VIRY.CZ

Dobrý den, prosím o kontrolu logu. Po samovolném restartu problém s načtením windows, eset zachytil infiltrace trojského koně.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Roman at 2012-03-12 09:46:36
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 59 GB (39%) free of 153 GB
Total RAM: 2815 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:46:37, on 12.3.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.1\System32\smss.exe
C:\WINDOWS.1\system32\winlogon.exe
C:\WINDOWS.1\system32\services.exe
C:\WINDOWS.1\system32\lsass.exe
C:\WINDOWS.1\system32\nvsvc32.exe
C:\WINDOWS.1\system32\svchost.exe
C:\WINDOWS.1\System32\svchost.exe
C:\WINDOWS.1\system32\svchost.exe
C:\WINDOWS.1\Explorer.EXE
C:\WINDOWS.1\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS.1\system32\ctfmon.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\WINDOWS.1\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\WINDOWS.1\system32\wbem\wmiapsrv.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\Roman.HOME-COMPIK\Plocha\RSIT.exe
C:\Program Files\Trend Micro\Roman.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.1\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.1\system32\ctfmon.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.1\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.1\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.1\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.1\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.1\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.1\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NetMeeting - Vzdálené sdílení plochy (mnmsrvc) - Unknown owner - C:\WINDOWS.1\system32\mnmsrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.1\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Správce relací nápovědy ke vzdálené ploše (RDSessMgr) - Unknown owner - C:\WINDOWS.1\system32\sessmgr.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 9796 bytes

======Scheduled tasks folder======

C:\WINDOWS.1\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS.1\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS.1\tasks\User_Feed_Synchronization-{C58B4DCC-6785-4332-B2BF-ABB6FBCFA138}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll [2009-02-13 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-08-05 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-08-05 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\LangSoft\WebIE.dll [2009-02-13 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS.1\system32\NvCpl.dll [2010-01-11 13666408]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 3080264]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ctfmon.exe"=C:\WINDOWS.1\system32\ctfmon.exe [2008-04-14 15360]
"mRouterConfig"=C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite for Smartphones]
C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-11-08 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerArchiver Tray]
C:\Program Files\PowerArchiver\PASTARTER.EXE [2009-07-17 508736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS.1\SOUNDMAN.EXE [2007-04-16 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-11-08 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2012-02-24 4617600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe [2011-07-11 74752]

C:\Documents and Settings\All Users.WINDOWS.1\Nabídka Start\Programy\Po spuštění
Secunia PSI Tray.lnk - C:\Program Files\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\EFS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS.1\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS.1\system32\wpdshserviceobj.dll [2008-08-08 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS.1\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-08-04 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=0x00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe"="C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe:*:Enabled:SiSoftware Deployment Agent Service"
"C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\RpcSandraSrv.exe"="C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Skype.exe"="C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=i420vfw.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS.1\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS.1\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.yv12"=yv12vfw.dll

======List of files/folders created in the last 1 month======

2012-02-15 13:46:08 ----HDC---- C:\WINDOWS.1\$NtUninstallKB2660465$
2012-02-15 13:41:57 ----HDC---- C:\WINDOWS.1\$NtUninstallKB2661637$
2012-02-15 12:36:47 ----N---- C:\WINDOWS.1\system32\iacenc.dll

======List of files/folders modified in the last 1 month======

2012-03-12 09:46:37 ----D---- C:\Program Files\Trend Micro
2012-03-12 09:10:33 ----D---- C:\WINDOWS.1\Temp
2012-03-12 09:07:53 ----D---- C:\WINDOWS.1\system32\CatRoot2
2012-03-12 09:07:11 ----D---- C:\WINDOWS.1
2012-03-12 09:04:44 ----D---- C:\WINDOWS.1\system32\drivers
2012-03-12 02:18:37 ----A---- C:\WINDOWS.1\wincmd.ini
2012-03-12 01:49:14 ----D---- C:\WINDOWS.1\Prefetch
2012-03-12 01:31:09 ----AD---- C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\TEMP
2012-03-12 01:20:05 ----D---- C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\Spybot - Search & Destroy
2012-03-12 01:16:32 ----D---- C:\WINDOWS.1\system32
2012-03-12 01:13:53 ----N---- C:\WINDOWS.1\SchedLgU.Txt
2012-03-11 21:19:50 ----D---- C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\Skype
2012-03-11 16:38:59 ----A---- C:\WINDOWS.1\NeroDigital.ini
2012-03-10 17:31:58 ----D---- C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\YouTube Downloader
2012-03-09 08:49:58 ----D---- C:\Program Files\JDownloader
2012-03-08 17:37:57 ----D---- C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\MyPhoneExplorer
2012-03-07 22:48:20 ----D---- C:\Program Files\TNod User & Password Finder
2012-03-07 20:42:30 ----D---- C:\Program Files\PowerArchiver
2012-03-05 09:38:02 ----D---- C:\WINDOWS.1\Sun
2012-03-05 08:35:22 ----D---- C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\Winamp
2012-03-03 15:13:45 ----SHD---- C:\System Volume Information
2012-03-03 15:13:45 ----D---- C:\WINDOWS.1\system32\Restore
2012-02-24 23:13:55 ----D---- C:\WINDOWS.1\Debug
2012-02-24 22:59:21 ----D---- C:\Program Files\SUPERAntiSpyware
2012-02-23 20:35:21 ----D---- C:\Documents and Settings\Roman.HOME-COMPIK\Data aplikací\XnView
2012-02-15 13:59:07 ----D---- C:\WINDOWS.1\Microsoft.NET
2012-02-15 13:59:03 ----RSD---- C:\WINDOWS.1\assembly
2012-02-15 13:51:07 ----D---- C:\Program Files\Microsoft Silverlight
2012-02-15 13:51:04 ----D---- C:\Program Files\Internet Explorer
2012-02-15 13:47:08 ----SHD---- C:\WINDOWS.1\Installer
2012-02-15 13:47:07 ----D---- C:\Config.Msi
2012-02-15 13:46:13 ----HD---- C:\WINDOWS.1\inf
2012-02-15 13:46:11 ----RSHDC---- C:\WINDOWS.1\system32\dllcache
2012-02-15 13:43:20 ----A---- C:\WINDOWS.1\system32\MRT.exe
2012-02-15 13:42:25 ----HD---- C:\WINDOWS.1\$hf_mig$
2012-02-15 13:40:51 ----A---- C:\WINDOWS.1\system32\PerfStringBackup.INI
2012-02-15 13:40:19 ----D---- C:\WINDOWS.1\WinSxS
2012-02-15 13:37:12 ----D---- C:\Documents and Settings\All Users.WINDOWS.1\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 imagedrv;imagedrv; C:\WINDOWS.1\System32\Drivers\imagedrv.sys [2007-07-03 11304]
R0 imagesrv;imagesrv; C:\WINDOWS.1\system32\DRIVERS\imagesrv.sys [2007-07-03 132904]
R0 nvatabus;nvatabus; C:\WINDOWS.1\system32\DRIVERS\nvatabus.sys [2006-02-26 89856]
R0 nvcchflt;NVIDIA Disk Cache Filter Driver; C:\WINDOWS.1\system32\DRIVERS\nvcchflt.sys [2006-02-26 16640]
R0 PxHelp20;PxHelp20; C:\WINDOWS.1\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS.1\system32\DRIVERS\WudfPf.sys [2008-08-08 77568]
R1 AmdK8;AMD Processor Driver; C:\WINDOWS.1\system32\DRIVERS\AmdK8.sys [2006-06-19 36864]
R1 ehdrv;ehdrv; C:\WINDOWS.1\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS.1\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\WINDOWS.1\system32\Drivers\eusk2par.sys []
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 SCDEmu;SCDEmu; C:\WINDOWS.1\system32\drivers\SCDEmu.sys [2011-06-15 60156]
R2 eamon;eamon; C:\WINDOWS.1\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 epfw;epfw; C:\WINDOWS.1\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS.1\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 AR9271;Wireless Network Adapter Service; C:\WINDOWS.1\system32\DRIVERS\athuw.sys [2010-01-04 1714176]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS.1\system32\DRIVERS\Epfwndis.sys [2011-08-09 39824]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS.1\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS.1\system32\DRIVERS\L8042Kbd.sys [2006-07-19 13568]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS.1\system32\drivers\mbam.sys []
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS.1\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS.1\system32\DRIVERS\nv4_mini.sys [2010-01-12 10276768]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS.1\system32\DRIVERS\NVENETFD.sys [2006-08-07 52736]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS.1\system32\DRIVERS\nvnetbus.sys [2006-08-07 18944]
R3 PSI;PSI; C:\WINDOWS.1\system32\DRIVERS\psi_mf.sys [2010-09-01 15544]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys []
R3 usbprint;Třída USB Printer; C:\WINDOWS.1\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS.1\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 xcpip;Ovladač protokolu TCP/IP; C:\WINDOWS.1\system32\drivers\xcpip.sys []
R3 xpsec;Ovladač IPSEC; C:\WINDOWS.1\system32\drivers\xpsec.sys []
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); C:\WINDOWS.1\system32\DRIVERS\zebrceb.sys [2009-02-13 63360]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS.1\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 catchme;catchme; \??\C:\DOCUME~1\ROMAN~1.HOM\LOCALS~1\Temp\catchme.sys []
S3 eusk3usb;SmartKey 3 USB; C:\WINDOWS.1\System32\Drivers\eusk3usb.sys [2004-11-18 45534]
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS.1\system32\DRIVERS\ggflt.sys [2010-04-08 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS.1\system32\DRIVERS\ggsemc.sys [2010-04-08 25512]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS.1\system32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS.1\system32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS.1\system32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS.1\system32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS.1\system32\DRIVERS\k750obex.sys []
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS.1\System32\Drivers\pcouffin.sys [2010-05-28 47360]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\WINDOWS.1\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\WINDOWS.1\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\WINDOWS.1\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\WINDOWS.1\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\WINDOWS.1\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\WINDOWS.1\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\WINDOWS.1\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\WINDOWS.1\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\WINDOWS.1\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\WINDOWS.1\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\WINDOWS.1\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\WINDOWS.1\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\WINDOWS.1\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\WINDOWS.1\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\Sandra.sys []
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS.1\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS.1\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS.1\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS.1\system32\DRIVERS\wpdusb.sys [2008-08-08 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS.1\system32\DRIVERS\wudfrd.sys [2008-08-08 82944]
S3 zebrbus;Sony Ericsson Composite Device driver; C:\WINDOWS.1\system32\DRIVERS\zebrbus.sys [2007-04-13 83080]
S3 zebrmdfl;Sony Ericsson Modem Filter; C:\WINDOWS.1\system32\DRIVERS\zebrmdfl.sys [2007-04-13 15112]
S3 zebrmdm;Sony Ericsson Port (WDM); C:\WINDOWS.1\system32\DRIVERS\zebrmdm.sys [2007-04-13 108296]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM); C:\WINDOWS.1\system32\DRIVERS\zebrmdmc.sys [2007-04-13 108424]
S3 zebrsce;Sony Ericsson PC-Connect Port; C:\WINDOWS.1\system32\DRIVERS\zebrsce.sys [2007-04-13 90888]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-09-04 116608]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-22 974944]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-08-05 153376]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS.1\system32\nvsvc32.exe [2010-01-11 154216]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [2010-12-21 987704]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [2010-12-21 399416]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-06-06 1524544]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS.1\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS.1\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-08 135664]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS.1\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS.1\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-08 135664]
S3 idsvc;Windows CardSpace; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAge /hide /waitservice
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search ntSrv.exe [2008-12-11 98488]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanionNoDrives; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-02-10 150528]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

odinstaluj SpyBot
a napis kde nasiel NOD infiltraciu

NOD infiltrace:

C:\WINDOWS.1\TEMP\A02.tmp varianta infiltrace Win32/Rootkit.Kryptik.KF trojský kůň C:\DOCUME~1\ROMAN~1.HOM\LOCALS~1\Temp\9FF.tmp varianta infiltrace Win32/Rootkit.Kryptik.KF trojský kůň
C:\WINDOWS.1\system32\drivers\3r485.sys varianta infiltrace Win32/Rootkit.Kryptik.KF trojský kůň

zda sa, ze si s nim NOD poradil
spust este TDSSKiller
+
kolega ma upozornil na cernotu ohladne NOD-u, takze nateraz koncime

Log TDSSKILLER

11:29:07.0234 3452 TDSS rootkit removing tool 2.7.20.0 Mar 9 2012 17:10:43
11:29:07.0375 3452 ============================================================
11:29:07.0375 3452 Current date / time: 2012/03/12 11:29:07.0375
11:29:07.0375 3452 SystemInfo:
11:29:07.0375 3452
11:29:07.0375 3452 OS Version: 5.1.2600 ServicePack: 3.0
11:29:07.0375 3452 Product type: Workstation
11:29:07.0375 3452 ComputerName: HOME-COMPIK
11:29:07.0375 3452 UserName: Roman
11:29:07.0375 3452 Windows directory: C:\WINDOWS.1
11:29:07.0375 3452 System windows directory: C:\WINDOWS.1
11:29:07.0375 3452 Processor architecture: Intel x86
11:29:07.0375 3452 Number of processors: 2
11:29:07.0375 3452 Page size: 0x1000
11:29:07.0375 3452 Boot type: Normal boot
11:29:07.0375 3452 ============================================================
11:29:08.0062 3452 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
11:29:08.0531 3452 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
11:29:08.0531 3452 \Device\Harddisk0\DR0:
11:29:08.0531 3452 MBR used
11:29:08.0531 3452 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1
11:29:08.0531 3452 \Device\Harddisk1\DR1:
11:29:08.0531 3452 MBR used
11:29:08.0531 3452 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x249F0000
11:29:08.0531 3452 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x249F0800, BlocksNum 0x15995000
11:29:08.0937 3452 Initialize success
11:29:08.0937 3452 ============================================================
11:29:16.0625 0716 ============================================================
11:29:16.0625 0716 Scan started
11:29:16.0625 0716 Mode: Manual;
11:29:16.0625 0716 ============================================================
11:29:16.0984 0716 Abiosdsk - ok
11:29:17.0015 0716 abp480n5 - ok
11:29:17.0093 0716 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS.1\system32\DRIVERS\ACPI.sys
11:29:17.0093 0716 ACPI - ok
11:29:17.0203 0716 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS.1\system32\drivers\ACPIEC.sys
11:29:17.0203 0716 ACPIEC - ok
11:29:17.0296 0716 adpu160m - ok
11:29:17.0406 0716 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS.1\system32\drivers\aec.sys
11:29:17.0406 0716 aec - ok
11:29:17.0531 0716 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS.1\System32\drivers\afd.sys
11:29:17.0546 0716 AFD - ok
11:29:17.0609 0716 Aha154x - ok
11:29:17.0640 0716 aic78u2 - ok
11:29:17.0703 0716 aic78xx - ok
11:29:17.0921 0716 ALCXWDM (d9026163ed32a13923a2c909897a6b87) C:\WINDOWS.1\system32\drivers\ALCXWDM.SYS
11:29:17.0953 0716 ALCXWDM - ok
11:29:18.0046 0716 AliIde - ok
11:29:18.0109 0716 AmdK8 (0a4d13b388c814560bd69c3a496ecfa8) C:\WINDOWS.1\system32\DRIVERS\AmdK8.sys
11:29:18.0109 0716 AmdK8 - ok
11:29:18.0140 0716 amsint - ok
11:29:18.0281 0716 AR9271 (8e2257584b2c52d44b4cb1949947d885) C:\WINDOWS.1\system32\DRIVERS\athuw.sys
11:29:18.0296 0716 AR9271 - ok
11:29:18.0328 0716 asc - ok
11:29:18.0343 0716 asc3350p - ok
11:29:18.0375 0716 asc3550 - ok
11:29:18.0453 0716 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS.1\system32\DRIVERS\asyncmac.sys
11:29:18.0453 0716 AsyncMac - ok
11:29:18.0484 0716 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS.1\system32\drivers\atapi.sys
11:29:18.0484 0716 atapi - ok
11:29:18.0562 0716 Atdisk - ok
11:29:18.0671 0716 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS.1\system32\DRIVERS\atmarpc.sys
11:29:18.0671 0716 Atmarpc - ok
11:29:18.0750 0716 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS.1\system32\DRIVERS\audstub.sys
11:29:18.0765 0716 audstub - ok
11:29:18.0890 0716 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS.1\system32\drivers\Beep.sys
11:29:18.0890 0716 Beep - ok
11:29:19.0062 0716 catchme - ok
11:29:19.0218 0716 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS.1\system32\drivers\cbidf2k.sys
11:29:19.0218 0716 cbidf2k - ok
11:29:19.0250 0716 cd20xrnt - ok
11:29:19.0312 0716 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS.1\system32\drivers\Cdaudio.sys
11:29:19.0312 0716 Cdaudio - ok
11:29:19.0375 0716 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS.1\system32\drivers\Cdfs.sys
11:29:19.0390 0716 Cdfs - ok
11:29:19.0421 0716 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS.1\system32\DRIVERS\cdrom.sys
11:29:19.0421 0716 Cdrom - ok
11:29:19.0484 0716 Changer - ok
11:29:19.0546 0716 CmdIde - ok
11:29:19.0625 0716 Cpqarray - ok
11:29:19.0656 0716 dac2w2k - ok
11:29:19.0718 0716 dac960nt - ok
11:29:19.0812 0716 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS.1\system32\DRIVERS\disk.sys
11:29:19.0812 0716 Disk - ok
11:29:19.0906 0716 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS.1\system32\drivers\dmboot.sys
11:29:19.0906 0716 dmboot - ok
11:29:20.0046 0716 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS.1\system32\drivers\dmio.sys
11:29:20.0046 0716 dmio - ok
11:29:20.0093 0716 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS.1\system32\drivers\dmload.sys
11:29:20.0093 0716 dmload - ok
11:29:20.0234 0716 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS.1\system32\drivers\DMusic.sys
11:29:20.0234 0716 DMusic - ok
11:29:20.0281 0716 dpti2o - ok
11:29:20.0359 0716 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS.1\system32\drivers\drmkaud.sys
11:29:20.0359 0716 drmkaud - ok
11:29:20.0437 0716 eamon (9309c5c9831203436e64cf2ae605c5d7) C:\WINDOWS.1\system32\DRIVERS\eamon.sys
11:29:20.0437 0716 eamon - ok
11:29:20.0562 0716 ehdrv (deff87f04ab5f6dd5edf2b80853bbe10) C:\WINDOWS.1\system32\DRIVERS\ehdrv.sys
11:29:20.0562 0716 ehdrv - ok
11:29:20.0671 0716 epfw (5ba193ca0ae31209aaa39939ce6736b2) C:\WINDOWS.1\system32\DRIVERS\epfw.sys
11:29:20.0671 0716 epfw - ok
11:29:20.0828 0716 Epfwndis (75d3bcd3e0eded0ab0f96d9a10ff01c9) C:\WINDOWS.1\system32\DRIVERS\Epfwndis.sys
11:29:20.0828 0716 Epfwndis - ok
11:29:20.0953 0716 epfwtdi (dc64f26f35e32c9472bbf8acd84060d3) C:\WINDOWS.1\system32\DRIVERS\epfwtdi.sys
11:29:20.0953 0716 epfwtdi - ok
11:29:21.0031 0716 eusk2par (f7955f5273f7ca5da13ebeef4f736c44) C:\WINDOWS.1\system32\Drivers\eusk2par.sys
11:29:21.0031 0716 eusk2par - ok
11:29:21.0140 0716 eusk3usb (988e553a4fe340c281376bee5b5c6222) C:\WINDOWS.1\system32\Drivers\eusk3usb.sys
11:29:21.0140 0716 eusk3usb - ok
11:29:21.0218 0716 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS.1\system32\drivers\Fastfat.sys
11:29:21.0234 0716 Fastfat - ok
11:29:21.0312 0716 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS.1\system32\DRIVERS\fdc.sys
11:29:21.0468 0716 Fdc - ok
11:29:21.0546 0716 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS.1\system32\drivers\Fips.sys
11:29:21.0546 0716 Fips - ok
11:29:21.0578 0716 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS.1\system32\DRIVERS\flpydisk.sys
11:29:21.0593 0716 Flpydisk - ok
11:29:21.0750 0716 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS.1\system32\DRIVERS\fltMgr.sys
11:29:21.0765 0716 FltMgr - ok
11:29:21.0906 0716 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS.1\system32\drivers\Fs_Rec.sys
11:29:21.0906 0716 Fs_Rec - ok
11:29:21.0937 0716 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS.1\system32\DRIVERS\ftdisk.sys
11:29:21.0937 0716 Ftdisk - ok
11:29:22.0078 0716 ggflt (007aea2e06e7cef7372e40c277163959) C:\WINDOWS.1\system32\DRIVERS\ggflt.sys
11:29:22.0078 0716 ggflt - ok
11:29:22.0125 0716 ggsemc (c73de35960ca75c5ab4ae636b127c64e) C:\WINDOWS.1\system32\DRIVERS\ggsemc.sys
11:29:22.0125 0716 ggsemc - ok
11:29:22.0265 0716 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS.1\system32\DRIVERS\msgpc.sys
11:29:22.0265 0716 Gpc - ok
11:29:22.0375 0716 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS.1\system32\DRIVERS\hidusb.sys
11:29:22.0375 0716 hidusb - ok
11:29:22.0390 0716 hpn - ok
11:29:22.0468 0716 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS.1\system32\Drivers\HTTP.sys
11:29:22.0468 0716 HTTP - ok
11:29:22.0562 0716 i2omgmt - ok
11:29:22.0687 0716 i2omp - ok
11:29:22.0781 0716 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS.1\system32\DRIVERS\i8042prt.sys
11:29:22.0781 0716 i8042prt - ok
11:29:22.0890 0716 imagedrv (9b1393f7c408f1bef936a3ef43571a78) C:\WINDOWS.1\system32\Drivers\imagedrv.sys
11:29:22.0890 0716 imagedrv - ok
11:29:23.0000 0716 imagesrv (96fd40e6c2a22150d5492203717a2409) C:\WINDOWS.1\system32\DRIVERS\imagesrv.sys
11:29:23.0000 0716 imagesrv - ok
11:29:23.0109 0716 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS.1\system32\DRIVERS\imapi.sys
11:29:23.0109 0716 Imapi - ok
11:29:23.0187 0716 ini910u - ok
11:29:23.0250 0716 IntelIde - ok
11:29:23.0312 0716 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS.1\system32\DRIVERS\Ip6Fw.sys
11:29:23.0312 0716 Ip6Fw - ok
11:29:23.0390 0716 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS.1\system32\DRIVERS\ipfltdrv.sys
11:29:23.0390 0716 IpFilterDriver - ok
11:29:23.0500 0716 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS.1\system32\DRIVERS\ipinip.sys
11:29:23.0500 0716 IpInIp - ok
11:29:23.0562 0716 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS.1\system32\DRIVERS\ipnat.sys
11:29:23.0562 0716 IpNat - ok
11:29:23.0703 0716 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS.1\system32\DRIVERS\ipsec.sys
11:29:23.0703 0716 IPSec - ok
11:29:23.0765 0716 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS.1\system32\DRIVERS\irenum.sys
11:29:23.0765 0716 IRENUM - ok
11:29:23.0859 0716 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS.1\system32\DRIVERS\isapnp.sys
11:29:23.0859 0716 isapnp - ok
11:29:23.0875 0716 k750bus - ok
11:29:23.0953 0716 k750mdfl - ok
11:29:24.0015 0716 k750mdm - ok
11:29:24.0078 0716 k750mgmt - ok
11:29:24.0093 0716 k750obex - ok
11:29:24.0203 0716 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS.1\system32\DRIVERS\kbdclass.sys
11:29:24.0218 0716 Kbdclass - ok
11:29:24.0281 0716 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS.1\system32\DRIVERS\kbdhid.sys
11:29:24.0281 0716 kbdhid - ok
11:29:24.0375 0716 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS.1\system32\drivers\kmixer.sys
11:29:24.0390 0716 kmixer - ok
11:29:24.0453 0716 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS.1\system32\drivers\KSecDD.sys
11:29:24.0453 0716 KSecDD - ok
11:29:24.0562 0716 L8042Kbd (0f5ae6805ef05dbbe205e5b196cadf31) C:\WINDOWS.1\system32\DRIVERS\L8042Kbd.sys
11:29:24.0562 0716 L8042Kbd - ok
11:29:24.0625 0716 lbrtfdc - ok
11:29:24.0734 0716 MBAMProtector (836e0e09ca9869be7eb39ef2cf3602c7) C:\WINDOWS.1\system32\drivers\mbam.sys
11:29:24.0734 0716 MBAMProtector - ok
11:29:24.0828 0716 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS.1\system32\drivers\mnmdd.sys
11:29:24.0828 0716 mnmdd - ok
11:29:24.0906 0716 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS.1\system32\drivers\Modem.sys
11:29:24.0906 0716 Modem - ok
11:29:25.0015 0716 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS.1\system32\DRIVERS\mouclass.sys
11:29:25.0015 0716 Mouclass - ok
11:29:25.0078 0716 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS.1\system32\DRIVERS\mouhid.sys
11:29:25.0078 0716 mouhid - ok
11:29:25.0156 0716 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS.1\system32\drivers\MountMgr.sys
11:29:25.0156 0716 MountMgr - ok
11:29:25.0218 0716 mraid35x - ok
11:29:25.0328 0716 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS.1\system32\DRIVERS\mrxdav.sys
11:29:25.0328 0716 MRxDAV - ok
11:29:25.0437 0716 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS.1\system32\DRIVERS\mrxsmb.sys
11:29:25.0453 0716 MRxSmb - ok
11:29:25.0546 0716 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS.1\system32\drivers\Msfs.sys
11:29:25.0546 0716 Msfs - ok
11:29:25.0609 0716 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS.1\system32\drivers\MSKSSRV.sys
11:29:25.0609 0716 MSKSSRV - ok
11:29:25.0734 0716 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS.1\system32\drivers\MSPCLOCK.sys
11:29:25.0734 0716 MSPCLOCK - ok
11:29:25.0765 0716 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS.1\system32\drivers\MSPQM.sys
11:29:25.0765 0716 MSPQM - ok
11:29:25.0875 0716 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS.1\system32\DRIVERS\mssmbios.sys
11:29:25.0875 0716 mssmbios - ok
11:29:25.0984 0716 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS.1\system32\drivers\Mup.sys
11:29:26.0000 0716 Mup - ok
11:29:26.0140 0716 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS.1\system32\drivers\NDIS.sys
11:29:26.0156 0716 NDIS - ok
11:29:26.0296 0716 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS.1\system32\DRIVERS\ndistapi.sys
11:29:26.0296 0716 NdisTapi - ok
11:29:26.0406 0716 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS.1\system32\DRIVERS\ndisuio.sys
11:29:26.0406 0716 Ndisuio - ok
11:29:26.0531 0716 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS.1\system32\DRIVERS\ndiswan.sys
11:29:26.0531 0716 NdisWan - ok
11:29:26.0671 0716 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS.1\system32\drivers\NDProxy.sys
11:29:26.0671 0716 NDProxy - ok
11:29:26.0734 0716 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS.1\system32\DRIVERS\netbios.sys
11:29:26.0734 0716 NetBIOS - ok
11:29:26.0812 0716 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS.1\system32\DRIVERS\netbt.sys
11:29:26.0812 0716 NetBT - ok
11:29:26.0921 0716 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS.1\system32\drivers\Npfs.sys
11:29:26.0921 0716 Npfs - ok
11:29:26.0968 0716 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS.1\system32\drivers\Ntfs.sys
11:29:27.0046 0716 Ntfs - ok
11:29:27.0203 0716 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS.1\system32\drivers\Null.sys
11:29:27.0203 0716 Null - ok
11:29:27.0687 0716 nv (cb0ce8de9f66a297cd86eb98921b8e58) C:\WINDOWS.1\system32\DRIVERS\nv4_mini.sys
11:29:27.0765 0716 nv - ok
11:29:27.0875 0716 nvatabus (83f0275a21d9772b51cef57e35afae61) C:\WINDOWS.1\system32\DRIVERS\nvatabus.sys
11:29:27.0890 0716 nvatabus - ok
11:29:27.0937 0716 nvcchflt (fb7213bc5279c1af5e4e9ca05d944f2c) C:\WINDOWS.1\system32\DRIVERS\nvcchflt.sys
11:29:27.0953 0716 nvcchflt - ok
11:29:28.0078 0716 NVENETFD (974551a956f3269f460d4b18101eec46) C:\WINDOWS.1\system32\DRIVERS\NVENETFD.sys
11:29:28.0078 0716 NVENETFD - ok
11:29:28.0140 0716 nvnetbus (7fc2baf84006f28cb9f477a167fff9ba) C:\WINDOWS.1\system32\DRIVERS\nvnetbus.sys
11:29:28.0140 0716 nvnetbus - ok
11:29:28.0265 0716 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS.1\system32\DRIVERS\nwlnkflt.sys
11:29:28.0265 0716 NwlnkFlt - ok
11:29:28.0375 0716 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS.1\system32\DRIVERS\nwlnkfwd.sys
11:29:28.0375 0716 NwlnkFwd - ok
11:29:28.0453 0716 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS.1\system32\DRIVERS\parport.sys
11:29:28.0468 0716 Parport - ok
11:29:28.0531 0716 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS.1\system32\drivers\PartMgr.sys
11:29:28.0531 0716 PartMgr - ok
11:29:28.0593 0716 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS.1\system32\drivers\ParVdm.sys
11:29:28.0609 0716 ParVdm - ok
11:29:28.0703 0716 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS.1\system32\DRIVERS\pci.sys
11:29:28.0718 0716 PCI - ok
11:29:28.0734 0716 PCIDump - ok
11:29:28.0796 0716 PCIIde - ok
11:29:28.0875 0716 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS.1\system32\drivers\Pcmcia.sys
11:29:28.0875 0716 Pcmcia - ok
11:29:28.0984 0716 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS.1\system32\Drivers\pcouffin.sys
11:29:28.0984 0716 pcouffin - ok
11:29:29.0015 0716 PDCOMP - ok
11:29:29.0031 0716 PDFRAME - ok
11:29:29.0062 0716 PDRELI - ok
11:29:29.0093 0716 PDRFRAME - ok
11:29:29.0125 0716 perc2 - ok
11:29:29.0140 0716 perc2hib - ok
11:29:29.0234 0716 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS.1\system32\DRIVERS\raspptp.sys
11:29:29.0234 0716 PptpMiniport - ok
11:29:29.0515 0716 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS.1\system32\DRIVERS\psched.sys
11:29:29.0515 0716 PSched - ok
11:29:29.0656 0716 PSI (d24dfd16a1e2a76034df5aa18125c35d) C:\WINDOWS.1\system32\DRIVERS\psi_mf.sys
11:29:29.0656 0716 PSI - ok
11:29:29.0765 0716 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS.1\system32\DRIVERS\ptilink.sys
11:29:29.0765 0716 Ptilink - ok
11:29:29.0843 0716 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS.1\system32\Drivers\PxHelp20.sys
11:29:29.0843 0716 PxHelp20 - ok
11:29:29.0968 0716 ql1080 - ok
11:29:29.0984 0716 Ql10wnt - ok
11:29:30.0046 0716 ql12160 - ok
11:29:30.0109 0716 ql1240 - ok
11:29:30.0171 0716 ql1280 - ok
11:29:30.0281 0716 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS.1\system32\DRIVERS\rasacd.sys
11:29:30.0281 0716 RasAcd - ok
11:29:30.0437 0716 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS.1\system32\DRIVERS\rasl2tp.sys
11:29:30.0437 0716 Rasl2tp - ok
11:29:30.0687 0716 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS.1\system32\DRIVERS\raspppoe.sys
11:29:30.0687 0716 RasPppoe - ok
11:29:30.0796 0716 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS.1\system32\DRIVERS\raspti.sys
11:29:30.0812 0716 Raspti - ok
11:29:30.0921 0716 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS.1\system32\DRIVERS\rdbss.sys
11:29:30.0921 0716 Rdbss - ok
11:29:31.0046 0716 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS.1\system32\DRIVERS\RDPCDD.sys
11:29:31.0046 0716 RDPCDD - ok
11:29:31.0125 0716 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS.1\system32\DRIVERS\rdpdr.sys
11:29:31.0125 0716 rdpdr - ok
11:29:31.0265 0716 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS.1\system32\drivers\RDPWD.sys
11:29:31.0265 0716 RDPWD - ok
11:29:31.0375 0716 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS.1\system32\DRIVERS\redbook.sys
11:29:31.0375 0716 redbook - ok
11:29:31.0531 0716 s1018bus (1c5c2cb892553d2cf3f45a4bb323fcd6) C:\WINDOWS.1\system32\DRIVERS\s1018bus.sys
11:29:31.0531 0716 s1018bus - ok
11:29:31.0593 0716 s1018mdfl (38f5ea219593f19b6b3a1b9c169e3b61) C:\WINDOWS.1\system32\DRIVERS\s1018mdfl.sys
11:29:31.0593 0716 s1018mdfl - ok
11:29:31.0687 0716 s1018mdm (666af6b64fc7df92d3ca4819ea91631d) C:\WINDOWS.1\system32\DRIVERS\s1018mdm.sys
11:29:31.0687 0716 s1018mdm - ok
11:29:31.0765 0716 s1018mgmt (f4ceda6e2ddff2af8bd745615a7ca9c0) C:\WINDOWS.1\system32\DRIVERS\s1018mgmt.sys
11:29:31.0765 0716 s1018mgmt - ok
11:29:31.0843 0716 s1018nd5 (3622d9ff2253dcbe885b10736609a4ca) C:\WINDOWS.1\system32\DRIVERS\s1018nd5.sys
11:29:31.0843 0716 s1018nd5 - ok
11:29:31.0937 0716 s1018obex (49431efda842b474531c29ffae9f5d09) C:\WINDOWS.1\system32\DRIVERS\s1018obex.sys
11:29:31.0937 0716 s1018obex - ok
11:29:32.0046 0716 s1018unic (ac6b514cb4474f4c867d7cdc9cd54f05) C:\WINDOWS.1\system32\DRIVERS\s1018unic.sys
11:29:32.0046 0716 s1018unic - ok
11:29:32.0109 0716 s1039bus (d0eedc88876b20d42157cdcca3e647f3) C:\WINDOWS.1\system32\DRIVERS\s1039bus.sys
11:29:32.0109 0716 s1039bus - ok
11:29:32.0203 0716 s1039mdfl (7b35091a7bb597c86262c589b0b57d06) C:\WINDOWS.1\system32\DRIVERS\s1039mdfl.sys
11:29:32.0203 0716 s1039mdfl - ok
11:29:32.0328 0716 s1039mdm (4cb1ab13c9813cbf3e4c6406f8043ec2) C:\WINDOWS.1\system32\DRIVERS\s1039mdm.sys
11:29:32.0328 0716 s1039mdm - ok
11:29:32.0375 0716 s1039mgmt (2649ca09585a7531126dcc116ad1f88c) C:\WINDOWS.1\system32\DRIVERS\s1039mgmt.sys
11:29:32.0375 0716 s1039mgmt - ok
11:29:32.0531 0716 s1039nd5 (6d3f549efd6daedd7d12f3de2175053f) C:\WINDOWS.1\system32\DRIVERS\s1039nd5.sys
11:29:32.0531 0716 s1039nd5 - ok
11:29:32.0750 0716 s1039obex (305e3e3aca0037af2e2c1b50a383c91b) C:\WINDOWS.1\system32\DRIVERS\s1039obex.sys
11:29:32.0750 0716 s1039obex - ok
11:29:32.0843 0716 s1039unic (7dd02a58277c84c043442561589914f4) C:\WINDOWS.1\system32\DRIVERS\s1039unic.sys
11:29:32.0843 0716 s1039unic - ok
11:29:33.0031 0716 SANDRA (24c68978d48f41084dc00159aa07fab8) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\Sandra.sys
11:29:33.0031 0716 SANDRA - ok
11:29:33.0125 0716 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
11:29:33.0125 0716 SASDIFSV - ok
11:29:33.0171 0716 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
11:29:33.0171 0716 SASENUM - ok
11:29:33.0312 0716 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
11:29:33.0312 0716 SASKUTIL - ok
11:29:33.0453 0716 SCDEmu (9feb2026a460916d1a1198b460632630) C:\WINDOWS.1\system32\drivers\SCDEmu.sys
11:29:33.0453 0716 SCDEmu - ok
11:29:33.0531 0716 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS.1\system32\DRIVERS\secdrv.sys
11:29:33.0531 0716 Secdrv - ok
11:29:33.0828 0716 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS.1\system32\DRIVERS\serenum.sys
11:29:33.0828 0716 serenum - ok
11:29:33.0890 0716 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS.1\system32\DRIVERS\serial.sys
11:29:33.0890 0716 Serial - ok
11:29:34.0000 0716 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS.1\system32\drivers\Sfloppy.sys
11:29:34.0000 0716 Sfloppy - ok
11:29:34.0062 0716 Simbad - ok
11:29:34.0125 0716 Sparrow - ok
11:29:34.0234 0716 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS.1\system32\drivers\splitter.sys
11:29:34.0234 0716 splitter - ok
11:29:34.0343 0716 Sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS.1\system32\DRIVERS\sr.sys
11:29:34.0343 0716 Sr - ok
11:29:34.0437 0716 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS.1\system32\DRIVERS\srv.sys
11:29:34.0437 0716 Srv - ok
11:29:34.0625 0716 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS.1\system32\DRIVERS\swenum.sys
11:29:34.0625 0716 swenum - ok
11:29:34.0812 0716 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS.1\system32\drivers\swmidi.sys
11:29:34.0812 0716 swmidi - ok
11:29:34.0890 0716 symc810 - ok
11:29:35.0000 0716 symc8xx - ok
11:29:35.0046 0716 sym_hi - ok
11:29:35.0078 0716 sym_u3 - ok
11:29:35.0140 0716 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS.1\system32\drivers\sysaudio.sys
11:29:35.0140 0716 sysaudio - ok
11:29:35.0296 0716 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS.1\system32\DRIVERS\tcpip.sys
11:29:35.0296 0716 Tcpip - ok
11:29:35.0359 0716 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS.1\system32\drivers\TDPIPE.sys
11:29:35.0359 0716 TDPIPE - ok
11:29:35.0406 0716 TDTCP - ok
11:29:35.0468 0716 TermDD (88155247177638048422893737429d9e) C:\WINDOWS.1\system32\DRIVERS\termdd.sys
11:29:35.0468 0716 TermDD - ok
11:29:35.0687 0716 TosIde - ok
11:29:35.0859 0716 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
11:29:35.0859 0716 TuneUpUtilitiesDrv - ok
11:29:36.0000 0716 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS.1\system32\drivers\Udfs.sys
11:29:36.0000 0716 Udfs - ok
11:29:36.0031 0716 ultra - ok
11:29:36.0125 0716 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS.1\system32\DRIVERS\update.sys
11:29:36.0125 0716 Update - ok
11:29:36.0218 0716 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS.1\system32\DRIVERS\usbccgp.sys
11:29:36.0218 0716 usbccgp - ok
11:29:36.0343 0716 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS.1\system32\DRIVERS\usbehci.sys
11:29:36.0343 0716 usbehci - ok
11:29:36.0421 0716 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS.1\system32\DRIVERS\usbhub.sys
11:29:36.0421 0716 usbhub - ok
11:29:36.0453 0716 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS.1\system32\DRIVERS\usbohci.sys
11:29:36.0453 0716 usbohci - ok
11:29:36.0765 0716 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS.1\system32\DRIVERS\usbprint.sys
11:29:36.0781 0716 usbprint - ok
11:29:36.0859 0716 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS.1\system32\DRIVERS\usbscan.sys
11:29:36.0859 0716 usbscan - ok
11:29:36.0953 0716 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS.1\system32\DRIVERS\USBSTOR.SYS
11:29:36.0953 0716 USBSTOR - ok
11:29:37.0187 0716 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS.1\System32\drivers\vga.sys
11:29:37.0187 0716 VgaSave - ok
11:29:37.0218 0716 ViaIde - ok
11:29:37.0328 0716 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS.1\system32\drivers\VolSnap.sys
11:29:37.0328 0716 VolSnap - ok
11:29:37.0406 0716 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS.1\system32\DRIVERS\wanarp.sys
11:29:37.0406 0716 Wanarp - ok
11:29:37.0484 0716 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS.1\system32\Drivers\wdf01000.sys
11:29:37.0500 0716 Wdf01000 - ok
11:29:37.0734 0716 WDICA - ok
11:29:37.0859 0716 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS.1\system32\drivers\wdmaud.sys
11:29:37.0859 0716 wdmaud - ok
11:29:37.0968 0716 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS.1\system32\DRIVERS\wpdusb.sys
11:29:37.0968 0716 WpdUsb - ok
11:29:38.0046 0716 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS.1\system32\DRIVERS\WudfPf.sys
11:29:38.0046 0716 WudfPf - ok
11:29:38.0125 0716 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS.1\system32\DRIVERS\wudfrd.sys
11:29:38.0125 0716 WudfRd - ok
11:29:38.0234 0716 xcpip - ok
11:29:38.0296 0716 xpsec - ok
11:29:38.0406 0716 zebrbus (c95dd99e29e2d5ae7c1aac26b02a111c) C:\WINDOWS.1\system32\DRIVERS\zebrbus.sys
11:29:38.0406 0716 zebrbus - ok
11:29:38.0515 0716 zebrceb (6e49cf9c48c551264c4af6de19447515) C:\WINDOWS.1\system32\DRIVERS\zebrceb.sys
11:29:38.0515 0716 zebrceb - ok
11:29:38.0640 0716 zebrmdfl (78f045074b1a6ad699e76e573b5ea82a) C:\WINDOWS.1\system32\DRIVERS\zebrmdfl.sys
11:29:38.0640 0716 zebrmdfl - ok
11:29:38.0671 0716 zebrmdm (636df12276af9ee94a34ded15f620714) C:\WINDOWS.1\system32\DRIVERS\zebrmdm.sys
11:29:38.0671 0716 zebrmdm - ok
11:29:38.0781 0716 zebrmdmc (4fd7eb4d3c7bd3550c2e15f0a25fc52f) C:\WINDOWS.1\system32\DRIVERS\zebrmdmc.sys
11:29:38.0781 0716 zebrmdmc - ok
11:29:38.0859 0716 zebrsce (316954e84d17b985760d8160aa75ed08) C:\WINDOWS.1\system32\DRIVERS\zebrsce.sys
11:29:38.0859 0716 zebrsce - ok
11:29:38.0890 0716 MBR (0x1B8) (0e1d60863e74698b6255deeb65261da6) \Device\Harddisk0\DR0
11:29:38.0890 0716 \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - infected
11:29:38.0890 0716 \Device\Harddisk0\DR0 - detected Backdoor.Win32.Sinowal.knf (0)
11:29:38.0906 0716 MBR (0x1B8) (199d66d15be31321331253788f490d3d) \Device\Harddisk1\DR1
11:29:38.0906 0716 \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - infected
11:29:38.0906 0716 \Device\Harddisk1\DR1 - detected Backdoor.Win32.Sinowal.knf (0)
11:29:38.0921 0716 Boot (0x1200) (66f198bd21403e0c2ac8b3d446d2db30) \Device\Harddisk0\DR0\Partition0
11:29:38.0921 0716 \Device\Harddisk0\DR0\Partition0 - ok
11:29:38.0921 0716 Boot (0x1200) (b7d451991217d5b610a701b488b05389) \Device\Harddisk1\DR1\Partition0
11:29:38.0921 0716 \Device\Harddisk1\DR1\Partition0 - ok
11:29:38.0937 0716 Boot (0x1200) (aa4f68f919cd043af359c0fd61a41a9b) \Device\Harddisk1\DR1\Partition1
11:29:38.0937 0716 \Device\Harddisk1\DR1\Partition1 - ok
11:29:38.0937 0716 ============================================================
11:29:38.0937 0716 Scan finished
11:29:38.0937 0716 ============================================================
11:29:38.0953 3460 Detected object count: 2
11:29:38.0953 3460 Actual detected object count: 2
11:30:11.0640 3460 \Device\Harddisk0\DR0\# - copied to quarantine
11:30:11.0640 3460 \Device\Harddisk0\DR0 - copied to quarantine
11:30:11.0687 3460 \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - will be cured on reboot
11:30:11.0718 3460 \Device\Harddisk0\DR0 - ok
11:30:11.0718 3460 \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - User select action: Cure
11:30:11.0781 3460 \Device\Harddisk1\DR1\# - copied to quarantine
11:30:11.0812 3460 \Device\Harddisk1\DR1 - copied to quarantine
11:30:11.0828 3460 \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - will be cured on reboot
11:30:11.0843 3460 \Device\Harddisk1\DR1 - ok
11:30:11.0843 3460 \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - User select action: Cure
11:30:49.0687 3228 Deinitialize success

zopakuj kontrolu po restarte

Log po restartu PC

14:56:06.0171 4072 TDSS rootkit removing tool 2.7.20.0 Mar 9 2012 17:10:43
14:56:06.0437 4072 ============================================================
14:56:06.0437 4072 Current date / time: 2012/03/12 14:56:06.0437
14:56:06.0437 4072 SystemInfo:
14:56:06.0437 4072
14:56:06.0437 4072 OS Version: 5.1.2600 ServicePack: 3.0
14:56:06.0437 4072 Product type: Workstation
14:56:06.0437 4072 ComputerName: HOME-COMPIK
14:56:06.0437 4072 UserName: Roman
14:56:06.0437 4072 Windows directory: C:\WINDOWS.1
14:56:06.0437 4072 System windows directory: C:\WINDOWS.1
14:56:06.0437 4072 Processor architecture: Intel x86
14:56:06.0437 4072 Number of processors: 2
14:56:06.0437 4072 Page size: 0x1000
14:56:06.0437 4072 Boot type: Normal boot
14:56:06.0437 4072 ============================================================
14:56:11.0562 4072 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:56:12.0250 4072 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:56:12.0250 4072 \Device\Harddisk0\DR0:
14:56:12.0265 4072 MBR used
14:56:12.0265 4072 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1
14:56:12.0265 4072 \Device\Harddisk1\DR1:
14:56:12.0265 4072 MBR used
14:56:12.0265 4072 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x249F0000
14:56:12.0265 4072 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x249F0800, BlocksNum 0x15995000
14:56:12.0812 4072 Initialize success
14:56:12.0812 4072 ============================================================
14:56:26.0343 2588 ============================================================
14:56:26.0343 2588 Scan started
14:56:26.0343 2588 Mode: Manual; SigCheck; TDLFS;
14:56:26.0343 2588 ============================================================
14:56:26.0562 2588 Abiosdsk - ok
14:56:26.0578 2588 abp480n5 - ok
14:56:26.0656 2588 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS.1\system32\DRIVERS\ACPI.sys
14:56:30.0453 2588 ACPI - ok
14:56:30.0593 2588 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS.1\system32\drivers\ACPIEC.sys
14:56:30.0796 2588 ACPIEC - ok
14:56:30.0906 2588 adpu160m - ok
14:56:30.0984 2588 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS.1\system32\drivers\aec.sys
14:56:31.0234 2588 aec - ok
14:56:31.0375 2588 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS.1\System32\drivers\afd.sys
14:56:31.0468 2588 AFD - ok
14:56:31.0562 2588 Aha154x - ok
14:56:31.0593 2588 aic78u2 - ok
14:56:31.0625 2588 aic78xx - ok
14:56:31.0859 2588 ALCXWDM (d9026163ed32a13923a2c909897a6b87) C:\WINDOWS.1\system32\drivers\ALCXWDM.SYS
14:56:32.0187 2588 ALCXWDM ( UnsignedFile.Multi.Generic ) - warning
14:56:32.0187 2588 ALCXWDM - detected UnsignedFile.Multi.Generic (1)
14:56:32.0296 2588 AliIde - ok
14:56:32.0359 2588 AmdK8 (0a4d13b388c814560bd69c3a496ecfa8) C:\WINDOWS.1\system32\DRIVERS\AmdK8.sys
14:56:32.0390 2588 AmdK8 ( UnsignedFile.Multi.Generic ) - warning
14:56:32.0390 2588 AmdK8 - detected UnsignedFile.Multi.Generic (1)
14:56:32.0453 2588 amsint - ok
14:56:32.0609 2588 AR9271 (8e2257584b2c52d44b4cb1949947d885) C:\WINDOWS.1\system32\DRIVERS\athuw.sys
14:56:32.0843 2588 AR9271 ( UnsignedFile.Multi.Generic ) - warning
14:56:32.0843 2588 AR9271 - detected UnsignedFile.Multi.Generic (1)
14:56:32.0953 2588 asc - ok
14:56:32.0984 2588 asc3350p - ok
14:56:33.0015 2588 asc3550 - ok
14:56:33.0093 2588 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS.1\system32\DRIVERS\asyncmac.sys
14:56:33.0328 2588 AsyncMac - ok
14:56:33.0468 2588 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS.1\system32\drivers\atapi.sys
14:56:33.0687 2588 atapi - ok
14:56:33.0765 2588 Atdisk - ok
14:56:33.0828 2588 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS.1\system32\DRIVERS\atmarpc.sys
14:56:34.0078 2588 Atmarpc - ok
14:56:34.0203 2588 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS.1\system32\DRIVERS\audstub.sys
14:56:34.0390 2588 audstub - ok
14:56:34.0515 2588 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS.1\system32\drivers\Beep.sys
14:56:34.0703 2588 Beep - ok
14:56:34.0859 2588 catchme - ok
14:56:35.0000 2588 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS.1\system32\drivers\cbidf2k.sys
14:56:35.0187 2588 cbidf2k - ok
14:56:35.0281 2588 cd20xrnt - ok
14:56:35.0359 2588 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS.1\system32\drivers\Cdaudio.sys
14:56:35.0546 2588 Cdaudio - ok
14:56:35.0656 2588 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS.1\system32\drivers\Cdfs.sys
14:56:35.0890 2588 Cdfs - ok
14:56:36.0015 2588 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS.1\system32\DRIVERS\cdrom.sys
14:56:36.0250 2588 Cdrom - ok
14:56:36.0343 2588 Changer - ok
14:56:36.0390 2588 CmdIde - ok
14:56:36.0468 2588 Cpqarray - ok
14:56:36.0484 2588 dac2w2k - ok
14:56:36.0515 2588 dac960nt - ok
14:56:36.0593 2588 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS.1\system32\DRIVERS\disk.sys
14:56:36.0828 2588 Disk - ok
14:56:37.0000 2588 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS.1\system32\drivers\dmboot.sys
14:56:37.0296 2588 dmboot - ok
14:56:37.0406 2588 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS.1\system32\drivers\dmio.sys
14:56:37.0640 2588 dmio - ok
14:56:37.0781 2588 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS.1\system32\drivers\dmload.sys
14:56:37.0953 2588 dmload - ok
14:56:38.0046 2588 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS.1\system32\drivers\DMusic.sys
14:56:38.0281 2588 DMusic - ok
14:56:38.0390 2588 dpti2o - ok
14:56:38.0453 2588 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS.1\system32\drivers\drmkaud.sys
14:56:38.0671 2588 drmkaud - ok
14:56:38.0796 2588 eamon (9309c5c9831203436e64cf2ae605c5d7) C:\WINDOWS.1\system32\DRIVERS\eamon.sys
14:56:39.0031 2588 eamon - ok
14:56:39.0171 2588 ehdrv (deff87f04ab5f6dd5edf2b80853bbe10) C:\WINDOWS.1\system32\DRIVERS\ehdrv.sys
14:56:39.0203 2588 ehdrv - ok
14:56:39.0328 2588 epfw (5ba193ca0ae31209aaa39939ce6736b2) C:\WINDOWS.1\system32\DRIVERS\epfw.sys
14:56:39.0359 2588 epfw - ok
14:56:39.0515 2588 Epfwndis (75d3bcd3e0eded0ab0f96d9a10ff01c9) C:\WINDOWS.1\system32\DRIVERS\Epfwndis.sys
14:56:39.0531 2588 Epfwndis - ok
14:56:39.0671 2588 epfwtdi (dc64f26f35e32c9472bbf8acd84060d3) C:\WINDOWS.1\system32\DRIVERS\epfwtdi.sys
14:56:39.0703 2588 epfwtdi - ok
14:56:39.0875 2588 eusk2par (f7955f5273f7ca5da13ebeef4f736c44) C:\WINDOWS.1\system32\Drivers\eusk2par.sys
14:56:39.0921 2588 eusk2par ( UnsignedFile.Multi.Generic ) - warning
14:56:39.0921 2588 eusk2par - detected UnsignedFile.Multi.Generic (1)
14:56:40.0062 2588 eusk3usb (988e553a4fe340c281376bee5b5c6222) C:\WINDOWS.1\system32\Drivers\eusk3usb.sys
14:56:40.0093 2588 eusk3usb ( UnsignedFile.Multi.Generic ) - warning
14:56:40.0093 2588 eusk3usb - detected UnsignedFile.Multi.Generic (1)
14:56:40.0234 2588 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS.1\system32\drivers\Fastfat.sys
14:56:40.0468 2588 Fastfat - ok
14:56:40.0593 2588 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS.1\system32\DRIVERS\fdc.sys
14:56:40.0843 2588 Fdc - ok
14:56:40.0968 2588 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS.1\system32\drivers\Fips.sys
14:56:41.0203 2588 Fips - ok
14:56:41.0328 2588 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS.1\system32\DRIVERS\flpydisk.sys
14:56:41.0562 2588 Flpydisk - ok
14:56:41.0703 2588 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS.1\system32\DRIVERS\fltMgr.sys
14:56:41.0937 2588 FltMgr - ok
14:56:42.0078 2588 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS.1\system32\drivers\Fs_Rec.sys
14:56:42.0265 2588 Fs_Rec - ok
14:56:42.0390 2588 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS.1\system32\DRIVERS\ftdisk.sys
14:56:42.0562 2588 Ftdisk - ok
14:56:42.0718 2588 ggflt (007aea2e06e7cef7372e40c277163959) C:\WINDOWS.1\system32\DRIVERS\ggflt.sys
14:56:42.0734 2588 ggflt - ok
14:56:42.0890 2588 ggsemc (c73de35960ca75c5ab4ae636b127c64e) C:\WINDOWS.1\system32\DRIVERS\ggsemc.sys
14:56:42.0906 2588 ggsemc - ok
14:56:43.0000 2588 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS.1\system32\DRIVERS\msgpc.sys
14:56:43.0218 2588 Gpc - ok
14:56:43.0343 2588 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS.1\system32\DRIVERS\hidusb.sys
14:56:43.0578 2588 hidusb - ok
14:56:43.0703 2588 hpn - ok
14:56:43.0765 2588 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS.1\system32\Drivers\HTTP.sys
14:56:44.0015 2588 HTTP - ok
14:56:44.0125 2588 i2omgmt - ok
14:56:44.0156 2588 i2omp - ok
14:56:44.0218 2588 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS.1\system32\DRIVERS\i8042prt.sys
14:56:44.0437 2588 i8042prt - ok
14:56:44.0562 2588 imagedrv (9b1393f7c408f1bef936a3ef43571a78) C:\WINDOWS.1\system32\Drivers\imagedrv.sys
14:56:44.0578 2588 imagedrv - ok
14:56:44.0609 2588 imagesrv (96fd40e6c2a22150d5492203717a2409) C:\WINDOWS.1\system32\DRIVERS\imagesrv.sys
14:56:44.0625 2588 imagesrv - ok
14:56:44.0718 2588 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS.1\system32\DRIVERS\imapi.sys
14:56:44.0953 2588 Imapi - ok
14:56:45.0046 2588 ini910u - ok
14:56:45.0078 2588 IntelIde - ok
14:56:45.0140 2588 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS.1\system32\DRIVERS\Ip6Fw.sys
14:56:45.0375 2588 Ip6Fw - ok
14:56:45.0500 2588 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS.1\system32\DRIVERS\ipfltdrv.sys
14:56:45.0703 2588 IpFilterDriver - ok
14:56:45.0828 2588 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS.1\system32\DRIVERS\ipinip.sys
14:56:46.0046 2588 IpInIp - ok
14:56:46.0171 2588 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS.1\system32\DRIVERS\ipnat.sys
14:56:46.0406 2588 IpNat - ok
14:56:46.0515 2588 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS.1\system32\DRIVERS\ipsec.sys
14:56:46.0765 2588 IPSec - ok
14:56:46.0875 2588 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS.1\system32\DRIVERS\irenum.sys
14:56:47.0015 2588 IRENUM - ok
14:56:47.0140 2588 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS.1\system32\DRIVERS\isapnp.sys
14:56:47.0375 2588 isapnp - ok
14:56:47.0515 2588 k750bus - ok
14:56:47.0531 2588 k750mdfl - ok
14:56:47.0562 2588 k750mdm - ok
14:56:47.0578 2588 k750mgmt - ok
14:56:47.0609 2588 k750obex - ok
14:56:47.0718 2588 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS.1\system32\DRIVERS\kbdclass.sys
14:56:47.0953 2588 Kbdclass - ok
14:56:48.0046 2588 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS.1\system32\DRIVERS\kbdhid.sys
14:56:48.0296 2588 kbdhid - ok
14:56:48.0437 2588 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS.1\system32\drivers\kmixer.sys
14:56:48.0671 2588 kmixer - ok
14:56:48.0796 2588 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS.1\system32\drivers\KSecDD.sys
14:56:48.0921 2588 KSecDD - ok
14:56:49.0078 2588 L8042Kbd (0f5ae6805ef05dbbe205e5b196cadf31) C:\WINDOWS.1\system32\DRIVERS\L8042Kbd.sys
14:56:49.0171 2588 L8042Kbd - ok
14:56:49.0281 2588 lbrtfdc - ok
14:56:49.0359 2588 MBAMProtector (836e0e09ca9869be7eb39ef2cf3602c7) C:\WINDOWS.1\system32\drivers\mbam.sys
14:56:49.0359 2588 MBAMProtector - ok
14:56:49.0468 2588 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS.1\system32\drivers\mnmdd.sys
14:56:49.0656 2588 mnmdd - ok
14:56:49.0781 2588 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS.1\system32\drivers\Modem.sys
14:56:50.0015 2588 Modem - ok
14:56:50.0140 2588 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS.1\system32\DRIVERS\mouclass.sys
14:56:50.0375 2588 Mouclass - ok
14:56:50.0468 2588 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS.1\system32\DRIVERS\mouhid.sys
14:56:50.0671 2588 mouhid - ok
14:56:50.0781 2588 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS.1\system32\drivers\MountMgr.sys
14:56:51.0015 2588 MountMgr - ok
14:56:51.0125 2588 mraid35x - ok
14:56:51.0187 2588 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS.1\system32\DRIVERS\mrxdav.sys
14:56:51.0406 2588 MRxDAV - ok
14:56:51.0546 2588 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS.1\system32\DRIVERS\mrxsmb.sys
14:56:51.0718 2588 MRxSmb - ok
14:56:51.0890 2588 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS.1\system32\drivers\Msfs.sys
14:56:52.0125 2588 Msfs - ok
14:56:52.0250 2588 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS.1\system32\drivers\MSKSSRV.sys
14:56:52.0484 2588 MSKSSRV - ok
14:56:52.0609 2588 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS.1\system32\drivers\MSPCLOCK.sys
14:56:52.0828 2588 MSPCLOCK - ok
14:56:52.0937 2588 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS.1\system32\drivers\MSPQM.sys
14:56:53.0140 2588 MSPQM - ok
14:56:53.0265 2588 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS.1\system32\DRIVERS\mssmbios.sys
14:56:53.0484 2588 mssmbios - ok
14:56:53.0609 2588 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS.1\system32\drivers\Mup.sys
14:56:53.0687 2588 Mup - ok
14:56:53.0843 2588 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS.1\system32\drivers\NDIS.sys
14:56:54.0062 2588 NDIS - ok
14:56:54.0218 2588 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS.1\system32\DRIVERS\ndistapi.sys
14:56:54.0265 2588 NdisTapi - ok
14:56:54.0406 2588 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS.1\system32\DRIVERS\ndisuio.sys
14:56:54.0640 2588 Ndisuio - ok
14:56:54.0796 2588 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS.1\system32\DRIVERS\ndiswan.sys
14:56:55.0015 2588 NdisWan - ok
14:56:55.0156 2588 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS.1\system32\drivers\NDProxy.sys
14:56:55.0250 2588 NDProxy - ok
14:56:55.0375 2588 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS.1\system32\DRIVERS\netbios.sys
14:56:55.0609 2588 NetBIOS - ok
14:56:55.0765 2588 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS.1\system32\DRIVERS\netbt.sys
14:56:56.0015 2588 NetBT - ok
14:56:56.0187 2588 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS.1\system32\drivers\Npfs.sys
14:56:56.0406 2588 Npfs - ok
14:56:56.0562 2588 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS.1\system32\drivers\Ntfs.sys
14:56:56.0843 2588 Ntfs - ok
14:56:56.0968 2588 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS.1\system32\drivers\Null.sys
14:56:57.0171 2588 Null - ok
14:56:57.0671 2588 nv (cb0ce8de9f66a297cd86eb98921b8e58) C:\WINDOWS.1\system32\DRIVERS\nv4_mini.sys
14:56:58.0546 2588 nv - ok
14:56:58.0687 2588 nvatabus (83f0275a21d9772b51cef57e35afae61) C:\WINDOWS.1\system32\DRIVERS\nvatabus.sys
14:56:58.0796 2588 nvatabus - ok
14:56:58.0953 2588 nvcchflt (fb7213bc5279c1af5e4e9ca05d944f2c) C:\WINDOWS.1\system32\DRIVERS\nvcchflt.sys
14:56:58.0984 2588 nvcchflt - ok
14:56:59.0109 2588 NVENETFD (974551a956f3269f460d4b18101eec46) C:\WINDOWS.1\system32\DRIVERS\NVENETFD.sys
14:56:59.0140 2588 NVENETFD ( UnsignedFile.Multi.Generic ) - warning
14:56:59.0140 2588 NVENETFD - detected UnsignedFile.Multi.Generic (1)
14:56:59.0250 2588 nvnetbus (7fc2baf84006f28cb9f477a167fff9ba) C:\WINDOWS.1\system32\DRIVERS\nvnetbus.sys
14:56:59.0281 2588 nvnetbus ( UnsignedFile.Multi.Generic ) - warning
14:56:59.0281 2588 nvnetbus - detected UnsignedFile.Multi.Generic (1)
14:56:59.0390 2588 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS.1\system32\DRIVERS\nwlnkflt.sys
14:56:59.0578 2588 NwlnkFlt - ok
14:56:59.0703 2588 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS.1\system32\DRIVERS\nwlnkfwd.sys
14:56:59.0875 2588 NwlnkFwd - ok
14:57:00.0015 2588 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS.1\system32\DRIVERS\parport.sys
14:57:00.0250 2588 Parport - ok
14:57:00.0359 2588 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS.1\system32\drivers\PartMgr.sys
14:57:00.0562 2588 PartMgr - ok
14:57:00.0640 2588 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS.1\system32\drivers\ParVdm.sys
14:57:00.0828 2588 ParVdm - ok
14:57:00.0953 2588 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS.1\system32\DRIVERS\pci.sys
14:57:01.0171 2588 PCI - ok
14:57:01.0250 2588 PCIDump - ok
14:57:01.0281 2588 PCIIde - ok
14:57:01.0359 2588 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS.1\system32\drivers\Pcmcia.sys
14:57:01.0609 2588 Pcmcia - ok
14:57:01.0734 2588 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS.1\system32\Drivers\pcouffin.sys
14:57:01.0750 2588 pcouffin ( UnsignedFile.Multi.Generic ) - warning
14:57:01.0750 2588 pcouffin - detected UnsignedFile.Multi.Generic (1)
14:57:01.0859 2588 PDCOMP - ok
14:57:01.0875 2588 PDFRAME - ok
14:57:01.0906 2588 PDRELI - ok
14:57:01.0937 2588 PDRFRAME - ok
14:57:01.0953 2588 perc2 - ok
14:57:01.0984 2588 perc2hib - ok
14:57:02.0062 2588 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS.1\system32\DRIVERS\raspptp.sys
14:57:02.0281 2588 PptpMiniport - ok
14:57:02.0421 2588 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS.1\system32\DRIVERS\psched.sys
14:57:02.0656 2588 PSched - ok
14:57:02.0812 2588 PSI (d24dfd16a1e2a76034df5aa18125c35d) C:\WINDOWS.1\system32\DRIVERS\psi_mf.sys
14:57:02.0828 2588 PSI - ok
14:57:02.0937 2588 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS.1\system32\DRIVERS\ptilink.sys
14:57:03.0109 2588 Ptilink - ok
14:57:03.0250 2588 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS.1\system32\Drivers\PxHelp20.sys
14:57:03.0281 2588 PxHelp20 - ok
14:57:03.0375 2588 ql1080 - ok
14:57:03.0406 2588 Ql10wnt - ok
14:57:03.0437 2588 ql12160 - ok
14:57:03.0453 2588 ql1240 - ok
14:57:03.0484 2588 ql1280 - ok
14:57:03.0546 2588 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS.1\system32\DRIVERS\rasacd.sys
14:57:03.0718 2588 RasAcd - ok
14:57:03.0859 2588 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS.1\system32\DRIVERS\rasl2tp.sys
14:57:04.0093 2588 Rasl2tp - ok
14:57:04.0203 2588 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS.1\system32\DRIVERS\raspppoe.sys
14:57:04.0421 2588 RasPppoe - ok
14:57:04.0546 2588 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS.1\system32\DRIVERS\raspti.sys
14:57:04.0750 2588 Raspti - ok
14:57:04.0875 2588 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS.1\system32\DRIVERS\rdbss.sys
14:57:05.0093 2588 Rdbss - ok
14:57:05.0203 2588 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS.1\system32\DRIVERS\RDPCDD.sys
14:57:05.0390 2588 RDPCDD - ok
14:57:05.0531 2588 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS.1\system32\DRIVERS\rdpdr.sys
14:57:05.0750 2588 rdpdr - ok
14:57:05.0890 2588 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS.1\system32\drivers\RDPWD.sys
14:57:05.0953 2588 RDPWD - ok
14:57:06.0109 2588 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS.1\system32\DRIVERS\redbook.sys
14:57:06.0328 2588 redbook - ok
14:57:06.0500 2588 s1018bus (1c5c2cb892553d2cf3f45a4bb323fcd6) C:\WINDOWS.1\system32\DRIVERS\s1018bus.sys
14:57:06.0531 2588 s1018bus - ok
14:57:06.0687 2588 s1018mdfl (38f5ea219593f19b6b3a1b9c169e3b61) C:\WINDOWS.1\system32\DRIVERS\s1018mdfl.sys
14:57:06.0687 2588 s1018mdfl - ok
14:57:06.0796 2588 s1018mdm (666af6b64fc7df92d3ca4819ea91631d) C:\WINDOWS.1\system32\DRIVERS\s1018mdm.sys
14:57:06.0828 2588 s1018mdm - ok
14:57:07.0000 2588 s1018mgmt (f4ceda6e2ddff2af8bd745615a7ca9c0) C:\WINDOWS.1\system32\DRIVERS\s1018mgmt.sys
14:57:07.0234 2588 s1018mgmt - ok
14:57:07.0375 2588 s1018nd5 (3622d9ff2253dcbe885b10736609a4ca) C:\WINDOWS.1\system32\DRIVERS\s1018nd5.sys
14:57:07.0390 2588 s1018nd5 - ok
14:57:07.0515 2588 s1018obex (49431efda842b474531c29ffae9f5d09) C:\WINDOWS.1\system32\DRIVERS\s1018obex.sys
14:57:07.0531 2588 s1018obex - ok
14:57:07.0656 2588 s1018unic (ac6b514cb4474f4c867d7cdc9cd54f05) C:\WINDOWS.1\system32\DRIVERS\s1018unic.sys
14:57:07.0687 2588 s1018unic - ok
14:57:07.0843 2588 s1039bus (d0eedc88876b20d42157cdcca3e647f3) C:\WINDOWS.1\system32\DRIVERS\s1039bus.sys
14:57:07.0859 2588 s1039bus - ok
14:57:07.0906 2588 s1039mdfl (7b35091a7bb597c86262c589b0b57d06) C:\WINDOWS.1\system32\DRIVERS\s1039mdfl.sys
14:57:07.0921 2588 s1039mdfl - ok
14:57:08.0015 2588 s1039mdm (4cb1ab13c9813cbf3e4c6406f8043ec2) C:\WINDOWS.1\system32\DRIVERS\s1039mdm.sys
14:57:08.0046 2588 s1039mdm - ok
14:57:08.0218 2588 s1039mgmt (2649ca09585a7531126dcc116ad1f88c) C:\WINDOWS.1\system32\DRIVERS\s1039mgmt.sys
14:57:08.0234 2588 s1039mgmt - ok
14:57:08.0359 2588 s1039nd5 (6d3f549efd6daedd7d12f3de2175053f) C:\WINDOWS.1\system32\DRIVERS\s1039nd5.sys
14:57:08.0375 2588 s1039nd5 - ok
14:57:08.0500 2588 s1039obex (305e3e3aca0037af2e2c1b50a383c91b) C:\WINDOWS.1\system32\DRIVERS\s1039obex.sys
14:57:08.0515 2588 s1039obex - ok
14:57:08.0562 2588 s1039unic (7dd02a58277c84c043442561589914f4) C:\WINDOWS.1\system32\DRIVERS\s1039unic.sys
14:57:08.0578 2588 s1039unic - ok
14:57:08.0765 2588 SANDRA (24c68978d48f41084dc00159aa07fab8) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\Sandra.sys
14:57:08.0781 2588 SANDRA - ok
14:57:08.0921 2588 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
14:57:08.0921 2588 SASDIFSV - ok
14:57:08.0968 2588 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
14:57:08.0984 2588 SASENUM - ok
14:57:09.0109 2588 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
14:57:09.0125 2588 SASKUTIL - ok
14:57:09.0265 2588 SCDEmu (9feb2026a460916d1a1198b460632630) C:\WINDOWS.1\system32\drivers\SCDEmu.sys
14:57:09.0296 2588 SCDEmu ( UnsignedFile.Multi.Generic ) - warning
14:57:09.0296 2588 SCDEmu - detected UnsignedFile.Multi.Generic (1)
14:57:09.0437 2588 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS.1\system32\DRIVERS\secdrv.sys
14:57:09.0609 2588 Secdrv - ok
14:57:09.0765 2588 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS.1\system32\DRIVERS\serenum.sys
14:57:10.0000 2588 serenum - ok
14:57:10.0140 2588 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS.1\system32\DRIVERS\serial.sys
14:57:10.0359 2588 Serial - ok
14:57:10.0531 2588 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS.1\system32\drivers\Sfloppy.sys
14:57:10.0765 2588 Sfloppy - ok
14:57:10.0843 2588 Simbad - ok
14:57:10.0875 2588 Sparrow - ok
14:57:10.0953 2588 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS.1\system32\drivers\splitter.sys
14:57:11.0156 2588 splitter - ok
14:57:11.0281 2588 Sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS.1\system32\DRIVERS\sr.sys
14:57:11.0437 2588 Sr - ok
14:57:11.0578 2588 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS.1\system32\DRIVERS\srv.sys
14:57:11.0718 2588 Srv - ok
14:57:11.0859 2588 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS.1\system32\DRIVERS\swenum.sys
14:57:12.0093 2588 swenum - ok
14:57:12.0234 2588 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS.1\system32\drivers\swmidi.sys
14:57:12.0468 2588 swmidi - ok
14:57:12.0562 2588 symc810 - ok
14:57:12.0593 2588 symc8xx - ok
14:57:12.0609 2588 sym_hi - ok
14:57:12.0640 2588 sym_u3 - ok
14:57:12.0703 2588 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS.1\system32\drivers\sysaudio.sys
14:57:12.0921 2588 sysaudio - ok
14:57:13.0078 2588 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS.1\system32\DRIVERS\tcpip.sys
14:57:13.0218 2588 Tcpip - ok
14:57:13.0359 2588 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS.1\system32\drivers\TDPIPE.sys
14:57:13.0562 2588 TDPIPE - ok
14:57:13.0656 2588 TDTCP - ok
14:57:13.0750 2588 TermDD (88155247177638048422893737429d9e) C:\WINDOWS.1\system32\DRIVERS\termdd.sys
14:57:13.0968 2588 TermDD - ok
14:57:14.0062 2588 TosIde - ok
14:57:14.0203 2588 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
14:57:14.0218 2588 TuneUpUtilitiesDrv - ok
14:57:14.0375 2588 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS.1\system32\drivers\Udfs.sys
14:57:14.0578 2588 Udfs - ok
14:57:14.0671 2588 ultra - ok
14:57:14.0765 2588 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS.1\system32\DRIVERS\update.sys
14:57:15.0015 2588 Update - ok
14:57:15.0140 2588 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS.1\system32\DRIVERS\usbccgp.sys
14:57:15.0375 2588 usbccgp - ok
14:57:15.0515 2588 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS.1\system32\DRIVERS\usbehci.sys
14:57:15.0734 2588 usbehci - ok
14:57:15.0859 2588 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS.1\system32\DRIVERS\usbhub.sys
14:57:16.0078 2588 usbhub - ok
14:57:16.0203 2588 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS.1\system32\DRIVERS\usbohci.sys
14:57:16.0406 2588 usbohci - ok
14:57:16.0531 2588 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS.1\system32\DRIVERS\usbprint.sys
14:57:16.0734 2588 usbprint - ok
14:57:16.0875 2588 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS.1\system32\DRIVERS\usbscan.sys
14:57:17.0093 2588 usbscan - ok
14:57:17.0281 2588 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS.1\system32\DRIVERS\USBSTOR.SYS
14:57:17.0531 2588 USBSTOR - ok
14:57:17.0796 2588 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS.1\System32\drivers\vga.sys
14:57:18.0031 2588 VgaSave - ok
14:57:18.0250 2588 ViaIde - ok
14:57:18.0453 2588 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS.1\system32\drivers\VolSnap.sys
14:57:18.0656 2588 VolSnap - ok
14:57:18.0953 2588 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS.1\system32\DRIVERS\wanarp.sys
14:57:19.0156 2588 Wanarp - ok
14:57:19.0578 2588 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS.1\system32\Drivers\wdf01000.sys
14:57:19.0781 2588 Wdf01000 - ok
14:57:20.0015 2588 WDICA - ok
14:57:20.0296 2588 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS.1\system32\drivers\wdmaud.sys
14:57:20.0515 2588 wdmaud - ok
14:57:20.0843 2588 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS.1\system32\DRIVERS\wpdusb.sys
14:57:21.0046 2588 WpdUsb - ok
14:57:21.0359 2588 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS.1\system32\DRIVERS\WudfPf.sys
14:57:21.0406 2588 WudfPf - ok
14:57:21.0687 2588 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS.1\system32\DRIVERS\wudfrd.sys
14:57:21.0734 2588 WudfRd - ok
14:57:21.0984 2588 xcpip - ok
14:57:22.0156 2588 xpsec - ok
14:57:22.0437 2588 zebrbus (c95dd99e29e2d5ae7c1aac26b02a111c) C:\WINDOWS.1\system32\DRIVERS\zebrbus.sys
14:57:22.0468 2588 zebrbus - ok
14:57:22.0750 2588 zebrceb (6e49cf9c48c551264c4af6de19447515) C:\WINDOWS.1\system32\DRIVERS\zebrceb.sys
14:57:22.0781 2588 zebrceb - ok
14:57:23.0109 2588 zebrmdfl (78f045074b1a6ad699e76e573b5ea82a) C:\WINDOWS.1\system32\DRIVERS\zebrmdfl.sys
14:57:23.0156 2588 zebrmdfl - ok
14:57:23.0546 2588 zebrmdm (636df12276af9ee94a34ded15f620714) C:\WINDOWS.1\system32\DRIVERS\zebrmdm.sys
14:57:23.0578 2588 zebrmdm - ok
14:57:23.0843 2588 zebrmdmc (4fd7eb4d3c7bd3550c2e15f0a25fc52f) C:\WINDOWS.1\system32\DRIVERS\zebrmdmc.sys
14:57:23.0875 2588 zebrmdmc - ok
14:57:24.0218 2588 zebrsce (316954e84d17b985760d8160aa75ed08) C:\WINDOWS.1\system32\DRIVERS\zebrsce.sys
14:57:24.0234 2588 zebrsce - ok
14:57:24.0312 2588 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
14:57:25.0062 2588 \Device\Harddisk0\DR0 - ok
14:57:25.0531 2588 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
14:57:25.0640 2588 \Device\Harddisk1\DR1 - ok
14:57:25.0671 2588 Boot (0x1200) (66f198bd21403e0c2ac8b3d446d2db30) \Device\Harddisk0\DR0\Partition0
14:57:25.0671 2588 \Device\Harddisk0\DR0\Partition0 - ok
14:57:25.0671 2588 Boot (0x1200) (b7d451991217d5b610a701b488b05389) \Device\Harddisk1\DR1\Partition0
14:57:25.0671 2588 \Device\Harddisk1\DR1\Partition0 - ok
14:57:25.0687 2588 Boot (0x1200) (aa4f68f919cd043af359c0fd61a41a9b) \Device\Harddisk1\DR1\Partition1
14:57:25.0687 2588 \Device\Harddisk1\DR1\Partition1 - ok
14:57:25.0687 2588 ============================================================
14:57:25.0687 2588 Scan finished
14:57:25.0687 2588 ============================================================
14:57:25.0796 0800 Detected object count: 9
14:57:25.0796 0800 Actual detected object count: 9
14:57:53.0812 0800 ALCXWDM ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 ALCXWDM ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0812 0800 AmdK8 ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 AmdK8 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0812 0800 AR9271 ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 AR9271 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0812 0800 eusk2par ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 eusk2par ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0812 0800 eusk3usb ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 eusk3usb ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0812 0800 NVENETFD ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0812 0800 NVENETFD ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0828 0800 nvnetbus ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0828 0800 nvnetbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0828 0800 pcouffin ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0828 0800 pcouffin ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:53.0828 0800 SCDEmu ( UnsignedFile.Multi.Generic ) - skipped by user
14:57:53.0828 0800 SCDEmu ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:57:59.0046 2548 Deinitialize success

mohlo by to byt OK
skontroluj PC nejakym legalnym AV