VIRY.CZ

Dobrý den,

chtěla bych poradit s trojským koněm, kterého mi hlásí AVG antivirus. Napadený soubor je C://Windows/System32/services.exe . Rezidentní štít mi stále píše, že infekce je vedena na bílé listině a nelze léčit. Jsem v tomto oboru amatér a tak budu vděčná za jakoukoliv pomoc. Děkuji S.

Run by Sandra at 2012-07-14 12:58:50
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 15 GB (10%) free of 144 GB
Total RAM: 1013 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:00:46, on 14.7.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19272)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqbam08.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Sandra\Desktop\staĹľeno\RSIT.exe
C:\Program Files\trend micro\Sandra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sandra\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sandra\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: HP Chytrý výběr - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7705098219
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D397078-D39D-4699-93C7-15D8C45D702E}: NameServer = 192.168.2.1
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11050 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
C:\Windows\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\vtfm3bfz.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10, {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:12.0.0.1912, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {20a82645-c095-46ed-80e3-08825760534b}:1.1, personas@christopher.beard:1.6.2, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.03, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.18"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.7&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"smartwebprinting@hp.com"=C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\MozillaAddOn2
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"{3f963a5b-e555-4543-90e2-c3908898db71}"=C:\Program Files\AVG\AVG2012\Firefox\
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG2012\Firefox4\
"avg@toolbar"=C:\ProgramData\AVG Secure Search\11.1.0.12\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571]
"Description"=RealMedia Plugin
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739]
"Description"=RealPlayer Version Plugin
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0]
"Description"=Rhapsody Control
"Path"=C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
AskHPRFF.js
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
avg-secure-search.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\vtfm3bfz.default\extensions\
personas@christopher.beard
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\vtfm3bfz.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Sandra\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-02-12 119808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll [2012-07-10 2074208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-23 192112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll [2012-01-11 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll [2012-07-10 2074208]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-23 192112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]
"ROC_roc_dec12"=C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe [2012-01-16 928096]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-07-10 1107552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-19 39408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-02-22 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=1
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.l3codecp"=
"MSVideo8"=VfWWDM32.dll
"msacm.tssoft32"=tssoft32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.divxa32"=divxa32.acm
"msacm.vorbis"=vorbis.acm
"vidc.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"vidc.wmv3"=wmv9vcm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-07-14 12:58:52 ----D---- C:\Program Files\trend micro
2012-07-14 12:58:50 ----D---- C:\rsit
2012-07-12 08:59:11 ----D---- C:\Users\Sandra\AppData\Roaming\Spy Emergency
2012-07-12 08:59:03 ----A---- C:\Windows\system32\drivers\spyemrg_guard.sys
2012-07-12 08:59:03 ----A---- C:\Windows\system32\drivers\spyemrg_access.sys
2012-07-12 08:59:02 ----D---- C:\ProgramData\NETGATE
2012-07-12 08:59:02 ----A---- C:\Windows\system32\drivers\spyemrg.sys
2012-07-12 08:58:19 ----D---- C:\Program Files\NETGATE
2012-07-10 17:34:59 ----D---- C:\Program Files\ESET
2012-06-27 12:16:02 ----D---- C:\ProgramData\Mozilla
2012-06-27 12:15:58 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-06-27 10:57:39 ----A---- C:\Windows\system32\wmi.dll
2012-06-27 10:57:39 ----A---- C:\Windows\system32\wintrust.dll
2012-06-27 10:57:39 ----A---- C:\Windows\system32\imagehlp.dll
2012-06-27 10:57:39 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-06-27 10:10:56 ----A---- C:\Windows\system32\win32k.sys
2012-06-27 10:10:35 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-27 10:10:35 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-27 10:10:35 ----A---- C:\Windows\system32\crypt32.dll
2012-06-27 10:10:25 ----A---- C:\Windows\system32\urlmon.dll
2012-06-27 10:10:25 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-06-27 10:10:25 ----A---- C:\Windows\system32\iernonce.dll
2012-06-27 10:10:25 ----A---- C:\Windows\system32\iedkcs32.dll
2012-06-27 10:10:24 ----A---- C:\Windows\system32\msfeeds.dll
2012-06-27 10:10:24 ----A---- C:\Windows\system32\iesetup.dll
2012-06-27 10:10:23 ----A---- C:\Windows\system32\wininet.dll
2012-06-27 10:10:22 ----A---- C:\Windows\system32\ieframe.dll
2012-06-27 10:10:21 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-27 10:10:21 ----A---- C:\Windows\system32\licmgr10.dll
2012-06-27 10:10:21 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-27 10:10:21 ----A---- C:\Windows\system32\ieui.dll
2012-06-27 10:10:21 ----A---- C:\Windows\system32\iepeers.dll
2012-06-27 10:10:20 ----A---- C:\Windows\system32\url.dll
2012-06-27 10:10:20 ----A---- C:\Windows\system32\mstime.dll
2012-06-27 10:10:20 ----A---- C:\Windows\system32\mshtml.dll
2012-06-27 10:10:18 ----A---- C:\Windows\system32\iertutil.dll
2012-06-27 10:10:17 ----A---- C:\Windows\system32\msfeedssync.exe
2012-06-27 10:10:17 ----A---- C:\Windows\system32\ie4uinit.exe
2012-06-27 10:10:16 ----A---- C:\Windows\system32\occache.dll
2012-06-27 10:10:16 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-27 10:10:16 ----A---- C:\Windows\system32\iesysprep.dll
2012-06-27 10:10:13 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-27 10:09:40 ----A---- C:\Windows\system32\DWrite.dll
2012-06-27 10:09:40 ----A---- C:\Windows\system32\d3d10warp.dll
2012-06-27 10:09:40 ----A---- C:\Windows\system32\d3d10_1core.dll
2012-06-27 10:09:40 ----A---- C:\Windows\system32\d3d10_1.dll
2012-06-27 10:09:40 ----A---- C:\Windows\system32\d2d1.dll
2012-06-27 10:09:27 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-06-27 10:09:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-06-27 10:09:21 ----A---- C:\Windows\system32\ntkrnlpa.exe
2012-06-27 10:09:15 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-06-24 11:42:49 ----A---- C:\Windows\system32\wups2.dll
2012-06-24 11:42:49 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-24 11:42:48 ----A---- C:\Windows\system32\wucltux.dll
2012-06-24 11:42:48 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-24 11:42:28 ----A---- C:\Windows\system32\wups.dll
2012-06-24 11:42:28 ----A---- C:\Windows\system32\wudriver.dll
2012-06-24 11:42:28 ----A---- C:\Windows\system32\wuapi.dll
2012-06-24 11:42:14 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-24 11:42:14 ----A---- C:\Windows\system32\wuapp.exe

======List of files/folders modified in the last 1 month======

2012-07-14 13:00:50 ----D---- C:\Windows\Temp
2012-07-14 12:59:24 ----D---- C:\Windows\Prefetch
2012-07-14 12:58:52 ----D---- C:\Program Files
2012-07-14 12:34:48 ----SHD---- C:\Windows\Installer
2012-07-14 12:34:48 ----HD---- C:\Config.Msi
2012-07-14 09:40:24 ----D---- C:\ProgramData\MFAData
2012-07-14 09:40:14 ----D---- C:\Windows\system32\drivers\AVG
2012-07-12 13:32:59 ----D---- C:\Windows\System32
2012-07-12 13:32:49 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-07-12 09:06:47 ----SD---- C:\Users\Sandra\AppData\Roaming\Microsoft
2012-07-12 08:59:08 ----D---- C:\Windows\system32\drivers
2012-07-12 08:59:02 ----HD---- C:\ProgramData
2012-07-10 10:31:32 ----D---- C:\ProgramData\AVG Secure Search
2012-07-10 10:31:29 ----D---- C:\Program Files\AVG Secure Search
2012-07-09 18:59:54 ----D---- C:\Windows\inf
2012-07-09 18:59:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-07-01 11:30:48 ----D---- C:\Windows
2012-06-27 14:13:08 ----D---- C:\Program Files\Spybot - Search & Destroy
2012-06-27 14:10:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-06-27 12:45:59 ----D---- C:\Windows\Microsoft.NET
2012-06-27 12:45:56 ----RSD---- C:\Windows\assembly
2012-06-27 12:20:45 ----D---- C:\Program Files\Mozilla Firefox
2012-06-27 11:52:19 ----D---- C:\Windows\rescache
2012-06-27 11:50:19 ----D---- C:\Windows\winsxs
2012-06-27 11:29:38 ----D---- C:\Windows\system32\catroot
2012-06-27 11:25:32 ----D---- C:\Program Files\Microsoft Silverlight
2012-06-27 11:22:14 ----D---- C:\Windows\system32\en-US
2012-06-27 11:22:07 ----D---- C:\Program Files\Windows Journal
2012-06-27 11:22:05 ----D---- C:\Program Files\Internet Explorer
2012-06-27 11:22:04 ----D---- C:\Windows\system32\migration
2012-06-27 11:21:53 ----D---- C:\Program Files\Windows Mail
2012-06-27 11:03:40 ----D---- C:\Windows\system32\catroot2
2012-06-27 10:49:27 ----D---- C:\Windows\Debug
2012-06-27 10:11:53 ----D---- C:\Windows\system32\XPSViewer
2012-06-18 16:30:30 ----D---- C:\Users\Sandra\AppData\Roaming\ICQ
2012-06-17 21:15:51 ----D---- C:\Users\Sandra\AppData\Roaming\LangSoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-02-02 43528]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2011-05-23 47968]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2011-10-07 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2011-08-08 40016]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-20 218688]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-11-30 8192]
R1 SpyEmrg;Spy Emergency Driver; C:\Windows\System32\Drivers\spyemrg.sys [2011-04-21 14168]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-16 32256]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-16 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-16 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 134736]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 24272]
R3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys [2011-10-04 16720]
R3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-19 159744]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-02-22 159232]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
R3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2007-02-07 1786880]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-09 3482240]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver; C:\Windows\System32\Drivers\spyemrg_guard.sys [2011-04-21 16216]
R3 StillCam;Still Serial Digital Camera Driver; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-13 181432]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [2007-09-25 15152]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2007-12-30 25280]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver; C:\Windows\System32\Drivers\spyemrg_access.sys [2011-04-21 20056]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2012\avgfws.exe [2011-11-23 2391832]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-03-29 270431]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-03-14 62984]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-10-22 73728]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2009-11-29 244904]
R2 SpyEmrgSrv;Spy Emergency Engine Service; C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [2012-02-23 2420400]
R2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-10 935008]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-03-29 118877]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-18 135664]
S2 InCDsrvR;InCD Helper (read only); C:\Program Files\Ahead\InCD\InCDsrv.exe -r []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-12 250056]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2011-03-18 947528]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-01-09 110592]
S3 GamesAppService;GamesAppService; C:\Program Files\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-18 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-27 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-15 113120]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe []

-----------------EOF-----------------

Tak otl jsem spustila,ale nakonec jaksi zamrzlo a nechce se zatím znovu rozjet.

Tady je odkaz na ten antivirus scan:

https://www.virustotal.com/file/e047efb ... 342275972/

Ted nevím, jestli ještě můžu udělat i ty další kroky co jsi psal, když mám spuštěné to otl?

Díky moc za odpověd

Tady zasílám soubory z otl

Druhý soubor z otl

Další krok:

Poslední krok...tak snad jsem to provedla,tak jak se mělo

18:59:55.0444 5888 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35
18:59:57.0449 5888 ============================================================
18:59:57.0449 5888 Current date / time: 2012/07/14 18:59:57.0449
18:59:57.0450 5888 SystemInfo:
18:59:57.0450 5888
18:59:57.0450 5888 OS Version: 6.0.6002 ServicePack: 2.0
18:59:57.0450 5888 Product type: Workstation
18:59:57.0450 5888 ComputerName: SANDRA-PC
18:59:57.0451 5888 UserName: Sandra
18:59:57.0451 5888 Windows directory: C:\Windows
18:59:57.0451 5888 System windows directory: C:\Windows
18:59:57.0451 5888 Processor architecture: Intel x86
18:59:57.0451 5888 Number of processors: 2
18:59:57.0451 5888 Page size: 0x1000
18:59:57.0451 5888 Boot type: Normal boot
18:59:57.0451 5888 ============================================================
19:00:07.0615 5888 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:00:07.0744 5888 ============================================================
19:00:07.0744 5888 \Device\Harddisk0\DR0:
19:00:07.0826 5888 MBR partitions:
19:00:07.0826 5888 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x119D749D
19:00:07.0826 5888 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x119D74DC, BlocksNum 0x10415E5
19:00:07.0826 5888 ============================================================
19:00:08.0227 5888 C: <-> \Device\Harddisk0\DR0\Partition0
19:00:08.0407 5888 D: <-> \Device\Harddisk0\DR0\Partition1
19:00:08.0462 5888 ============================================================
19:00:08.0462 5888 Initialize success
19:00:08.0462 5888 ============================================================
19:00:30.0023 3188 ============================================================
19:00:30.0024 3188 Scan started
19:00:30.0024 3188 Mode: Manual; SigCheck; TDLFS;
19:00:30.0024 3188 ============================================================
19:00:46.0833 3188 aawservice (17067069b9a7865028c1f2e6971d0ccc) C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
19:00:47.0866 3188 aawservice - ok
19:00:51.0144 3188 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
19:00:51.0507 3188 ACPI - ok
19:00:52.0465 3188 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:00:52.0515 3188 AdobeFlashPlayerUpdateSvc - ok
19:00:52.0995 3188 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
19:00:53.0071 3188 adp94xx - ok
19:00:53.0491 3188 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
19:00:53.0717 3188 adpahci - ok
19:00:53.0891 3188 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
19:00:53.0915 3188 adpu160m - ok
19:00:53.0954 3188 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
19:00:54.0036 3188 adpu320 - ok
19:00:54.0274 3188 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll
19:00:55.0705 3188 AeLookupSvc - ok
19:00:55.0941 3188 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
19:00:56.0196 3188 AFD - ok
19:00:56.0494 3188 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
19:00:56.0541 3188 agp440 - ok
19:00:56.0912 3188 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
19:00:56.0939 3188 aic78xx - ok
19:00:57.0009 3188 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe
19:00:58.0126 3188 ALG - ok
19:00:58.0178 3188 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
19:00:58.0192 3188 aliide - ok
19:00:58.0278 3188 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
19:00:58.0310 3188 amdagp - ok
19:00:58.0452 3188 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
19:00:58.0491 3188 amdide - ok
19:00:58.0578 3188 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
19:01:02.0109 3188 AmdK7 - ok
19:01:02.0336 3188 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys
19:01:02.0526 3188 AmdK8 - ok
19:01:02.0739 3188 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll
19:01:03.0132 3188 Appinfo - ok
19:01:03.0488 3188 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
19:01:03.0543 3188 arc - ok
19:01:03.0883 3188 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
19:01:03.0929 3188 arcsas - ok
19:01:04.0072 3188 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
19:01:04.0243 3188 AsyncMac - ok
19:01:04.0474 3188 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
19:01:04.0495 3188 atapi - ok
19:01:06.0856 3188 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
19:01:06.0967 3188 AudioEndpointBuilder - ok
19:01:06.0989 3188 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
19:01:07.0046 3188 Audiosrv - ok
19:01:08.0538 3188 AVG Security Toolbar Service (ee651d98b03fe3c075ccc58ab61c9287) C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
19:01:09.0087 3188 AVG Security Toolbar Service - ok
19:01:11.0431 3188 Avgfwfd (c46ba2c177df0b84f9c0bfc1e4574dc7) C:\Windows\system32\DRIVERS\avgfwd6x.sys
19:01:11.0511 3188 Avgfwfd - ok
19:01:13.0157 3188 avgfws (5cd22eb540f82c70e33e530003f3903b) C:\Program Files\AVG\AVG2012\avgfws.exe
19:01:14.0701 3188 avgfws - ok
19:01:15.0349 3188 AVGIDSAgent (6d440ff3f44ca72edfd6176c6d6a89c0) C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
19:01:15.0845 3188 AVGIDSAgent - ok
19:01:16.0165 3188 AVGIDSDriver (4cbb56fbc9c0cbc517e6e3a6889ebddc) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
19:01:16.0207 3188 AVGIDSDriver - ok
19:01:16.0292 3188 AVGIDSEH (459bce188232e2fe6152423efef65d76) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
19:01:16.0335 3188 AVGIDSEH - ok
19:01:16.0368 3188 AVGIDSFilter (91d9abe7e88eac7c167cba4ed4d983bf) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
19:01:16.0395 3188 AVGIDSFilter - ok
19:01:16.0431 3188 AVGIDSShim (3fc2714e185c04308215d46730d41a94) C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
19:01:16.0461 3188 AVGIDSShim - ok
19:01:16.0597 3188 Avgldx86 (bf8118cd5e2255387b715b534d64acd1) C:\Windows\system32\DRIVERS\avgldx86.sys
19:01:16.0640 3188 Avgldx86 - ok
19:01:16.0710 3188 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\Windows\system32\DRIVERS\avgmfx86.sys
19:01:16.0737 3188 Avgmfx86 - ok
19:01:16.0793 3188 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\Windows\system32\DRIVERS\avgrkx86.sys
19:01:16.0871 3188 Avgrkx86 - ok
19:01:16.0938 3188 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\Windows\system32\DRIVERS\avgtdix.sys
19:01:17.0046 3188 Avgtdix - ok
19:01:17.0220 3188 avgwd (6699ece24fe4b3f752a66c66a602ee86) C:\Program Files\AVG\AVG2012\avgwdsvc.exe
19:01:17.0241 3188 avgwd - ok
19:01:17.0330 3188 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys
19:01:17.0603 3188 BCM43XV - ok
19:01:17.0629 3188 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
19:01:17.0704 3188 Beep - ok
19:01:17.0707 3188 blbdrive - ok
19:01:17.0779 3188 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
19:01:17.0871 3188 bowser - ok
19:01:17.0937 3188 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
19:01:17.0989 3188 BrFiltLo - ok
19:01:18.0065 3188 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
19:01:18.0138 3188 BrFiltUp - ok
19:01:18.0175 3188 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll
19:01:18.0254 3188 Browser - ok
19:01:18.0417 3188 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
19:01:18.0551 3188 Brserid - ok
19:01:18.0577 3188 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
19:01:18.0729 3188 BrSerWdm - ok
19:01:18.0747 3188 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
19:01:18.0876 3188 BrUsbMdm - ok
19:01:18.0903 3188 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
19:01:19.0007 3188 BrUsbSer - ok
19:01:19.0032 3188 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
19:01:19.0111 3188 BTHMODEM - ok
19:01:19.0157 3188 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
19:01:19.0244 3188 cdfs - ok
19:01:19.0307 3188 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
19:01:19.0356 3188 cdrom - ok
19:01:19.0425 3188 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
19:01:19.0474 3188 CertPropSvc - ok
19:01:19.0536 3188 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
19:01:19.0657 3188 circlass - ok
19:01:19.0916 3188 CLCapSvc (16356e5a3d7be77b2010be72c36e944c) C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
19:01:19.0961 3188 CLCapSvc ( UnsignedFile.Multi.Generic ) - warning
19:01:19.0962 3188 CLCapSvc - detected UnsignedFile.Multi.Generic (1)
19:01:20.0009 3188 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
19:01:20.0049 3188 CLFS - ok
19:01:20.0206 3188 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:01:20.0232 3188 clr_optimization_v2.0.50727_32 - ok
19:01:20.0325 3188 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:01:20.0359 3188 clr_optimization_v4.0.30319_32 - ok
19:01:20.0481 3188 CLSched (e97d797af6c2e64bfc22eeb7fa58bb63) C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
19:01:20.0520 3188 CLSched ( UnsignedFile.Multi.Generic ) - warning
19:01:20.0520 3188 CLSched - detected UnsignedFile.Multi.Generic (1)
19:01:20.0556 3188 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
19:01:20.0626 3188 CmBatt - ok
19:01:20.0709 3188 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
19:01:20.0757 3188 cmdide - ok
19:01:20.0837 3188 Com4Qlb (a5aaa656403e5e7afa9647ce73dbf944) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
19:01:20.0895 3188 Com4Qlb ( UnsignedFile.Multi.Generic ) - warning
19:01:20.0895 3188 Com4Qlb - detected UnsignedFile.Multi.Generic (1)
19:01:20.0932 3188 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
19:01:20.0970 3188 Compbatt - ok
19:01:20.0983 3188 COMSysApp - ok
19:01:21.0024 3188 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
19:01:21.0057 3188 crcdisk - ok
19:01:21.0077 3188 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
19:01:21.0205 3188 Crusoe - ok
19:01:21.0310 3188 CryptSvc (75c6a297e364014840b48eccd7525e30) C:\Windows\system32\cryptsvc.dll
19:01:21.0395 3188 CryptSvc - ok
19:01:21.0454 3188 CrystalSysInfo (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder\SysInfo.sys
19:01:21.0500 3188 CrystalSysInfo - ok
19:01:22.0139 3188 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
19:01:22.0247 3188 DcomLaunch - ok
19:01:22.0363 3188 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
19:01:22.0461 3188 DfsC - ok
19:01:22.0749 3188 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe
19:01:23.0125 3188 DFSR - ok
19:01:23.0342 3188 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll
19:01:23.0444 3188 Dhcp - ok
19:01:23.0585 3188 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
19:01:23.0615 3188 disk - ok
19:01:23.0683 3188 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll
19:01:23.0764 3188 Dnscache - ok
19:01:23.0869 3188 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll
19:01:23.0934 3188 dot3svc - ok
19:01:24.0010 3188 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
19:01:24.0084 3188 Dot4 - ok
19:01:24.0156 3188 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
19:01:24.0229 3188 Dot4Print - ok
19:01:24.0276 3188 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
19:01:24.0362 3188 dot4usb - ok
19:01:24.0463 3188 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll
19:01:24.0557 3188 DPS - ok
19:01:24.0580 3188 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
19:01:24.0639 3188 drmkaud - ok
19:01:24.0751 3188 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:01:24.0799 3188 dtsoftbus01 - ok
19:01:25.0052 3188 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
19:01:25.0140 3188 DXGKrnl - ok
19:01:25.0193 3188 E100B (d00eeae1cacd77a1a8396bbc19140bba) C:\Windows\system32\DRIVERS\e100b325.sys
19:01:25.0333 3188 E100B - ok
19:01:25.0407 3188 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
19:01:25.0592 3188 E1G60 - ok
19:01:25.0623 3188 eabfiltr (e88b0cfcecf745211bba87f44f85d0dd) C:\Windows\system32\DRIVERS\eabfiltr.sys
19:01:25.0683 3188 eabfiltr - ok
19:01:25.0687 3188 EagleNT - ok
19:01:25.0716 3188 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll
19:01:25.0742 3188 EapHost - ok
19:01:25.0786 3188 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
19:01:25.0958 3188 Ecache - ok
19:01:26.0061 3188 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe
19:01:26.0131 3188 ehRecvr - ok
19:01:26.0164 3188 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe
19:01:26.0312 3188 ehSched - ok
19:01:26.0345 3188 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll
19:01:26.0396 3188 ehstart - ok
19:01:26.0454 3188 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
19:01:26.0619 3188 elxstor - ok
19:01:26.0729 3188 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll
19:01:27.0002 3188 EMDMgmt - ok
19:01:27.0164 3188 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll
19:01:27.0231 3188 EventSystem - ok
19:01:27.0325 3188 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
19:01:27.0454 3188 exfat - ok
19:01:27.0517 3188 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
19:01:27.0561 3188 fastfat - ok
19:01:27.0598 3188 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
19:01:27.0685 3188 fdc - ok
19:01:27.0753 3188 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll
19:01:27.0836 3188 fdPHost - ok
19:01:27.0905 3188 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll
19:01:27.0986 3188 FDResPub - ok
19:01:28.0077 3188 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
19:01:28.0106 3188 FileInfo - ok
19:01:28.0171 3188 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
19:01:28.0213 3188 Filetrace - ok
19:01:28.0244 3188 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
19:01:28.0314 3188 flpydisk - ok
19:01:28.0387 3188 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
19:01:28.0419 3188 FltMgr - ok
19:01:28.0548 3188 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll
19:01:28.0766 3188 FontCache - ok
19:01:28.0938 3188 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:01:28.0983 3188 FontCache3.0.0.0 - ok
19:01:29.0053 3188 Fs_Rec (b972a66758577e0bfd1de0f91aaa27b5) C:\Windows\system32\drivers\Fs_Rec.sys
19:01:29.0135 3188 Fs_Rec - ok
19:01:29.0233 3188 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
19:01:29.0278 3188 gagp30kx - ok
19:01:29.0501 3188 GamesAppService (c403c5db49a0f9aaf4f2128edc0106d8) C:\Program Files\WildTangent Games\App\GamesAppService.exe
19:01:29.0546 3188 GamesAppService - ok
19:01:29.0646 3188 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll
19:01:29.0759 3188 gpsvc - ok
19:01:29.0882 3188 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
19:01:29.0924 3188 gupdate - ok
19:01:29.0929 3188 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
19:01:29.0959 3188 gupdatem - ok
19:01:30.0052 3188 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
19:01:30.0143 3188 gusvc - ok
19:01:30.0278 3188 hamachi (7929a161f9951d173ca9900fe7067391) C:\Windows\system32\DRIVERS\hamachi.sys
19:01:30.0306 3188 hamachi - ok
19:01:30.0375 3188 HBtnKey (de15777902a5d9121857d155873a1d1b) C:\Windows\system32\DRIVERS\cpqbttn.sys
19:01:30.0456 3188 HBtnKey - ok
19:01:30.0511 3188 HdAudAddService (07eee11d6e2b78122e17db3878b4c687) C:\Windows\system32\drivers\CHDART.sys
19:01:30.0567 3188 HdAudAddService - ok
19:01:30.0757 3188 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
19:01:31.0243 3188 HDAudBus - ok
19:01:31.0404 3188 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
19:01:31.0599 3188 HidBth - ok
19:01:31.0628 3188 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
19:01:31.0693 3188 HidIr - ok
19:01:31.0926 3188 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\system32\hidserv.dll
19:01:32.0229 3188 hidserv - ok
19:01:32.0393 3188 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
19:01:32.0506 3188 HidUsb - ok
19:01:32.0863 3188 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll
19:01:32.0994 3188 hkmsvc - ok
19:01:33.0436 3188 HP Health Check Service (2ceeb349216febd91a907013d4abcff7) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
19:01:33.0513 3188 HP Health Check Service - ok
19:01:33.0715 3188 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
19:01:33.0761 3188 HpCISSs - ok
19:01:34.0732 3188 hpqcxs08 (ce0fcec4d4d860f36d972759b11eaf0f) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll
19:01:34.0850 3188 hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
19:01:34.0850 3188 hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
19:01:35.0391 3188 hpqddsvc (7da3211ac63edd90b8eca1ca1abfd43b) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll
19:01:35.0510 3188 hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
19:01:35.0510 3188 hpqddsvc - detected UnsignedFile.Multi.Generic (1)
19:01:35.0829 3188 hpqwmiex (04c1dcbb226c6ae647b794833ce3ceb6) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
19:01:36.0017 3188 hpqwmiex ( UnsignedFile.Multi.Generic ) - warning
19:01:36.0017 3188 hpqwmiex - detected UnsignedFile.Multi.Generic (1)
19:01:37.0756 3188 HPSLPSVC (14229263aa19c704e0d6d2e7404a8455) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HPSLPSVC32.DLL
19:01:38.0023 3188 HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning
19:01:38.0023 3188 HPSLPSVC - detected UnsignedFile.Multi.Generic (1)
19:01:42.0884 3188 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
19:01:43.0074 3188 HSFHWAZL - ok
19:01:43.0229 3188 HSF_DPV (0d7a055a840c3099c37d576573a42cd5) C:\Windows\system32\DRIVERS\HSX_DPV.sys
19:01:43.0752 3188 HSF_DPV - ok
19:01:43.0788 3188 HSXHWAZL (bcc074692882c056b0e1ac97f3331a02) C:\Windows\system32\DRIVERS\HSXHWAZL.sys
19:01:43.0855 3188 HSXHWAZL - ok
19:01:43.0975 3188 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
19:01:44.0074 3188 HTTP - ok
19:01:44.0284 3188 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
19:01:44.0316 3188 i2omp - ok
19:01:44.0347 3188 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
19:01:44.0387 3188 i8042prt - ok
19:01:44.0730 3188 ialm (dbb0588936e43c5f16b643f90f53c06d) C:\Windows\system32\DRIVERS\igdkmd32.sys
19:01:45.0070 3188 ialm - ok
19:01:45.0304 3188 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
19:01:45.0345 3188 iaStorV - ok
19:01:45.0495 3188 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
19:01:45.0531 3188 IDriverT ( UnsignedFile.Multi.Generic ) - warning
19:01:45.0531 3188 IDriverT - detected UnsignedFile.Multi.Generic (1)
19:01:45.0754 3188 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:01:45.0888 3188 idsvc - ok
19:01:46.0366 3188 igfx (dbb0588936e43c5f16b643f90f53c06d) C:\Windows\system32\DRIVERS\igdkmd32.sys
19:01:46.0479 3188 igfx - ok
19:01:46.0759 3188 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
19:01:46.0775 3188 iirsp - ok
19:01:46.0928 3188 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll
19:01:47.0040 3188 IKEEXT - ok
19:01:47.0070 3188 InCDsrvR - ok
19:01:47.0093 3188 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
19:01:47.0112 3188 intelide - ok
19:01:47.0228 3188 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
19:01:47.0300 3188 intelppm - ok
19:01:47.0342 3188 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll
19:01:47.0404 3188 IPBusEnum - ok
19:01:47.0532 3188 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:01:47.0585 3188 IpFilterDriver - ok
19:01:47.0588 3188 IpInIp - ok
19:01:47.0668 3188 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
19:01:47.0732 3188 IPMIDRV - ok
19:01:47.0830 3188 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
19:01:47.0900 3188 IPNAT - ok
19:01:47.0955 3188 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
19:01:47.0991 3188 IRENUM - ok
19:01:48.0016 3188 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
19:01:48.0032 3188 isapnp - ok
19:01:48.0130 3188 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
19:01:48.0164 3188 iScsiPrt - ok
19:01:48.0220 3188 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
19:01:48.0235 3188 iteatapi - ok
19:01:48.0259 3188 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
19:01:48.0274 3188 iteraid - ok
19:01:48.0303 3188 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
19:01:48.0322 3188 kbdclass - ok
19:01:48.0374 3188 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
19:01:48.0414 3188 kbdhid - ok
19:01:48.0444 3188 KeyIso (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
19:01:48.0493 3188 KeyIso - ok
19:01:48.0561 3188 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
19:01:48.0667 3188 KSecDD - ok
19:01:48.0732 3188 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll
19:01:48.0879 3188 KtmRm - ok
19:01:48.0975 3188 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\system32\srvsvc.dll
19:01:49.0080 3188 LanmanServer - ok
19:01:49.0237 3188 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll
19:01:49.0360 3188 LanmanWorkstation - ok
19:01:49.0528 3188 LightScribeService (d571c606e4391449293a706588cc4bdd) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:01:49.0553 3188 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
19:01:49.0553 3188 LightScribeService - detected UnsignedFile.Multi.Generic (1)
19:01:49.0614 3188 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
19:01:49.0694 3188 lltdio - ok
19:01:49.0803 3188 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll
19:01:49.0886 3188 lltdsvc - ok
19:01:49.0936 3188 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll
19:01:50.0024 3188 lmhosts - ok
19:01:50.0103 3188 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
19:01:50.0126 3188 LSI_FC - ok
19:01:50.0175 3188 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
19:01:50.0203 3188 LSI_SAS - ok
19:01:50.0221 3188 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
19:01:50.0245 3188 LSI_SCSI - ok
19:01:50.0275 3188 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
19:01:50.0361 3188 luafv - ok
19:01:50.0406 3188 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll
19:01:50.0491 3188 Mcx2Svc - ok
19:01:50.0525 3188 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
19:01:50.0597 3188 mdmxsdk - ok
19:01:50.0656 3188 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
19:01:50.0681 3188 megasas - ok
19:01:50.0736 3188 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
19:01:50.0807 3188 MMCSS - ok
19:01:50.0870 3188 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
19:01:50.0975 3188 Modem - ok
19:01:51.0054 3188 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
19:01:51.0095 3188 monitor - ok
19:01:51.0192 3188 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
19:01:51.0225 3188 mouclass - ok
19:01:51.0256 3188 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
19:01:51.0311 3188 mouhid - ok
19:01:51.0363 3188 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
19:01:51.0379 3188 MountMgr - ok
19:01:51.0487 3188 MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:01:51.0518 3188 MozillaMaintenance - ok
19:01:51.0560 3188 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
19:01:51.0578 3188 mpio - ok
19:01:51.0609 3188 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
19:01:51.0686 3188 mpsdrv - ok
19:01:51.0761 3188 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
19:01:51.0786 3188 Mraid35x - ok
19:01:51.0820 3188 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
19:01:51.0865 3188 MRxDAV - ok
19:01:51.0930 3188 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:01:52.0066 3188 mrxsmb - ok
19:01:52.0128 3188 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:01:52.0166 3188 mrxsmb10 - ok
19:01:52.0195 3188 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:01:52.0257 3188 mrxsmb20 - ok
19:01:52.0337 3188 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys
19:01:52.0423 3188 msahci - ok
19:01:52.0463 3188 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
19:01:52.0484 3188 msdsm - ok
19:01:52.0624 3188 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe
19:01:52.0709 3188 MSDTC - ok
19:01:52.0774 3188 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
19:01:52.0822 3188 Msfs - ok
19:01:52.0836 3188 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
19:01:52.0854 3188 msisadrv - ok
19:01:52.0964 3188 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll
19:01:53.0040 3188 MSiSCSI - ok
19:01:53.0046 3188 msiserver - ok
19:01:53.0089 3188 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
19:01:53.0139 3188 MSKSSRV - ok
19:01:53.0179 3188 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
19:01:53.0761 3188 MSPCLOCK - ok
19:01:53.0785 3188 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
19:01:53.0841 3188 MSPQM - ok
19:01:53.0917 3188 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
19:01:53.0946 3188 MsRPC - ok
19:01:54.0034 3188 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
19:01:54.0081 3188 mssmbios - ok
19:01:54.0106 3188 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
19:01:54.0156 3188 MSTEE - ok
19:01:54.0189 3188 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
19:01:54.0207 3188 Mup - ok
19:01:54.0279 3188 MyWebSearchService - ok
19:01:54.0388 3188 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll
19:01:54.0433 3188 napagent - ok
19:01:54.0616 3188 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
19:01:54.0666 3188 NativeWifiP - ok
19:01:54.0757 3188 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
19:01:54.0846 3188 NDIS - ok
19:01:54.0909 3188 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
19:01:54.0962 3188 NdisTapi - ok
19:01:55.0030 3188 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
19:01:55.0064 3188 Ndisuio - ok
19:01:55.0194 3188 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
19:01:55.0241 3188 NdisWan - ok
19:01:55.0320 3188 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
19:01:55.0358 3188 NDProxy - ok
19:01:55.0445 3188 Net Driver HPZ12 (2969d26eee289be7422aa46fc55f4e38) C:\Windows\system32\HPZinw12.dll
19:01:55.0479 3188 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:01:55.0479 3188 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:01:55.0514 3188 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
19:01:55.0587 3188 NetBIOS - ok
19:01:55.0643 3188 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
19:01:55.0768 3188 netbt - ok
19:01:55.0795 3188 Netlogon (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
19:01:55.0821 3188 Netlogon - ok
19:01:55.0890 3188 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll
19:01:55.0968 3188 Netman - ok
19:01:56.0065 3188 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll
19:01:56.0150 3188 netprofm - ok
19:01:56.0237 3188 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:01:56.0264 3188 NetTcpPortSharing - ok
19:01:56.0514 3188 NETw3v32 (ea30bd026a7d1b745a37516880c4ac1b) C:\Windows\system32\DRIVERS\NETw3v32.sys
19:01:56.0780 3188 NETw3v32 - ok
19:01:57.0125 3188 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
19:01:57.0149 3188 nfrd960 - ok
19:01:57.0192 3188 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll
19:01:57.0320 3188 NlaSvc - ok
19:01:57.0391 3188 nmwcd (357ddb51e03cae598c096d95497373d0) C:\Windows\system32\drivers\ccdcmb.sys
19:01:57.0511 3188 nmwcd - ok
19:01:57.0590 3188 nmwcdc (7cd443f9d36c80e152fadb274089577a) C:\Windows\system32\drivers\ccdcmbo.sys
19:01:57.0652 3188 nmwcdc - ok
19:01:57.0702 3188 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
19:01:57.0756 3188 Npfs - ok
19:01:57.0853 3188 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll
19:01:57.0925 3188 nsi - ok
19:01:58.0002 3188 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
19:01:58.0052 3188 nsiproxy - ok
19:01:58.0244 3188 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
19:01:58.0416 3188 Ntfs - ok
19:01:58.0473 3188 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
19:01:58.0537 3188 ntrigdigi - ok
19:01:58.0581 3188 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
19:01:58.0620 3188 Null - ok
19:01:58.0650 3188 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
19:01:58.0673 3188 nvraid - ok
19:01:58.0744 3188 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
19:01:58.0771 3188 nvstor - ok
19:01:58.0794 3188 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
19:01:58.0823 3188 nv_agp - ok
19:01:58.0827 3188 NwlnkFlt - ok
19:01:58.0830 3188 NwlnkFwd - ok
19:01:58.0911 3188 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
19:01:58.0952 3188 ohci1394 - ok
19:01:59.0101 3188 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
19:01:59.0209 3188 p2pimsvc - ok
19:01:59.0218 3188 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
19:01:59.0352 3188 p2psvc - ok
19:01:59.0504 3188 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
19:01:59.0594 3188 Parport - ok
19:01:59.0863 3188 partmgr (b9c2b89f08670e159f7181891e449cd9) C:\Windows\system32\drivers\partmgr.sys
19:01:59.0914 3188 partmgr - ok
19:02:00.0118 3188 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
19:02:00.0199 3188 Parvdm - ok
19:02:00.0363 3188 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll
19:02:00.0613 3188 PcaSvc - ok
19:02:00.0736 3188 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
19:02:00.0991 3188 pccsmcfd - ok
19:02:01.0455 3188 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
19:02:01.0499 3188 pci - ok
19:02:01.0577 3188 pciide (3b1901e401473e03eb8c874271e50c26) C:\Windows\system32\drivers\pciide.sys
19:02:01.0614 3188 pciide - ok
19:02:01.0801 3188 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
19:02:01.0867 3188 pcmcia - ok
19:02:02.0077 3188 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
19:02:02.0262 3188 PEAUTH - ok
19:02:02.0480 3188 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll
19:02:02.0666 3188 pla - ok
19:02:02.0803 3188 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll
19:02:02.0859 3188 PlugPlay - ok
19:02:02.0953 3188 Pml Driver HPZ12 (bafc9706bdf425a02b66468ab2605c59) C:\Windows\system32\HPZipm12.dll
19:02:02.0989 3188 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:02:02.0989 3188 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:02:03.0081 3188 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
19:02:03.0264 3188 PNRPAutoReg - ok
19:02:03.0275 3188 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
19:02:03.0348 3188 PNRPsvc - ok
19:02:03.0414 3188 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll
19:02:03.0530 3188 PolicyAgent - ok
19:02:03.0614 3188 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
19:02:03.0694 3188 PptpMiniport - ok
19:02:03.0774 3188 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
19:02:03.0897 3188 Processor - ok
19:02:03.0942 3188 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll
19:02:03.0986 3188 ProfSvc - ok
19:02:04.0012 3188 ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
19:02:04.0052 3188 ProtectedStorage - ok
19:02:04.0119 3188 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
19:02:04.0155 3188 PSched - ok
19:02:04.0223 3188 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\Windows\system32\Drivers\PxHelp20.sys
19:02:04.0238 3188 PxHelp20 - ok
19:02:04.0424 3188 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
19:02:04.0532 3188 ql2300 - ok
19:02:04.0561 3188 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
19:02:04.0592 3188 ql40xx - ok
19:02:04.0685 3188 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll
19:02:04.0745 3188 QWAVE - ok
19:02:04.0815 3188 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
19:02:04.0845 3188 QWAVEdrv - ok
19:02:04.0912 3188 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
19:02:04.0968 3188 RasAcd - ok
19:02:05.0008 3188 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll
19:02:05.0065 3188 RasAuto - ok
19:02:05.0134 3188 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:02:05.0186 3188 Rasl2tp - ok
19:02:05.0252 3188 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll
19:02:05.0294 3188 RasMan - ok
19:02:05.0329 3188 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
19:02:05.0390 3188 RasPppoe - ok
19:02:05.0510 3188 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
19:02:05.0576 3188 RasSstp - ok
19:02:05.0657 3188 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
19:02:05.0703 3188 rdbss - ok
19:02:05.0768 3188 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:02:05.0840 3188 RDPCDD - ok
19:02:05.0900 3188 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
19:02:06.0045 3188 rdpdr - ok
19:02:06.0090 3188 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
19:02:06.0147 3188 RDPENCDD - ok
19:02:06.0228 3188 RDPWD (c127ebd5afab31524662c48dfceb773a) C:\Windows\system32\drivers\RDPWD.sys
19:02:06.0303 3188 RDPWD - ok
19:02:06.0374 3188 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll
19:02:06.0459 3188 RemoteAccess - ok
19:02:06.0529 3188 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll
19:02:06.0589 3188 RemoteRegistry - ok
19:02:06.0791 3188 RichVideo (f12a68ed55053940cadd59ca5e3468dd) C:\Program Files\CyberLink\Shared files\RichVideo.exe
19:02:06.0869 3188 RichVideo ( UnsignedFile.Multi.Generic ) - warning
19:02:06.0869 3188 RichVideo - detected UnsignedFile.Multi.Generic (1)
19:02:06.0958 3188 rimmptsk (d85e3fa9f5b1f29bb4ed185c450d1470) C:\Windows\system32\DRIVERS\rimmptsk.sys
19:02:06.0999 3188 rimmptsk - ok
19:02:07.0037 3188 rimsptsk (db8eb01c58c9fada00c70b1775278ae0) C:\Windows\system32\DRIVERS\rimsptsk.sys
19:02:07.0105 3188 rimsptsk - ok
19:02:07.0131 3188 rismxdp (6c1f93c0760c9f79a1869d07233df39d) C:\Windows\system32\DRIVERS\rixdptsk.sys
19:02:07.0222 3188 rismxdp - ok
19:02:07.0409 3188 RoxMediaDB9 (08fb7d968805001c7adcbb14b0651fa2) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
19:02:07.0606 3188 RoxMediaDB9 ( UnsignedFile.Multi.Generic ) - warning
19:02:07.0606 3188 RoxMediaDB9 - detected UnsignedFile.Multi.Generic (1)
19:02:07.0634 3188 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe
19:02:07.0683 3188 RpcLocator - ok
19:02:07.0908 3188 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
19:02:07.0956 3188 RpcSs - ok
19:02:08.0029 3188 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
19:02:08.0109 3188 rspndr - ok
19:02:08.0153 3188 SamSs (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
19:02:08.0179 3188 SamSs - ok
19:02:08.0246 3188 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
19:02:08.0266 3188 sbp2port - ok
19:02:08.0370 3188 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll
19:02:08.0452 3188 SCardSvr - ok
19:02:08.0629 3188 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll
19:02:08.0758 3188 Schedule - ok
19:02:08.0792 3188 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
19:02:08.0837 3188 SCPolicySvc - ok
19:02:08.0948 3188 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
19:02:08.0997 3188 sdbus - ok
19:02:09.0067 3188 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll
19:02:09.0281 3188 SDRSVC - ok
19:02:09.0307 3188 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
19:02:09.0380 3188 secdrv - ok
19:02:09.0428 3188 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll
19:02:09.0518 3188 seclogon - ok
19:02:09.0539 3188 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\System32\sens.dll
19:02:09.0593 3188 SENS - ok
19:02:09.0634 3188 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
19:02:09.0706 3188 Serenum - ok
19:02:09.0800 3188 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
19:02:09.0886 3188 Serial - ok
19:02:09.0913 3188 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
19:02:09.0947 3188 sermouse - ok
19:02:10.0129 3188 ServiceLayer (8988d1f32f56b3cd3f0f6c39f8a91a98) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
19:02:10.0193 3188 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
19:02:10.0193 3188 ServiceLayer - detected UnsignedFile.Multi.Generic (1)
19:02:10.0350 3188 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll
19:02:10.0407 3188 SessionEnv - ok
19:02:10.0445 3188 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
19:02:10.0515 3188 sffdisk - ok
19:02:10.0554 3188 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
19:02:10.0875 3188 sffp_mmc - ok
19:02:10.0987 3188 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
19:02:11.0058 3188 sffp_sd - ok
19:02:11.0088 3188 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
19:02:11.0145 3188 sfloppy - ok
19:02:11.0425 3188 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll
19:02:11.0538 3188 ShellHWDetection - ok
19:02:11.0636 3188 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
19:02:11.0673 3188 sisagp - ok
19:02:11.0714 3188 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
19:02:11.0730 3188 SiSRaid2 - ok
19:02:11.0813 3188 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
19:02:11.0830 3188 SiSRaid4 - ok
19:02:12.0291 3188 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe
19:02:13.0003 3188 slsvc - ok
19:02:13.0208 3188 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll
19:02:13.0279 3188 SLUINotify - ok
19:02:13.0380 3188 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
19:02:13.0432 3188 Smb - ok
19:02:13.0460 3188 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe
19:02:13.0492 3188 SNMPTRAP - ok
19:02:13.0986 3188 SNP2UVC (5140166bbcafe1393d4669353a1f8c0a) C:\Windows\system32\DRIVERS\snp2uvc.sys
19:02:14.0764 3188 SNP2UVC - ok
19:02:15.0085 3188 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
19:02:15.0169 3188 spldr - ok
19:02:15.0220 3188 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe
19:02:15.0327 3188 Spooler - ok
19:02:15.0472 3188 SpyEmrg (edaef346de209f040d0c9f9effedf084) C:\Windows\system32\Drivers\spyemrg.sys
19:02:15.0487 3188 SpyEmrg - ok
19:02:15.0510 3188 SpyEmrgAccess (5a1c84d84a07a3b6d389eba12c345ea4) C:\Windows\system32\Drivers\spyemrg_access.sys
19:02:15.0527 3188 SpyEmrgAccess - ok
19:02:15.0584 3188 SpyEmrgGuard (9e91568feeb1c78f2f271fbc0f639365) C:\Windows\system32\Drivers\spyemrg_guard.sys
19:02:15.0602 3188 SpyEmrgGuard - ok
19:02:16.0040 3188 SpyEmrgSrv (3e7e68528123cbeea7bac9f309a957ac) C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
19:02:16.0191 3188 SpyEmrgSrv - ok
19:02:16.0492 3188 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
19:02:16.0656 3188 srv - ok
19:02:16.0715 3188 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
19:02:16.0825 3188 srv2 - ok
19:02:16.0871 3188 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
19:02:16.0933 3188 srvnet - ok
19:02:16.0988 3188 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll
19:02:17.0053 3188 SSDPSRV - ok
19:02:17.0085 3188 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll
19:02:17.0121 3188 SstpSvc - ok
19:02:17.0173 3188 StillCam (ef70b3d22b4bffda6ea851ecb063efaa) C:\Windows\system32\DRIVERS\serscan.sys
19:02:17.0226 3188 StillCam - ok
19:02:17.0321 3188 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll
19:02:17.0445 3188 stisvc - ok
19:02:17.0567 3188 stllssvr (a9a23c8af361f7a93fd632e91a8c346f) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
19:02:17.0581 3188 stllssvr - ok
19:02:17.0642 3188 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
19:02:17.0661 3188 swenum - ok
19:02:17.0831 3188 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll
19:02:17.0928 3188 swprv - ok
19:02:17.0961 3188 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
19:02:17.0982 3188 Symc8xx - ok
19:02:18.0052 3188 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
19:02:18.0090 3188 Sym_hi - ok
19:02:18.0117 3188 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
19:02:18.0135 3188 Sym_u3 - ok
19:02:18.0213 3188 SynTP (8327106d1c93e9a7b98e63b9fcc24bb7) C:\Windows\system32\DRIVERS\SynTP.sys
19:02:18.0253 3188 SynTP - ok
19:02:18.0404 3188 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll
19:02:18.0528 3188 SysMain - ok
19:02:18.0609 3188 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll
19:02:18.0702 3188 TabletInputService - ok
19:02:18.0794 3188 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll
19:02:18.0900 3188 TapiSrv - ok
19:02:18.0944 3188 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll
19:02:19.0039 3188 TBS - ok
19:02:19.0210 3188 Tcpip (27d470dabc77bc60d0a3b0e4deb6cb91) C:\Windows\system32\drivers\tcpip.sys
19:02:19.0281 3188 Tcpip - ok
19:02:19.0294 3188 Tcpip6 (27d470dabc77bc60d0a3b0e4deb6cb91) C:\Windows\system32\DRIVERS\tcpip.sys
19:02:19.0356 3188 Tcpip6 - ok
19:02:19.0546 3188 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
19:02:19.0683 3188 tcpipreg - ok
19:02:19.0775 3188 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
19:02:19.0854 3188 TDPIPE - ok
19:02:19.0915 3188 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
19:02:19.0968 3188 TDTCP - ok
19:02:20.0052 3188 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
19:02:20.0143 3188 tdx - ok
19:02:20.0208 3188 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
19:02:20.0230 3188 TermDD - ok
19:02:20.0368 3188 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll
19:02:20.0451 3188 TermService - ok
19:02:20.0614 3188 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll
19:02:20.0650 3188 Themes - ok
19:02:20.0683 3188 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
19:02:20.0718 3188 THREADORDER - ok
19:02:20.0777 3188 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll
19:02:20.0817 3188 TrkWks - ok
19:02:20.0932 3188 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe
19:02:20.0978 3188 TrustedInstaller - ok
19:02:21.0005 3188 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:02:21.0043 3188 tssecsrv - ok
19:02:21.0073 3188 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
19:02:21.0210 3188 tunmp - ok
19:02:21.0241 3188 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
19:02:21.0275 3188 tunnel - ok
19:02:21.0316 3188 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
19:02:21.0336 3188 uagp35 - ok
19:02:21.0490 3188 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
19:02:21.0547 3188 udfs - ok
19:02:21.0591 3188 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe
19:02:21.0646 3188 UI0Detect - ok
19:02:21.0729 3188 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
19:02:21.0754 3188 uliagpkx - ok
19:02:21.0787 3188 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
19:02:21.0823 3188 uliahci - ok
19:02:21.0881 3188 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
19:02:21.0900 3188 UlSata - ok
19:02:21.0995 3188 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
19:02:22.0029 3188 ulsata2 - ok
19:02:22.0063 3188 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
19:02:22.0106 3188 umbus - ok
19:02:22.0183 3188 UnlockerDriver5 (bb879dcfd22926efbeb3298129898cbb) C:\Program Files\Unlocker\UnlockerDriver5.sys
19:02:22.0205 3188 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - warning
19:02:22.0205 3188 UnlockerDriver5 - detected UnsignedFile.Multi.Generic (1)
19:02:22.0316 3188 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll
19:02:22.0459 3188 upnphost - ok
19:02:22.0495 3188 upperdev (15629e4d65f97ab5432d6d9597cf6a33) C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
19:02:22.0578 3188 upperdev - ok
19:02:22.0623 3188 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
19:02:22.0665 3188 usbaudio - ok
19:02:22.0701 3188 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
19:02:22.0746 3188 usbccgp - ok
19:02:22.0834 3188 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
19:02:22.0896 3188 usbcir - ok
19:02:22.0953 3188 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
19:02:22.0979 3188 usbehci - ok
19:02:23.0030 3188 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
19:02:23.0170 3188 usbhub - ok
19:02:23.0195 3188 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
19:02:23.0289 3188 usbohci - ok
19:02:23.0376 3188 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
19:02:23.0435 3188 usbprint - ok
19:02:23.0482 3188 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
19:02:23.0529 3188 usbscan - ok
19:02:23.0557 3188 usbser (d575246188f63de0accf6eac5fb59e6a) C:\Windows\system32\drivers\usbser.sys
19:02:23.0611 3188 usbser - ok
19:02:23.0701 3188 UsbserFilt (5c17e6a11aa8be53f79fd364ba19f0ce) C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
19:02:23.0745 3188 UsbserFilt - ok
19:02:23.0787 3188 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:02:23.0833 3188 USBSTOR - ok
19:02:23.0857 3188 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
19:02:23.0883 3188 usbuhci - ok
19:02:24.0045 3188 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
19:02:24.0111 3188 usbvideo - ok
19:02:24.0173 3188 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll
19:02:24.0215 3188 UxSms - ok
19:02:24.0348 3188 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe
19:02:24.0424 3188 vds - ok
19:02:24.0501 3188 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
19:02:24.0630 3188 vga - ok
19:02:24.0672 3188 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
19:02:24.0718 3188 VgaSave - ok
19:02:24.0735 3188 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
19:02:24.0763 3188 viaagp - ok
19:02:24.0847 3188 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
19:02:24.0920 3188 ViaC7 - ok
19:02:24.0944 3188 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
19:02:24.0963 3188 viaide - ok
19:02:24.0990 3188 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
19:02:25.0008 3188 volmgr - ok
19:02:25.0142 3188 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
19:02:25.0184 3188 volmgrx - ok
19:02:25.0252 3188 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
19:02:25.0281 3188 volsnap - ok
19:02:25.0419 3188 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
19:02:25.0453 3188 vsmraid - ok
19:02:25.0573 3188 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe
19:02:25.0825 3188 VSS - ok
19:02:26.0068 3188 vToolbarUpdater11.2.0 (8ed347bad8d1fb7c40b593bfb01786d2) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
19:02:26.0172 3188 vToolbarUpdater11.2.0 - ok
19:02:26.0455 3188 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll
19:02:26.0515 3188 W32Time - ok
19:02:26.0675 3188 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
19:02:26.0741 3188 WacomPen - ok
19:02:26.0805 3188 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
19:02:26.0834 3188 Wanarp - ok
19:02:26.0837 3188 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
19:02:26.0872 3188 Wanarpv6 - ok
19:02:26.0977 3188 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll
19:02:27.0020 3188 wcncsvc - ok
19:02:27.0041 3188 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll
19:02:27.0085 3188 WcsPlugInService - ok
19:02:27.0156 3188 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
19:02:27.0226 3188 Wd - ok
19:02:27.0299 3188 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
19:02:27.0397 3188 Wdf01000 - ok
19:02:27.0493 3188 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
19:02:27.0548 3188 WdiServiceHost - ok
19:02:27.0576 3188 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
19:02:27.0615 3188 WdiSystemHost - ok
19:02:27.0681 3188 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll
19:02:27.0787 3188 WebClient - ok
19:02:27.0860 3188 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll
19:02:28.0048 3188 Wecsvc - ok
19:02:28.0094 3188 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll
19:02:28.0153 3188 wercplsupport - ok
19:02:28.0239 3188 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll
19:02:28.0283 3188 WerSvc - ok
19:02:28.0436 3188 winachsf (3b4522d0e750bac8fe7ae61622a57014) C:\Windows\system32\DRIVERS\HSX_CNXT.sys
19:02:28.0499 3188 winachsf - ok
19:02:28.0504 3188 WinHttpAutoProxySvc - ok
19:02:28.0568 3188 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll
19:02:28.0735 3188 Winmgmt - ok
19:02:28.0995 3188 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll
19:02:29.0249 3188 WinRM - ok
19:02:29.0367 3188 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll
19:02:29.0471 3188 Wlansvc - ok
19:02:29.0627 3188 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
19:02:29.0666 3188 WmiAcpi - ok
19:02:29.0718 3188 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe
19:02:29.0819 3188 wmiApSrv - ok
19:02:30.0185 3188 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe
19:02:30.0352 3188 WMPNetworkSvc - ok
19:02:30.0459 3188 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll
19:02:30.0527 3188 WPCSvc - ok
19:02:30.0567 3188 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll
19:02:30.0721 3188 WPDBusEnum - ok
19:02:30.0850 3188 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
19:02:30.0872 3188 WpdUsb - ok
19:02:31.0178 3188 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:02:31.0295 3188 WPFFontCache_v0400 - ok
19:02:31.0346 3188 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
19:02:31.0403 3188 ws2ifsl - ok
19:02:31.0411 3188 WSearch - ok
19:02:31.0468 3188 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:02:31.0535 3188 WUDFRd - ok
19:02:31.0633 3188 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll
19:02:31.0750 3188 wudfsvc - ok
19:02:31.0780 3188 XAudio (88af537264f2b818da15479ceeaf5d7c) C:\Windows\system32\DRIVERS\xaudio.sys
19:02:31.0807 3188 XAudio - ok
19:02:31.0929 3188 XAudioService (15a317674a08df26be65164d959e9203) C:\Windows\system32\DRIVERS\xaudio.exe
19:02:31.0983 3188 XAudioService - ok
19:02:32.0039 3188 MBR (0x1B8) (1a1a06f62e891045814007163c1c76c3) \Device\Harddisk0\DR0
19:02:32.0279 3188 \Device\Harddisk0\DR0 - ok
19:02:32.0280 3188 Boot (0x1200) (716ce770b82920b2512ea1144ccd75c1) \Device\Harddisk0\DR0\Partition0
19:02:32.0283 3188 \Device\Harddisk0\DR0\Partition0 - ok
19:02:32.0284 3188 Boot (0x1200) (68747b882e784c2b11cc0f525e92c000) \Device\Harddisk0\DR0\Partition1
19:02:32.0286 3188 \Device\Harddisk0\DR0\Partition1 - ok
19:02:32.0287 3188 ============================================================
19:02:32.0287 3188 Scan finished
19:02:32.0287 3188 ============================================================
19:02:32.0290 4704 Detected object count: 15
19:02:32.0290 4704 Actual detected object count: 15
19:03:06.0031 4704 CLCapSvc ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0031 4704 CLCapSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0032 4704 CLSched ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0032 4704 CLSched ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0033 4704 Com4Qlb ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0033 4704 Com4Qlb ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0033 4704 hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0033 4704 hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0034 4704 hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0035 4704 hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0036 4704 hpqwmiex ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0037 4704 hpqwmiex ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0038 4704 HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0038 4704 HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0038 4704 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0039 4704 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0039 4704 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0039 4704 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0040 4704 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0040 4704 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0041 4704 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0041 4704 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0042 4704 RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0042 4704 RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0042 4704 RoxMediaDB9 ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0042 4704 RoxMediaDB9 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0043 4704 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0043 4704 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:03:06.0044 4704 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - skipped by user
19:03:06.0044 4704 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - User select action: Skip

Ještě jen takový malý dotaz? Psal jsi, že ten ComboFix mám uložit na C, ale tady v tom návodu je, že se má uložit na plochu? Tak se jen pro jistotu ptám, který ten postup mám zvolit?

Tak se mi podařilo získat log z combofixu, ale ted mám problém se dostat na internet (píši momentálně z jiného pc), když chci spustit mozillu nebo i jiný program tak mi vyskočí upozornění: Illegal operation attempted on a registry key that has been marked for deletion. Co se s tím dá dělat?

Jj díky,

Tady je ten log:

ComboFix 12-07-14.01 - Sandra 14.07.2012 20:21:49.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1033.18.1013.211 [GMT 2:00]
Spuštěný z: c:\users\Sandra\ComboFix.exe
AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Mozilla Firefox\components\AskHPRFF.js
c:\users\Sandra\AppData\Local\.#
c:\users\Sandra\AppData\Local\.#\MBX@153C@2752748.###
c:\users\Sandra\AppData\Local\.#\MBX@153C@2752778.###
c:\users\Sandra\AppData\Roaming\.#
c:\users\Sandra\AppData\Roaming\.#\MBX@21E0@6928F8.###
c:\users\Sandra\AppData\Roaming\.#\MBX@21E0@692928.###
c:\users\Sandra\AppData\Roaming\.#\MBX@21E0@692958.###
c:\users\Sandra\AppData\Roaming\FFSJ
c:\users\Sandra\AppData\Roaming\FFSJ\FFSJ.cfg
c:\users\Sandra\ComboFix.exe
c:\windows\Installer\{ff24043d-55f8-5ce9-a20a-8337d9b4b888}\@
c:\windows\Installer\{ff24043d-55f8-5ce9-a20a-8337d9b4b888}\U\00000001.@
c:\windows\Installer\{ff24043d-55f8-5ce9-a20a-8337d9b4b888}\U\80000000.@
c:\windows\Installer\{ff24043d-55f8-5ce9-a20a-8337d9b4b888}\U\800000cb.@
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
.
Nakažená kopie c:\windows\system32\services.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\32788r22fwjfw\HarddiskVolumeShadowCopy1_!Windows!winsxs!x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56!services.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MYWEBSEARCHSERVICE
-------\Service_MyWebSearchService
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-14 do 2012-07-14 )))))))))))))))))))))))))))))))
.
.
2012-07-14 18:41 . 2012-07-14 19:08 -------- d-----w- c:\users\Sandra\AppData\Local\temp
2012-07-14 18:41 . 2012-07-14 18:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-14 13:35 . 2012-07-14 13:35 512 ----a-w- C:\PhysicalMBR.bin
2012-07-14 10:58 . 2012-07-14 11:00 -------- d-----w- c:\program files\trend micro
2012-07-14 10:58 . 2012-07-14 11:01 -------- d-----w- C:\rsit
2012-07-12 06:59 . 2012-07-14 06:44 -------- d-----w- c:\users\Sandra\AppData\Roaming\Spy Emergency
2012-07-12 06:59 . 2011-04-21 09:31 20056 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2012-07-12 06:59 . 2011-04-21 09:31 16216 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2012-07-12 06:59 . 2012-07-12 06:59 -------- d-----w- c:\programdata\NETGATE
2012-07-12 06:59 . 2011-04-21 09:31 14168 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2012-07-12 06:58 . 2012-07-12 06:58 -------- d-----w- c:\program files\NETGATE
2012-07-10 15:34 . 2012-07-10 15:34 -------- d-----w- c:\program files\ESET
2012-06-27 10:20 . 2012-06-14 22:16 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-27 10:20 . 2012-06-14 22:16 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-27 08:57 . 2012-02-29 15:09 157696 ----a-w- c:\windows\system32\imagehlp.dll
2012-06-27 08:57 . 2012-02-29 13:32 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-06-27 08:09 . 2012-02-01 15:11 1218048 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-06-24 12:40 . 2012-06-14 22:18 16864 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2012-06-23 12:09 . 2012-06-23 12:09 -------- d-----w- c:\users\Sandra\AppData\Local\Macromedia
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 11:32 . 2012-06-11 07:14 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-12 11:32 . 2011-06-20 09:15 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 22:19 . 2012-06-24 09:42 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-24 09:42 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-24 09:42 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-24 09:42 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-24 09:42 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-24 09:42 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-24 09:42 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-24 09:42 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-24 09:42 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-05-15 19:51 . 2012-06-27 08:10 2045440 ----a-w- c:\windows\system32\win32k.sys
2012-05-15 06:37 . 2012-06-27 08:10 916992 ----a-w- c:\windows\system32\wininet.dll
2012-06-14 22:19 . 2012-06-27 10:15 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-07-10 08:31 2074208 ----a-w- c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll" [2012-07-10 2074208]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-19 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
"ROC_roc_dec12"="c:\program files\AVG Secure Search\ROC_roc_dec12.exe" [2012-01-16 928096]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-10 1107552]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2008-10-16 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-10-22 18:55 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-11 11:32]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-18 08:39]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-18 08:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uDefault_Search_URL = hxxp://search.qip.ru
mStart Page = hxxp://www.yahoo.com
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 172.16.1.1
TCP: Interfaces\{5D397078-D39D-4699-93C7-15D8C45D702E}: NameServer = 192.168.2.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
FF - ProfilePath - c:\users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\vtfm3bfz.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.7&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
AddRemove-Octoshape add-in for Adobe Flash Player - c:\users\Sandra\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe
.
.
.
**************************************************************************
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory:
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(2396)
c:\program files\Hewlett-Packard\HP Advisor\Pillars\Market\MLDeskBand.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG2012\avgrsx.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\AVG\AVG2012\avgfws.exe
c:\program files\AVG\AVG2012\avgwdsvc.exe
c:\program files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
c:\program files\AVG\AVG2012\avgnsx.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\AVG\AVG2012\AVGIDSAgent.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\windows\system32\conime.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
.
**************************************************************************
.
Celkový čas: 2012-07-14 21:26:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-14 19:23
.
Před spuštěním: 14 867 668 992 bytes free
Po spuštění: 14 947 835 904 bytes free
.
- - End Of File - - 6DCA08130FD98C1CBBC78034A28DFC7C

Díky moc za pomoc, čas a trpělivost snad už to bude v pořádku a budu si dávat větší pozor..jinak aspoň případně vím, kam se obrátit

Však jsem psala, že jsem v tom celkem amatér, tak ani pořádně nevím, co tam všechno mám.. a nikdy se nebylo jaksi koho zeptat, aby se mi na pc koukl, co je tam zbytečné Takže máš ještě nějaký tip, co by se dalo vylepšit?

========== OTL ==========
Error: No service named MyWebSearchService was found to stop!
Service\Driver key MyWebSearchService not found.
File C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_USERS\S-1-5-21-1153613434-1182111917-439316606-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{55FAF0F2-44D4-425F-B5F5-6B275B621EAB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{55FAF0F2-44D4-425F-B5F5-6B275B621EAB}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91d5a482-ab25-11dd-82ad-001b2439887a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91d5a482-ab25-11dd-82ad-001b2439887a}\ not found.
File F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhi64.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91d5a482-ab25-11dd-82ad-001b2439887a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91d5a482-ab25-11dd-82ad-001b2439887a}\ not found.
File F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhi64.exe not found.
========== FILES ==========
C:\Windows\System32\⍨Ů moved successfully.
C:\Windows\System32\䆘Ś moved successfully.
C:\Windows\System32\䭀ƿ moved successfully.
C:\Windows\System32\朐ū moved successfully.
C:\Windows\System32\椐Ń moved successfully.
C:\Windows\System32\溠ŗ moved successfully.
C:\Windows\System32\�ɹ moved successfully.
C:\Windows\System32\Ｈʼn moved successfully.
File\Folder C:\Windows\System32\?Ů not found.
File\Folder C:\Windows\System32\?Ś not found.
File\Folder C:\Windows\System32\?Ń not found.
File\Folder C:\Windows\System32\?u not found.
File\Folder C:\Windows\System32\H? not found.
File\Folder C:\Windows\System32\?r not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.54.0 log created on 07142012_225339

Neboj, nadávat ti nikdo nebude ale asi bych to nechala na zítra, pokud tu během dne budeš..? tohle mě jaksi už zmohlo

Jj díky moc, hned se mi bude klidněji usínat, když je ten vir pryč tak třeba zítra kolem 13:00 plus mínus?

Též dobrou noc