VIRY.CZ

Zdravím,
nemám teď žádný problém s PC, ale před nedávnem jsem ho měla zavirovaný ( všechno úspěšně odstraněno, celé C obnoveno ze zálohy ) a od té doby se mi zdá nějaký pomalejší. Prosím tedy o kontrolu logu : http://agcp.ic.cz/log.txt .

Jednalo se o ten faceboovský vir šířící se chatem, odkazující na fake stránku s Youtube a požadující stažení pluginu ke sledování videa. Ještě teď si klepu na čelo, jak jsem na to mohla tak naivně kliknout a stáhnout to...

Jinak děkuji a posílám logy :


ComboFix 11-10-26.08 - Kristýna 26.10.2011 23:15:25.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3070.2163 [GMT 2:00]
Spuštěný z: c:\users\Kristřna\Desktop\ComboFix.exe
AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\proc_list1.log
c:\windows\system32\hosts
c:\windows\system32\ijl11.dll
c:\windows\system32\Memman.vxd
c:\windows\system32\skinboxer43.dll
c:\windows\update.1
c:\windows\update.2
c:\windows\update.5.0
c:\windows\update.7.1
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-26 do 2011-10-26 )))))))))))))))))))))))))))))))
.
.
2011-10-26 21:21 . 2011-10-26 21:23 -------- d-----w- c:\users\Kristýna\AppData\Local\temp
2011-10-26 21:21 . 2011-10-26 21:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-26 14:08 . 2011-10-26 14:22 -------- d-----w- c:\program files\trend micro
2011-10-26 14:08 . 2011-10-26 14:21 -------- d-----w- C:\rsit
2011-10-26 14:07 . 2011-10-26 14:07 -------- d-----w- C:\Fraps
2011-10-26 13:50 . 2011-10-26 13:50 -------- d-----w- c:\users\Kristýna\AppData\Roaming\gtk-2.0
2011-10-26 13:45 . 2011-10-26 15:41 -------- d-----w- c:\users\Kristýna\AppData\Roaming\.purple
2011-10-26 13:44 . 2011-10-26 13:45 -------- d-----w- c:\program files\Pidgin
2011-10-26 12:55 . 2011-10-26 12:55 -------- d-----w- c:\users\Kristýna\AppData\Local\{527B7B81-9D24-434D-9AA5-1BB7B1749335}
2011-10-26 12:54 . 2011-10-26 12:55 -------- d-----w- c:\users\Kristýna\AppData\Local\{EC933319-0DF9-49BA-B1AD-B6D726FCC944}
2011-10-26 12:49 . 2011-10-26 12:49 -------- d-----w- c:\users\Kristýna\AppData\Roaming\AVG2012
2011-10-26 12:49 . 2011-10-26 12:49 -------- d-----w- c:\program files\AVG Secure Search
2011-10-26 12:49 . 2011-10-26 12:49 -------- d-----w- c:\program files\Common Files\AVG Secure Search
2011-10-26 12:49 . 2011-10-26 12:49 -------- d--h--w- c:\programdata\Common Files
2011-10-26 12:47 . 2011-10-26 18:18 -------- d-----w- c:\windows\system32\drivers\AVG
2011-10-26 12:47 . 2011-10-26 13:05 -------- d-----w- c:\programdata\AVG2012
2011-10-26 12:46 . 2011-10-26 12:46 -------- d-----w- c:\program files\AVG
2011-10-26 12:42 . 2011-10-26 18:18 -------- d-----w- c:\programdata\MFAData
2011-10-26 12:41 . 2011-10-26 12:41 -------- d-----w- c:\users\Kristýna\AppData\Local\{06DE38BA-8710-4625-94AC-39F47D5E09CC}
2011-10-26 12:19 . 2011-10-26 12:19 -------- d-----w- c:\windows\system32\SPReview
2011-10-26 12:19 . 2011-10-26 12:19 -------- d-----w- c:\windows\system32\EventProviders
2011-10-26 10:43 . 2011-08-13 04:18 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-25 10:29 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AC598F79-FDFE-4F24-A391-34D10A82DAF9}\mpengine.dll
2011-10-24 14:45 . 2011-10-24 14:45 -------- d-----w- c:\users\Kristýna\AppData\Local\{216A3853-4C96-4631-8FF1-DC9EADAB3EF3}
2011-10-24 14:45 . 2011-10-24 14:45 -------- d-----w- c:\users\Kristýna\AppData\Local\{72FB2442-57A1-46FF-A916-8EF14356903F}
2011-10-21 16:10 . 2011-10-21 16:10 -------- d-----w- c:\users\Kristýna\AppData\Local\{88B468F3-2D4E-4E8A-ACC6-D99CEF21B97D}
2011-10-21 16:09 . 2011-10-21 16:09 -------- d-----w- c:\users\Kristýna\AppData\Local\{ED735C5C-17F4-4AC7-8E42-D6BC3E0047EB}
2011-10-16 14:58 . 2011-10-16 14:58 -------- d-----w- c:\users\Kristýna\AppData\Local\{94B35ABA-A449-40EE-A4C3-CABCEC76E5A0}
2011-10-16 14:58 . 2011-10-16 14:58 -------- d-----w- c:\users\Kristýna\AppData\Local\{7F502EF3-8744-4B4E-A818-27047996FD45}
2011-10-13 09:56 . 2011-10-13 09:56 -------- d-----w- c:\users\Kristýna\AppData\Local\{893390A5-6AC2-4845-8311-A9B965297E62}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-26 12:28 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-09-16 00:19 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-15 19:48 . 2011-09-15 19:48 167968 ----a-w- c:\windows\system32\drivers\afcdp.sys
2011-09-15 19:48 . 2011-09-15 19:48 752128 ----a-w- c:\windows\system32\drivers\tdrpm273.sys
2011-09-15 19:48 . 2011-09-15 19:48 600928 ----a-w- c:\windows\system32\drivers\timntr.sys
2011-09-15 19:47 . 2011-09-15 17:28 170528 ----a-w- c:\windows\system32\drivers\snapman.sys
2011-09-13 04:30 . 2011-09-13 04:30 32592 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2011-08-15 13:06 . 2011-09-15 21:18 158512 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-08-15 13:06 . 2011-09-15 21:18 90928 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-08-15 13:06 . 2011-08-15 13:06 104752 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-08-08 04:08 . 2011-08-08 04:08 40016 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2011-07-31 07:35 . 2011-07-31 07:35 65536 ----a-w- c:\windows\system32\frapsvid.dll
2011-07-08 07:29 . 2011-07-18 19:35 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2011-10-26 12:49 1451336 ----a-w- c:\program files\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll" [2011-10-26 1451336]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2011-05-13 4283256]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-02-18 116056]
"OscarEditor"="c:\program files\Anti-Vibrate Oscar Editor\OscarEditor.exe" [2010-07-22 2636800]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-02-15 1230704]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-07-06 500208]
"SAOB Monitor"="c:\program files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe" [2010-11-16 2536752]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2010-12-17 5566176]
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2010-12-17 391144]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2011-09-23 2404704]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2011-10-26 218440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [2011-09-12 5265248]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-24 136176]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-09-02 2152152]
R2 NAV;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe [x]
R3 GarenaPEngine;GarenaPEngine;c:\users\KRISTN~1\AppData\Local\Temp\CIGB606.tmp [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-24 136176]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-08-15 104752]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-03-23 1343400]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [2011-07-10 23120]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-08-12 64288]
S0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273);c:\windows\system32\DRIVERS\tdrpm273.sys [2011-09-15 752128]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2011-05-22 47968]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2011-07-10 229840]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2011-07-10 295248]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-19 218688]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 afcdpsrv;Služba Acronis Nonstop Backup;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2011-09-15 3246040]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2012\avgfws.exe [2011-08-19 2399560]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2010-02-18 222568]
S2 vToolbarUpdater;vToolbarUpdater;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe [2011-10-26 246600]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2011-09-15 167968]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-10 134736]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-10 24272]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\AVGIDSShim.Sys [2011-07-10 16720]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2010-02-16 36640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2011-02-28 15232]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - AVGIDSEH
*NewlyCreated* - FSUSBEXDISK
.
Obsah adresáře 'Naplánované úlohy'
.
2011-10-26 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 07:40]
.
2011-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-26 16:32]
.
2011-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-26 16:32]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2304157
uInternet Settings,ProxyOverride = local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: Interfaces\{32F282F5-21EC-4CCC-A795-1217910CAC1A}: NameServer = 192.168.1.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
FF - ProfilePath - c:\users\Kristýna\AppData\Roaming\Mozilla\Firefox\Profiles\4udumtoe.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - XfireXO Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=13
FF - prefs.js: network.proxy.ftp - 88.191.59.156
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.gopher - 88.191.59.156
FF - prefs.js: network.proxy.gopher_port - 3128
FF - prefs.js: network.proxy.http - 88.191.59.156
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - 88.191.59.156
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - 88.191.59.156
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)
WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)
HKCU-Run-VDL Agent - c:\program files\VDL\VDL.exe
HKLM-Run-NPSStartup - (no file)
HKLM-Run-Chris PC-Lock - c:\program files\Chris PC-Lock\PCLock.exe
HKLM-Run-VIC - d:\program files\lycd\wadfngrv.exe
AddRemove-IP Changer Premium - c:\program files\IP Changer Premium\uninstall.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-22_MS_USB_Modem_Driver - c:\program files\SAMSUNG\USB Drivers\22_MS_USB_Modem_Driver\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NAV]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files\Norton AntiVirus\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
Binary file temp00 matches
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\GarenaPEngine]
"ImagePath"="\??\c:\users\KRISTN~1\AppData\Local\Temp\CIGB606.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-10-26 23:24:58
ComboFix-quarantined-files.txt 2011-10-26 21:24
.
Před spuštěním: Volných bajtů: 123 005 722 624
Po spuštění: Volných bajtů: 123 089 801 216
.
- - End Of File - - D68E6C8AF83A46015C7C51FDA3FE2003

23:26:59.0988 3688 TDSS rootkit removing tool 2.6.13.0 Oct 25 2011 13:56:21
23:27:00.0206 3688 ============================================================
23:27:00.0207 3688 Current date / time: 2011/10/26 23:27:00.0206
23:27:00.0207 3688 SystemInfo:
23:27:00.0207 3688
23:27:00.0207 3688 OS Version: 6.1.7601 ServicePack: 1.0
23:27:00.0207 3688 Product type: Workstation
23:27:00.0207 3688 ComputerName: ATLANTIS
23:27:00.0207 3688 UserName: Kristýna
23:27:00.0207 3688 Windows directory: C:\Windows
23:27:00.0207 3688 System windows directory: C:\Windows
23:27:00.0207 3688 Processor architecture: Intel x86
23:27:00.0207 3688 Number of processors: 2
23:27:00.0207 3688 Page size: 0x1000
23:27:00.0207 3688 Boot type: Normal boot
23:27:00.0207 3688 ============================================================
23:27:02.0312 3688 Initialize success
23:27:23.0095 3604 ============================================================
23:27:23.0095 3604 Scan started
23:27:23.0095 3604 Mode: Manual; SigCheck; TDLFS;
23:27:23.0095 3604 ============================================================
23:27:24.0276 3604 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
23:27:24.0362 3604 1394ohci - ok
23:27:24.0495 3604 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
23:27:24.0512 3604 ACPI - ok
23:27:24.0629 3604 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
23:27:24.0686 3604 AcpiPmi - ok
23:27:24.0898 3604 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
23:27:24.0921 3604 adp94xx - ok
23:27:25.0040 3604 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
23:27:25.0060 3604 adpahci - ok
23:27:25.0081 3604 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
23:27:25.0099 3604 adpu320 - ok
23:27:25.0231 3604 afcdp (53696ad8ffc5fac51949a525ff65a689) C:\Windows\system32\DRIVERS\afcdp.sys
23:27:25.0261 3604 afcdp - ok
23:27:25.0432 3604 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
23:27:25.0486 3604 AFD - ok
23:27:25.0599 3604 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
23:27:25.0613 3604 agp440 - ok
23:27:25.0684 3604 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
23:27:25.0698 3604 aic78xx - ok
23:27:25.0831 3604 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
23:27:25.0843 3604 aliide - ok
23:27:25.0968 3604 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
23:27:25.0980 3604 amdagp - ok
23:27:26.0083 3604 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
23:27:26.0096 3604 amdide - ok
23:27:26.0216 3604 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
23:27:26.0320 3604 AmdK8 - ok
23:27:26.0495 3604 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
23:27:26.0529 3604 AmdPPM - ok
23:27:26.0652 3604 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
23:27:26.0668 3604 amdsata - ok
23:27:26.0852 3604 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
23:27:26.0870 3604 amdsbs - ok
23:27:27.0097 3604 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
23:27:27.0117 3604 amdxata - ok
23:27:27.0228 3604 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
23:27:27.0321 3604 AppID - ok
23:27:27.0509 3604 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
23:27:27.0522 3604 arc - ok
23:27:27.0575 3604 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
23:27:27.0590 3604 arcsas - ok
23:27:27.0684 3604 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
23:27:27.0719 3604 AsyncMac - ok
23:27:27.0830 3604 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
23:27:27.0848 3604 atapi - ok
23:27:28.0011 3604 athr (ac4adac154563ab41cc79b0257bc685a) C:\Windows\system32\DRIVERS\athr.sys
23:27:28.0073 3604 athr - ok
23:27:28.0306 3604 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
23:27:28.0437 3604 atikmdag - ok
23:27:28.0615 3604 Avgfwfd (c46ba2c177df0b84f9c0bfc1e4574dc7) C:\Windows\system32\DRIVERS\avgfwd6x.sys
23:27:28.0625 3604 Avgfwfd - ok
23:27:28.0788 3604 AVGIDSDriver (f6878b90a8a9795116bce335238e65af) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
23:27:28.0800 3604 AVGIDSDriver - ok
23:27:28.0977 3604 AVGIDSEH (19a08a6728a6e02099d64268218cd799) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
23:27:28.0987 3604 AVGIDSEH - ok
23:27:29.0136 3604 AVGIDSFilter (f8927ab1dd086edeff2924a64dc89869) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
23:27:29.0146 3604 AVGIDSFilter - ok
23:27:29.0281 3604 AVGIDSShim (44d562825d811eea3c8cd6140cbad5d0) C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
23:27:29.0291 3604 AVGIDSShim - ok
23:27:29.0441 3604 Avgldx86 (f4dbbc8d3c5338693da23c59a50f8abc) C:\Windows\system32\DRIVERS\avgldx86.sys
23:27:29.0457 3604 Avgldx86 - ok
23:27:29.0625 3604 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\Windows\system32\DRIVERS\avgmfx86.sys
23:27:29.0635 3604 Avgmfx86 - ok
23:27:29.0771 3604 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\Windows\system32\DRIVERS\avgrkx86.sys
23:27:29.0782 3604 Avgrkx86 - ok
23:27:29.0921 3604 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\Windows\system32\DRIVERS\avgtdix.sys
23:27:29.0937 3604 Avgtdix - ok
23:27:30.0090 3604 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
23:27:30.0141 3604 b06bdrv - ok
23:27:30.0258 3604 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
23:27:30.0276 3604 b57nd60x - ok
23:27:30.0406 3604 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
23:27:30.0437 3604 Beep - ok
23:27:30.0587 3604 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
23:27:30.0603 3604 blbdrive - ok
23:27:30.0707 3604 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
23:27:30.0751 3604 bowser - ok
23:27:30.0831 3604 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
23:27:30.0886 3604 BrFiltLo - ok
23:27:30.0992 3604 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
23:27:31.0032 3604 BrFiltUp - ok
23:27:31.0164 3604 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
23:27:31.0207 3604 Brserid - ok
23:27:31.0318 3604 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
23:27:31.0356 3604 BrSerWdm - ok
23:27:31.0470 3604 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
23:27:31.0520 3604 BrUsbMdm - ok
23:27:31.0873 3604 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
23:27:31.0929 3604 BrUsbSer - ok
23:27:32.0083 3604 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\drivers\BthEnum.sys
23:27:32.0127 3604 BthEnum - ok
23:27:32.0238 3604 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
23:27:32.0256 3604 BTHMODEM - ok
23:27:32.0371 3604 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
23:27:32.0404 3604 BthPan - ok
23:27:32.0559 3604 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\System32\Drivers\BTHport.sys
23:27:32.0592 3604 BTHPORT - ok
23:27:32.0710 3604 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\System32\Drivers\BTHUSB.sys
23:27:32.0725 3604 BTHUSB - ok
23:27:32.0836 3604 catchme - ok
23:27:32.0936 3604 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
23:27:32.0983 3604 cdfs - ok
23:27:33.0113 3604 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
23:27:33.0129 3604 cdrom - ok
23:27:33.0249 3604 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
23:27:33.0279 3604 circlass - ok
23:27:33.0381 3604 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
23:27:33.0397 3604 CLFS - ok
23:27:33.0602 3604 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
23:27:33.0621 3604 CmBatt - ok
23:27:33.0669 3604 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
23:27:33.0681 3604 cmdide - ok
23:27:33.0797 3604 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
23:27:33.0820 3604 CNG - ok
23:27:33.0939 3604 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
23:27:33.0952 3604 Compbatt - ok
23:27:34.0127 3604 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
23:27:34.0160 3604 CompositeBus - ok
23:27:34.0279 3604 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
23:27:34.0292 3604 crcdisk - ok
23:27:34.0430 3604 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
23:27:34.0484 3604 CSC - ok
23:27:34.0646 3604 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
23:27:34.0689 3604 DfsC - ok
23:27:34.0811 3604 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
23:27:34.0858 3604 discache - ok
23:27:34.0984 3604 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
23:27:34.0997 3604 Disk - ok
23:27:35.0127 3604 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
23:27:35.0158 3604 drmkaud - ok
23:27:35.0276 3604 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
23:27:35.0290 3604 dtsoftbus01 - ok
23:27:35.0347 3604 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
23:27:35.0372 3604 DXGKrnl - ok
23:27:35.0553 3604 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
23:27:35.0619 3604 ebdrv - ok
23:27:35.0800 3604 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
23:27:35.0820 3604 elxstor - ok
23:27:35.0860 3604 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
23:27:35.0905 3604 ErrDev - ok
23:27:36.0037 3604 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
23:27:36.0090 3604 exfat - ok
23:27:36.0209 3604 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
23:27:36.0258 3604 fastfat - ok
23:27:36.0376 3604 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
23:27:36.0411 3604 fdc - ok
23:27:36.0525 3604 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
23:27:36.0539 3604 FileInfo - ok
23:27:36.0559 3604 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
23:27:36.0589 3604 Filetrace - ok
23:27:36.0725 3604 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
23:27:36.0755 3604 flpydisk - ok
23:27:36.0872 3604 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
23:27:36.0888 3604 FltMgr - ok
23:27:37.0232 3604 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
23:27:37.0245 3604 FsDepends - ok
23:27:37.0425 3604 FsUsbExDisk (b07663a810e861eebfd0eac7e82ca62d) C:\Windows\system32\FsUsbExDisk.SYS
23:27:37.0451 3604 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning
23:27:37.0451 3604 FsUsbExDisk - detected UnsignedFile.Multi.Generic (1)
23:27:37.0556 3604 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
23:27:37.0568 3604 Fs_Rec - ok
23:27:37.0678 3604 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
23:27:37.0696 3604 fvevol - ok
23:27:37.0819 3604 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
23:27:37.0832 3604 gagp30kx - ok
23:27:37.0937 3604 GarenaPEngine - ok
23:27:38.0076 3604 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
23:27:38.0122 3604 hcw85cir - ok
23:27:38.0250 3604 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
23:27:38.0291 3604 HdAudAddService - ok
23:27:38.0411 3604 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
23:27:38.0448 3604 HDAudBus - ok
23:27:38.0559 3604 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
23:27:38.0593 3604 HidBatt - ok
23:27:38.0707 3604 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
23:27:38.0768 3604 HidBth - ok
23:27:38.0886 3604 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
23:27:38.0915 3604 HidIr - ok
23:27:39.0037 3604 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\drivers\hidusb.sys
23:27:39.0062 3604 HidUsb - ok
23:27:39.0130 3604 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
23:27:39.0144 3604 HpSAMD - ok
23:27:39.0241 3604 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
23:27:39.0293 3604 HTTP - ok
23:27:39.0427 3604 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
23:27:39.0440 3604 hwpolicy - ok
23:27:39.0602 3604 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
23:27:39.0634 3604 i8042prt - ok
23:27:39.0896 3604 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
23:27:39.0915 3604 iaStorV - ok
23:27:40.0101 3604 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
23:27:40.0114 3604 iirsp - ok
23:27:40.0161 3604 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
23:27:40.0174 3604 intelide - ok
23:27:40.0300 3604 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
23:27:40.0331 3604 intelppm - ok
23:27:40.0451 3604 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:27:40.0486 3604 IpFilterDriver - ok
23:27:40.0611 3604 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
23:27:40.0641 3604 IPMIDRV - ok
23:27:40.0757 3604 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
23:27:40.0789 3604 IPNAT - ok
23:27:40.0849 3604 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
23:27:40.0918 3604 IRENUM - ok
23:27:41.0013 3604 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
23:27:41.0026 3604 isapnp - ok
23:27:41.0145 3604 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
23:27:41.0162 3604 iScsiPrt - ok
23:27:41.0277 3604 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys
23:27:41.0290 3604 kbdclass - ok
23:27:41.0432 3604 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys
23:27:41.0463 3604 kbdhid - ok
23:27:41.0591 3604 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\Windows\system32\Drivers\ksecdd.sys
23:27:41.0605 3604 KSecDD - ok
23:27:41.0735 3604 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys
23:27:41.0750 3604 KSecPkg - ok
23:27:41.0968 3604 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
23:27:41.0979 3604 Lavasoft Kernexplorer - ok
23:27:42.0071 3604 Lbd (b7c19ec8b0dd7efa58ad41ffeb8b8cda) C:\Windows\system32\DRIVERS\Lbd.sys
23:27:42.0083 3604 Lbd - ok
23:27:42.0155 3604 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
23:27:42.0207 3604 lltdio - ok
23:27:42.0335 3604 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
23:27:42.0349 3604 LSI_FC - ok
23:27:42.0381 3604 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
23:27:42.0395 3604 LSI_SAS - ok
23:27:42.0498 3604 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
23:27:42.0511 3604 LSI_SAS2 - ok
23:27:42.0553 3604 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
23:27:42.0566 3604 LSI_SCSI - ok
23:27:42.0692 3604 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
23:27:42.0737 3604 luafv - ok
23:27:42.0870 3604 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
23:27:42.0883 3604 megasas - ok
23:27:42.0992 3604 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
23:27:43.0008 3604 MegaSR - ok
23:27:43.0040 3604 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
23:27:43.0071 3604 Modem - ok
23:27:43.0185 3604 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
23:27:43.0217 3604 monitor - ok
23:27:43.0345 3604 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\drivers\mouclass.sys
23:27:43.0358 3604 mouclass - ok
23:27:43.0477 3604 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
23:27:43.0513 3604 mouhid - ok
23:27:43.0593 3604 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
23:27:43.0606 3604 mountmgr - ok
23:27:43.0698 3604 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
23:27:43.0713 3604 mpio - ok
23:27:43.0809 3604 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
23:27:43.0849 3604 mpsdrv - ok
23:27:43.0982 3604 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
23:27:44.0012 3604 MRxDAV - ok
23:27:44.0123 3604 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
23:27:44.0153 3604 mrxsmb - ok
23:27:44.0265 3604 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:27:44.0282 3604 mrxsmb10 - ok
23:27:44.0391 3604 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:27:44.0417 3604 mrxsmb20 - ok
23:27:44.0551 3604 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
23:27:44.0564 3604 msahci - ok
23:27:44.0606 3604 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
23:27:44.0621 3604 msdsm - ok
23:27:44.0725 3604 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
23:27:44.0755 3604 Msfs - ok
23:27:44.0776 3604 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
23:27:44.0807 3604 mshidkmdf - ok
23:27:44.0857 3604 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
23:27:44.0870 3604 msisadrv - ok
23:27:45.0014 3604 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
23:27:45.0065 3604 MSKSSRV - ok
23:27:45.0179 3604 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
23:27:45.0224 3604 MSPCLOCK - ok
23:27:45.0325 3604 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
23:27:45.0373 3604 MSPQM - ok
23:27:45.0401 3604 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
23:27:45.0416 3604 MsRPC - ok
23:27:45.0537 3604 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
23:27:45.0549 3604 mssmbios - ok
23:27:45.0655 3604 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
23:27:45.0698 3604 MSTEE - ok
23:27:45.0724 3604 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
23:27:45.0752 3604 MTConfig - ok
23:27:45.0851 3604 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
23:27:45.0864 3604 Mup - ok
23:27:45.0917 3604 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
23:27:45.0938 3604 NativeWifiP - ok
23:27:46.0084 3604 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
23:27:46.0108 3604 NDIS - ok
23:27:46.0222 3604 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
23:27:46.0253 3604 NdisCap - ok
23:27:46.0287 3604 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
23:27:46.0316 3604 NdisTapi - ok
23:27:46.0417 3604 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
23:27:46.0447 3604 Ndisuio - ok
23:27:46.0483 3604 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
23:27:46.0513 3604 NdisWan - ok
23:27:46.0614 3604 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
23:27:46.0653 3604 NDProxy - ok
23:27:46.0696 3604 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
23:27:46.0729 3604 NetBIOS - ok
23:27:46.0838 3604 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
23:27:46.0868 3604 NetBT - ok
23:27:47.0041 3604 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
23:27:47.0055 3604 nfrd960 - ok
23:27:47.0120 3604 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
23:27:47.0165 3604 Npfs - ok
23:27:47.0253 3604 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
23:27:47.0300 3604 nsiproxy - ok
23:27:47.0445 3604 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
23:27:47.0477 3604 Ntfs - ok
23:27:47.0575 3604 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
23:27:47.0605 3604 Null - ok
23:27:47.0653 3604 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
23:27:47.0667 3604 nvraid - ok
23:27:47.0773 3604 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
23:27:47.0787 3604 nvstor - ok
23:27:47.0818 3604 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
23:27:47.0832 3604 nv_agp - ok
23:27:47.0868 3604 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
23:27:47.0903 3604 ohci1394 - ok
23:27:48.0047 3604 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
23:27:48.0063 3604 Parport - ok
23:27:48.0103 3604 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
23:27:48.0116 3604 partmgr - ok
23:27:48.0146 3604 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
23:27:48.0179 3604 Parvdm - ok
23:27:48.0301 3604 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
23:27:48.0315 3604 pci - ok
23:27:48.0337 3604 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
23:27:48.0350 3604 pciide - ok
23:27:48.0458 3604 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
23:27:48.0473 3604 pcmcia - ok
23:27:48.0499 3604 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
23:27:48.0512 3604 pcw - ok
23:27:48.0545 3604 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
23:27:48.0595 3604 PEAUTH - ok
23:27:48.0766 3604 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
23:27:48.0816 3604 PptpMiniport - ok
23:27:48.0844 3604 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
23:27:48.0875 3604 Processor - ok
23:27:48.0999 3604 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
23:27:49.0070 3604 Psched - ok
23:27:49.0128 3604 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
23:27:49.0162 3604 ql2300 - ok
23:27:49.0269 3604 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
23:27:49.0283 3604 ql40xx - ok
23:27:49.0318 3604 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
23:27:49.0337 3604 QWAVEdrv - ok
23:27:49.0359 3604 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
23:27:49.0407 3604 RasAcd - ok
23:27:49.0527 3604 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
23:27:49.0556 3604 RasAgileVpn - ok
23:27:49.0662 3604 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
23:27:49.0714 3604 Rasl2tp - ok
23:27:49.0842 3604 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
23:27:49.0885 3604 RasPppoe - ok
23:27:49.0925 3604 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
23:27:49.0955 3604 RasSstp - ok
23:27:50.0095 3604 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
23:27:50.0142 3604 rdbss - ok
23:27:50.0248 3604 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
23:27:50.0280 3604 rdpbus - ok
23:27:50.0318 3604 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
23:27:50.0358 3604 RDPCDD - ok
23:27:50.0482 3604 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
23:27:50.0532 3604 RDPDR - ok
23:27:50.0641 3604 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
23:27:50.0682 3604 RDPENCDD - ok
23:27:50.0715 3604 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
23:27:50.0757 3604 RDPREFMP - ok
23:27:50.0872 3604 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
23:27:50.0917 3604 RDPWD - ok
23:27:51.0056 3604 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
23:27:51.0072 3604 rdyboost - ok
23:27:51.0117 3604 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
23:27:51.0136 3604 RFCOMM - ok
23:27:51.0321 3604 rimmptsk (d65ac8797f0286ed269500747d6290a4) C:\Windows\system32\DRIVERS\rimmptsk.sys
23:27:51.0519 3604 rimmptsk - ok
23:27:51.0636 3604 rimsptsk (49ec82b44eb93374ed9988da7e0e0151) C:\Windows\system32\DRIVERS\rimsptsk.sys
23:27:51.0656 3604 rimsptsk - ok
23:27:51.0774 3604 rismxdp (6c1f93c0760c9f79a1869d07233df39d) C:\Windows\system32\DRIVERS\rixdptsk.sys
23:27:51.0821 3604 rismxdp - ok
23:27:51.0924 3604 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
23:27:51.0970 3604 rspndr - ok
23:27:52.0096 3604 RTL8167 (7dfd48e24479b68b258d8770121155a0) C:\Windows\system32\DRIVERS\Rt86win7.sys
23:27:52.0112 3604 RTL8167 - ok
23:27:52.0235 3604 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
23:27:52.0273 3604 s3cap - ok
23:27:52.0401 3604 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
23:27:52.0415 3604 sbp2port - ok
23:27:52.0462 3604 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
23:27:52.0491 3604 scfilter - ok
23:27:52.0615 3604 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
23:27:52.0649 3604 sdbus - ok
23:27:52.0762 3604 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
23:27:52.0811 3604 secdrv - ok
23:27:52.0926 3604 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
23:27:52.0942 3604 Serenum - ok
23:27:52.0969 3604 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
23:27:53.0000 3604 Serial - ok
23:27:53.0112 3604 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
23:27:53.0163 3604 sermouse - ok
23:27:53.0312 3604 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
23:27:53.0329 3604 sffdisk - ok
23:27:53.0447 3604 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
23:27:53.0464 3604 sffp_mmc - ok
23:27:53.0588 3604 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
23:27:53.0616 3604 sffp_sd - ok
23:27:53.0722 3604 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
23:27:53.0753 3604 sfloppy - ok
23:27:53.0873 3604 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
23:27:53.0886 3604 sisagp - ok
23:27:53.0992 3604 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:27:54.0005 3604 SiSRaid2 - ok
23:27:54.0103 3604 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
23:27:54.0117 3604 SiSRaid4 - ok
23:27:54.0251 3604 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
23:27:54.0282 3604 Smb - ok
23:27:54.0436 3604 snapman (eb49860e776ce860dc3cfb9edb1ba517) C:\Windows\system32\DRIVERS\snapman.sys
23:27:54.0448 3604 snapman - ok
23:27:54.0559 3604 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
23:27:54.0572 3604 spldr - ok
23:27:54.0603 3604 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
23:27:54.0650 3604 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
23:27:54.0650 3604 \Device\Harddisk0\DR0 - detected TDSS File System (1)
23:27:54.0654 3604 Boot (0x1200) (a0226559c711c02f34a6fd9bd18ec6fc) \Device\Harddisk0\DR0\Partition0
23:27:54.0655 3604 \Device\Harddisk0\DR0\Partition0 - ok
23:27:54.0685 3604 Boot (0x1200) (057bbfe4ec3e884e1568c4ffb4dbdb61) \Device\Harddisk0\DR0\Partition1
23:27:54.0686 3604 \Device\Harddisk0\DR0\Partition1 - ok
23:27:54.0704 3604 Boot (0x1200) (e197bb987326f54a05ce0608d7b6d6c2) \Device\Harddisk0\DR0\Partition2
23:27:54.0705 3604 \Device\Harddisk0\DR0\Partition2 - ok
23:27:54.0706 3604 ============================================================
23:27:54.0706 3604 Scan finished
23:27:54.0706 3604 ============================================================
23:27:54.0722 5616 Detected object count: 2
23:27:54.0722 5616 Actual detected object count: 2
23:28:12.0471 5616 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user
23:28:12.0471 5616 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:28:12.0473 5616 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
23:28:12.0473 5616 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
23:28:19.0729 2600 Deinitialize success

Ahojky,
super díky. Takže Norton odinstalován, proxyny i tu ipinu jsem tam nastavovala já záměrně, něco jsem zkoušela. Používám výhradně Chrome a Mozillu pouze ve výjimečných situacích, takže jsem úplně zapomněla, že to tam je. Conduit odinstaluju
Soubor jsem otestovala, VT nic nenašlo ( result : 0/43 (0.0%).
Položku 23:28:12.0473 5616 \Device\Harddisk0\DR0 jsem smazala a přikládám log:


18:29:05.0025 1676 TDSS rootkit removing tool 2.6.13.0 Oct 25 2011 13:56:21
18:29:07.0028 1676 ============================================================
18:29:07.0028 1676 Current date / time: 2011/10/27 18:29:07.0028
18:29:07.0028 1676 SystemInfo:
18:29:07.0028 1676
18:29:07.0028 1676 OS Version: 6.1.7601 ServicePack: 1.0
18:29:07.0028 1676 Product type: Workstation
18:29:07.0028 1676 ComputerName: ATLANTIS
18:29:07.0028 1676 UserName: Kristýna
18:29:07.0028 1676 Windows directory: C:\Windows
18:29:07.0028 1676 System windows directory: C:\Windows
18:29:07.0028 1676 Processor architecture: Intel x86
18:29:07.0028 1676 Number of processors: 2
18:29:07.0029 1676 Page size: 0x1000
18:29:07.0029 1676 Boot type: Normal boot
18:29:07.0029 1676 ============================================================
18:29:08.0872 1676 Initialize success
18:29:11.0847 4812 ============================================================
18:29:11.0848 4812 Scan started
18:29:11.0848 4812 Mode: Manual;
18:29:11.0848 4812 ============================================================
18:29:13.0404 4812 Scan interrupted by user!
18:29:13.0404 4812 Scan interrupted by user!
18:29:13.0404 4812 Scan interrupted by user!
18:29:13.0404 4812 ============================================================
18:29:13.0404 4812 Scan finished
18:29:13.0405 4812 ============================================================
18:29:13.0415 1976 Detected object count: 0
18:29:13.0415 1976 Actual detected object count: 0
18:29:16.0372 3880 ============================================================
18:29:16.0372 3880 Scan started
18:29:16.0373 3880 Mode: Manual; SigCheck; TDLFS;
18:29:16.0373 3880 ============================================================
18:29:16.0716 3880 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
18:29:16.0866 3880 1394ohci - ok
18:29:16.0999 3880 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
18:29:17.0019 3880 ACPI - ok
18:29:17.0133 3880 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
18:29:17.0214 3880 AcpiPmi - ok
18:29:17.0413 3880 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
18:29:17.0444 3880 adp94xx - ok
18:29:17.0599 3880 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
18:29:17.0624 3880 adpahci - ok
18:29:17.0833 3880 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
18:29:17.0853 3880 adpu320 - ok
18:29:17.0991 3880 afcdp (53696ad8ffc5fac51949a525ff65a689) C:\Windows\system32\DRIVERS\afcdp.sys
18:29:18.0043 3880 afcdp - ok
18:29:18.0247 3880 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
18:29:18.0324 3880 AFD - ok
18:29:18.0437 3880 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
18:29:18.0454 3880 agp440 - ok
18:29:18.0522 3880 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
18:29:18.0537 3880 aic78xx - ok
18:29:18.0658 3880 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
18:29:18.0698 3880 aliide - ok
18:29:18.0939 3880 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
18:29:18.0955 3880 amdagp - ok
18:29:18.0977 3880 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
18:29:18.0992 3880 amdide - ok
18:29:19.0120 3880 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
18:29:19.0181 3880 AmdK8 - ok
18:29:19.0299 3880 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
18:29:19.0334 3880 AmdPPM - ok
18:29:19.0457 3880 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
18:29:19.0472 3880 amdsata - ok
18:29:19.0556 3880 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
18:29:19.0573 3880 amdsbs - ok
18:29:19.0657 3880 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
18:29:19.0671 3880 amdxata - ok
18:29:19.0821 3880 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
18:29:19.0943 3880 AppID - ok
18:29:20.0090 3880 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
18:29:20.0109 3880 arc - ok
18:29:20.0135 3880 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
18:29:20.0152 3880 arcsas - ok
18:29:20.0265 3880 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
18:29:20.0393 3880 AsyncMac - ok
18:29:20.0500 3880 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
18:29:20.0513 3880 atapi - ok
18:29:20.0670 3880 athr (ac4adac154563ab41cc79b0257bc685a) C:\Windows\system32\DRIVERS\athr.sys
18:29:20.0799 3880 athr - ok
18:29:21.0056 3880 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
18:29:21.0325 3880 atikmdag - ok
18:29:21.0508 3880 Avgfwfd (c46ba2c177df0b84f9c0bfc1e4574dc7) C:\Windows\system32\DRIVERS\avgfwd6x.sys
18:29:21.0519 3880 Avgfwfd - ok
18:29:21.0670 3880 AVGIDSDriver (f6878b90a8a9795116bce335238e65af) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
18:29:21.0685 3880 AVGIDSDriver - ok
18:29:21.0904 3880 AVGIDSEH (19a08a6728a6e02099d64268218cd799) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
18:29:21.0916 3880 AVGIDSEH - ok
18:29:22.0062 3880 AVGIDSFilter (f8927ab1dd086edeff2924a64dc89869) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
18:29:22.0073 3880 AVGIDSFilter - ok
18:29:22.0196 3880 AVGIDSShim (44d562825d811eea3c8cd6140cbad5d0) C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
18:29:22.0207 3880 AVGIDSShim - ok
18:29:22.0345 3880 Avgldx86 (f4dbbc8d3c5338693da23c59a50f8abc) C:\Windows\system32\DRIVERS\avgldx86.sys
18:29:22.0362 3880 Avgldx86 - ok
18:29:22.0552 3880 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\Windows\system32\DRIVERS\avgmfx86.sys
18:29:22.0563 3880 Avgmfx86 - ok
18:29:22.0698 3880 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\Windows\system32\DRIVERS\avgrkx86.sys
18:29:22.0709 3880 Avgrkx86 - ok
18:29:22.0914 3880 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\Windows\system32\DRIVERS\avgtdix.sys
18:29:22.0931 3880 Avgtdix - ok
18:29:23.0072 3880 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
18:29:23.0201 3880 b06bdrv - ok
18:29:23.0318 3880 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
18:29:23.0339 3880 b57nd60x - ok
18:29:23.0477 3880 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
18:29:23.0530 3880 Beep - ok
18:29:23.0657 3880 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
18:29:23.0686 3880 blbdrive - ok
18:29:23.0800 3880 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
18:29:23.0944 3880 bowser - ok
18:29:23.0968 3880 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:29:24.0034 3880 BrFiltLo - ok
18:29:24.0140 3880 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:29:24.0178 3880 BrFiltUp - ok
18:29:24.0290 3880 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
18:29:24.0353 3880 Brserid - ok
18:29:24.0466 3880 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
18:29:24.0503 3880 BrSerWdm - ok
18:29:24.0608 3880 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
18:29:24.0646 3880 BrUsbMdm - ok
18:29:24.0742 3880 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
18:29:24.0774 3880 BrUsbSer - ok
18:29:24.0944 3880 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\drivers\BthEnum.sys
18:29:24.0987 3880 BthEnum - ok
18:29:25.0154 3880 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
18:29:25.0260 3880 BTHMODEM - ok
18:29:25.0610 3880 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
18:29:25.0676 3880 BthPan - ok
18:29:25.0808 3880 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\System32\Drivers\BTHport.sys
18:29:25.0863 3880 BTHPORT - ok
18:29:26.0015 3880 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\System32\Drivers\BTHUSB.sys
18:29:26.0042 3880 BTHUSB - ok
18:29:26.0199 3880 catchme - ok
18:29:26.0308 3880 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
18:29:26.0354 3880 cdfs - ok
18:29:26.0484 3880 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
18:29:26.0520 3880 cdrom - ok
18:29:26.0644 3880 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
18:29:26.0684 3880 circlass - ok
18:29:26.0819 3880 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
18:29:26.0840 3880 CLFS - ok
18:29:27.0028 3880 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
18:29:27.0048 3880 CmBatt - ok
18:29:27.0095 3880 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
18:29:27.0109 3880 cmdide - ok
18:29:27.0224 3880 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
18:29:27.0250 3880 CNG - ok
18:29:27.0366 3880 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
18:29:27.0381 3880 Compbatt - ok
18:29:27.0498 3880 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
18:29:27.0531 3880 CompositeBus - ok
18:29:27.0650 3880 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
18:29:27.0664 3880 crcdisk - ok
18:29:27.0812 3880 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
18:29:27.0877 3880 CSC - ok
18:29:28.0028 3880 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
18:29:28.0071 3880 DfsC - ok
18:29:28.0204 3880 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
18:29:28.0274 3880 discache - ok
18:29:28.0399 3880 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
18:29:28.0415 3880 Disk - ok
18:29:28.0554 3880 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
18:29:28.0585 3880 drmkaud - ok
18:29:28.0714 3880 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
18:29:28.0731 3880 dtsoftbus01 - ok
18:29:28.0785 3880 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
18:29:28.0836 3880 DXGKrnl - ok
18:29:29.0105 3880 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
18:29:29.0383 3880 ebdrv - ok
18:29:29.0585 3880 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
18:29:29.0634 3880 elxstor - ok
18:29:29.0828 3880 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
18:29:29.0882 3880 ErrDev - ok
18:29:30.0175 3880 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
18:29:30.0266 3880 exfat - ok
18:29:30.0417 3880 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
18:29:30.0528 3880 fastfat - ok
18:29:30.0669 3880 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
18:29:30.0725 3880 fdc - ok
18:29:30.0852 3880 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
18:29:30.0869 3880 FileInfo - ok
18:29:30.0896 3880 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
18:29:30.0945 3880 Filetrace - ok
18:29:31.0151 3880 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
18:29:31.0292 3880 flpydisk - ok
18:29:31.0721 3880 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
18:29:31.0740 3880 FltMgr - ok
18:29:32.0060 3880 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
18:29:32.0074 3880 FsDepends - ok
18:29:32.0185 3880 FsUsbExDisk (b07663a810e861eebfd0eac7e82ca62d) C:\Windows\system32\FsUsbExDisk.SYS
18:29:32.0222 3880 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning
18:29:32.0222 3880 FsUsbExDisk - detected UnsignedFile.Multi.Generic (1)
18:29:32.0362 3880 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
18:29:32.0382 3880 Fs_Rec - ok
18:29:32.0471 3880 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
18:29:32.0498 3880 fvevol - ok
18:29:32.0590 3880 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
18:29:32.0607 3880 gagp30kx - ok
18:29:32.0729 3880 GarenaPEngine - ok
18:29:32.0902 3880 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
18:29:32.0971 3880 hcw85cir - ok
18:29:33.0132 3880 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
18:29:33.0173 3880 HdAudAddService - ok
18:29:33.0293 3880 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
18:29:33.0341 3880 HDAudBus - ok
18:29:33.0452 3880 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
18:29:33.0497 3880 HidBatt - ok
18:29:33.0610 3880 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
18:29:33.0661 3880 HidBth - ok
18:29:33.0779 3880 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
18:29:33.0819 3880 HidIr - ok
18:29:33.0941 3880 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\drivers\hidusb.sys
18:29:33.0979 3880 HidUsb - ok
18:29:34.0123 3880 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
18:29:34.0141 3880 HpSAMD - ok
18:29:34.0189 3880 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
18:29:34.0244 3880 HTTP - ok
18:29:34.0353 3880 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
18:29:34.0368 3880 hwpolicy - ok
18:29:34.0417 3880 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
18:29:34.0449 3880 i8042prt - ok
18:29:34.0644 3880 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
18:29:34.0666 3880 iaStorV - ok
18:29:34.0839 3880 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
18:29:34.0853 3880 iirsp - ok
18:29:34.0898 3880 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
18:29:34.0913 3880 intelide - ok
18:29:35.0093 3880 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
18:29:35.0133 3880 intelppm - ok
18:29:35.0278 3880 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:29:35.0337 3880 IpFilterDriver - ok
18:29:35.0571 3880 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
18:29:35.0602 3880 IPMIDRV - ok
18:29:35.0728 3880 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
18:29:35.0805 3880 IPNAT - ok
18:29:35.0942 3880 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
18:29:36.0014 3880 IRENUM - ok
18:29:36.0151 3880 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
18:29:36.0167 3880 isapnp - ok
18:29:36.0250 3880 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
18:29:36.0273 3880 iScsiPrt - ok
18:29:36.0392 3880 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys
18:29:36.0407 3880 kbdclass - ok
18:29:36.0492 3880 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys
18:29:36.0526 3880 kbdhid - ok
18:29:36.0629 3880 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\Windows\system32\Drivers\ksecdd.sys
18:29:36.0644 3880 KSecDD - ok
18:29:36.0762 3880 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys
18:29:36.0782 3880 KSecPkg - ok
18:29:36.0950 3880 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
18:29:36.0962 3880 Lavasoft Kernexplorer - ok
18:29:37.0053 3880 Lbd (b7c19ec8b0dd7efa58ad41ffeb8b8cda) C:\Windows\system32\DRIVERS\Lbd.sys
18:29:37.0068 3880 Lbd - ok
18:29:37.0137 3880 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
18:29:37.0196 3880 lltdio - ok
18:29:37.0318 3880 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
18:29:37.0340 3880 LSI_FC - ok
18:29:37.0386 3880 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
18:29:37.0405 3880 LSI_SAS - ok
18:29:37.0515 3880 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:29:37.0530 3880 LSI_SAS2 - ok
18:29:37.0569 3880 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:29:37.0586 3880 LSI_SCSI - ok
18:29:37.0698 3880 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
18:29:37.0743 3880 luafv - ok
18:29:37.0798 3880 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
18:29:37.0812 3880 megasas - ok
18:29:37.0931 3880 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
18:29:37.0951 3880 MegaSR - ok
18:29:38.0136 3880 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
18:29:38.0189 3880 Modem - ok
18:29:38.0346 3880 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
18:29:38.0378 3880 monitor - ok
18:29:38.0506 3880 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\drivers\mouclass.sys
18:29:38.0524 3880 mouclass - ok
18:29:38.0660 3880 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
18:29:38.0696 3880 mouhid - ok
18:29:38.0809 3880 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
18:29:38.0828 3880 mountmgr - ok
18:29:38.0881 3880 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
18:29:38.0897 3880 mpio - ok
18:29:38.0992 3880 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
18:29:39.0044 3880 mpsdrv - ok
18:29:39.0088 3880 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
18:29:39.0136 3880 MRxDAV - ok
18:29:39.0240 3880 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:29:39.0280 3880 mrxsmb - ok
18:29:39.0325 3880 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:29:39.0362 3880 mrxsmb10 - ok
18:29:39.0463 3880 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:29:39.0502 3880 mrxsmb20 - ok
18:29:39.0534 3880 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
18:29:39.0550 3880 msahci - ok
18:29:39.0656 3880 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
18:29:39.0677 3880 msdsm - ok
18:29:39.0719 3880 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
18:29:39.0751 3880 Msfs - ok
18:29:39.0859 3880 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
18:29:39.0918 3880 mshidkmdf - ok
18:29:39.0963 3880 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
18:29:39.0979 3880 msisadrv - ok
18:29:40.0086 3880 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
18:29:40.0140 3880 MSKSSRV - ok
18:29:40.0205 3880 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
18:29:40.0252 3880 MSPCLOCK - ok
18:29:40.0341 3880 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
18:29:40.0391 3880 MSPQM - ok
18:29:40.0450 3880 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
18:29:40.0470 3880 MsRPC - ok
18:29:40.0519 3880 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
18:29:40.0532 3880 mssmbios - ok
18:29:40.0614 3880 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
18:29:40.0658 3880 MSTEE - ok
18:29:40.0750 3880 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
18:29:40.0780 3880 MTConfig - ok
18:29:40.0878 3880 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
18:29:40.0896 3880 Mup - ok
18:29:41.0020 3880 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
18:29:41.0059 3880 NativeWifiP - ok
18:29:41.0232 3880 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
18:29:41.0264 3880 NDIS - ok
18:29:41.0404 3880 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
18:29:41.0454 3880 NdisCap - ok
18:29:41.0735 3880 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
18:29:41.0784 3880 NdisTapi - ok
18:29:41.0910 3880 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
18:29:41.0943 3880 Ndisuio - ok
18:29:41.0987 3880 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
18:29:42.0038 3880 NdisWan - ok
18:29:42.0140 3880 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
18:29:42.0204 3880 NDProxy - ok
18:29:42.0322 3880 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
18:29:42.0365 3880 NetBIOS - ok
18:29:42.0408 3880 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
18:29:42.0442 3880 NetBT - ok
18:29:42.0579 3880 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
18:29:42.0595 3880 nfrd960 - ok
18:29:42.0624 3880 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
18:29:42.0671 3880 Npfs - ok
18:29:42.0779 3880 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
18:29:42.0827 3880 nsiproxy - ok
18:29:42.0893 3880 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
18:29:42.0960 3880 Ntfs - ok
18:29:43.0058 3880 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
18:29:43.0095 3880 Null - ok
18:29:43.0135 3880 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
18:29:43.0151 3880 nvraid - ok
18:29:43.0267 3880 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
18:29:43.0284 3880 nvstor - ok
18:29:43.0323 3880 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
18:29:43.0339 3880 nv_agp - ok
18:29:43.0473 3880 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
18:29:43.0519 3880 ohci1394 - ok
18:29:43.0640 3880 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
18:29:43.0659 3880 Parport - ok
18:29:43.0697 3880 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
18:29:43.0713 3880 partmgr - ok
18:29:43.0817 3880 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
18:29:43.0850 3880 Parvdm - ok
18:29:43.0894 3880 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
18:29:43.0912 3880 pci - ok
18:29:44.0020 3880 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
18:29:44.0034 3880 pciide - ok
18:29:44.0074 3880 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
18:29:44.0102 3880 pcmcia - ok
18:29:44.0215 3880 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
18:29:44.0230 3880 pcw - ok
18:29:44.0272 3880 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
18:29:44.0338 3880 PEAUTH - ok
18:29:44.0514 3880 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
18:29:44.0565 3880 PptpMiniport - ok
18:29:44.0615 3880 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
18:29:44.0644 3880 Processor - ok
18:29:44.0747 3880 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
18:29:44.0798 3880 Psched - ok
18:29:44.0932 3880 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
18:29:44.0981 3880 ql2300 - ok
18:29:45.0084 3880 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
18:29:45.0102 3880 ql40xx - ok
18:29:45.0133 3880 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
18:29:45.0153 3880 QWAVEdrv - ok
18:29:45.0174 3880 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
18:29:45.0228 3880 RasAcd - ok
18:29:45.0353 3880 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
18:29:45.0387 3880 RasAgileVpn - ok
18:29:45.0543 3880 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:29:45.0597 3880 Rasl2tp - ok
18:29:45.0735 3880 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
18:29:45.0790 3880 RasPppoe - ok
18:29:45.0907 3880 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
18:29:45.0952 3880 RasSstp - ok
18:29:45.0999 3880 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
18:29:46.0048 3880 rdbss - ok
18:29:46.0152 3880 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
18:29:46.0170 3880 rdpbus - ok
18:29:46.0222 3880 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:29:46.0263 3880 RDPCDD - ok
18:29:46.0386 3880 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
18:29:46.0451 3880 RDPDR - ok
18:29:46.0567 3880 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
18:29:46.0619 3880 RDPENCDD - ok
18:29:46.0652 3880 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
18:29:46.0695 3880 RDPREFMP - ok
18:29:46.0809 3880 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
18:29:46.0862 3880 RDPWD - ok
18:29:46.0993 3880 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
18:29:47.0014 3880 rdyboost - ok
18:29:47.0066 3880 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
18:29:47.0087 3880 RFCOMM - ok
18:29:47.0203 3880 rimmptsk (d65ac8797f0286ed269500747d6290a4) C:\Windows\system32\DRIVERS\rimmptsk.sys
18:29:47.0256 3880 rimmptsk - ok
18:29:47.0373 3880 rimsptsk (49ec82b44eb93374ed9988da7e0e0151) C:\Windows\system32\DRIVERS\rimsptsk.sys
18:29:47.0415 3880 rimsptsk - ok
18:29:47.0578 3880 rismxdp (6c1f93c0760c9f79a1869d07233df39d) C:\Windows\system32\DRIVERS\rixdptsk.sys
18:29:47.0625 3880 rismxdp - ok
18:29:47.0750 3880 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
18:29:47.0797 3880 rspndr - ok
18:29:47.0910 3880 RTL8167 (7dfd48e24479b68b258d8770121155a0) C:\Windows\system32\DRIVERS\Rt86win7.sys
18:29:47.0947 3880 RTL8167 - ok
18:29:48.0061 3880 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
18:29:48.0133 3880 s3cap - ok
18:29:48.0294 3880 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
18:29:48.0310 3880 sbp2port - ok
18:29:48.0365 3880 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
18:29:48.0395 3880 scfilter - ok
18:29:48.0519 3880 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
18:29:48.0578 3880 sdbus - ok
18:29:48.0688 3880 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
18:29:48.0739 3880 secdrv - ok
18:29:48.0863 3880 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
18:29:48.0880 3880 Serenum - ok
18:29:48.0906 3880 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
18:29:48.0957 3880 Serial - ok
18:29:49.0071 3880 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
18:29:49.0123 3880 sermouse - ok
18:29:49.0250 3880 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
18:29:49.0281 3880 sffdisk - ok
18:29:49.0307 3880 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
18:29:49.0338 3880 sffp_mmc - ok
18:29:49.0448 3880 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
18:29:49.0488 3880 sffp_sd - ok
18:29:49.0593 3880 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
18:29:49.0625 3880 sfloppy - ok
18:29:49.0700 3880 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
18:29:49.0714 3880 sisagp - ok
18:29:49.0830 3880 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:29:49.0846 3880 SiSRaid2 - ok
18:29:49.0874 3880 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
18:29:49.0889 3880 SiSRaid4 - ok
18:29:50.0000 3880 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
18:29:50.0034 3880 Smb - ok
18:29:50.0185 3880 snapman (eb49860e776ce860dc3cfb9edb1ba517) C:\Windows\system32\DRIVERS\snapman.sys
18:29:50.0212 3880 snapman - ok
18:29:50.0252 3880 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
18:29:50.0267 3880 spldr - ok
18:29:50.0297 3880 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
18:29:50.0344 3880 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
18:29:50.0344 3880 \Device\Harddisk0\DR0 - detected TDSS File System (1)
18:29:50.0349 3880 Boot (0x1200) (a0226559c711c02f34a6fd9bd18ec6fc) \Device\Harddisk0\DR0\Partition0
18:29:50.0350 3880 \Device\Harddisk0\DR0\Partition0 - ok
18:29:50.0379 3880 Boot (0x1200) (057bbfe4ec3e884e1568c4ffb4dbdb61) \Device\Harddisk0\DR0\Partition1
18:29:50.0380 3880 \Device\Harddisk0\DR0\Partition1 - ok
18:29:50.0398 3880 Boot (0x1200) (e197bb987326f54a05ce0608d7b6d6c2) \Device\Harddisk0\DR0\Partition2
18:29:50.0399 3880 \Device\Harddisk0\DR0\Partition2 - ok
18:29:50.0400 3880 ============================================================
18:29:50.0400 3880 Scan finished
18:29:50.0400 3880 ============================================================
18:29:50.0415 1652 Detected object count: 2
18:29:50.0415 1652 Actual detected object count: 2
18:30:20.0540 1652 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:20.0540 1652 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:30:20.0554 1652 \Device\Harddisk0\DR0\TDLFS - deleted
18:30:20.0554 1652 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete

Ahoj,
ještě jednou jsem to projela - je to v pořádku, bylo to vymazáno