Dobrý den. Mám tady bratrancův počítač na zkontrolování, ale už jsem z toho jelen. Nějak na to nestačím. Problém je v těžce zpomaleném bootování,někdy při tom zamrzne a musím ho resnout a pomůže až poslední funkční konfigurace.V logu z RogueKiller je vidět nějakej problém v MBR. Jenže na to já už nemám.Jsem jen trochu lepší user. Jestli mohu,tak sem dám log z RogueKiller. Díky!
RogueKiller V8.7.2 [Oct 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/
Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Josef [Práva správce]
Mód : Kontrola -- Datum : 10/14/2013 10:44:55
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy: : 0 ¤¤¤
¤¤¤ ¤¤¤ Záznamy Registrů: : 4 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : OEXPRESS (C:\WINDOWS\OETRN.EXE [-]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-1644491937-1563985344-1606980848-1005\[...]\Run : OEXPRESS (C:\WINDOWS\OETRN.EXE [-]) -> NALEZENO
[HJ SECU][PUM] HKLM\[...]\Security Center : UpdatesDisableNotify (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
¤¤¤ naplánované úlohy : 0 ¤¤¤
¤¤¤ spuštění položky : 0 ¤¤¤
¤¤¤ Webové prohlížeče : 0 ¤¤¤
¤¤¤ Zvláštní soubory / Složky: ¤¤¤
¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Inline] EAT @explorer.exe (LdrLoadDll) : ntdll.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0A520)
[Inline] EAT @explorer.exe (LdrUnloadDll) : ntdll.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0A630)
[Inline] EAT @explorer.exe (ChangeServiceConfig2A) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0C370)
[Inline] EAT @explorer.exe (ChangeServiceConfig2W) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0C5C0)
[Inline] EAT @explorer.exe (ChangeServiceConfigA) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0BB20)
[Inline] EAT @explorer.exe (ChangeServiceConfigW) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0BF90)
[Inline] EAT @explorer.exe (CreateServiceA) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0ACD0)
[Inline] EAT @explorer.exe (CreateServiceW) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0B1A0)
[Inline] EAT @explorer.exe (DeleteService) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0B8B0)
[Inline] EAT @explorer.exe (SetServiceObjectSecurity) : ADVAPI32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D0E980)
[Inline] EAT @explorer.exe (SetWinEventHook) : USER32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D11400)
[Inline] EAT @explorer.exe (SetWindowsHookExA) : USER32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D116D0)
[Inline] EAT @explorer.exe (SetWindowsHookExW) : USER32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D118A0)
[Inline] EAT @explorer.exe (UnhookWinEvent) : USER32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D115A0)
[Inline] EAT @explorer.exe (UnhookWindowsHookEx) : USER32.dll -> HOOKED (C:\Program Files\Alwil Software\Avast5\snxhk.dll @ 0x64D11A70)
[Inline] EAT @explorer.exe (SHFileOperationW) : SHELL32.dll -> HOOKED (C:\Program Files\Unlocker\UnlockerHook.dll @ 0x10001102)
¤¤¤ Externí včelstvo: ¤¤¤
-> G:\windows\system32\config\SYSTEM | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - D:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> G:\windows\system32\config\SOFTWARE | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - D:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> G:\windows\system32\config\SECURITY | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - D:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> G:\windows\system32\config\SAM | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - D:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> G:\windows\system32\config\DEFAULT | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - D:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> I:\Documents and Settings\Default User\NTUSER.DAT | DRVINFO [Drv - I:] | SYSTEMINFO [Sys - NO_SYS] [Sys32 - NOT_FOUND] | USERINFO [Startup - FOUND]
-> I:\Documents and Settings\josef\NTUSER.DAT | DRVINFO [Drv - I:] | SYSTEMINFO [Sys - NO_SYS] [Sys32 - NOT_FOUND] | USERINFO [Startup - FOUND]
-> I:\Documents and Settings\LocalService\NTUSER.DAT | DRVINFO [Drv - I:] | SYSTEMINFO [Sys - NO_SYS] [Sys32 - NOT_FOUND] | USERINFO [Startup - FOUND]
-> I:\Documents and Settings\NetworkService\NTUSER.DAT | DRVINFO [Drv - I:] | SYSTEMINFO [Sys - NO_SYS] [Sys32 - NOT_FOUND] | USERINFO [Startup - FOUND]
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) (Standardní diskové jednotky) - ST380011 A SCSI Disk Device +++++
--- User ---
[MBR] 7b5593520c5d2b332df62c49c69a2ad1
[BSP] 5e92d63776156f30ea290eb5ccaaaaa4 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 10001 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 20482875 | Size: 66307 Mo
User = LL1 ... OK!
Error reading LL2 MBR!
+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ SCSI) (Standardní diskové jednotky) - ExcelSto r Technology J84 SCSI Disk Device +++++
--- User ---
[MBR] 42b2844d71cdae6097d6ca6a110de8df
[BSP] 264326f39ff5906a13b0c1254264983b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 39252 Mo
User = LL1 ... OK!
Error reading LL2 MBR!
+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ IDE) (Standardní diskové jednotky) - ST380215A +++++
--- User ---
[MBR] 1799eaee7f63391e8037107bce39b428
[BSP] 212486e2ba22b845ccd9c458db5bb404 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 39997 Mo
1 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 81915435 | Size: 35824 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončeno : << RKreport[0]_S_10142013_104454.txt >>
RKreport[0]_S_06232013_110640.txt;RKreport[0]_S_10122013_212743.txt
Problém s bootem win XP
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Problém s bootem win XP
Aha,omlouvám se,měl jsem asi dát log z RSIT. Tak tedy:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Josef at 2013-10-14 10:59:45
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 5 GB (13%) free of 40 GB
Total RAM: 2039 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:59:54, on 14.10.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SeaMonkey\seamonkey.exe
C:\Program Files\SeaMonkey\plugin-container.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\notepad.exe
F:\Temp\RSIT.exe
C:\Program Files\Trend Micro\Trend Micro\HiJackThis\Josef.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/web?l=dis&o=APN10147& ... YYYY^YY^CZ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\AcronisDiskDirector\oss_reinstall.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OEXPRESS] C:\WINDOWS\OETRN.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program Files\Xilisoft\Download YouTube Video\upod_link.HTM
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7609582125
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
--
End of file - 7530 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\goldenvideosShakeIcon.job
C:\WINDOWS\tasks\prismShakeIcon.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\WINDOWS\tasks\wavepadShakeIcon.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2010-03-02 491520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-22 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-08-30 201784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-22 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2010-03-02 491520]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-08-30 201784]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2013-08-30 4858968]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2000-01-01 20064872]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2000-01-01 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2000-01-01 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2000-01-01 137752]
"OSSelectorReinstall"=C:\Program Files\Common Files\Acronis\AcronisDiskDirector\oss_reinstall.exe [2005-11-09 1557560]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\qttask.exe [2013-05-01 421888]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"OEXPRESS"=C:\WINDOWS\OETRN.EXE [2010-03-02 26624]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW7]
C:\Program Files\The Weather Channel\The Weather Channel App\TWCApp.exe [2011-12-12 10448384]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\20DEB9~1.181\SSSCHE~1.EXE [2010-01-15 255536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2000-01-01 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67107839
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"I:\utorrent\utorrent.exe"="I:\utorrent\utorrent.exe:*:Enabled:µTorrent"
"F:\Program Files\River Past\Video Cleaner Pro\VideoCleaner.exe"="F:\Program Files\River Past\Video Cleaner Pro\VideoCleaner.exe:*:Enabled:River Past Video Cleaner Pro"
"I:\XXX\Opera10Portable\App\Opera10\opera.exe"="I:\XXX\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\Lectra\Kaledo Style V1R1c9\bin\KaledoStyle.exe"="C:\Program Files\Lectra\Kaledo Style V1R1c9\bin\KaledoStyle.exe:*:Disabled:Application Kaledo Style"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"I:\Opera10Portable\App\Opera10\opera.exe"="I:\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"
"C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe"="C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe:*:Enabled:C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe"
"C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe"="C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe:*:Enabled:C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe"
"D:\Opera10Portable\App\Opera10\opera.exe"="D:\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\atube\dtUser.exe"="C:\Program Files\atube\dtUser.exe:*:Enabled:aTube Toolbar DTX Broker"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\Program Files\VSO\VSO Downloader\3\VsoDownloader.exe"="C:\Program Files\VSO\VSO Downloader\3\VsoDownloader.exe:*:Enabled:VSO Downloader"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.SCLS"=SCLS.dll
"vidc.tscc"=tsccvid.dll
"vidc.DIVX"=DivX.dll
"vidc.XVID"=xvidvfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
======List of files/folders created in the last 1 month======
2013-10-14 10:42:47 ----A---- C:\WINDOWS\system32\TrueSight.sys
2013-10-12 21:24:32 ----A---- C:\TDSSKiller.2.8.16.0_12.10.2013_21.24.32_log.txt
2013-10-11 11:29:16 ----D---- C:\Program Files\Defraggler
2013-10-10 14:10:35 ----D---- C:\Program Files\Defraggler(2)
2013-09-30 15:59:28 ----A---- C:\WINDOWS\system32\GkSui18.EXE
2013-09-30 15:59:27 ----D---- C:\Program Files\RAM Defrag V2.55
2013-09-30 15:06:06 ----D---- C:\Program Files\Playlist Creator 3
2013-09-27 15:04:58 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2013-09-27 15:04:58 ----D---- C:\Documents and Settings\Josef\Data aplikací\DVDVideoSoft
2013-09-27 15:04:56 ----D---- C:\Program Files\DVDVideoSoft
2013-09-27 14:55:57 ----D---- C:\Program Files\Bigasoft
2013-09-23 11:20:01 ----D---- C:\Documents and Settings\Josef\Data aplikací\Vso
2013-09-20 17:21:22 ----D---- C:\Program Files\topsevenreviews
2013-09-20 17:21:22 ----D---- C:\Documents and Settings\Josef\Data aplikací\topsevenreviews
2013-09-20 17:18:13 ----D---- C:\Program Files\lucky leap
2013-09-20 16:32:00 ----A---- C:\WINDOWS\system32\drivers\eve.sys
2013-09-20 16:31:55 ----D---- C:\Program Files\WinPcap
2013-09-20 16:31:28 ----D---- C:\Program Files\VSO
2013-09-20 16:31:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\VSO
2013-09-20 16:07:42 ----D---- C:\Program Files\TapinRadio
2013-09-20 15:50:21 ----D---- C:\Documents and Settings\Josef\Data aplikací\streamWriter
2013-09-20 15:47:34 ----D---- C:\Program Files\streamWriter
======List of files/folders modified in the last 1 month======
2013-10-14 10:59:33 ----D---- C:\WINDOWS
2013-10-14 10:59:33 ----A---- C:\WINDOWS\MAILTRAN.INI
2013-10-14 10:44:53 ----D---- C:\WINDOWS\system32\drivers
2013-10-14 10:42:47 ----D---- C:\WINDOWS\system32
2013-10-14 10:42:18 ----D---- C:\WINDOWS\Temp
2013-10-14 10:41:38 ----D---- C:\WINDOWS\Prefetch
2013-10-14 10:30:32 ----D---- C:\WINDOWS\system32\CatRoot2
2013-10-14 10:27:11 ----D---- C:\WINDOWS\system32\inetsrv
2013-10-13 22:03:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-10-12 22:31:04 ----D---- C:\WINDOWS\system32\CatRoot
2013-10-11 20:02:50 ----D---- C:\Program Files\Cassette Converter Plus
2013-10-11 11:37:18 ----SD---- C:\WINDOWS\Tasks
2013-10-11 11:31:43 ----D---- C:\WINDOWS\system32\config
2013-10-11 11:30:57 ----D---- C:\WINDOWS\system32\wbem
2013-10-11 11:30:55 ----D---- C:\WINDOWS\Registration
2013-10-11 11:29:16 ----RD---- C:\Program Files
2013-10-10 16:21:07 ----HD---- C:\WINDOWS\inf
2013-10-09 11:57:54 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-08 11:36:20 ----A---- C:\WINDOWS\WDICT32.INI
2013-09-27 15:05:31 ----RSD---- C:\WINDOWS\assembly
2013-09-27 15:04:58 ----D---- C:\Program Files\Common Files
2013-09-20 17:16:58 ----D---- C:\WINDOWS\Resources
2013-09-20 10:04:14 ----D---- C:\Program Files\SeaMonkey
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-08-30 49376]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-08-30 177864]
R0 ElbyVCD;ElbyVCD; C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys [2002-11-28 22016]
R0 Pnp680r;Silicon Image SiI 0680 Medley Raid Controller; C:\WINDOWS\system32\DRIVERS\pnp680r.sys [2002-05-31 76976]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-02-06 97248]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2013-08-30 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-08-30 770344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-08-30 369584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-08-30 56080]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 Eve;EVE Protocol Driver; C:\WINDOWS\system32\DRIVERS\eve.sys [2013-03-28 33624]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2010-12-22 158736]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2010-12-22 42960]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-08-30 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-07-16 35088]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2002-11-28 15360]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2000-01-01 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2000-01-01 6435432]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-03 47360]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 109328]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys [2010-12-22 120208]
S2 esihdrv;esihdrv; \??\C:\DOCUME~1\Josef\LOCALS~1\Temp\esihdrv.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2000-01-01 1691480]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2011-06-06 68961]
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\F5.tmp []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2000-01-01 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2012-01-27 12984]
S3 TrueSight;TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VBoxUSB;VirtualBox USB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [2010-12-22 31888]
S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S3 WISTechVIDCAP;Plextor ConvertX M402U A/V Capture; C:\WINDOWS\system32\drivers\Xstream.sys [2004-11-26 122368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XLoader;PLEXTOR EZ-USB FX2 FIRMWARE LOADER (XLoader.sys); C:\WINDOWS\System32\Drivers\XLoader.sys [2004-11-26 13696]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2013-08-30 46808]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-06-22 182184]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-05-17 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 freenet;Freenet background service; C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe [2010-10-12 241664]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S4 Modaservice;Modaservice; C:\Program Files\Lectra\Modaservice\modaserv.exe [1999-07-05 162304]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
S4 PEVSystemStart;PEVSystemStart; C:\ComboFix\pev.cfxxe EXEC /i C:\ComboFix\HIDEC.cfxxe C:\ComboFix\SWREG.cfxxe ACL HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Beep /RESET /Q []
S4 Update lucky leap;Update lucky leap; C:\Program Files\lucky leap\updateluckyleap.exe [2013-10-03 65312]
S4 Util lucky leap;Util lucky leap; C:\Program Files\lucky leap\bin\utilluckyleap.exe [2013-10-03 65312]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Josef at 2013-10-14 10:59:45
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 5 GB (13%) free of 40 GB
Total RAM: 2039 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:59:54, on 14.10.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SeaMonkey\seamonkey.exe
C:\Program Files\SeaMonkey\plugin-container.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\notepad.exe
F:\Temp\RSIT.exe
C:\Program Files\Trend Micro\Trend Micro\HiJackThis\Josef.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/web?l=dis&o=APN10147& ... YYYY^YY^CZ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\AcronisDiskDirector\oss_reinstall.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OEXPRESS] C:\WINDOWS\OETRN.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program Files\Xilisoft\Download YouTube Video\upod_link.HTM
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7609582125
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
--
End of file - 7530 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\goldenvideosShakeIcon.job
C:\WINDOWS\tasks\prismShakeIcon.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\WINDOWS\tasks\wavepadShakeIcon.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2010-03-02 491520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-22 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-08-30 201784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-22 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2010-03-02 491520]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-08-30 201784]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2013-08-30 4858968]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2000-01-01 20064872]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2000-01-01 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2000-01-01 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2000-01-01 137752]
"OSSelectorReinstall"=C:\Program Files\Common Files\Acronis\AcronisDiskDirector\oss_reinstall.exe [2005-11-09 1557560]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\qttask.exe [2013-05-01 421888]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"OEXPRESS"=C:\WINDOWS\OETRN.EXE [2010-03-02 26624]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW7]
C:\Program Files\The Weather Channel\The Weather Channel App\TWCApp.exe [2011-12-12 10448384]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\20DEB9~1.181\SSSCHE~1.EXE [2010-01-15 255536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2000-01-01 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67107839
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"I:\utorrent\utorrent.exe"="I:\utorrent\utorrent.exe:*:Enabled:µTorrent"
"F:\Program Files\River Past\Video Cleaner Pro\VideoCleaner.exe"="F:\Program Files\River Past\Video Cleaner Pro\VideoCleaner.exe:*:Enabled:River Past Video Cleaner Pro"
"I:\XXX\Opera10Portable\App\Opera10\opera.exe"="I:\XXX\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\Lectra\Kaledo Style V1R1c9\bin\KaledoStyle.exe"="C:\Program Files\Lectra\Kaledo Style V1R1c9\bin\KaledoStyle.exe:*:Disabled:Application Kaledo Style"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"I:\Opera10Portable\App\Opera10\opera.exe"="I:\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"
"C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe"="C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe:*:Enabled:C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe"
"C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe"="C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe:*:Enabled:C:\Program Files\Mail.Ru\Sputnik\SputnikFlashPlayer.exe"
"D:\Opera10Portable\App\Opera10\opera.exe"="D:\Opera10Portable\App\Opera10\opera.exe:*:Enabled:Opera"
"C:\Program Files\atube\dtUser.exe"="C:\Program Files\atube\dtUser.exe:*:Enabled:aTube Toolbar DTX Broker"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\Program Files\VSO\VSO Downloader\3\VsoDownloader.exe"="C:\Program Files\VSO\VSO Downloader\3\VsoDownloader.exe:*:Enabled:VSO Downloader"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.SCLS"=SCLS.dll
"vidc.tscc"=tsccvid.dll
"vidc.DIVX"=DivX.dll
"vidc.XVID"=xvidvfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
======List of files/folders created in the last 1 month======
2013-10-14 10:42:47 ----A---- C:\WINDOWS\system32\TrueSight.sys
2013-10-12 21:24:32 ----A---- C:\TDSSKiller.2.8.16.0_12.10.2013_21.24.32_log.txt
2013-10-11 11:29:16 ----D---- C:\Program Files\Defraggler
2013-10-10 14:10:35 ----D---- C:\Program Files\Defraggler(2)
2013-09-30 15:59:28 ----A---- C:\WINDOWS\system32\GkSui18.EXE
2013-09-30 15:59:27 ----D---- C:\Program Files\RAM Defrag V2.55
2013-09-30 15:06:06 ----D---- C:\Program Files\Playlist Creator 3
2013-09-27 15:04:58 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2013-09-27 15:04:58 ----D---- C:\Documents and Settings\Josef\Data aplikací\DVDVideoSoft
2013-09-27 15:04:56 ----D---- C:\Program Files\DVDVideoSoft
2013-09-27 14:55:57 ----D---- C:\Program Files\Bigasoft
2013-09-23 11:20:01 ----D---- C:\Documents and Settings\Josef\Data aplikací\Vso
2013-09-20 17:21:22 ----D---- C:\Program Files\topsevenreviews
2013-09-20 17:21:22 ----D---- C:\Documents and Settings\Josef\Data aplikací\topsevenreviews
2013-09-20 17:18:13 ----D---- C:\Program Files\lucky leap
2013-09-20 16:32:00 ----A---- C:\WINDOWS\system32\drivers\eve.sys
2013-09-20 16:31:55 ----D---- C:\Program Files\WinPcap
2013-09-20 16:31:28 ----D---- C:\Program Files\VSO
2013-09-20 16:31:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\VSO
2013-09-20 16:07:42 ----D---- C:\Program Files\TapinRadio
2013-09-20 15:50:21 ----D---- C:\Documents and Settings\Josef\Data aplikací\streamWriter
2013-09-20 15:47:34 ----D---- C:\Program Files\streamWriter
======List of files/folders modified in the last 1 month======
2013-10-14 10:59:33 ----D---- C:\WINDOWS
2013-10-14 10:59:33 ----A---- C:\WINDOWS\MAILTRAN.INI
2013-10-14 10:44:53 ----D---- C:\WINDOWS\system32\drivers
2013-10-14 10:42:47 ----D---- C:\WINDOWS\system32
2013-10-14 10:42:18 ----D---- C:\WINDOWS\Temp
2013-10-14 10:41:38 ----D---- C:\WINDOWS\Prefetch
2013-10-14 10:30:32 ----D---- C:\WINDOWS\system32\CatRoot2
2013-10-14 10:27:11 ----D---- C:\WINDOWS\system32\inetsrv
2013-10-13 22:03:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-10-12 22:31:04 ----D---- C:\WINDOWS\system32\CatRoot
2013-10-11 20:02:50 ----D---- C:\Program Files\Cassette Converter Plus
2013-10-11 11:37:18 ----SD---- C:\WINDOWS\Tasks
2013-10-11 11:31:43 ----D---- C:\WINDOWS\system32\config
2013-10-11 11:30:57 ----D---- C:\WINDOWS\system32\wbem
2013-10-11 11:30:55 ----D---- C:\WINDOWS\Registration
2013-10-11 11:29:16 ----RD---- C:\Program Files
2013-10-10 16:21:07 ----HD---- C:\WINDOWS\inf
2013-10-09 11:57:54 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-08 11:36:20 ----A---- C:\WINDOWS\WDICT32.INI
2013-09-27 15:05:31 ----RSD---- C:\WINDOWS\assembly
2013-09-27 15:04:58 ----D---- C:\Program Files\Common Files
2013-09-20 17:16:58 ----D---- C:\WINDOWS\Resources
2013-09-20 10:04:14 ----D---- C:\Program Files\SeaMonkey
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-08-30 49376]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-08-30 177864]
R0 ElbyVCD;ElbyVCD; C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys [2002-11-28 22016]
R0 Pnp680r;Silicon Image SiI 0680 Medley Raid Controller; C:\WINDOWS\system32\DRIVERS\pnp680r.sys [2002-05-31 76976]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-02-06 97248]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2013-08-30 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-08-30 770344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-08-30 369584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-08-30 56080]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 Eve;EVE Protocol Driver; C:\WINDOWS\system32\DRIVERS\eve.sys [2013-03-28 33624]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2010-12-22 158736]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2010-12-22 42960]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-08-30 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-07-16 35088]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2002-11-28 15360]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2000-01-01 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2000-01-01 6435432]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-03 47360]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 109328]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys [2010-12-22 120208]
S2 esihdrv;esihdrv; \??\C:\DOCUME~1\Josef\LOCALS~1\Temp\esihdrv.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2000-01-01 1691480]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2011-06-06 68961]
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\F5.tmp []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2000-01-01 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2012-01-27 12984]
S3 TrueSight;TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VBoxUSB;VirtualBox USB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [2010-12-22 31888]
S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S3 WISTechVIDCAP;Plextor ConvertX M402U A/V Capture; C:\WINDOWS\system32\drivers\Xstream.sys [2004-11-26 122368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XLoader;PLEXTOR EZ-USB FX2 FIRMWARE LOADER (XLoader.sys); C:\WINDOWS\System32\Drivers\XLoader.sys [2004-11-26 13696]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2013-08-30 46808]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-06-22 182184]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-05-17 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 freenet;Freenet background service; C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe [2010-10-12 241664]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S4 Modaservice;Modaservice; C:\Program Files\Lectra\Modaservice\modaserv.exe [1999-07-05 162304]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
S4 PEVSystemStart;PEVSystemStart; C:\ComboFix\pev.cfxxe EXEC /i C:\ComboFix\HIDEC.cfxxe C:\ComboFix\SWREG.cfxxe ACL HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Beep /RESET /Q []
S4 Update lucky leap;Update lucky leap; C:\Program Files\lucky leap\updateluckyleap.exe [2013-10-03 65312]
S4 Util lucky leap;Util lucky leap; C:\Program Files\lucky leap\bin\utilluckyleap.exe [2013-10-03 65312]
-----------------EOF-----------------
Re: Problém s bootem win XP
Zdravim 
Stahnete aswMBR http://public.avast.com/%7Egmerek/aswMBR.exe a ulozte jej na plochu.
Stahnete aswMBR http://public.avast.com/%7Egmerek/aswMBR.exe a ulozte jej na plochu.
- Utilitu spustte a prikazte ji, at skenuje - klik na Scan
- Kliknutim na Save log ulozte log aswMBR na plochu
- Obsah logu aswMBR mi sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Problém s bootem win XP
Jé, díky, už na tom pracuju. Tak hotovo, dávám to sem. Už vidím některá svinstva 
, ale pokud se nespustí,.......stejně mu to budu muset vyhodit. Takže:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-10-14 15:51:43
-----------------------------
15:51:43.500 OS Version: Windows 5.1.2600 Service Pack 3
15:51:43.500 Number of processors: 1 586 0x1601
15:51:43.515 ComputerName: DOMA-D96CABFB66 UserName: Josef
15:51:48.781 Initialize success
15:51:57.468 AVAST engine defs: 13101400
15:51:59.406 Disk 0 \Device\Harddisk0\DR0 -> \Device\Scsi\Pnp680r1Port0Path1Target0Lun0
15:51:59.406 Disk 0 Vendor: ST380011 8.01 Size: 76319MB BusType: 1
15:51:59.406 Disk 1 \Device\Harddisk1\DR1 -> \Device\Scsi\Pnp680r1Port0Path1Target1Lun0
15:51:59.406 Disk 1 Vendor: ExcelSto PF1O Size: 39265MB BusType: 1
15:51:59.421 Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\Ide\IdeDeviceP0T0L0-4
15:51:59.421 Disk 2 Vendor: ST380215A 3.AAD Size: 76189MB BusType: 3
15:51:59.656 Disk 2 MBR read successfully
15:51:59.656 Disk 2 MBR scan
15:51:59.812 Disk 2 Windows XP default MBR code
15:51:59.828 Disk 2 Partition 1 80 (A) 07 HPFS/NTFS NTFS 39997 MB offset 63
15:51:59.828 Disk 2 Partition - 00 05 Extended 35824 MB offset 81915435
15:51:59.843 Disk 2 Partition 2 00 07 HPFS/NTFS NTFS 35824 MB offset 81915498
15:51:59.875 Disk 2 scanning sectors +155284290
15:52:00.593 Disk 2 scanning C:\WINDOWS\system32\drivers
15:52:16.687 Service scanning
15:53:07.265 Modules scanning
15:53:34.250 Disk 2 trace - called modules:
15:53:34.265 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
15:53:34.265 1 nt!IofCallDriver -> \Device\Harddisk2\DR2[0x8ae05ab8]
15:53:34.265 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\00000075[0x8ae40f18]
15:53:34.265 5 ACPI.sys[b9f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-4[0x8ae7cd98]
15:53:35.312 AVAST engine scan C:\WINDOWS
15:53:53.421 AVAST engine scan C:\WINDOWS\system32
15:58:30.421 AVAST engine scan C:\WINDOWS\system32\drivers
15:58:49.078 AVAST engine scan C:\Documents and Settings\Josef
16:19:20.765 File: C:\Documents and Settings\Josef\Plocha\AVprogramy\PORTABLE\Dvd-to-mpeg\DVDTo MPEG 2.0 key.exe **INFECTED** Win32:Evo-gen [Susp]
16:22:24.015 File: C:\Documents and Settings\Josef\Plocha\AVprogramy\Portable Total Video Converter 3.11\MediaBurner.exe **INFECTED** Win32:Evo-gen [Susp]
16:26:26.828 File: C:\Documents and Settings\Josef\Plocha\Nástroje\Taskbar Repair Tool Plus v1.1.1 cracked\TaskbarRepairToolPlus.v1.1.1-patch.exe **INFECTED** Win32:Malware-gen
16:33:34.234 File: C:\Documents and Settings\Josef\Plocha\Programy\e-book Programy\Mobipocket Creator Portable\Mobipocket Creator 4.2\40000017500002i\AcroRd32.exe **INFECTED** Win32:Evo-gen [Susp]
16:35:05.093 AVAST engine scan C:\Documents and Settings\All Users
16:42:32.421 Scan finished successfully
17:22:10.718 Disk 2 MBR has been saved successfully to "F:\Temp\MBR.dat"
17:22:10.718 The log file has been saved successfully to "F:\Temp\aswMBR.txt"
Díky za ochotu.
, ale pokud se nespustí,.......stejně mu to budu muset vyhodit. Takže:aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-10-14 15:51:43
-----------------------------
15:51:43.500 OS Version: Windows 5.1.2600 Service Pack 3
15:51:43.500 Number of processors: 1 586 0x1601
15:51:43.515 ComputerName: DOMA-D96CABFB66 UserName: Josef
15:51:48.781 Initialize success
15:51:57.468 AVAST engine defs: 13101400
15:51:59.406 Disk 0 \Device\Harddisk0\DR0 -> \Device\Scsi\Pnp680r1Port0Path1Target0Lun0
15:51:59.406 Disk 0 Vendor: ST380011 8.01 Size: 76319MB BusType: 1
15:51:59.406 Disk 1 \Device\Harddisk1\DR1 -> \Device\Scsi\Pnp680r1Port0Path1Target1Lun0
15:51:59.406 Disk 1 Vendor: ExcelSto PF1O Size: 39265MB BusType: 1
15:51:59.421 Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\Ide\IdeDeviceP0T0L0-4
15:51:59.421 Disk 2 Vendor: ST380215A 3.AAD Size: 76189MB BusType: 3
15:51:59.656 Disk 2 MBR read successfully
15:51:59.656 Disk 2 MBR scan
15:51:59.812 Disk 2 Windows XP default MBR code
15:51:59.828 Disk 2 Partition 1 80 (A) 07 HPFS/NTFS NTFS 39997 MB offset 63
15:51:59.828 Disk 2 Partition - 00 05 Extended 35824 MB offset 81915435
15:51:59.843 Disk 2 Partition 2 00 07 HPFS/NTFS NTFS 35824 MB offset 81915498
15:51:59.875 Disk 2 scanning sectors +155284290
15:52:00.593 Disk 2 scanning C:\WINDOWS\system32\drivers
15:52:16.687 Service scanning
15:53:07.265 Modules scanning
15:53:34.250 Disk 2 trace - called modules:
15:53:34.265 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
15:53:34.265 1 nt!IofCallDriver -> \Device\Harddisk2\DR2[0x8ae05ab8]
15:53:34.265 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\00000075[0x8ae40f18]
15:53:34.265 5 ACPI.sys[b9f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-4[0x8ae7cd98]
15:53:35.312 AVAST engine scan C:\WINDOWS
15:53:53.421 AVAST engine scan C:\WINDOWS\system32
15:58:30.421 AVAST engine scan C:\WINDOWS\system32\drivers
15:58:49.078 AVAST engine scan C:\Documents and Settings\Josef
16:19:20.765 File: C:\Documents and Settings\Josef\Plocha\AVprogramy\PORTABLE\Dvd-to-mpeg\DVDTo MPEG 2.0 key.exe **INFECTED** Win32:Evo-gen [Susp]
16:22:24.015 File: C:\Documents and Settings\Josef\Plocha\AVprogramy\Portable Total Video Converter 3.11\MediaBurner.exe **INFECTED** Win32:Evo-gen [Susp]
16:26:26.828 File: C:\Documents and Settings\Josef\Plocha\Nástroje\Taskbar Repair Tool Plus v1.1.1 cracked\TaskbarRepairToolPlus.v1.1.1-patch.exe **INFECTED** Win32:Malware-gen
16:33:34.234 File: C:\Documents and Settings\Josef\Plocha\Programy\e-book Programy\Mobipocket Creator Portable\Mobipocket Creator 4.2\40000017500002i\AcroRd32.exe **INFECTED** Win32:Evo-gen [Susp]
16:35:05.093 AVAST engine scan C:\Documents and Settings\All Users
16:42:32.421 Scan finished successfully
17:22:10.718 Disk 2 MBR has been saved successfully to "F:\Temp\MBR.dat"
17:22:10.718 The log file has been saved successfully to "F:\Temp\aswMBR.txt"
Díky za ochotu.
Re: Problém s bootem win XP
MBR sektor vypada OK, jeste to proverime Stahnete si TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- Kliknete na volbu Change parametrs
- V okne Additional Option zakliknete vsechny moznosti
- Kliknete na OK
- Utilite prikazte, at skenuje - klik na Start Scan
- Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip
- Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip
- Pokud mate vsude Skip, kliknete na Continue
- Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Problém s bootem win XP
Ano, už jdu na to, díky. Včera večer už jsem se k tomu nemohl dostat.Mějte se mnou ještě trochu trpělivosti.
Re: Problém s bootem win XP
Tak je to tady:
10:33:45.0656 3156 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
10:33:49.0984 3156 ============================================================
10:33:49.0984 3156 Current date / time: 2013/10/15 10:33:49.0984
10:33:49.0984 3156 SystemInfo:
10:33:49.0984 3156
10:33:49.0984 3156 OS Version: 5.1.2600 ServicePack: 3.0
10:33:49.0984 3156 Product type: Workstation
10:33:49.0984 3156 ComputerName: DOMA-D96CABFB66
10:33:49.0984 3156 UserName: Josef
10:33:49.0984 3156 Windows directory: C:\WINDOWS
10:33:49.0984 3156 System windows directory: C:\WINDOWS
10:33:49.0984 3156 Processor architecture: Intel x86
10:33:49.0984 3156 Number of processors: 1
10:33:49.0984 3156 Page size: 0x1000
10:33:49.0984 3156 Boot type: Normal boot
10:33:49.0984 3156 ============================================================
10:33:51.0687 3156 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
10:33:51.0687 3156 Drive \Device\Harddisk1\DR1 - Size: 0x9961AFE00 (38.35 Gb), SectorSize: 0x200, Cylinders: 0x138D, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
10:33:51.0703 3156 Drive \Device\Harddisk2\DR2 - Size: 0x1299D15400 (74.40 Gb), SectorSize: 0x200, Cylinders: 0x25F0, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:33:51.0703 3156 ============================================================
10:33:51.0703 3156 \Device\Harddisk0\DR0:
10:33:51.0703 3156 MBR partitions:
10:33:51.0703 3156 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1388AFC
10:33:51.0718 3156 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1388B7A, BlocksNum 0x4C2CC2D
10:33:51.0734 3156 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x5FB57E6, BlocksNum 0x3554E1A
10:33:51.0734 3156 \Device\Harddisk1\DR1:
10:33:51.0734 3156 MBR partitions:
10:33:51.0734 3156 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4CAA44D
10:33:51.0734 3156 \Device\Harddisk2\DR2:
10:33:51.0750 3156 MBR partitions:
10:33:51.0750 3156 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4E1EDEC
10:33:51.0765 3156 \Device\Harddisk2\DR2\Partition2: MBR, Type 0x7, StartLBA 0x4E1EE6A, BlocksNum 0x45F84D8
10:33:51.0765 3156 ============================================================
10:33:51.0812 3156 C: <-> \Device\Harddisk2\DR2\Partition1
10:33:51.0968 3156 G: <-> \Device\Harddisk0\DR0\Partition2
10:33:52.0140 3156 H: <-> \Device\Harddisk0\DR0\Partition3
10:33:52.0187 3156 F: <-> \Device\Harddisk0\DR0\Partition1
10:33:52.0281 3156 I: <-> \Device\Harddisk1\DR1\Partition1
10:33:52.0359 3156 D: <-> \Device\Harddisk2\DR2\Partition2
10:33:52.0359 3156 ============================================================
10:33:52.0359 3156 Initialize success
10:33:52.0359 3156 ============================================================
10:33:59.0062 1348 ============================================================
10:33:59.0062 1348 Scan started
10:33:59.0062 1348 Mode: Manual; SigCheck; TDLFS;
10:33:59.0062 1348 ============================================================
10:34:00.0406 1348 ================ Scan system memory ========================
10:34:00.0406 1348 System memory - ok
10:34:00.0406 1348 ================ Scan services =============================
10:34:00.0515 1348 Abiosdsk - ok
10:34:00.0531 1348 abp480n5 - ok
10:34:00.0578 1348 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:34:01.0125 1348 ACPI - ok
10:34:01.0156 1348 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
10:34:01.0296 1348 ACPIEC - ok
10:34:01.0359 1348 [ 4AE327C9C375D985FF2A2AAB92765218 ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
10:34:01.0375 1348 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
10:34:01.0375 1348 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
10:34:01.0437 1348 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:34:01.0468 1348 AdobeFlashPlayerUpdateSvc - ok
10:34:01.0484 1348 adpu160m - ok
10:34:01.0531 1348 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
10:34:01.0687 1348 aec - ok
10:34:01.0734 1348 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
10:34:01.0765 1348 AFD - ok
10:34:01.0781 1348 Aha154x - ok
10:34:01.0781 1348 aic78u2 - ok
10:34:01.0796 1348 aic78xx - ok
10:34:01.0828 1348 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
10:34:01.0968 1348 Alerter - ok
10:34:02.0000 1348 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
10:34:02.0078 1348 ALG - ok
10:34:02.0078 1348 AliIde - ok
10:34:02.0156 1348 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
10:34:02.0484 1348 Ambfilt - ok
10:34:02.0500 1348 amsint - ok
10:34:02.0531 1348 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
10:34:02.0625 1348 AppMgmt - ok
10:34:02.0640 1348 asc - ok
10:34:02.0640 1348 asc3350p - ok
10:34:02.0656 1348 asc3550 - ok
10:34:02.0781 1348 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:34:02.0812 1348 aspnet_state - ok
10:34:02.0843 1348 [ B9FE438B3CAD82B2014710349A2022F7 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
10:34:02.0859 1348 aswFsBlk - ok
10:34:02.0906 1348 [ AE5549DD21F6DE06406031EF1D51ACC3 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
10:34:02.0921 1348 aswMonFlt - ok
10:34:02.0968 1348 [ D084D0A7A66619FC29776CBBB9D5FA55 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
10:34:02.0984 1348 aswRdr - ok
10:34:03.0046 1348 [ FA72FA503F580C3C628DD8C7D7622E37 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
10:34:03.0078 1348 aswRvrt - ok
10:34:03.0125 1348 [ 4D53349D848C6BADB3D4ACBE98C27676 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
10:34:03.0234 1348 aswSnx - ok
10:34:03.0265 1348 [ 813024DFD54A41B3AFAE2B1E2796CB80 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
10:34:03.0328 1348 aswSP - ok
10:34:03.0343 1348 [ 5E18413310134130D7772F0668698CB7 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
10:34:03.0359 1348 aswTdi - ok
10:34:03.0406 1348 [ A5F637D61719D37A5B4868C385E363C0 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
10:34:03.0437 1348 aswVmm - ok
10:34:03.0468 1348 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:34:03.0625 1348 AsyncMac - ok
10:34:03.0656 1348 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
10:34:03.0796 1348 atapi - ok
10:34:03.0812 1348 Atdisk - ok
10:34:03.0843 1348 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:34:03.0984 1348 Atmarpc - ok
10:34:04.0015 1348 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
10:34:04.0171 1348 AudioSrv - ok
10:34:04.0203 1348 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
10:34:04.0343 1348 audstub - ok
10:34:04.0421 1348 [ 9330941C8F6DF417F6DBBE998DB6687E ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
10:34:04.0453 1348 avast! Antivirus - ok
10:34:04.0500 1348 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
10:34:04.0687 1348 Beep - ok
10:34:04.0734 1348 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
10:34:04.0953 1348 BITS - ok
10:34:05.0000 1348 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
10:34:05.0031 1348 Browser - ok
10:34:05.0078 1348 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
10:34:05.0234 1348 cbidf2k - ok
10:34:05.0265 1348 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:34:05.0421 1348 CCDECODE - ok
10:34:05.0421 1348 cd20xrnt - ok
10:34:05.0453 1348 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
10:34:05.0609 1348 Cdaudio - ok
10:34:05.0640 1348 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
10:34:05.0781 1348 Cdfs - ok
10:34:05.0828 1348 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:34:05.0968 1348 Cdrom - ok
10:34:05.0984 1348 Changer - ok
10:34:06.0015 1348 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
10:34:06.0171 1348 CiSvc - ok
10:34:06.0203 1348 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
10:34:06.0375 1348 ClipSrv - ok
10:34:06.0437 1348 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:34:06.0453 1348 clr_optimization_v2.0.50727_32 - ok
10:34:06.0500 1348 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:34:06.0531 1348 clr_optimization_v4.0.30319_32 - ok
10:34:06.0562 1348 [ 964D0F042ACA51D5644779EB9D9EE40F ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
10:34:06.0718 1348 CmdIde - ok
10:34:06.0718 1348 COMSysApp - ok
10:34:06.0734 1348 Cpqarray - ok
10:34:06.0781 1348 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
10:34:06.0937 1348 CryptSvc - ok
10:34:06.0984 1348 [ F054744F67576A01139885173392502B ] CrystalSysInfo C:\Program Files\MediaCoder\SysInfo.sys
10:34:07.0000 1348 CrystalSysInfo - ok
10:34:07.0015 1348 dac2w2k - ok
10:34:07.0015 1348 dac960nt - ok
10:34:07.0062 1348 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
10:34:07.0156 1348 DcomLaunch - ok
10:34:07.0187 1348 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
10:34:07.0343 1348 Dhcp - ok
10:34:07.0390 1348 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
10:34:07.0531 1348 Disk - ok
10:34:07.0546 1348 dmadmin - ok
10:34:07.0656 1348 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
10:34:07.0906 1348 dmboot - ok
10:34:07.0937 1348 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
10:34:08.0093 1348 dmio - ok
10:34:08.0125 1348 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
10:34:08.0281 1348 dmload - ok
10:34:08.0312 1348 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
10:34:08.0468 1348 dmserver - ok
10:34:08.0500 1348 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
10:34:08.0671 1348 DMusic - ok
10:34:08.0703 1348 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
10:34:08.0750 1348 Dnscache - ok
10:34:08.0765 1348 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
10:34:08.0921 1348 Dot3svc - ok
10:34:08.0937 1348 dpti2o - ok
10:34:08.0968 1348 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
10:34:09.0109 1348 drmkaud - ok
10:34:09.0140 1348 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
10:34:09.0312 1348 EapHost - ok
10:34:09.0343 1348 [ 59C9E1336A4508F059827D638E924C62 ] ElbyCDFL C:\WINDOWS\system32\Drivers\ElbyCDFL.sys
10:34:09.0359 1348 ElbyCDFL ( UnsignedFile.Multi.Generic ) - warning
10:34:09.0359 1348 ElbyCDFL - detected UnsignedFile.Multi.Generic (1)
10:34:09.0375 1348 [ 44996A2ADDD2DB7454F2CA40B67D8941 ] ElbyCDIO C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
10:34:09.0390 1348 ElbyCDIO - ok
10:34:09.0406 1348 [ C4143FC2F7D39A5A8B1CFE0BC4BD8A9E ] ElbyVCD C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys
10:34:09.0421 1348 ElbyVCD ( UnsignedFile.Multi.Generic ) - warning
10:34:09.0421 1348 ElbyVCD - detected UnsignedFile.Multi.Generic (1)
10:34:09.0468 1348 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
10:34:09.0625 1348 ERSvc - ok
10:34:09.0718 1348 esihdrv - ok
10:34:09.0765 1348 [ E2A355BAF83F7007883E9FADF708E9AC ] Eve C:\WINDOWS\system32\DRIVERS\eve.sys
10:34:09.0781 1348 Eve - ok
10:34:09.0828 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
10:34:09.0875 1348 Eventlog - ok
10:34:09.0937 1348 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
10:34:09.0984 1348 EventSystem - ok
10:34:10.0015 1348 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
10:34:10.0187 1348 Fastfat - ok
10:34:10.0250 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:34:10.0312 1348 FastUserSwitchingCompatibility - ok
10:34:10.0328 1348 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
10:34:10.0500 1348 Fdc - ok
10:34:10.0546 1348 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
10:34:10.0703 1348 Fips - ok
10:34:10.0750 1348 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
10:34:10.0890 1348 Flpydisk - ok
10:34:10.0953 1348 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:34:11.0093 1348 FltMgr - ok
10:34:11.0234 1348 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:34:11.0296 1348 FontCache3.0.0.0 - ok
10:34:11.0671 1348 [ F00C92F723D81F1405238432007D7DCC ] freenet C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe
10:34:11.0718 1348 freenet ( UnsignedFile.Multi.Generic ) - warning
10:34:11.0718 1348 freenet - detected UnsignedFile.Multi.Generic (1)
10:34:11.0812 1348 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:34:12.0015 1348 Fs_Rec - ok
10:34:12.0078 1348 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:34:12.0218 1348 Ftdisk - ok
10:34:12.0265 1348 [ 5C230948DD6652228F88CA7AE6CB276C ] gdrv C:\WINDOWS\gdrv.sys
10:34:12.0281 1348 gdrv - ok
10:34:12.0312 1348 [ 7FC03A5FE35957111CF6DB522B3BC675 ] gmer C:\WINDOWS\system32\DRIVERS\gmer.sys
10:34:12.0343 1348 gmer ( UnsignedFile.Multi.Generic ) - warning
10:34:12.0343 1348 gmer - detected UnsignedFile.Multi.Generic (1)
10:34:12.0390 1348 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:34:12.0546 1348 Gpc - ok
10:34:12.0671 1348 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:34:12.0828 1348 HDAudBus - ok
10:34:12.0953 1348 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:34:13.0109 1348 helpsvc - ok
10:34:13.0125 1348 HidServ - ok
10:34:13.0171 1348 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
10:34:13.0312 1348 hkmsvc - ok
10:34:13.0328 1348 hpn - ok
10:34:13.0437 1348 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
10:34:13.0468 1348 HTTP - ok
10:34:13.0515 1348 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
10:34:13.0671 1348 HTTPFilter - ok
10:34:13.0687 1348 i2omgmt - ok
10:34:13.0703 1348 i2omp - ok
10:34:13.0718 1348 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:34:13.0875 1348 i8042prt - ok
10:34:14.0703 1348 [ 48846B31BE5A4FA662CCFDE7A1BA86B9 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
10:34:15.0640 1348 ialm - ok
10:34:15.0687 1348 [ B1A28FA1AFDE10B95FF9354B15701D70 ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
10:34:15.0703 1348 ICQ Service - ok
10:34:15.0765 1348 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:34:15.0921 1348 idsvc - ok
10:34:16.0000 1348 [ 07AD42303519A955560B5A19FE20B68F ] IISADMIN C:\WINDOWS\system32\inetsrv\inetinfo.exe
10:34:16.0078 1348 IISADMIN - ok
10:34:16.0109 1348 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
10:34:16.0265 1348 Imapi - ok
10:34:16.0296 1348 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
10:34:16.0453 1348 ImapiService - ok
10:34:16.0468 1348 ini910u - ok
10:34:16.0687 1348 [ 85AB23F3E4BA6696FAE8BEB9D434EDD6 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:34:17.0828 1348 IntcAzAudAddService - ok
10:34:17.0843 1348 IntelIde - ok
10:34:17.0875 1348 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:34:18.0031 1348 intelppm - ok
10:34:18.0046 1348 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:34:18.0203 1348 Ip6Fw - ok
10:34:18.0250 1348 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:34:18.0406 1348 IpFilterDriver - ok
10:34:18.0453 1348 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:34:18.0656 1348 IpInIp - ok
10:34:18.0687 1348 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:34:18.0828 1348 IpNat - ok
10:34:18.0875 1348 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:34:19.0031 1348 IPSec - ok
10:34:19.0078 1348 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
10:34:19.0156 1348 IRENUM - ok
10:34:19.0203 1348 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:34:19.0328 1348 isapnp - ok
10:34:19.0437 1348 [ 9ECF00E19736054E019C532AED8228FC ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
10:34:19.0468 1348 JavaQuickStarterService - ok
10:34:19.0500 1348 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:34:19.0671 1348 Kbdclass - ok
10:34:19.0765 1348 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
10:34:19.0921 1348 kmixer - ok
10:34:19.0953 1348 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
10:34:20.0000 1348 KSecDD - ok
10:34:20.0031 1348 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
10:34:20.0062 1348 LanmanServer - ok
10:34:20.0109 1348 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:34:20.0156 1348 lanmanworkstation - ok
10:34:20.0171 1348 lbrtfdc - ok
10:34:20.0250 1348 [ 2238B91AC1A12CC6CC4C4FED41258B2A ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
10:34:20.0265 1348 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
10:34:20.0265 1348 LightScribeService - detected UnsignedFile.Multi.Generic (1)
10:34:20.0296 1348 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
10:34:20.0453 1348 LmHosts - ok
10:34:20.0484 1348 [ 805C6F337968C7271F0421D0A386C8EE ] mbamchameleon C:\WINDOWS\system32\drivers\mbamchameleon.sys
10:34:20.0515 1348 mbamchameleon - ok
10:34:20.0546 1348 [ B7CA8CC3F978201856B6AB82F40953C3 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
10:34:20.0562 1348 MBAMProtector ( UnsignedFile.Multi.Generic ) - warning
10:34:20.0562 1348 MBAMProtector - detected UnsignedFile.Multi.Generic (1)
10:34:20.0921 1348 [ DE199F3AA9C541A349AF95A5C72A71AF ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
10:34:21.0031 1348 MBAMService - ok
10:34:21.0046 1348 [ 5C47D60938E77822A2C8D25102C63CE2 ] MBAMSwissArmy C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
10:34:21.0078 1348 MBAMSwissArmy - ok
10:34:21.0093 1348 MEMSWEEP2 - ok
10:34:21.0109 1348 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
10:34:21.0265 1348 Messenger - ok
10:34:21.0312 1348 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
10:34:21.0437 1348 mnmdd - ok
10:34:21.0484 1348 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
10:34:21.0640 1348 mnmsrvc - ok
10:34:21.0718 1348 [ CFA4949E8BCDB83A430634EEB1044152 ] Modaservice C:\Program Files\Lectra\Modaservice\modaserv.exe
10:34:21.0734 1348 Modaservice ( UnsignedFile.Multi.Generic ) - warning
10:34:21.0734 1348 Modaservice - detected UnsignedFile.Multi.Generic (1)
10:34:21.0781 1348 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
10:34:21.0937 1348 Modem - ok
10:34:22.0000 1348 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
10:34:22.0250 1348 Monfilt - ok
10:34:22.0281 1348 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:34:22.0437 1348 Mouclass - ok
10:34:22.0484 1348 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
10:34:22.0640 1348 MountMgr - ok
10:34:22.0640 1348 mraid35x - ok
10:34:22.0687 1348 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:34:22.0828 1348 MRxDAV - ok
10:34:22.0875 1348 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:34:22.0953 1348 MRxSmb - ok
10:34:23.0000 1348 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
10:34:23.0140 1348 MSDTC - ok
10:34:23.0187 1348 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
10:34:23.0328 1348 Msfs - ok
10:34:23.0328 1348 MSIServer - ok
10:34:23.0375 1348 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:34:23.0531 1348 MSKSSRV - ok
10:34:23.0562 1348 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:34:23.0796 1348 MSPCLOCK - ok
10:34:23.0828 1348 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
10:34:23.0968 1348 MSPQM - ok
10:34:24.0000 1348 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:34:24.0156 1348 mssmbios - ok
10:34:24.0187 1348 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
10:34:24.0390 1348 MSTEE - ok
10:34:24.0437 1348 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
10:34:24.0515 1348 Mup - ok
10:34:24.0562 1348 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:34:24.0765 1348 NABTSFEC - ok
10:34:24.0796 1348 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
10:34:24.0968 1348 napagent - ok
10:34:25.0015 1348 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
10:34:25.0218 1348 NDIS - ok
10:34:25.0250 1348 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:34:25.0437 1348 NdisIP - ok
10:34:25.0468 1348 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:34:25.0515 1348 NdisTapi - ok
10:34:25.0546 1348 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:34:25.0718 1348 Ndisuio - ok
10:34:25.0750 1348 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:34:25.0906 1348 NdisWan - ok
10:34:25.0937 1348 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
10:34:25.0968 1348 NDProxy - ok
10:34:26.0093 1348 [ 7D2633295EB6FF2B938185874884059D ] Nero BackItUp Scheduler 4.0 C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
10:34:26.0250 1348 Nero BackItUp Scheduler 4.0 - ok
10:34:26.0281 1348 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
10:34:26.0484 1348 NetBIOS - ok
10:34:26.0515 1348 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
10:34:26.0671 1348 NetBT - ok
10:34:26.0703 1348 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
10:34:26.0875 1348 NetDDE - ok
10:34:26.0890 1348 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
10:34:27.0046 1348 NetDDEdsdm - ok
10:34:27.0093 1348 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
10:34:27.0265 1348 Netlogon - ok
10:34:27.0312 1348 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
10:34:27.0468 1348 Netman - ok
10:34:27.0515 1348 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:34:27.0531 1348 NetTcpPortSharing - ok
10:34:27.0578 1348 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
10:34:27.0625 1348 Nla - ok
10:34:27.0671 1348 [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] npf C:\WINDOWS\system32\drivers\npf.sys
10:34:27.0687 1348 npf - ok
10:34:27.0718 1348 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
10:34:27.0890 1348 Npfs - ok
10:34:27.0953 1348 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
10:34:28.0156 1348 Ntfs - ok
10:34:28.0171 1348 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
10:34:28.0328 1348 NtLmSsp - ok
10:34:28.0375 1348 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
10:34:28.0578 1348 NtmsSvc - ok
10:34:28.0656 1348 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
10:34:28.0796 1348 Null - ok
10:34:28.0828 1348 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:34:28.0984 1348 NwlnkFlt - ok
10:34:29.0000 1348 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:34:29.0140 1348 NwlnkFwd - ok
10:34:29.0234 1348 [ 141EAD6452349D25EAFEFBF4D96C2A7B ] O&O Defrag C:\Program Files\OO Software\Defrag\oodag.exe
10:34:29.0484 1348 O&O Defrag - ok
10:34:29.0531 1348 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:34:29.0546 1348 ose - ok
10:34:29.0578 1348 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
10:34:29.0796 1348 Parport - ok
10:34:29.0812 1348 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
10:34:29.0968 1348 PartMgr - ok
10:34:30.0000 1348 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
10:34:30.0140 1348 ParVdm - ok
10:34:30.0187 1348 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
10:34:30.0328 1348 PCI - ok
10:34:30.0328 1348 PCIDump - ok
10:34:30.0375 1348 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
10:34:30.0515 1348 PCIIde - ok
10:34:30.0546 1348 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
10:34:30.0718 1348 Pcmcia - ok
10:34:30.0750 1348 [ 5B6C11DE7E839C05248CED8825470FEF ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
10:34:30.0750 1348 pcouffin ( UnsignedFile.Multi.Generic ) - warning
10:34:30.0750 1348 pcouffin - detected UnsignedFile.Multi.Generic (1)
10:34:30.0765 1348 PDCOMP - ok
10:34:30.0765 1348 PDFRAME - ok
10:34:30.0781 1348 PDRELI - ok
10:34:30.0796 1348 PDRFRAME - ok
10:34:30.0796 1348 perc2 - ok
10:34:30.0812 1348 perc2hib - ok
10:34:30.0828 1348 PEVSystemStart - ok
10:34:30.0859 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
10:34:30.0890 1348 PlugPlay - ok
10:34:30.0937 1348 [ A1D7A9214B71EBBB6F31CB84AAC15525 ] Pnp680r C:\WINDOWS\system32\DRIVERS\pnp680r.sys
10:34:30.0968 1348 Pnp680r - ok
10:34:30.0984 1348 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
10:34:31.0125 1348 PolicyAgent - ok
10:34:31.0171 1348 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:34:31.0328 1348 PptpMiniport - ok
10:34:31.0343 1348 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:34:31.0484 1348 ProtectedStorage - ok
10:34:31.0515 1348 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
10:34:31.0671 1348 PSched - ok
10:34:31.0718 1348 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:34:31.0859 1348 Ptilink - ok
10:34:31.0875 1348 ql1080 - ok
10:34:31.0875 1348 Ql10wnt - ok
10:34:31.0890 1348 ql12160 - ok
10:34:31.0906 1348 ql1240 - ok
10:34:31.0906 1348 ql1280 - ok
10:34:31.0953 1348 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:34:32.0093 1348 RasAcd - ok
10:34:32.0125 1348 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
10:34:32.0281 1348 RasAuto - ok
10:34:32.0296 1348 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:34:32.0437 1348 Rasl2tp - ok
10:34:32.0484 1348 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
10:34:32.0640 1348 RasMan - ok
10:34:32.0671 1348 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:34:32.0812 1348 RasPppoe - ok
10:34:32.0859 1348 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
10:34:33.0000 1348 Raspti - ok
10:34:33.0031 1348 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:34:33.0187 1348 Rdbss - ok
10:34:33.0203 1348 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:34:33.0359 1348 RDPCDD - ok
10:34:33.0406 1348 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:34:33.0578 1348 rdpdr - ok
10:34:33.0656 1348 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
10:34:33.0687 1348 RDPWD - ok
10:34:33.0718 1348 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
10:34:33.0890 1348 RDSessMgr - ok
10:34:33.0921 1348 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
10:34:34.0062 1348 redbook - ok
10:34:34.0093 1348 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
10:34:34.0250 1348 RemoteAccess - ok
10:34:34.0281 1348 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
10:34:34.0421 1348 RemoteRegistry - ok
10:34:34.0468 1348 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
10:34:34.0625 1348 RpcLocator - ok
10:34:34.0656 1348 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
10:34:34.0734 1348 RpcSs - ok
10:34:34.0781 1348 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
10:34:34.0906 1348 RSVP - ok
10:34:34.0953 1348 [ 89619EF503F949FAE09252A8B883EE11 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
10:34:34.0984 1348 RTLE8023xp - ok
10:34:35.0000 1348 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
10:34:35.0140 1348 SamSs - ok
10:34:35.0218 1348 [ A3281AEC37E0720A2BC28034C2DF2A56 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
10:34:35.0234 1348 SASDIFSV - ok
10:34:35.0265 1348 [ 61DB0D0756A99506207FD724E3692B25 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
10:34:35.0281 1348 SASKUTIL - ok
10:34:35.0328 1348 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
10:34:35.0468 1348 SCardSvr - ok
10:34:35.0515 1348 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
10:34:35.0687 1348 Schedule - ok
10:34:35.0718 1348 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:34:35.0796 1348 Secdrv - ok
10:34:35.0828 1348 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
10:34:36.0000 1348 seclogon - ok
10:34:36.0031 1348 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
10:34:36.0171 1348 SENS - ok
10:34:36.0203 1348 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
10:34:36.0343 1348 serenum - ok
10:34:36.0375 1348 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
10:34:36.0531 1348 Serial - ok
10:34:36.0593 1348 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
10:34:36.0765 1348 Sfloppy - ok
10:34:36.0796 1348 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
10:34:37.0000 1348 SharedAccess - ok
10:34:37.0015 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:34:37.0046 1348 ShellHWDetection - ok
10:34:37.0062 1348 Simbad - ok
10:34:37.0093 1348 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:34:37.0250 1348 SLIP - ok
10:34:37.0296 1348 [ 7CDB603A351B65C1A3347840625AD74D ] snapman C:\WINDOWS\system32\DRIVERS\snapman.sys
10:34:37.0312 1348 snapman ( UnsignedFile.Multi.Generic ) - warning
10:34:37.0312 1348 snapman - detected UnsignedFile.Multi.Generic (1)
10:34:37.0312 1348 Sparrow - ok
10:34:37.0359 1348 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
10:34:37.0500 1348 splitter - ok
10:34:37.0531 1348 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
10:34:37.0562 1348 Spooler - ok
10:34:37.0640 1348 [ 8831252BCF05FCFB5ABD116A22E552D8 ] sp_rsdrv2 C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
10:34:37.0656 1348 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - warning
10:34:37.0656 1348 sp_rsdrv2 - detected UnsignedFile.Multi.Generic (1)
10:34:37.0703 1348 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
10:34:37.0781 1348 sr - ok
10:34:37.0796 1348 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
10:34:37.0890 1348 srservice - ok
10:34:37.0937 1348 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
10:34:38.0015 1348 Srv - ok
10:34:38.0046 1348 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
10:34:38.0125 1348 SSDPSRV - ok
10:34:38.0156 1348 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
10:34:38.0390 1348 stisvc - ok
10:34:38.0421 1348 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:34:38.0562 1348 streamip - ok
10:34:38.0640 1348 [ E5F568F412919244CE1B428662B96A18 ] SWDUMon C:\WINDOWS\system32\DRIVERS\SWDUMon.sys
10:34:38.0656 1348 SWDUMon - ok
10:34:38.0703 1348 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
10:34:38.0843 1348 swenum - ok
10:34:38.0859 1348 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
10:34:39.0015 1348 swmidi - ok
10:34:39.0015 1348 SwPrv - ok
10:34:39.0031 1348 symc810 - ok
10:34:39.0046 1348 symc8xx - ok
10:34:39.0062 1348 sym_hi - ok
10:34:39.0062 1348 sym_u3 - ok
10:34:39.0109 1348 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
10:34:39.0250 1348 sysaudio - ok
10:34:39.0296 1348 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
10:34:39.0453 1348 SysmonLog - ok
10:34:39.0500 1348 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
10:34:39.0671 1348 TapiSrv - ok
10:34:39.0718 1348 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:34:39.0796 1348 Tcpip - ok
10:34:39.0828 1348 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
10:34:39.0968 1348 TDPIPE - ok
10:34:40.0000 1348 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
10:34:40.0140 1348 TDTCP - ok
10:34:40.0156 1348 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
10:34:40.0312 1348 TermDD - ok
10:34:40.0328 1348 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
10:34:40.0500 1348 TermService - ok
10:34:40.0515 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
10:34:40.0546 1348 Themes - ok
10:34:40.0593 1348 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
10:34:40.0703 1348 TlntSvr - ok
10:34:40.0703 1348 TosIde - ok
10:34:40.0750 1348 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
10:34:40.0890 1348 TrkWks - ok
10:34:40.0937 1348 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
10:34:41.0078 1348 Udfs - ok
10:34:41.0093 1348 ultra - ok
10:34:41.0140 1348 [ 4847639D852763EE39415C929470F672 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
10:34:41.0156 1348 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - warning
10:34:41.0156 1348 UnlockerDriver5 - detected UnsignedFile.Multi.Generic (1)
10:34:41.0203 1348 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
10:34:41.0390 1348 Update - ok
10:34:41.0453 1348 [ 2CC475DA331298148ACF59BC22E923F1 ] Update lucky leap C:\Program Files\lucky leap\updateluckyleap.exe
10:34:41.0484 1348 Update lucky leap - ok
10:34:41.0515 1348 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
10:34:41.0625 1348 upnphost - ok
10:34:41.0656 1348 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
10:34:41.0796 1348 UPS - ok
10:34:41.0843 1348 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:34:41.0968 1348 usbehci - ok
10:34:42.0015 1348 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:34:42.0171 1348 usbhub - ok
10:34:42.0203 1348 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:34:42.0343 1348 usbprint - ok
10:34:42.0390 1348 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:34:42.0531 1348 USBSTOR - ok
10:34:42.0578 1348 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:34:42.0734 1348 usbuhci - ok
10:34:42.0765 1348 [ 2CC475DA331298148ACF59BC22E923F1 ] Util lucky leap C:\Program Files\lucky leap\bin\utilluckyleap.exe
10:34:42.0781 1348 Util lucky leap - ok
10:34:42.0828 1348 [ 8B0A5F9BEF05F89CD03644EB7AF3C408 ] VBoxDrv C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys
10:34:42.0843 1348 VBoxDrv - ok
10:34:42.0906 1348 [ 065F15E84F2CC4EF60594283E9D72617 ] VBoxNetAdp C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
10:34:42.0921 1348 VBoxNetAdp - ok
10:34:42.0953 1348 [ C6643B766EEC08785E8A3B3AA52B7A9B ] VBoxNetFlt C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
10:34:42.0968 1348 VBoxNetFlt - ok
10:34:43.0015 1348 [ 670A4469D91F26D14CECF6F9A206B95C ] VBoxUSB C:\WINDOWS\system32\Drivers\VBoxUSB.sys
10:34:43.0031 1348 VBoxUSB - ok
10:34:43.0062 1348 [ E81D2740CD33450A0E11138CD8F0ED63 ] VBoxUSBMon C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys
10:34:43.0078 1348 VBoxUSBMon - ok
10:34:43.0125 1348 [ 94D73B62E458FB56C9CE60AA96D914F9 ] VClone C:\WINDOWS\system32\DRIVERS\VClone.sys
10:34:43.0140 1348 VClone ( UnsignedFile.Multi.Generic ) - warning
10:34:43.0140 1348 VClone - detected UnsignedFile.Multi.Generic (1)
10:34:43.0171 1348 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
10:34:43.0312 1348 VgaSave - ok
10:34:43.0312 1348 ViaIde - ok
10:34:43.0343 1348 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
10:34:43.0484 1348 VolSnap - ok
10:34:43.0515 1348 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
10:34:43.0625 1348 VSS - ok
10:34:43.0656 1348 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
10:34:43.0812 1348 W32Time - ok
10:34:43.0843 1348 [ 07AD42303519A955560B5A19FE20B68F ] W3SVC C:\WINDOWS\system32\inetsrv\inetinfo.exe
10:34:43.0906 1348 W3SVC - ok
10:34:43.0921 1348 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:34:44.0078 1348 Wanarp - ok
10:34:44.0093 1348 WDICA - ok
10:34:44.0109 1348 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
10:34:44.0250 1348 wdmaud - ok
10:34:44.0296 1348 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
10:34:44.0437 1348 WebClient - ok
10:34:44.0515 1348 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
10:34:44.0671 1348 winmgmt - ok
10:34:44.0718 1348 [ 0232776C73CD31C47E5139B52C6000B9 ] WISTechVIDCAP C:\WINDOWS\system32\drivers\Xstream.sys
10:34:44.0765 1348 WISTechVIDCAP - ok
10:34:44.0796 1348 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
10:34:44.0828 1348 WmdmPmSN - ok
10:34:44.0937 1348 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
10:34:45.0265 1348 Wmi - ok
10:34:45.0328 1348 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:34:45.0468 1348 WmiApSrv - ok
10:34:45.0515 1348 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
10:34:45.0546 1348 WpdUsb - ok
10:34:45.0968 1348 [ B800EEC15851597405784126C407188C ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
10:34:46.0156 1348 WPFFontCache_v0400 - ok
10:34:46.0218 1348 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
10:34:46.0359 1348 wscsvc - ok
10:34:46.0375 1348 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:34:46.0515 1348 WSTCODEC - ok
10:34:46.0562 1348 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
10:34:46.0718 1348 wuauserv - ok
10:34:46.0765 1348 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:34:46.0796 1348 WudfPf - ok
10:34:46.0828 1348 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:34:46.0859 1348 WudfRd - ok
10:34:46.0890 1348 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
10:34:46.0937 1348 WudfSvc - ok
10:34:47.0125 1348 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
10:34:47.0406 1348 WZCSVC - ok
10:34:47.0453 1348 [ 8A73CC9A6292CF4B7B54B622ED9BD437 ] XLoader C:\WINDOWS\system32\Drivers\XLoader.sys
10:34:47.0468 1348 XLoader - ok
10:34:47.0531 1348 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
10:34:47.0703 1348 xmlprov - ok
10:34:47.0718 1348 ================ Scan global ===============================
10:34:47.0750 1348 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
10:34:47.0875 1348 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
10:34:47.0937 1348 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
10:34:47.0968 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
10:34:47.0984 1348 [Global] - ok
10:34:47.0984 1348 ================ Scan MBR ==================================
10:34:48.0000 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
10:34:48.0453 1348 \Device\Harddisk0\DR0 - ok
10:34:48.0500 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk1\DR1
10:34:49.0031 1348 \Device\Harddisk1\DR1 - ok
10:34:49.0046 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk2\DR2
10:34:49.0328 1348 \Device\Harddisk2\DR2 - ok
10:34:49.0328 1348 ================ Scan VBR ==================================
10:34:49.0359 1348 [ 3484910838329F1967054B567F795CAB ] \Device\Harddisk0\DR0\Partition1
10:34:49.0359 1348 \Device\Harddisk0\DR0\Partition1 - ok
10:34:49.0375 1348 [ 86BB0B3962171BCBB322684384B8CF63 ] \Device\Harddisk0\DR0\Partition2
10:34:49.0390 1348 \Device\Harddisk0\DR0\Partition2 - ok
10:34:49.0406 1348 [ 6A93B32605205541F204D15BA3BCDD61 ] \Device\Harddisk0\DR0\Partition3
10:34:49.0406 1348 \Device\Harddisk0\DR0\Partition3 - ok
10:34:49.0453 1348 [ D1E0F9F353EF9438A86AA9EF8C07E4D4 ] \Device\Harddisk1\DR1\Partition1
10:34:49.0453 1348 \Device\Harddisk1\DR1\Partition1 - ok
10:34:49.0484 1348 [ C4AD18068B1F65D15B30EC1D20269BA8 ] \Device\Harddisk2\DR2\Partition1
10:34:49.0484 1348 \Device\Harddisk2\DR2\Partition1 - ok
10:34:49.0515 1348 [ 556365BE9D33133927DE426D300368D5 ] \Device\Harddisk2\DR2\Partition2
10:34:49.0515 1348 \Device\Harddisk2\DR2\Partition2 - ok
10:34:49.0515 1348 ============================================================
10:34:49.0515 1348 Scan finished
10:34:49.0515 1348 ============================================================
10:34:49.0625 3268 Detected object count: 13
10:34:49.0625 3268 Actual detected object count: 13
10:35:00.0250 3268 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 ElbyCDFL ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 ElbyCDFL ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 ElbyVCD ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 ElbyVCD ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 freenet ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 freenet ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 gmer ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 gmer ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 MBAMProtector ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 MBAMProtector ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 Modaservice ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 Modaservice ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 pcouffin ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 pcouffin ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 snapman ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 snapman ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 VClone ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 VClone ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:08.0750 3328 Deinitialize success
10:33:45.0656 3156 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
10:33:49.0984 3156 ============================================================
10:33:49.0984 3156 Current date / time: 2013/10/15 10:33:49.0984
10:33:49.0984 3156 SystemInfo:
10:33:49.0984 3156
10:33:49.0984 3156 OS Version: 5.1.2600 ServicePack: 3.0
10:33:49.0984 3156 Product type: Workstation
10:33:49.0984 3156 ComputerName: DOMA-D96CABFB66
10:33:49.0984 3156 UserName: Josef
10:33:49.0984 3156 Windows directory: C:\WINDOWS
10:33:49.0984 3156 System windows directory: C:\WINDOWS
10:33:49.0984 3156 Processor architecture: Intel x86
10:33:49.0984 3156 Number of processors: 1
10:33:49.0984 3156 Page size: 0x1000
10:33:49.0984 3156 Boot type: Normal boot
10:33:49.0984 3156 ============================================================
10:33:51.0687 3156 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
10:33:51.0687 3156 Drive \Device\Harddisk1\DR1 - Size: 0x9961AFE00 (38.35 Gb), SectorSize: 0x200, Cylinders: 0x138D, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
10:33:51.0703 3156 Drive \Device\Harddisk2\DR2 - Size: 0x1299D15400 (74.40 Gb), SectorSize: 0x200, Cylinders: 0x25F0, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:33:51.0703 3156 ============================================================
10:33:51.0703 3156 \Device\Harddisk0\DR0:
10:33:51.0703 3156 MBR partitions:
10:33:51.0703 3156 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1388AFC
10:33:51.0718 3156 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1388B7A, BlocksNum 0x4C2CC2D
10:33:51.0734 3156 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x5FB57E6, BlocksNum 0x3554E1A
10:33:51.0734 3156 \Device\Harddisk1\DR1:
10:33:51.0734 3156 MBR partitions:
10:33:51.0734 3156 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4CAA44D
10:33:51.0734 3156 \Device\Harddisk2\DR2:
10:33:51.0750 3156 MBR partitions:
10:33:51.0750 3156 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4E1EDEC
10:33:51.0765 3156 \Device\Harddisk2\DR2\Partition2: MBR, Type 0x7, StartLBA 0x4E1EE6A, BlocksNum 0x45F84D8
10:33:51.0765 3156 ============================================================
10:33:51.0812 3156 C: <-> \Device\Harddisk2\DR2\Partition1
10:33:51.0968 3156 G: <-> \Device\Harddisk0\DR0\Partition2
10:33:52.0140 3156 H: <-> \Device\Harddisk0\DR0\Partition3
10:33:52.0187 3156 F: <-> \Device\Harddisk0\DR0\Partition1
10:33:52.0281 3156 I: <-> \Device\Harddisk1\DR1\Partition1
10:33:52.0359 3156 D: <-> \Device\Harddisk2\DR2\Partition2
10:33:52.0359 3156 ============================================================
10:33:52.0359 3156 Initialize success
10:33:52.0359 3156 ============================================================
10:33:59.0062 1348 ============================================================
10:33:59.0062 1348 Scan started
10:33:59.0062 1348 Mode: Manual; SigCheck; TDLFS;
10:33:59.0062 1348 ============================================================
10:34:00.0406 1348 ================ Scan system memory ========================
10:34:00.0406 1348 System memory - ok
10:34:00.0406 1348 ================ Scan services =============================
10:34:00.0515 1348 Abiosdsk - ok
10:34:00.0531 1348 abp480n5 - ok
10:34:00.0578 1348 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:34:01.0125 1348 ACPI - ok
10:34:01.0156 1348 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
10:34:01.0296 1348 ACPIEC - ok
10:34:01.0359 1348 [ 4AE327C9C375D985FF2A2AAB92765218 ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
10:34:01.0375 1348 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
10:34:01.0375 1348 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
10:34:01.0437 1348 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:34:01.0468 1348 AdobeFlashPlayerUpdateSvc - ok
10:34:01.0484 1348 adpu160m - ok
10:34:01.0531 1348 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
10:34:01.0687 1348 aec - ok
10:34:01.0734 1348 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
10:34:01.0765 1348 AFD - ok
10:34:01.0781 1348 Aha154x - ok
10:34:01.0781 1348 aic78u2 - ok
10:34:01.0796 1348 aic78xx - ok
10:34:01.0828 1348 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
10:34:01.0968 1348 Alerter - ok
10:34:02.0000 1348 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
10:34:02.0078 1348 ALG - ok
10:34:02.0078 1348 AliIde - ok
10:34:02.0156 1348 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
10:34:02.0484 1348 Ambfilt - ok
10:34:02.0500 1348 amsint - ok
10:34:02.0531 1348 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
10:34:02.0625 1348 AppMgmt - ok
10:34:02.0640 1348 asc - ok
10:34:02.0640 1348 asc3350p - ok
10:34:02.0656 1348 asc3550 - ok
10:34:02.0781 1348 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:34:02.0812 1348 aspnet_state - ok
10:34:02.0843 1348 [ B9FE438B3CAD82B2014710349A2022F7 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
10:34:02.0859 1348 aswFsBlk - ok
10:34:02.0906 1348 [ AE5549DD21F6DE06406031EF1D51ACC3 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
10:34:02.0921 1348 aswMonFlt - ok
10:34:02.0968 1348 [ D084D0A7A66619FC29776CBBB9D5FA55 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
10:34:02.0984 1348 aswRdr - ok
10:34:03.0046 1348 [ FA72FA503F580C3C628DD8C7D7622E37 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
10:34:03.0078 1348 aswRvrt - ok
10:34:03.0125 1348 [ 4D53349D848C6BADB3D4ACBE98C27676 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
10:34:03.0234 1348 aswSnx - ok
10:34:03.0265 1348 [ 813024DFD54A41B3AFAE2B1E2796CB80 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
10:34:03.0328 1348 aswSP - ok
10:34:03.0343 1348 [ 5E18413310134130D7772F0668698CB7 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
10:34:03.0359 1348 aswTdi - ok
10:34:03.0406 1348 [ A5F637D61719D37A5B4868C385E363C0 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
10:34:03.0437 1348 aswVmm - ok
10:34:03.0468 1348 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:34:03.0625 1348 AsyncMac - ok
10:34:03.0656 1348 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
10:34:03.0796 1348 atapi - ok
10:34:03.0812 1348 Atdisk - ok
10:34:03.0843 1348 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:34:03.0984 1348 Atmarpc - ok
10:34:04.0015 1348 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
10:34:04.0171 1348 AudioSrv - ok
10:34:04.0203 1348 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
10:34:04.0343 1348 audstub - ok
10:34:04.0421 1348 [ 9330941C8F6DF417F6DBBE998DB6687E ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
10:34:04.0453 1348 avast! Antivirus - ok
10:34:04.0500 1348 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
10:34:04.0687 1348 Beep - ok
10:34:04.0734 1348 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
10:34:04.0953 1348 BITS - ok
10:34:05.0000 1348 [ 89E739BBA5F636297EA5B5F811189E06 ] Browser C:\WINDOWS\System32\browser.dll
10:34:05.0031 1348 Browser - ok
10:34:05.0078 1348 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
10:34:05.0234 1348 cbidf2k - ok
10:34:05.0265 1348 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:34:05.0421 1348 CCDECODE - ok
10:34:05.0421 1348 cd20xrnt - ok
10:34:05.0453 1348 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
10:34:05.0609 1348 Cdaudio - ok
10:34:05.0640 1348 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
10:34:05.0781 1348 Cdfs - ok
10:34:05.0828 1348 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:34:05.0968 1348 Cdrom - ok
10:34:05.0984 1348 Changer - ok
10:34:06.0015 1348 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
10:34:06.0171 1348 CiSvc - ok
10:34:06.0203 1348 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
10:34:06.0375 1348 ClipSrv - ok
10:34:06.0437 1348 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:34:06.0453 1348 clr_optimization_v2.0.50727_32 - ok
10:34:06.0500 1348 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:34:06.0531 1348 clr_optimization_v4.0.30319_32 - ok
10:34:06.0562 1348 [ 964D0F042ACA51D5644779EB9D9EE40F ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
10:34:06.0718 1348 CmdIde - ok
10:34:06.0718 1348 COMSysApp - ok
10:34:06.0734 1348 Cpqarray - ok
10:34:06.0781 1348 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
10:34:06.0937 1348 CryptSvc - ok
10:34:06.0984 1348 [ F054744F67576A01139885173392502B ] CrystalSysInfo C:\Program Files\MediaCoder\SysInfo.sys
10:34:07.0000 1348 CrystalSysInfo - ok
10:34:07.0015 1348 dac2w2k - ok
10:34:07.0015 1348 dac960nt - ok
10:34:07.0062 1348 [ BE27674D1CBC3214AEC84B4336A38BBF ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
10:34:07.0156 1348 DcomLaunch - ok
10:34:07.0187 1348 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
10:34:07.0343 1348 Dhcp - ok
10:34:07.0390 1348 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
10:34:07.0531 1348 Disk - ok
10:34:07.0546 1348 dmadmin - ok
10:34:07.0656 1348 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
10:34:07.0906 1348 dmboot - ok
10:34:07.0937 1348 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
10:34:08.0093 1348 dmio - ok
10:34:08.0125 1348 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
10:34:08.0281 1348 dmload - ok
10:34:08.0312 1348 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
10:34:08.0468 1348 dmserver - ok
10:34:08.0500 1348 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
10:34:08.0671 1348 DMusic - ok
10:34:08.0703 1348 [ DFAA406BF19F4EE806A6F8D4342137F7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
10:34:08.0750 1348 Dnscache - ok
10:34:08.0765 1348 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
10:34:08.0921 1348 Dot3svc - ok
10:34:08.0937 1348 dpti2o - ok
10:34:08.0968 1348 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
10:34:09.0109 1348 drmkaud - ok
10:34:09.0140 1348 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
10:34:09.0312 1348 EapHost - ok
10:34:09.0343 1348 [ 59C9E1336A4508F059827D638E924C62 ] ElbyCDFL C:\WINDOWS\system32\Drivers\ElbyCDFL.sys
10:34:09.0359 1348 ElbyCDFL ( UnsignedFile.Multi.Generic ) - warning
10:34:09.0359 1348 ElbyCDFL - detected UnsignedFile.Multi.Generic (1)
10:34:09.0375 1348 [ 44996A2ADDD2DB7454F2CA40B67D8941 ] ElbyCDIO C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
10:34:09.0390 1348 ElbyCDIO - ok
10:34:09.0406 1348 [ C4143FC2F7D39A5A8B1CFE0BC4BD8A9E ] ElbyVCD C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys
10:34:09.0421 1348 ElbyVCD ( UnsignedFile.Multi.Generic ) - warning
10:34:09.0421 1348 ElbyVCD - detected UnsignedFile.Multi.Generic (1)
10:34:09.0468 1348 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
10:34:09.0625 1348 ERSvc - ok
10:34:09.0718 1348 esihdrv - ok
10:34:09.0765 1348 [ E2A355BAF83F7007883E9FADF708E9AC ] Eve C:\WINDOWS\system32\DRIVERS\eve.sys
10:34:09.0781 1348 Eve - ok
10:34:09.0828 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] Eventlog C:\WINDOWS\system32\services.exe
10:34:09.0875 1348 Eventlog - ok
10:34:09.0937 1348 [ A371F11EF07653591C8DE26AFB13CE7F ] EventSystem C:\WINDOWS\system32\es.dll
10:34:09.0984 1348 EventSystem - ok
10:34:10.0015 1348 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
10:34:10.0187 1348 Fastfat - ok
10:34:10.0250 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:34:10.0312 1348 FastUserSwitchingCompatibility - ok
10:34:10.0328 1348 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
10:34:10.0500 1348 Fdc - ok
10:34:10.0546 1348 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
10:34:10.0703 1348 Fips - ok
10:34:10.0750 1348 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
10:34:10.0890 1348 Flpydisk - ok
10:34:10.0953 1348 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:34:11.0093 1348 FltMgr - ok
10:34:11.0234 1348 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:34:11.0296 1348 FontCache3.0.0.0 - ok
10:34:11.0671 1348 [ F00C92F723D81F1405238432007D7DCC ] freenet C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe
10:34:11.0718 1348 freenet ( UnsignedFile.Multi.Generic ) - warning
10:34:11.0718 1348 freenet - detected UnsignedFile.Multi.Generic (1)
10:34:11.0812 1348 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:34:12.0015 1348 Fs_Rec - ok
10:34:12.0078 1348 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:34:12.0218 1348 Ftdisk - ok
10:34:12.0265 1348 [ 5C230948DD6652228F88CA7AE6CB276C ] gdrv C:\WINDOWS\gdrv.sys
10:34:12.0281 1348 gdrv - ok
10:34:12.0312 1348 [ 7FC03A5FE35957111CF6DB522B3BC675 ] gmer C:\WINDOWS\system32\DRIVERS\gmer.sys
10:34:12.0343 1348 gmer ( UnsignedFile.Multi.Generic ) - warning
10:34:12.0343 1348 gmer - detected UnsignedFile.Multi.Generic (1)
10:34:12.0390 1348 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:34:12.0546 1348 Gpc - ok
10:34:12.0671 1348 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:34:12.0828 1348 HDAudBus - ok
10:34:12.0953 1348 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:34:13.0109 1348 helpsvc - ok
10:34:13.0125 1348 HidServ - ok
10:34:13.0171 1348 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
10:34:13.0312 1348 hkmsvc - ok
10:34:13.0328 1348 hpn - ok
10:34:13.0437 1348 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
10:34:13.0468 1348 HTTP - ok
10:34:13.0515 1348 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
10:34:13.0671 1348 HTTPFilter - ok
10:34:13.0687 1348 i2omgmt - ok
10:34:13.0703 1348 i2omp - ok
10:34:13.0718 1348 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:34:13.0875 1348 i8042prt - ok
10:34:14.0703 1348 [ 48846B31BE5A4FA662CCFDE7A1BA86B9 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
10:34:15.0640 1348 ialm - ok
10:34:15.0687 1348 [ B1A28FA1AFDE10B95FF9354B15701D70 ] ICQ Service C:\Program Files\ICQ6Toolbar\ICQ Service.exe
10:34:15.0703 1348 ICQ Service - ok
10:34:15.0765 1348 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:34:15.0921 1348 idsvc - ok
10:34:16.0000 1348 [ 07AD42303519A955560B5A19FE20B68F ] IISADMIN C:\WINDOWS\system32\inetsrv\inetinfo.exe
10:34:16.0078 1348 IISADMIN - ok
10:34:16.0109 1348 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
10:34:16.0265 1348 Imapi - ok
10:34:16.0296 1348 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
10:34:16.0453 1348 ImapiService - ok
10:34:16.0468 1348 ini910u - ok
10:34:16.0687 1348 [ 85AB23F3E4BA6696FAE8BEB9D434EDD6 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:34:17.0828 1348 IntcAzAudAddService - ok
10:34:17.0843 1348 IntelIde - ok
10:34:17.0875 1348 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:34:18.0031 1348 intelppm - ok
10:34:18.0046 1348 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:34:18.0203 1348 Ip6Fw - ok
10:34:18.0250 1348 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:34:18.0406 1348 IpFilterDriver - ok
10:34:18.0453 1348 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:34:18.0656 1348 IpInIp - ok
10:34:18.0687 1348 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:34:18.0828 1348 IpNat - ok
10:34:18.0875 1348 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:34:19.0031 1348 IPSec - ok
10:34:19.0078 1348 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
10:34:19.0156 1348 IRENUM - ok
10:34:19.0203 1348 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:34:19.0328 1348 isapnp - ok
10:34:19.0437 1348 [ 9ECF00E19736054E019C532AED8228FC ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
10:34:19.0468 1348 JavaQuickStarterService - ok
10:34:19.0500 1348 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:34:19.0671 1348 Kbdclass - ok
10:34:19.0765 1348 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
10:34:19.0921 1348 kmixer - ok
10:34:19.0953 1348 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
10:34:20.0000 1348 KSecDD - ok
10:34:20.0031 1348 [ 3428E8F86F8ADD36B42FB23542C7B3E4 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
10:34:20.0062 1348 LanmanServer - ok
10:34:20.0109 1348 [ 936C1D110232D23B621CB0196E4F80F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:34:20.0156 1348 lanmanworkstation - ok
10:34:20.0171 1348 lbrtfdc - ok
10:34:20.0250 1348 [ 2238B91AC1A12CC6CC4C4FED41258B2A ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
10:34:20.0265 1348 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
10:34:20.0265 1348 LightScribeService - detected UnsignedFile.Multi.Generic (1)
10:34:20.0296 1348 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
10:34:20.0453 1348 LmHosts - ok
10:34:20.0484 1348 [ 805C6F337968C7271F0421D0A386C8EE ] mbamchameleon C:\WINDOWS\system32\drivers\mbamchameleon.sys
10:34:20.0515 1348 mbamchameleon - ok
10:34:20.0546 1348 [ B7CA8CC3F978201856B6AB82F40953C3 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
10:34:20.0562 1348 MBAMProtector ( UnsignedFile.Multi.Generic ) - warning
10:34:20.0562 1348 MBAMProtector - detected UnsignedFile.Multi.Generic (1)
10:34:20.0921 1348 [ DE199F3AA9C541A349AF95A5C72A71AF ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
10:34:21.0031 1348 MBAMService - ok
10:34:21.0046 1348 [ 5C47D60938E77822A2C8D25102C63CE2 ] MBAMSwissArmy C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
10:34:21.0078 1348 MBAMSwissArmy - ok
10:34:21.0093 1348 MEMSWEEP2 - ok
10:34:21.0109 1348 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
10:34:21.0265 1348 Messenger - ok
10:34:21.0312 1348 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
10:34:21.0437 1348 mnmdd - ok
10:34:21.0484 1348 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
10:34:21.0640 1348 mnmsrvc - ok
10:34:21.0718 1348 [ CFA4949E8BCDB83A430634EEB1044152 ] Modaservice C:\Program Files\Lectra\Modaservice\modaserv.exe
10:34:21.0734 1348 Modaservice ( UnsignedFile.Multi.Generic ) - warning
10:34:21.0734 1348 Modaservice - detected UnsignedFile.Multi.Generic (1)
10:34:21.0781 1348 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
10:34:21.0937 1348 Modem - ok
10:34:22.0000 1348 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
10:34:22.0250 1348 Monfilt - ok
10:34:22.0281 1348 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:34:22.0437 1348 Mouclass - ok
10:34:22.0484 1348 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
10:34:22.0640 1348 MountMgr - ok
10:34:22.0640 1348 mraid35x - ok
10:34:22.0687 1348 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:34:22.0828 1348 MRxDAV - ok
10:34:22.0875 1348 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:34:22.0953 1348 MRxSmb - ok
10:34:23.0000 1348 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
10:34:23.0140 1348 MSDTC - ok
10:34:23.0187 1348 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
10:34:23.0328 1348 Msfs - ok
10:34:23.0328 1348 MSIServer - ok
10:34:23.0375 1348 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:34:23.0531 1348 MSKSSRV - ok
10:34:23.0562 1348 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:34:23.0796 1348 MSPCLOCK - ok
10:34:23.0828 1348 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
10:34:23.0968 1348 MSPQM - ok
10:34:24.0000 1348 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:34:24.0156 1348 mssmbios - ok
10:34:24.0187 1348 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
10:34:24.0390 1348 MSTEE - ok
10:34:24.0437 1348 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
10:34:24.0515 1348 Mup - ok
10:34:24.0562 1348 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:34:24.0765 1348 NABTSFEC - ok
10:34:24.0796 1348 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
10:34:24.0968 1348 napagent - ok
10:34:25.0015 1348 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
10:34:25.0218 1348 NDIS - ok
10:34:25.0250 1348 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:34:25.0437 1348 NdisIP - ok
10:34:25.0468 1348 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:34:25.0515 1348 NdisTapi - ok
10:34:25.0546 1348 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:34:25.0718 1348 Ndisuio - ok
10:34:25.0750 1348 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:34:25.0906 1348 NdisWan - ok
10:34:25.0937 1348 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
10:34:25.0968 1348 NDProxy - ok
10:34:26.0093 1348 [ 7D2633295EB6FF2B938185874884059D ] Nero BackItUp Scheduler 4.0 C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
10:34:26.0250 1348 Nero BackItUp Scheduler 4.0 - ok
10:34:26.0281 1348 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
10:34:26.0484 1348 NetBIOS - ok
10:34:26.0515 1348 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
10:34:26.0671 1348 NetBT - ok
10:34:26.0703 1348 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
10:34:26.0875 1348 NetDDE - ok
10:34:26.0890 1348 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
10:34:27.0046 1348 NetDDEdsdm - ok
10:34:27.0093 1348 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
10:34:27.0265 1348 Netlogon - ok
10:34:27.0312 1348 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
10:34:27.0468 1348 Netman - ok
10:34:27.0515 1348 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:34:27.0531 1348 NetTcpPortSharing - ok
10:34:27.0578 1348 [ 39EE7C3BFBC64BA87CC8CF67386E814C ] Nla C:\WINDOWS\System32\mswsock.dll
10:34:27.0625 1348 Nla - ok
10:34:27.0671 1348 [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] npf C:\WINDOWS\system32\drivers\npf.sys
10:34:27.0687 1348 npf - ok
10:34:27.0718 1348 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
10:34:27.0890 1348 Npfs - ok
10:34:27.0953 1348 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
10:34:28.0156 1348 Ntfs - ok
10:34:28.0171 1348 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
10:34:28.0328 1348 NtLmSsp - ok
10:34:28.0375 1348 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
10:34:28.0578 1348 NtmsSvc - ok
10:34:28.0656 1348 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
10:34:28.0796 1348 Null - ok
10:34:28.0828 1348 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:34:28.0984 1348 NwlnkFlt - ok
10:34:29.0000 1348 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:34:29.0140 1348 NwlnkFwd - ok
10:34:29.0234 1348 [ 141EAD6452349D25EAFEFBF4D96C2A7B ] O&O Defrag C:\Program Files\OO Software\Defrag\oodag.exe
10:34:29.0484 1348 O&O Defrag - ok
10:34:29.0531 1348 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:34:29.0546 1348 ose - ok
10:34:29.0578 1348 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
10:34:29.0796 1348 Parport - ok
10:34:29.0812 1348 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
10:34:29.0968 1348 PartMgr - ok
10:34:30.0000 1348 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
10:34:30.0140 1348 ParVdm - ok
10:34:30.0187 1348 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
10:34:30.0328 1348 PCI - ok
10:34:30.0328 1348 PCIDump - ok
10:34:30.0375 1348 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
10:34:30.0515 1348 PCIIde - ok
10:34:30.0546 1348 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
10:34:30.0718 1348 Pcmcia - ok
10:34:30.0750 1348 [ 5B6C11DE7E839C05248CED8825470FEF ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
10:34:30.0750 1348 pcouffin ( UnsignedFile.Multi.Generic ) - warning
10:34:30.0750 1348 pcouffin - detected UnsignedFile.Multi.Generic (1)
10:34:30.0765 1348 PDCOMP - ok
10:34:30.0765 1348 PDFRAME - ok
10:34:30.0781 1348 PDRELI - ok
10:34:30.0796 1348 PDRFRAME - ok
10:34:30.0796 1348 perc2 - ok
10:34:30.0812 1348 perc2hib - ok
10:34:30.0828 1348 PEVSystemStart - ok
10:34:30.0859 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] PlugPlay C:\WINDOWS\system32\services.exe
10:34:30.0890 1348 PlugPlay - ok
10:34:30.0937 1348 [ A1D7A9214B71EBBB6F31CB84AAC15525 ] Pnp680r C:\WINDOWS\system32\DRIVERS\pnp680r.sys
10:34:30.0968 1348 Pnp680r - ok
10:34:30.0984 1348 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
10:34:31.0125 1348 PolicyAgent - ok
10:34:31.0171 1348 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:34:31.0328 1348 PptpMiniport - ok
10:34:31.0343 1348 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:34:31.0484 1348 ProtectedStorage - ok
10:34:31.0515 1348 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
10:34:31.0671 1348 PSched - ok
10:34:31.0718 1348 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:34:31.0859 1348 Ptilink - ok
10:34:31.0875 1348 ql1080 - ok
10:34:31.0875 1348 Ql10wnt - ok
10:34:31.0890 1348 ql12160 - ok
10:34:31.0906 1348 ql1240 - ok
10:34:31.0906 1348 ql1280 - ok
10:34:31.0953 1348 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:34:32.0093 1348 RasAcd - ok
10:34:32.0125 1348 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
10:34:32.0281 1348 RasAuto - ok
10:34:32.0296 1348 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:34:32.0437 1348 Rasl2tp - ok
10:34:32.0484 1348 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
10:34:32.0640 1348 RasMan - ok
10:34:32.0671 1348 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:34:32.0812 1348 RasPppoe - ok
10:34:32.0859 1348 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
10:34:33.0000 1348 Raspti - ok
10:34:33.0031 1348 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:34:33.0187 1348 Rdbss - ok
10:34:33.0203 1348 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:34:33.0359 1348 RDPCDD - ok
10:34:33.0406 1348 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:34:33.0578 1348 rdpdr - ok
10:34:33.0656 1348 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
10:34:33.0687 1348 RDPWD - ok
10:34:33.0718 1348 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
10:34:33.0890 1348 RDSessMgr - ok
10:34:33.0921 1348 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
10:34:34.0062 1348 redbook - ok
10:34:34.0093 1348 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
10:34:34.0250 1348 RemoteAccess - ok
10:34:34.0281 1348 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
10:34:34.0421 1348 RemoteRegistry - ok
10:34:34.0468 1348 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
10:34:34.0625 1348 RpcLocator - ok
10:34:34.0656 1348 [ BE27674D1CBC3214AEC84B4336A38BBF ] RpcSs C:\WINDOWS\system32\rpcss.dll
10:34:34.0734 1348 RpcSs - ok
10:34:34.0781 1348 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
10:34:34.0906 1348 RSVP - ok
10:34:34.0953 1348 [ 89619EF503F949FAE09252A8B883EE11 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
10:34:34.0984 1348 RTLE8023xp - ok
10:34:35.0000 1348 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
10:34:35.0140 1348 SamSs - ok
10:34:35.0218 1348 [ A3281AEC37E0720A2BC28034C2DF2A56 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
10:34:35.0234 1348 SASDIFSV - ok
10:34:35.0265 1348 [ 61DB0D0756A99506207FD724E3692B25 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
10:34:35.0281 1348 SASKUTIL - ok
10:34:35.0328 1348 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
10:34:35.0468 1348 SCardSvr - ok
10:34:35.0515 1348 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
10:34:35.0687 1348 Schedule - ok
10:34:35.0718 1348 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:34:35.0796 1348 Secdrv - ok
10:34:35.0828 1348 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
10:34:36.0000 1348 seclogon - ok
10:34:36.0031 1348 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
10:34:36.0171 1348 SENS - ok
10:34:36.0203 1348 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
10:34:36.0343 1348 serenum - ok
10:34:36.0375 1348 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
10:34:36.0531 1348 Serial - ok
10:34:36.0593 1348 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
10:34:36.0765 1348 Sfloppy - ok
10:34:36.0796 1348 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
10:34:37.0000 1348 SharedAccess - ok
10:34:37.0015 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:34:37.0046 1348 ShellHWDetection - ok
10:34:37.0062 1348 Simbad - ok
10:34:37.0093 1348 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:34:37.0250 1348 SLIP - ok
10:34:37.0296 1348 [ 7CDB603A351B65C1A3347840625AD74D ] snapman C:\WINDOWS\system32\DRIVERS\snapman.sys
10:34:37.0312 1348 snapman ( UnsignedFile.Multi.Generic ) - warning
10:34:37.0312 1348 snapman - detected UnsignedFile.Multi.Generic (1)
10:34:37.0312 1348 Sparrow - ok
10:34:37.0359 1348 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
10:34:37.0500 1348 splitter - ok
10:34:37.0531 1348 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
10:34:37.0562 1348 Spooler - ok
10:34:37.0640 1348 [ 8831252BCF05FCFB5ABD116A22E552D8 ] sp_rsdrv2 C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
10:34:37.0656 1348 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - warning
10:34:37.0656 1348 sp_rsdrv2 - detected UnsignedFile.Multi.Generic (1)
10:34:37.0703 1348 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
10:34:37.0781 1348 sr - ok
10:34:37.0796 1348 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
10:34:37.0890 1348 srservice - ok
10:34:37.0937 1348 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
10:34:38.0015 1348 Srv - ok
10:34:38.0046 1348 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
10:34:38.0125 1348 SSDPSRV - ok
10:34:38.0156 1348 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
10:34:38.0390 1348 stisvc - ok
10:34:38.0421 1348 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:34:38.0562 1348 streamip - ok
10:34:38.0640 1348 [ E5F568F412919244CE1B428662B96A18 ] SWDUMon C:\WINDOWS\system32\DRIVERS\SWDUMon.sys
10:34:38.0656 1348 SWDUMon - ok
10:34:38.0703 1348 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
10:34:38.0843 1348 swenum - ok
10:34:38.0859 1348 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
10:34:39.0015 1348 swmidi - ok
10:34:39.0015 1348 SwPrv - ok
10:34:39.0031 1348 symc810 - ok
10:34:39.0046 1348 symc8xx - ok
10:34:39.0062 1348 sym_hi - ok
10:34:39.0062 1348 sym_u3 - ok
10:34:39.0109 1348 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
10:34:39.0250 1348 sysaudio - ok
10:34:39.0296 1348 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
10:34:39.0453 1348 SysmonLog - ok
10:34:39.0500 1348 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
10:34:39.0671 1348 TapiSrv - ok
10:34:39.0718 1348 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:34:39.0796 1348 Tcpip - ok
10:34:39.0828 1348 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
10:34:39.0968 1348 TDPIPE - ok
10:34:40.0000 1348 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
10:34:40.0140 1348 TDTCP - ok
10:34:40.0156 1348 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
10:34:40.0312 1348 TermDD - ok
10:34:40.0328 1348 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
10:34:40.0500 1348 TermService - ok
10:34:40.0515 1348 [ EE9A2B9EA968A792A053C9D1A86BF870 ] Themes C:\WINDOWS\System32\shsvcs.dll
10:34:40.0546 1348 Themes - ok
10:34:40.0593 1348 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
10:34:40.0703 1348 TlntSvr - ok
10:34:40.0703 1348 TosIde - ok
10:34:40.0750 1348 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
10:34:40.0890 1348 TrkWks - ok
10:34:40.0937 1348 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
10:34:41.0078 1348 Udfs - ok
10:34:41.0093 1348 ultra - ok
10:34:41.0140 1348 [ 4847639D852763EE39415C929470F672 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
10:34:41.0156 1348 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - warning
10:34:41.0156 1348 UnlockerDriver5 - detected UnsignedFile.Multi.Generic (1)
10:34:41.0203 1348 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
10:34:41.0390 1348 Update - ok
10:34:41.0453 1348 [ 2CC475DA331298148ACF59BC22E923F1 ] Update lucky leap C:\Program Files\lucky leap\updateluckyleap.exe
10:34:41.0484 1348 Update lucky leap - ok
10:34:41.0515 1348 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
10:34:41.0625 1348 upnphost - ok
10:34:41.0656 1348 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
10:34:41.0796 1348 UPS - ok
10:34:41.0843 1348 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:34:41.0968 1348 usbehci - ok
10:34:42.0015 1348 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:34:42.0171 1348 usbhub - ok
10:34:42.0203 1348 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:34:42.0343 1348 usbprint - ok
10:34:42.0390 1348 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:34:42.0531 1348 USBSTOR - ok
10:34:42.0578 1348 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:34:42.0734 1348 usbuhci - ok
10:34:42.0765 1348 [ 2CC475DA331298148ACF59BC22E923F1 ] Util lucky leap C:\Program Files\lucky leap\bin\utilluckyleap.exe
10:34:42.0781 1348 Util lucky leap - ok
10:34:42.0828 1348 [ 8B0A5F9BEF05F89CD03644EB7AF3C408 ] VBoxDrv C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys
10:34:42.0843 1348 VBoxDrv - ok
10:34:42.0906 1348 [ 065F15E84F2CC4EF60594283E9D72617 ] VBoxNetAdp C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
10:34:42.0921 1348 VBoxNetAdp - ok
10:34:42.0953 1348 [ C6643B766EEC08785E8A3B3AA52B7A9B ] VBoxNetFlt C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
10:34:42.0968 1348 VBoxNetFlt - ok
10:34:43.0015 1348 [ 670A4469D91F26D14CECF6F9A206B95C ] VBoxUSB C:\WINDOWS\system32\Drivers\VBoxUSB.sys
10:34:43.0031 1348 VBoxUSB - ok
10:34:43.0062 1348 [ E81D2740CD33450A0E11138CD8F0ED63 ] VBoxUSBMon C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys
10:34:43.0078 1348 VBoxUSBMon - ok
10:34:43.0125 1348 [ 94D73B62E458FB56C9CE60AA96D914F9 ] VClone C:\WINDOWS\system32\DRIVERS\VClone.sys
10:34:43.0140 1348 VClone ( UnsignedFile.Multi.Generic ) - warning
10:34:43.0140 1348 VClone - detected UnsignedFile.Multi.Generic (1)
10:34:43.0171 1348 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
10:34:43.0312 1348 VgaSave - ok
10:34:43.0312 1348 ViaIde - ok
10:34:43.0343 1348 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
10:34:43.0484 1348 VolSnap - ok
10:34:43.0515 1348 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
10:34:43.0625 1348 VSS - ok
10:34:43.0656 1348 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
10:34:43.0812 1348 W32Time - ok
10:34:43.0843 1348 [ 07AD42303519A955560B5A19FE20B68F ] W3SVC C:\WINDOWS\system32\inetsrv\inetinfo.exe
10:34:43.0906 1348 W3SVC - ok
10:34:43.0921 1348 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:34:44.0078 1348 Wanarp - ok
10:34:44.0093 1348 WDICA - ok
10:34:44.0109 1348 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
10:34:44.0250 1348 wdmaud - ok
10:34:44.0296 1348 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
10:34:44.0437 1348 WebClient - ok
10:34:44.0515 1348 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
10:34:44.0671 1348 winmgmt - ok
10:34:44.0718 1348 [ 0232776C73CD31C47E5139B52C6000B9 ] WISTechVIDCAP C:\WINDOWS\system32\drivers\Xstream.sys
10:34:44.0765 1348 WISTechVIDCAP - ok
10:34:44.0796 1348 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
10:34:44.0828 1348 WmdmPmSN - ok
10:34:44.0937 1348 [ 0171CFF34BBA8C5977F18C48D8AEF8C6 ] Wmi C:\WINDOWS\System32\advapi32.dll
10:34:45.0265 1348 Wmi - ok
10:34:45.0328 1348 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:34:45.0468 1348 WmiApSrv - ok
10:34:45.0515 1348 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
10:34:45.0546 1348 WpdUsb - ok
10:34:45.0968 1348 [ B800EEC15851597405784126C407188C ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
10:34:46.0156 1348 WPFFontCache_v0400 - ok
10:34:46.0218 1348 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
10:34:46.0359 1348 wscsvc - ok
10:34:46.0375 1348 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:34:46.0515 1348 WSTCODEC - ok
10:34:46.0562 1348 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
10:34:46.0718 1348 wuauserv - ok
10:34:46.0765 1348 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:34:46.0796 1348 WudfPf - ok
10:34:46.0828 1348 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:34:46.0859 1348 WudfRd - ok
10:34:46.0890 1348 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
10:34:46.0937 1348 WudfSvc - ok
10:34:47.0125 1348 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
10:34:47.0406 1348 WZCSVC - ok
10:34:47.0453 1348 [ 8A73CC9A6292CF4B7B54B622ED9BD437 ] XLoader C:\WINDOWS\system32\Drivers\XLoader.sys
10:34:47.0468 1348 XLoader - ok
10:34:47.0531 1348 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
10:34:47.0703 1348 xmlprov - ok
10:34:47.0718 1348 ================ Scan global ===============================
10:34:47.0750 1348 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
10:34:47.0875 1348 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
10:34:47.0937 1348 [ 4C0AA4ABC4E21672B55D8A700AF2B2A6 ] C:\WINDOWS\system32\winsrv.dll
10:34:47.0968 1348 [ 9EF697AF07BB8DD82C3B02CA953A95B7 ] C:\WINDOWS\system32\services.exe
10:34:47.0984 1348 [Global] - ok
10:34:47.0984 1348 ================ Scan MBR ==================================
10:34:48.0000 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
10:34:48.0453 1348 \Device\Harddisk0\DR0 - ok
10:34:48.0500 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk1\DR1
10:34:49.0031 1348 \Device\Harddisk1\DR1 - ok
10:34:49.0046 1348 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk2\DR2
10:34:49.0328 1348 \Device\Harddisk2\DR2 - ok
10:34:49.0328 1348 ================ Scan VBR ==================================
10:34:49.0359 1348 [ 3484910838329F1967054B567F795CAB ] \Device\Harddisk0\DR0\Partition1
10:34:49.0359 1348 \Device\Harddisk0\DR0\Partition1 - ok
10:34:49.0375 1348 [ 86BB0B3962171BCBB322684384B8CF63 ] \Device\Harddisk0\DR0\Partition2
10:34:49.0390 1348 \Device\Harddisk0\DR0\Partition2 - ok
10:34:49.0406 1348 [ 6A93B32605205541F204D15BA3BCDD61 ] \Device\Harddisk0\DR0\Partition3
10:34:49.0406 1348 \Device\Harddisk0\DR0\Partition3 - ok
10:34:49.0453 1348 [ D1E0F9F353EF9438A86AA9EF8C07E4D4 ] \Device\Harddisk1\DR1\Partition1
10:34:49.0453 1348 \Device\Harddisk1\DR1\Partition1 - ok
10:34:49.0484 1348 [ C4AD18068B1F65D15B30EC1D20269BA8 ] \Device\Harddisk2\DR2\Partition1
10:34:49.0484 1348 \Device\Harddisk2\DR2\Partition1 - ok
10:34:49.0515 1348 [ 556365BE9D33133927DE426D300368D5 ] \Device\Harddisk2\DR2\Partition2
10:34:49.0515 1348 \Device\Harddisk2\DR2\Partition2 - ok
10:34:49.0515 1348 ============================================================
10:34:49.0515 1348 Scan finished
10:34:49.0515 1348 ============================================================
10:34:49.0625 3268 Detected object count: 13
10:34:49.0625 3268 Actual detected object count: 13
10:35:00.0250 3268 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 ElbyCDFL ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 ElbyCDFL ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 ElbyVCD ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 ElbyVCD ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 freenet ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 freenet ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 gmer ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 gmer ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0250 3268 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0250 3268 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 MBAMProtector ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 MBAMProtector ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 Modaservice ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 Modaservice ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 pcouffin ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 pcouffin ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 snapman ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 snapman ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 sp_rsdrv2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:00.0265 3268 VClone ( UnsignedFile.Multi.Generic ) - skipped by user
10:35:00.0265 3268 VClone ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:35:08.0750 3328 Deinitialize success
Re: Problém s bootem win XP
Tady tez vse v poradku... Mrknem na samotny disk, jestli neni KO Udelejte CDI dle kolegy
MiliNess napsal:Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Problém s bootem win XP
Dobře. Je to zde.
----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2013/10/15 13:57:48
-- Controller Map ----------------------------------------------------------
+ Intel(R) ICH7 Family Ultra ATA Storage Controllers - 27DF [ATA]
+ Primární kanál IDE (0)
- HL-DT-ST DVD-RAM GSA-H50L
- ST380215A
- Sekundární kanál IDE (1)
+ Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 [ATA]
- Primární kanál IDE (0)
- Sekundární kanál IDE (1)
+ Silicon Image SiI 0680 Ultra-133 Medley ATA Raid Controller [SCSI]
- ST380011 A SCSI Disk Device
- ExcelSto r Technology J84 SCSI Disk Device
+ Virtual CloneDrive [SCSI]
- ELBY DVD-ROM SCSI CdRom Device
-- Disk List ---------------------------------------------------------------
(1) ST380215A : 79,8 GB [2/2/0, pd1] - st
----------------------------------------------------------------------------
(1) ST380215A
----------------------------------------------------------------------------
Model : ST380215A
Firmware : 3.AAD
Serial Number : 9QZ9N580
Disk Size : 79,8 GB (8,4/79,8/79,8)
Buffer Size : 2048 KB
Queue Depth : 1
# of Sectors : 156035242
Rotation Rate : Neznámy údaj
Interface : Parallel ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : Ultra DMA/100
Power On Hours : 10261 hod.
Power On Count : 1703 krát
Temparature : 45 C (113 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA
APM Level : ----
AAM Level : ----
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 117 _95 __6 000008B772B9 Počet chyb čtení
03 _97 _97 __0 000000000000 Čas na roztočení ploten
04 _99 _99 _20 0000000006AB Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _83 _60 _30 00000DBFEE6C Počet chybných hledání
09 _89 _89 __0 000000002815 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 _20 0000000006A7 Počet cyklů zapnutí zařízení
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _55 _48 _45 00002D15002D Teplota toku vzduchu
C2 _45 _52 __0 000F0000002D Teplota
C3 _83 _69 __0 000006FCFA9D Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 __0 000000000000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 3951 3951 5A39 4E35 3830
020: 0000 1000 0004 332E 4141 2020 2020 5354 3338 3032
030: 3135 4120 2020 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: E8AA 094C 0000 0007 0003 0078 0078 00F0 0078 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 00FE 0000 346B 7D01 4023 3C01 3C01 4023 203F 0000
090: 0000 FEFE FFFE 604B D000 0000 0000 0000 0000 0000
100: E8AA 094C 0000 0000 0000 4000 4000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0100 0000 0002
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 F8B0
130: 0950 F8B0 0950 2020 0002 0000 0000 008A 3C06 3C0A
140: 0000 07C6 0100 0800 0F12 0002 0002 0080 0000 0000
150: 00A2 0202 0000 0404 0000 0000 0000 0000 1B00 000B
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 52A5
----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2013/10/15 13:57:48
-- Controller Map ----------------------------------------------------------
+ Intel(R) ICH7 Family Ultra ATA Storage Controllers - 27DF [ATA]
+ Primární kanál IDE (0)
- HL-DT-ST DVD-RAM GSA-H50L
- ST380215A
- Sekundární kanál IDE (1)
+ Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 [ATA]
- Primární kanál IDE (0)
- Sekundární kanál IDE (1)
+ Silicon Image SiI 0680 Ultra-133 Medley ATA Raid Controller [SCSI]
- ST380011 A SCSI Disk Device
- ExcelSto r Technology J84 SCSI Disk Device
+ Virtual CloneDrive [SCSI]
- ELBY DVD-ROM SCSI CdRom Device
-- Disk List ---------------------------------------------------------------
(1) ST380215A : 79,8 GB [2/2/0, pd1] - st
----------------------------------------------------------------------------
(1) ST380215A
----------------------------------------------------------------------------
Model : ST380215A
Firmware : 3.AAD
Serial Number : 9QZ9N580
Disk Size : 79,8 GB (8,4/79,8/79,8)
Buffer Size : 2048 KB
Queue Depth : 1
# of Sectors : 156035242
Rotation Rate : Neznámy údaj
Interface : Parallel ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : Ultra DMA/100
Power On Hours : 10261 hod.
Power On Count : 1703 krát
Temparature : 45 C (113 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA
APM Level : ----
AAM Level : ----
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 117 _95 __6 000008B772B9 Počet chyb čtení
03 _97 _97 __0 000000000000 Čas na roztočení ploten
04 _99 _99 _20 0000000006AB Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _83 _60 _30 00000DBFEE6C Počet chybných hledání
09 _89 _89 __0 000000002815 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 _20 0000000006A7 Počet cyklů zapnutí zařízení
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _55 _48 _45 00002D15002D Teplota toku vzduchu
C2 _45 _52 __0 000F0000002D Teplota
C3 _83 _69 __0 000006FCFA9D Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 __0 000000000000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 3951 3951 5A39 4E35 3830
020: 0000 1000 0004 332E 4141 2020 2020 5354 3338 3032
030: 3135 4120 2020 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: E8AA 094C 0000 0007 0003 0078 0078 00F0 0078 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 00FE 0000 346B 7D01 4023 3C01 3C01 4023 203F 0000
090: 0000 FEFE FFFE 604B D000 0000 0000 0000 0000 0000
100: E8AA 094C 0000 0000 0000 4000 4000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0100 0000 0002
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 F8B0
130: 0950 F8B0 0950 2020 0002 0000 0000 008A 3C06 3C0A
140: 0000 07C6 0100 0800 0F12 0002 0002 0080 0000 0000
150: 00A2 0202 0000 0404 0000 0000 0000 0000 1B00 000B
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 52A5
Re: Problém s bootem win XP
Jsou tam nejake chyby cteni 
Start - spustit - napsat cmd - OK - spusti se prikazovy radek - tam napiste chkdsk /f /r - enter - restart a probehne kontrola"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Problém s bootem win XP
Tak dobře, provedu a dám vědět.Zatím moc děkuji!
Re: Problém s bootem win XP
Tak bohužel po startu se sice objeví modrá obrazovka chkdsk, ale hned za tři vteřiny to nahlásí, že disk C byl zkontrolován a bez klasického výčtu chyb začne startovat windows.Tak nevím, kde je problém. Co mám prosím, dělat?
Re: Problém s bootem win XP
Vypada to na poskozeny disk, ale jeste dam konzultaci s kolegou Zabalte mi obcas slozky c:\windows\minidump a nekam uploadnete Poprosim o krok dle kolegy
MiliNess napsal: 1) V Ovládací panely->Nástroje pro správu->Prohlížeč událostí->Protokoly systému Windows->klikni pravým myšítkem na protokol Systém, vyber Uložit všechny události jako, ulož to jako .evtx soubor a ten upni na http://www.leteckaposta.cz
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Problém s bootem win XP
Fajn, udělám to, jak říkáte.Jinak jsem ještě něco zkusil sám.Po kontrole disku ze systému Piriform defragglerem, tento vyhodil hlášku: Ověření disku se nezdařilo. Chcete použít příkaz CHKDSK /F pro opravu chyb ve velikosti disků? Nojo, ale co s tím, když to chkdsk vlastně vůbec nezkontroluje? Mám se pokusit sehnat někde jiný chkdsk.exe a zkusit ho v system32 vyměnit? Díky.
Re: Problém s bootem win XP
Do tohoto se zatim nepoustejte, pripadne bychom provedli kontrolu disku na tzv. mrtvem systemu = z instalacniho disku"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?