15.0109 2044
15:20:15.0109 2044 OS Version: 5.1.2600 ServicePack: 3.0
15:20:15.0109 2044 Product type: Workstation
15:20:15.0125 2044 ComputerName: ILONA-AD29401A2
15:20:15.0125 2044 UserName: ilona
15:20:15.0125 2044 Windows directory: C:\WINDOWS
15:20:15.0125 2044 System windows directory: C:\WINDOWS
15:20:15.0125 2044 Processor architecture: Intel x86
15:20:15.0125 2044 Number of processors: 1
15:20:15.0125 2044 Page size: 0x1000
15:20:15.0125 2044 Boot type: Normal boot
15:20:15.0125 2044 ============================================================
15:20:16.0359 2044 BG loaded
15:20:16.0828 2044 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:20:16.0828 2044 ============================================================
15:20:16.0828 2044 \Device\Harddisk0\DR0:
15:20:16.0828 2044 MBR partitions:
15:20:16.0828 2044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:20:16.0843 2044 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x61A7927
15:20:16.0859 2044 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC34F30B, BlocksNum 0x66C58F5
15:20:16.0859 2044 ============================================================
15:20:16.0890 2044 C: <-> \Device\Harddisk0\DR0\Partition1
15:20:16.0953 2044 D: <-> \Device\Harddisk0\DR0\Partition2
15:20:17.0000 2044 E: <-> \Device\Harddisk0\DR0\Partition3
15:20:17.0015 2044 ============================================================
15:20:17.0015 2044 Initialize success
15:20:17.0031 2044 ============================================================
18:19:59.0140 3092 ============================================================
18:19:59.0140 3092 Scan started
18:19:59.0140 3092 Mode: Manual;
18:19:59.0140 3092 ============================================================
18:19:59.0390 3092 ================ Scan system memory ========================
18:19:59.0390 3092 System memory - ok
18:19:59.0406 3092 ================ Scan services =============================
18:19:59.0578 3092 Abiosdsk - ok
18:19:59.0593 3092 abp480n5 - ok
18:19:59.0656 3092 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
18:19:59.0671 3092 ACPI - ok
18:19:59.0703 3092 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
18:19:59.0703 3092 ACPIEC - ok
18:19:59.0765 3092 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:19:59.0765 3092 AdobeFlashPlayerUpdateSvc - ok
18:19:59.0781 3092 adpu160m - ok
18:19:59.0828 3092 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
18:19:59.0828 3092 aec - ok
18:19:59.0890 3092 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
18:19:59.0890 3092 AFD - ok
18:19:59.0921 3092 Aha154x - ok
18:20:00.0000 3092 aic78u2 - ok
18:20:00.0015 3092 aic78xx - ok
18:20:00.0234 3092 [ DD8520280304B6145A6BE31008748C7C ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
18:20:00.0421 3092 ALCXWDM - ok
18:20:00.0468 3092 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
18:20:00.0468 3092 Alerter - ok
18:20:00.0500 3092 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
18:20:00.0500 3092 ALG - ok
18:20:00.0515 3092 AliIde - ok
18:20:00.0531 3092 amsint - ok
18:20:00.0593 3092 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
18:20:00.0609 3092 AppMgmt - ok
18:20:00.0625 3092 asc - ok
18:20:00.0656 3092 asc3350p - ok
18:20:00.0671 3092 asc3550 - ok
18:20:00.0765 3092 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
18:20:00.0828 3092 aspnet_state - ok
18:20:00.0875 3092 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:20:00.0906 3092 AsyncMac - ok
18:20:00.0937 3092 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
18:20:00.0953 3092 atapi - ok
18:20:00.0968 3092 Atdisk - ok
18:20:01.0000 3092 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:20:01.0000 3092 Atmarpc - ok
18:20:01.0046 3092 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
18:20:01.0046 3092 AudioSrv - ok
18:20:01.0078 3092 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
18:20:01.0078 3092 audstub - ok
18:20:01.0125 3092 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
18:20:01.0125 3092 Beep - ok
18:20:01.0187 3092 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
18:20:01.0218 3092 BITS - ok
18:20:01.0281 3092 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
18:20:01.0281 3092 Browser - ok
18:20:01.0296 3092 catchme - ok
18:20:01.0343 3092 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
18:20:01.0343 3092 cbidf2k - ok
18:20:01.0359 3092 cd20xrnt - ok
18:20:01.0406 3092 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
18:20:01.0406 3092 Cdaudio - ok
18:20:01.0437 3092 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
18:20:01.0437 3092 Cdfs - ok
18:20:01.0453 3092 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
18:20:01.0453 3092 Cdrom - ok
18:20:01.0484 3092 Changer - ok
18:20:01.0515 3092 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
18:20:01.0515 3092 CiSvc - ok
18:20:01.0562 3092 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
18:20:01.0562 3092 ClipSrv - ok
18:20:01.0640 3092 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:20:01.0640 3092 clr_optimization_v2.0.50727_32 - ok
18:20:01.0703 3092 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:20:01.0734 3092 clr_optimization_v4.0.30319_32 - ok
18:20:01.0750 3092 CmdIde - ok
18:20:01.0765 3092 COMSysApp - ok
18:20:01.0796 3092 Cpqarray - ok
18:20:01.0843 3092 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
18:20:01.0843 3092 CryptSvc - ok
18:20:01.0875 3092 [ 71007BD2E1E26927FE3E4EB00C0BEEDF ] ctljystk C:\WINDOWS\system32\DRIVERS\ctljystk.sys
18:20:01.0875 3092 ctljystk - ok
18:20:01.0921 3092 dac2w2k - ok
18:20:01.0953 3092 dac960nt - ok
18:20:02.0000 3092 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
18:20:02.0031 3092 DcomLaunch - ok
18:20:02.0078 3092 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
18:20:02.0078 3092 Dhcp - ok
18:20:02.0093 3092 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
18:20:02.0093 3092 Disk - ok
18:20:02.0109 3092 dmadmin - ok
18:20:02.0187 3092 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
18:20:02.0218 3092 dmboot - ok
18:20:02.0250 3092 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
18:20:02.0250 3092 dmio - ok
18:20:02.0296 3092 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
18:20:02.0296 3092 dmload - ok
18:20:02.0312 3092 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
18:20:02.0328 3092 dmserver - ok
18:20:02.0359 3092 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
18:20:02.0375 3092 DMusic - ok
18:20:02.0406 3092 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
18:20:02.0406 3092 Dnscache - ok
18:20:02.0468 3092 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
18:20:02.0468 3092 Dot3svc - ok
18:20:02.0484 3092 dpti2o - ok
18:20:02.0531 3092 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
18:20:02.0531 3092 drmkaud - ok
18:20:02.0546 3092 EagleNT - ok
18:20:02.0562 3092 EagleXNt - ok
18:20:02.0625 3092 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
18:20:02.0625 3092 EapHost - ok
18:20:02.0656 3092 [ 01F83E1B5DCE05F5CB7D99113CA9E890 ] emu10k C:\WINDOWS\system32\drivers\emu10k1m.sys
18:20:02.0671 3092 emu10k - ok
18:20:02.0718 3092 [ 7FFA171CCE6A8BFC774862A578BA39A2 ] emu10k1 C:\WINDOWS\system32\drivers\ctlfacem.sys
18:20:02.0718 3092 emu10k1 - ok
18:20:02.0765 3092 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
18:20:02.0765 3092 ERSvc - ok
18:20:02.0812 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
18:20:02.0812 3092 Eventlog - ok
18:20:02.0890 3092 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
18:20:02.0921 3092 EventSystem - ok
18:20:02.0968 3092 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
18:20:02.0984 3092 Fastfat - ok
18:20:03.0031 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
18:20:03.0031 3092 FastUserSwitchingCompatibility - ok
18:20:03.0062 3092 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
18:20:03.0062 3092 Fdc - ok
18:20:03.0093 3092 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
18:20:03.0093 3092 Fips - ok
18:20:03.0140 3092 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:20:03.0140 3092 Flpydisk - ok
18:20:03.0218 3092 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
18:20:03.0218 3092 FltMgr - ok
18:20:03.0281 3092 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:20:03.0281 3092 FontCache3.0.0.0 - ok
18:20:03.0296 3092 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:20:03.0296 3092 Fs_Rec - ok
18:20:03.0328 3092 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:20:03.0328 3092 Ftdisk - ok
18:20:03.0343 3092 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
18:20:03.0343 3092 gameenum - ok
18:20:03.0375 3092 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
18:20:03.0375 3092 Gpc - ok
18:20:03.0453 3092 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:20:03.0453 3092 helpsvc - ok
18:20:03.0484 3092 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
18:20:03.0484 3092 HidServ - ok
18:20:03.0500 3092 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
18:20:03.0500 3092 hidusb - ok
18:20:03.0546 3092 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
18:20:03.0562 3092 hkmsvc - ok
18:20:03.0578 3092 hpn - ok
18:20:03.0625 3092 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
18:20:03.0640 3092 HTTP - ok
18:20:03.0687 3092 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
18:20:03.0703 3092 HTTPFilter - ok
18:20:03.0718 3092 i2omgmt - ok
18:20:03.0734 3092 i2omp - ok
18:20:03.0750 3092 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:20:03.0750 3092 i8042prt - ok
18:20:03.0843 3092 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:20:03.0843 3092 IDriverT - ok
18:20:03.0953 3092 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:20:03.0984 3092 idsvc - ok
18:20:04.0015 3092 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
18:20:04.0015 3092 Imapi - ok
18:20:04.0078 3092 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
18:20:04.0078 3092 ImapiService - ok
18:20:04.0109 3092 ini910u - ok
18:20:04.0140 3092 IntelIde - ok
18:20:04.0171 3092 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
18:20:04.0171 3092 intelppm - ok
18:20:04.0203 3092 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
18:20:04.0203 3092 Ip6Fw - ok
18:20:04.0250 3092 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:20:04.0250 3092 IpFilterDriver - ok
18:20:04.0265 3092 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
18:20:04.0265 3092 IpInIp - ok
18:20:04.0312 3092 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
18:20:04.0328 3092 IpNat - ok
18:20:04.0328 3092 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
18:20:04.0343 3092 IPSec - ok
18:20:04.0375 3092 [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda C:\WINDOWS\system32\DRIVERS\irda.sys
18:20:04.0390 3092 irda - ok
18:20:04.0406 3092 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
18:20:04.0406 3092 IRENUM - ok
18:20:04.0437 3092 [ 8024EA8C5B2D2A4D201F418B0AADB804 ] Irmon C:\WINDOWS\System32\irmon.dll
18:20:04.0453 3092 Irmon - ok
18:20:04.0500 3092 [ 0501F0B9AB08425F8C0EACBDCC04AA32 ] irsir C:\WINDOWS\system32\DRIVERS\irsir.sys
18:20:04.0500 3092 irsir - ok
18:20:04.0515 3092 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
18:20:04.0515 3092 isapnp - ok
18:20:04.0593 3092 [ 7FBFEEE245821925129C9F86470BF33C ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
18:20:04.0609 3092 JavaQuickStarterService - ok
18:20:04.0656 3092 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:20:04.0671 3092 Kbdclass - ok
18:20:04.0687 3092 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:20:04.0687 3092 kbdhid - ok
18:20:04.0734 3092 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
18:20:04.0734 3092 kmixer - ok
18:20:04.0765 3092 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
18:20:04.0765 3092 KSecDD - ok
18:20:04.0828 3092 [ 2404B1C9C1F4F7E3F43FC0050608F490 ] kxwdmdrv C:\WINDOWS\system32\drivers\kx.sys
18:20:04.0859 3092 kxwdmdrv - ok
18:20:04.0890 3092 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
18:20:04.0906 3092 lanmanserver - ok
18:20:04.0953 3092 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
18:20:04.0953 3092 lanmanworkstation - ok
18:20:04.0968 3092 lbrtfdc - ok
18:20:05.0031 3092 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
18:20:05.0031 3092 LmHosts - ok
18:20:05.0078 3092 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
18:20:05.0078 3092 MBAMProtector - ok
18:20:05.0171 3092 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:20:05.0203 3092 MBAMScheduler - ok
18:20:05.0281 3092 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
18:20:05.0312 3092 MBAMService - ok
18:20:05.0328 3092 MBAMSwissArmy - ok
18:20:05.0359 3092 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
18:20:05.0375 3092 Messenger - ok
18:20:05.0437 3092 [ FAFE367D032ED82E9332B4C741A20216 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
18:20:05.0453 3092 Microsoft Office Groove Audit Service - ok
18:20:05.0484 3092 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
18:20:05.0484 3092 mnmdd - ok
18:20:05.0531 3092 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
18:20:05.0531 3092 mnmsrvc - ok
18:20:05.0562 3092 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
18:20:05.0562 3092 Modem - ok
18:20:05.0609 3092 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
18:20:05.0609 3092 Mouclass - ok
18:20:05.0625 3092 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
18:20:05.0640 3092 mouhid - ok
18:20:05.0656 3092 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
18:20:05.0656 3092 MountMgr - ok
18:20:05.0734 3092 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:20:05.0734 3092 MozillaMaintenance - ok
18:20:05.0750 3092 mraid35x - ok
18:20:05.0781 3092 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:20:05.0796 3092 MRxDAV - ok
18:20:05.0859 3092 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:20:05.0906 3092 MRxSmb - ok
18:20:05.0937 3092 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
18:20:05.0953 3092 MSDTC - ok
18:20:05.0984 3092 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
18:20:05.0984 3092 Msfs - ok
18:20:06.0000 3092 MSIServer - ok
18:20:06.0031 3092 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:20:06.0046 3092 MSKSSRV - ok
18:20:06.0078 3092 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:20:06.0078 3092 MSPCLOCK - ok
18:20:06.0109 3092 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
18:20:06.0109 3092 MSPQM - ok
18:20:06.0156 3092 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:20:06.0156 3092 mssmbios - ok
18:20:06.0203 3092 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
18:20:06.0203 3092 Mup - ok
18:20:06.0265 3092 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
18:20:06.0281 3092 napagent - ok
18:20:06.0343 3092 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
18:20:06.0359 3092 NDIS - ok
18:20:06.0390 3092 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:20:06.0390 3092 NdisTapi - ok
18:20:06.0406 3092 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:20:06.0406 3092 Ndisuio - ok
18:20:06.0437 3092 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:20:06.0453 3092 NdisWan - ok
18:20:06.0484 3092 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
18:20:06.0500 3092 NDProxy - ok
18:20:06.0515 3092 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
18:20:06.0515 3092 NetBIOS - ok
18:20:06.0546 3092 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
18:20:06.0546 3092 NetBT - ok
18:20:06.0609 3092 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
18:20:06.0609 3092 NetDDE - ok
18:20:06.0640 3092 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
18:20:06.0640 3092 NetDDEdsdm - ok
18:20:06.0687 3092 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
18:20:06.0687 3092 Netlogon - ok
18:20:06.0750 3092 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
18:20:06.0765 3092 Netman - ok
18:20:06.0796 3092 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:20:06.0828 3092 NetTcpPortSharing - ok
18:20:06.0859 3092 [ 1289B7611CCD6CB27596AE92CBF03E35 ] Nla C:\WINDOWS\System32\mswsock.dll
18:20:06.0890 3092 Nla - ok
18:20:06.0937 3092 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
18:20:06.0937 3092 Npfs - ok
18:20:06.0984 3092 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
18:20:07.0015 3092 Ntfs - ok
18:20:07.0031 3092 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
18:20:07.0031 3092 NtLmSsp - ok
18:20:07.0093 3092 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
18:20:07.0125 3092 NtmsSvc - ok
18:20:07.0156 3092 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
18:20:07.0156 3092 Null - ok
18:20:07.0484 3092 [ 597A5167C509547FC691416887171079 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
18:20:07.0796 3092 nv - ok
18:20:07.0828 3092 [ 4A290F88C42DD1037A46CD1867308D82 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
18:20:07.0843 3092 NVSvc - ok
18:20:07.0906 3092 [ ADB82FBC435AE7504082B3C714C3885D ] NWCWorkstation C:\WINDOWS\System32\nwwks.dll
18:20:07.0906 3092 NWCWorkstation - ok
18:20:07.0953 3092 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:20:07.0953 3092 NwlnkFlt - ok
18:20:07.0968 3092 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:20:07.0968 3092 NwlnkFwd - ok
18:20:08.0015 3092 [ 8B8B1BE2DBA4025DA6786C645F77F123 ] NwlnkIpx C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
18:20:08.0015 3092 NwlnkIpx - ok
18:20:08.0046 3092 [ 56D34A67C05E94E16377C60609741FF8 ] NwlnkNb C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
18:20:08.0046 3092 NwlnkNb - ok
18:20:08.0078 3092 [ C0BB7D1615E1ACBDC99757F6CEAF8CF0 ] NwlnkSpx C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
18:20:08.0078 3092 NwlnkSpx - ok
18:20:08.0109 3092 [ 36B9B950E3D2E100970A48D8BAD86740 ] NWRDR C:\WINDOWS\system32\DRIVERS\nwrdr.sys
18:20:08.0125 3092 NWRDR - ok
18:20:08.0250 3092 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:20:08.0265 3092 odserv - ok
18:20:08.0328 3092 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:20:08.0328 3092 ose - ok
18:20:08.0390 3092 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
18:20:08.0390 3092 Parport - ok
18:20:08.0421 3092 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
18:20:08.0421 3092 PartMgr - ok
18:20:08.0468 3092 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
18:20:08.0468 3092 ParVdm - ok
18:20:08.0515 3092 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
18:20:08.0515 3092 PCI - ok
18:20:08.0531 3092 PCIDump - ok
18:20:08.0578 3092 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
18:20:08.0578 3092 PCIIde - ok
18:20:08.0609 3092 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
18:20:08.0625 3092 Pcmcia - ok
18:20:08.0640 3092 PDCOMP - ok
18:20:08.0656 3092 PDFRAME - ok
18:20:08.0671 3092 PDRELI - ok
18:20:08.0687 3092 PDRFRAME - ok
18:20:08.0718 3092 perc2 - ok
18:20:08.0734 3092 perc2hib - ok
18:20:08.0796 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
18:20:08.0796 3092 PlugPlay - ok
18:20:08.0859 3092 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
18:20:08.0859 3092 PnkBstrA - ok
18:20:08.0906 3092 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
18:20:08.0906 3092 PolicyAgent - ok
18:20:08.0968 3092 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
18:20:08.0968 3092 PptpMiniport - ok
18:20:08.0984 3092 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
18:20:08.0984 3092 ProtectedStorage - ok
18:20:09.0015 3092 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
18:20:09.0015 3092 PSched - ok
18:20:09.0046 3092 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
18:20:09.0046 3092 Ptilink - ok
18:20:09.0078 3092 ql1080 - ok
18:20:09.0093 3092 Ql10wnt - ok
18:20:09.0109 3092 ql12160 - ok
18:20:09.0125 3092 ql1240 - ok
18:20:09.0140 3092 ql1280 - ok
18:20:09.0171 3092 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:20:09.0187 3092 RasAcd - ok
18:20:09.0234 3092 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
18:20:09.0234 3092 RasAuto - ok
18:20:09.0281 3092 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
18:20:09.0281 3092 Rasirda - ok
18:20:09.0312 3092 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:20:09.0312 3092 Rasl2tp - ok
18:20:09.0359 3092 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
18:20:09.0375 3092 RasMan - ok
18:20:09.0406 3092 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:20:09.0406 3092 RasPppoe - ok
18:20:09.0421 3092 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
18:20:09.0421 3092 Raspti - ok
18:20:09.0453 3092 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:20:09.0453 3092 Rdbss - ok
18:20:09.0484 3092 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:20:09.0484 3092 RDPCDD - ok
18:20:09.0515 3092 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:20:09.0531 3092 rdpdr - ok
18:20:09.0578 3092 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
18:20:09.0593 3092 RDPWD - ok
18:20:09.0640 3092 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
18:20:09.0656 3092 RDSessMgr - ok
18:20:09.0703 3092 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
18:20:09.0703 3092 redbook - ok
18:20:09.0750 3092 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
18:20:09.0750 3092 RemoteAccess - ok
18:20:09.0796 3092 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
18:20:09.0796 3092 RemoteRegistry - ok
18:20:09.0828 3092 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
18:20:09.0828 3092 RpcLocator - ok
18:20:09.0906 3092 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\System32\rpcss.dll
18:20:09.0921 3092 RpcSs - ok
18:20:09.0968 3092 [ 99F13D7E9AAEC74A5B7D10AB780D9D6F ] RSVP C:\WINDOWS\system32\rsvp.exe
18:20:09.0968 3092 RSVP - ok
18:20:10.0031 3092 [ 8BE348F9AEEB4DA0005B7F500F46F6AD ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
18:20:10.0031 3092 rtl8139 - ok
18:20:10.0046 3092 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
18:20:10.0046 3092 SamSs - ok
18:20:10.0093 3092 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
18:20:10.0093 3092 SCardSvr - ok
18:20:10.0125 3092 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
18:20:10.0140 3092 Schedule - ok
18:20:10.0203 3092 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
18:20:10.0203 3092 Secdrv - ok
18:20:10.0234 3092 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
18:20:10.0250 3092 seclogon - ok
18:20:10.0265 3092 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
18:20:10.0281 3092 SENS - ok
18:20:10.0312 3092 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
18:20:10.0312 3092 serenum - ok
18:20:10.0328 3092 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
18:20:10.0328 3092 Serial - ok
18:20:10.0437 3092 [ 549EA830A5D9EDD9CD14311126C2849B ] SetupNT C:\WINDOWS\system32\SetupNT.sys
18:20:10.0453 3092 SetupNT - ok
18:20:10.0484 3092 [ 4C0D673281178CB496011A2E28571FC8 ] sfdrv01 C:\WINDOWS\system32\drivers\sfdrv01.sys
18:20:10.0484 3092 sfdrv01 - ok
18:20:10.0531 3092 [ 15BE2B5E4DC5B8623CF167720682ABC9 ] sfhlp02 C:\WINDOWS\system32\drivers\sfhlp02.sys
18:20:10.0531 3092 sfhlp02 - ok
18:20:10.0687 3092 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
18:20:10.0687 3092 Sfloppy - ok
18:20:10.0718 3092 [ 0B1A5E9CACB5CDD54A2815107BD7C772 ] sfman C:\WINDOWS\system32\drivers\sfmanm.sys
18:20:10.0734 3092 sfman - ok
18:20:10.0953 3092 [ D5A7E09D2C6A702809E49190D52ADC9F ] sfvfs02 C:\WINDOWS\system32\drivers\sfvfs02.sys
18:20:10.0953 3092 sfvfs02 - ok
18:20:11.0015 3092 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
18:20:11.0250 3092 SharedAccess - ok
18:20:11.0281 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
18:20:11.0281 3092 ShellHWDetection - ok
18:20:11.0437 3092 Simbad - ok
18:20:11.0609 3092 [ 322315F6A8C1F21575CBE92DD473DA16 ] SiS315 C:\WINDOWS\system32\DRIVERS\sisgrp.sys
18:20:11.0781 3092 SiS315 - ok
18:20:12.0078 3092 [ D3BA744433F14E5C77107D9D82297801 ] SiS7018 C:\WINDOWS\system32\drivers\ac97sis.sys
18:20:12.0140 3092 SiS7018 - ok
18:20:12.0171 3092 [ 61CA562DEF09A782D26B3E7EDEC5369A ] sisagp C:\WINDOWS\system32\DRIVERS\SISAGPX.sys
18:20:12.0343 3092 sisagp - ok
18:20:12.0359 3092 [ 88F7D6DB34FF421F8AE07AE16E6659AC ] SiSkp C:\WINDOWS\system32\DRIVERS\srvkp.sys
18:20:12.0359 3092 SiSkp - ok
18:20:12.0390 3092 [ 3FBB6EF8B5A71A2FA11F5F461BB73219 ] SISNIC C:\WINDOWS\system32\DRIVERS\sisnic.sys
18:20:12.0390 3092 SISNIC - ok
18:20:12.0671 3092 [ EB17DF573B4423DF0B3B2EE3B268A6DE ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
18:20:12.0828 3092 Skype C2C Service - ok
18:20:13.0031 3092 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
18:20:13.0328 3092 SkypeUpdate - ok
18:20:13.0343 3092 Sparrow - ok
18:20:13.0375 3092 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
18:20:13.0375 3092 splitter - ok
18:20:13.0406 3092 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
18:20:13.0421 3092 Spooler - ok
18:20:13.0437 3092 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
18:20:13.0437 3092 sr - ok
18:20:13.0484 3092 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
18:20:13.0500 3092 srservice - ok
18:20:13.0531 3092 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
18:20:13.0546 3092 Srv - ok
18:20:13.0562 3092 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
18:20:13.0578 3092 SSDPSRV - ok
18:20:13.0593 3092 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
18:20:13.0625 3092 stisvc - ok
18:20:13.0656 3092 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
18:20:13.0656 3092 swenum - ok
18:20:13.0687 3092 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
18:20:13.0687 3092 swmidi - ok
18:20:13.0703 3092 SwPrv - ok
18:20:13.0703 3092 symc810 - ok
18:20:13.0718 3092 symc8xx - ok
18:20:13.0734 3092 sym_hi - ok
18:20:13.0734 3092 sym_u3 - ok
18:20:13.0765 3092 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
18:20:13.0781 3092 sysaudio - ok
18:20:13.0796 3092 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
18:20:13.0812 3092 SysmonLog - ok
18:20:13.0828 3092 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
18:20:13.0843 3092 TapiSrv - ok
18:20:13.0921 3092 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:20:13.0937 3092 Tcpip - ok
18:20:13.0968 3092 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
18:20:13.0968 3092 TDPIPE - ok
18:20:13.0984 3092 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
18:20:13.0984 3092 TDTCP - ok
18:20:14.0015 3092 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
18:20:14.0015 3092 TermDD - ok
18:20:14.0046 3092 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
18:20:14.0062 3092 TermService - ok
18:20:14.0078 3092 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
18:20:14.0078 3092 Themes - ok
18:20:14.0125 3092 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
18:20:14.0125 3092 TlntSvr - ok
18:20:14.0125 3092 TosIde - ok
18:20:14.0156 3092 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
18:20:14.0171 3092 TrkWks - ok
18:20:14.0187 3092 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
18:20:14.0187 3092 Udfs - ok
18:20:14.0187 3092 ultra - ok
18:20:14.0250 3092 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
18:20:14.0281 3092 Update - ok
18:20:14.0296 3092 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
18:20:14.0359 3092 upnphost - ok
18:20:14.0406 3092 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
18:20:14.0421 3092 UPS - ok
18:20:14.0468 3092 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:20:14.0500 3092 usbccgp - ok
18:20:14.0640 3092 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
18:20:14.0640 3092 usbehci - ok
18:20:14.0656 3092 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
18:20:14.0656 3092 usbhub - ok
18:20:14.0687 3092 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
18:20:14.0687 3092 usbohci - ok
18:20:14.0765 3092 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
18:20:14.0765 3092 usbscan - ok
18:20:14.0796 3092 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:20:14.0796 3092 USBSTOR - ok
18:20:14.0796 3092 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
18:20:14.0812 3092 VgaSave - ok
18:20:14.0812 3092 ViaIde - ok
18:20:14.0921 3092 [ 819BF44085104BE6527B86A88ACF856B ] VIAudio C:\WINDOWS\system32\drivers\ac97via.sys
18:20:14.0921 3092 VIAudio - ok
18:20:14.0937 3092 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
18:20:14.0937 3092 VolSnap - ok
18:20:15.0015 3092 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
18:20:15.0031 3092 VSS - ok
18:20:15.0062 3092 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
18:20:15.0125 3092 W32Time - ok
18:20:15.0187 3092 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
18:20:15.0187 3092 Wanarp - ok
18:20:15.0187 3092 WDICA - ok
18:20:15.0250 3092 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
18:20:15.0250 3092 wdmaud - ok
18:20:15.0328 3092 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
18:20:15.0343 3092 WebClient - ok
18:20:15.0453 3092 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
18:20:15.0468 3092 winmgmt - ok
18:20:15.0500 3092 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
18:20:15.0515 3092 WmdmPmSN - ok
18:20:15.0656 3092 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
18:20:15.0781 3092 Wmi - ok
18:20:15.0968 3092 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
18:20:15.0968 3092 WmiApSrv - ok
18:20:15.0984 3092 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
18:20:16.0015 3092 WpdUsb - ok
18:20:16.0500 3092 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
18:20:17.0562 3092 WPFFontCache_v0400 - ok
18:20:17.0609 3092 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
18:20:17.0734 3092 WS2IFSL - ok
18:20:17.0859 3092 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
18:20:17.0921 3092 wscsvc - ok
18:20:17.0953 3092 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
18:20:17.0968 3092 wuauserv - ok
18:20:18.0031 3092 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
18:20:18.0062 3092 WudfPf - ok
18:20:18.0078 3092 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
18:20:18.0093 3092 WudfRd - ok
18:20:18.0171 3092 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
18:20:18.0187 3092 WudfSvc - ok
18:20:18.0531 3092 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
18:20:18.0578 3092 WZCSVC - ok
18:20:18.0734 3092 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
18:20:19.0140 3092 xmlprov - ok
18:20:19.0156 3092 ================ Scan global ===============================
18:20:19.0281 3092 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
18:20:19.0828 3092 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:20:20.0281 3092 [ F3FA14A297BC687D0B51289D034033C9 ] C:\WINDOWS\system32\winsrv.dll
18:20:20.0312 3092 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
18:20:20.0312 3092 [Global] - ok
18:20:20.0312 3092 ================ Scan MBR ==================================
18:20:20.0328 3092 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
18:20:22.0015 3092 \Device\Harddisk0\DR0 - ok
18:20:22.0015 3092 ================ Scan VBR ==================================
18:20:22.0015 3092 [ 70B3863952C87B34782A9E92B6C07E6E ] \Device\Harddisk0\DR0\Partition1
18:20:22.0015 3092 \Device\Harddisk0\DR0\Partition1 - ok
18:20:22.0031 3092 [ 920B383A6F0B66BF8B0D4919646DFEA7 ] \Device\Harddisk0\DR0\Partition2
18:20:22.0046 3092 \Device\Harddisk0\DR0\Partition2 - ok
18:20:22.0062 3092 [ A7A1830FB4CB752AC732C43C9DA7220E ] \Device\Harddisk0\DR0\Partition3
18:20:22.0062 3092 \Device\Harddisk0\DR0\Partition3 - ok
18:20:22.0062 3092 ============================================================
18:20:22.0062 3092 Scan finished
18:20:22.0062 3092 ============================================================
18:20:22.0078 3080 Detected object count: 0
18:20:22.0078 3080 Actual detected object count: 0
- cernohous13
- VIP in memoriam

- Příspěvky: 8720
- Registrován: 09 Pro 2006 06:19
- Místo/Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu nejde google vyhledávač
- Zvol možnost Prohledat a poté Smazat a následně Zpráva - otevře se log, ten sem vlož
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím

-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Prosím o kontrolu logu nejde google vyhledávač
Děkuji už je vše v pořádku.


Přispějete na provoz fóra?