Prosím o kontrolu logu - antivir nalezl Trojan:DOS/Sinowal.Q

[Valda09]

Dobrý den,

prosím o kontrolu logu z RSIT. Počítač se zaseknul při startu Win a nereagoval, při spuštění v nouzovém režimu antivir (Microsoft Security Essentials) nalezl virus Trojan:DOS/Sinowal.Q, který "odstranil". Zkusil jsem to ještě projet Kaspersky Virus Removal Tool, který nic nenašel...

Díky
*************

Logfile of random's system information tool 1.09 (written by random/random)
Run by Valda at 2012-07-19 12:46:30
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 51 GB (36%) free of 142 GB
Total RAM: 1014 MB (72% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-460486182-1710738407-2939153371-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-460486182-1710738407-2939153371-1005UA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Valda\Data aplikací\Mozilla\Firefox\Profiles\x269e853.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6, FirefoxAddon@similarWeb.com:1.2.06, foxmarks@kei.com:3.9.10, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.228 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Valda\Data aplikací\Mozilla\Firefox\Profiles\x269e853.default\extensions\
foxmarks@kei.com
{20a82645-c095-46ed-80e3-08825760534b}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-05-01 137752]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-05-01 354840]
"PersistenceThread"=C:\WINDOWS\system32\PersistenceThread.exe [2009-05-01 92696]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-14 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"snp2uvc"=C:\WINDOWS\system32\csnp2uvc.dll [2008-11-03 196608]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2008-07-03 94208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-27 1434920]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files\Launch Manager\LManager.exe [2009-02-20 817672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igdlogin]
C:\WINDOWS\system32\igdlogin.dll [2009-04-28 65536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Acer\Acer VCM\VC.exe"="C:\Program Files\Acer\Acer VCM\VC.exe:*:Enabled:Acer Video Quality Enhancement"
"C:\Documents and Settings\Valda\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Valda\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Průzkumník Windows"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Documents and Settings\Valda\Dokumenty\gta\gtawin\gtawin.exe"="C:\Documents and Settings\Valda\Dokumenty\gta\gtawin\gtawin.exe:*:Enabled:Grand Theft Auto"
"C:\Documents and Settings\Valda\Dokumenty\Q3demo\quake3.exe"="C:\Documents and Settings\Valda\Dokumenty\Q3demo\quake3.exe:*:Enabled:quake3"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-07-19 12:46:31 ----D---- C:\Program Files\trend micro
2012-07-19 12:46:30 ----D---- C:\rsit
2012-07-19 12:18:55 ----A---- C:\WINDOWS\ntbtlog.txt
2012-06-24 22:33:44 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2012-06-24 22:31:12 ----D---- C:\Program Files\Microsoft Security Client
2012-06-20 21:50:08 ----D---- C:\Program Files\Valeri Vlassov

======List of files/folders modified in the last 1 month======

2012-07-19 12:46:31 ----D---- C:\Program Files
2012-07-19 12:35:27 ----SD---- C:\WINDOWS\Tasks
2012-07-19 12:32:40 ----D---- C:\WINDOWS\Temp
2012-07-19 12:32:39 ----D---- C:\WINDOWS\system32\CatRoot2
2012-07-19 12:31:09 ----AD---- C:\WINDOWS\system32
2012-07-19 12:31:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-07-19 09:44:47 ----D---- C:\WINDOWS\system32\drivers
2012-07-19 09:42:11 ----D---- C:\Program Files\SeaMonkey
2012-07-18 16:39:15 ----D---- C:\WINDOWS
2012-07-18 00:31:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-07-17 22:47:41 ----D---- C:\Program Files\Mozilla Firefox
2012-07-16 22:35:41 ----D---- C:\Documents and Settings\Valda\Data aplikací\Dropbox
2012-07-10 17:37:07 ----D---- C:\Program Files\Mozilla Thunderbird
2012-07-10 09:11:14 ----A---- C:\WINDOWS\WDICT32.INI
2012-07-02 22:29:53 ----D---- C:\Documents and Settings\Valda\Data aplikací\Skype
2012-06-27 14:05:27 ----SHD---- C:\WINDOWS\Installer
2012-06-27 14:05:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-06-27 14:05:26 ----SHD---- C:\Config.Msi
2012-06-24 22:41:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-06-24 22:34:55 ----HD---- C:\WINDOWS\inf
2012-06-24 22:32:19 ----D---- C:\WINDOWS\Help
2012-06-24 22:31:34 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-06-24 22:14:03 ----D---- C:\Documents and Settings\Valda\Data aplikací\Media Player Classic
2012-06-22 21:50:02 ----SD---- C:\Documents and Settings\Valda\Data aplikací\Microsoft
2012-06-20 22:03:40 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-11-05 232512]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-08 16896]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-02-27 205360]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
S1 MpKslb06c2f94;MpKslb06c2f94; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{73A06F12-4BEF-44DE-8EC9-653A7E7F6A38}\MpKslb06c2f94.sys []
S2 HDUSB;HDUSB_XP.Sys HDUSB Bulk IO test driver; C:\WINDOWS\System32\Drivers\HDUSB_XP.sys [2011-04-10 16908]
S3 3hcxz6mej.sys;3hcxz6mej.sys; \??\C:\WINDOWS\system32\drivers\3hcxz6mej.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2009-02-20 1952512]
S3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-04-16 991136]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2009-06-19 45984]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 igd;igd; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-04-28 5096544]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-29 5870080]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-03-12 164864]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-04-16 132480]
S3 RtsUIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-10-01 1769984]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2008-04-14 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-06-20 349528]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2009-02-05 237568]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 253600]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-04-22 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[JaRon]

Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

Driver::
3hcxz6mej.sys

uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:



po aplikacii by mal vzniknut dalsi log, ten vloz sem

[Valda09]

Log z CF zde:

ComboFix 12-07-19.02 - Valda 19.07.2012 21:49:40.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1014.491 [GMT 2:00]
Spuštěný z: c:\documents and settings\Valda\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Valda\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\documents and settings\Translator\C4COM.DLL
c:\documents and settings\Translator\CAGENT.DLL
c:\documents and settings\Translator\CDV32.DLL
c:\documents and settings\Translator\cnxfdg1en.dll
c:\documents and settings\Translator\OGGC.DLL
c:\documents and settings\Translator\TRNOEH.DL_
c:\documents and settings\Translator\TRNOET.DL_
c:\documents and settings\Translator\WDICT32.EXE
c:\documents and settings\Translator\WTRAN32.EXE
c:\documents and settings\Translator\WTRDCTM.EXE
c:\documents and settings\Translator\ZLIB.DLL
c:\windows\iun6002.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\Services.reg
c:\windows\system32\_000006_.tmp.dll
c:\windows\system32\_000007_.tmp.dll
c:\windows\system32\_000008_.tmp.dll
c:\windows\system32\_000009_.tmp.dll
c:\windows\system32\_000023_.tmp.dll
c:\windows\system32\_000024_.tmp.dll
c:\windows\system32\_000025_.tmp.dll
c:\windows\system32\_000026_.tmp.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_3HCXZ6MEJ.SYS
-------\Legacy_HDUSB
-------\Service_3hcxz6mej.sys
-------\Service_HDUSB
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-19 do 2012-07-19 )))))))))))))))))))))))))))))))
.
.
2012-07-19 18:39 . 2012-07-19 18:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\CPA_VA
2012-07-19 18:23 . 2012-06-29 08:44 6891424 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A927CE5C-CCF6-4FF4-A3A3-BFD7AC8D4476}\mpengine.dll
2012-07-19 18:21 . 2012-07-19 18:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Comodo
2012-07-19 18:20 . 2012-07-19 18:20 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-07-19 18:20 . 2012-07-19 18:20 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-07-19 11:34 . 2011-06-21 09:24 32768 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2012-07-19 10:46 . 2012-07-19 10:46 -------- d-----w- c:\program files\trend micro
2012-07-19 10:46 . 2012-07-19 10:46 -------- d-----w- C:\rsit
2012-07-02 20:56 . 2012-07-02 20:56 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-07-02 20:56 . 2012-07-02 20:56 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-27 12:11 . 2012-06-29 08:44 6891424 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-06-24 20:33 . 2012-01-31 12:44 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-06-24 20:31 . 2012-06-24 20:32 -------- d-----w- c:\program files\Microsoft Security Client
2012-06-20 19:50 . 2012-06-20 19:50 -------- d-----w- c:\program files\Valeri Vlassov
2012-06-19 21:41 . 2012-06-19 21:41 -------- d-----w- c:\program files\totalcmd
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-02 13:19 . 2009-08-06 17:24 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2009-08-06 17:24 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-07-29 22:09 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-07-29 22:09 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-07-29 22:09 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-08-06 17:24 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2009-08-06 17:24 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2009-08-06 17:24 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2009-07-30 07:43 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-07-29 22:09 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-07-29 22:09 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2009-07-29 22:09 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-07-29 22:09 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2010-05-23 14:47 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2010-05-23 14:47 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2010-05-23 14:47 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-07-02 20:56 . 2012-02-07 10:25 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Valda\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Valda\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Valda\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Valda\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-05-01 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-05-01 354840]
"PersistenceThread"="c:\windows\system32\PersistenceThread.exe" [2009-05-01 92696]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2008-11-03 196608]
"PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-03 94208]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-02-27 1434920]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\igdlogin]
2009-04-28 03:44 65536 ----a-w- c:\windows\system32\igdlogin.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\COMODO Internet Security]
2012-03-11 19:13 6749512 ----a-w- c:\program files\COMODO\COMODO Internet Security\cfp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2009-02-20 01:52 817672 ----a-w- c:\program files\Launch Manager\LManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2010-11-30 11:20 997408 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Acer\\Acer VCM\\VC.exe"=
"c:\\Documents and Settings\\Valda\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Documents and Settings\\Valda\\Dokumenty\\gta\\gtawin\\gtawin.exe"=
"c:\\Documents and Settings\\Valda\\Dokumenty\\Q3demo\\quake3.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [11.3.2012 21:13 494968]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [11.3.2012 21:13 31704]
R2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [30.7.2009 3:59 237568]
R3 igd;igd;c:\windows\system32\drivers\igxpmp32.sys [30.7.2009 2:40 5096544]
S1 MpKsl8bc7125b;MpKsl8bc7125b;\??\c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A927CE5C-CCF6-4FF4-A3A3-BFD7AC8D4476}\MpKsl8bc7125b.sys --> c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A927CE5C-CCF6-4FF4-A3A3-BFD7AC8D4476}\MpKsl8bc7125b.sys [?]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [7.6.2012 19:12 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [11.4.2012 22:32 253600]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [30.7.2009 2:46 1684736]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [30.7.2009 2:32 164864]
S3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys --> c:\windows\system32\DRIVERS\Rts516xIR.sys [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 20:32]
.
2012-07-19 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2012-06-19 07:43]
.
2012-07-19 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11 10:26]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&m=ao751h&r=0xph05107716l0323wuj5w87i15600
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&m=ao751h&r=0xph05107716l0323wuj5w87i15600
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: Interfaces\{20342D67-4573-4164-9A7F-C882972266FE}: NameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\Valda\Data aplikací\Mozilla\Firefox\Profiles\x269e853.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-mcmscsvc
SafeBoot-MCODS
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-19 21:58
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(992)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(3176)
c:\windows\system32\guard32.dll
c:\documents and settings\Valda\Data aplikací\Dropbox\bin\DropboxExt.14.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
- - - - - - - > 'csrss.exe'(904)
c:\windows\system32\cmdcsr.dll
.
Celkový čas: 2012-07-19 22:01:50
ComboFix-quarantined-files.txt 2012-07-19 20:01
.
Před spuštěním: Volných bajtů: 52 349 788 160
Po spuštění: Volných bajtů: 52 303 847 424
.
- - End Of File - - 4B2411C433C2114A259F3E413BA4BF02

[JaRon]

prescanuj PC s AVPTool a napis ci su este problemy s PC ?

[Valda09]

AVPTool našel 1 hrozbu,výpis z logu:

Status: Disinfected (events: 1)
24.7.2012 22:33:51 Disinfected Trojan program Rootkit.Boot.Sinowal.b \Device\Harddisk0\DR0 High

Co s tím?

[cernohous13]

Zdravím,
tvůj řešitel je na dovolené, tak to zkusíme spolu.

AVPTool sice píše "Status: Disinfected" ale nechal bych ho pro jistotu proběhnout znovu.

pak kontrola TDSS

Po stažení http://support.kaspersky.com/downloads/ ... killer.exe na plochu.

- spusť
- klik na volbu change parameters
- označ ve spodním okně obě možnosti (klik do čtverečku) -> OK
- klik na Start scan
- po ukončení kontroly objeví se okno, kde zkontroluj, zda se nachází všude volby Skip
- pokud ano klik na Continue
- pokud ne, v řádcích kde není uprav na Skip, nyní klik na Continue
- na disku C se objeví textový soubor majicí přibližně tvar TDSSKiller.2.6.2.0_27.09.2011_10.16.46_log
- obsah logu vlož do příspěvku.

[Valda09]

Ahoj, díky, že se mě ujmeš

Tak AVPTool tentokrát napsal, že je to v pořádku (log jsem nedělal).

TDSS log je tu. Díky za kontrolu:

10:01:50.0187 2352 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
10:01:50.0531 2352 ============================================================
10:01:50.0531 2352 Current date / time: 2012/07/26 10:01:50.0531
10:01:50.0531 2352 SystemInfo:
10:01:50.0531 2352
10:01:50.0531 2352 OS Version: 5.1.2600 ServicePack: 3.0
10:01:50.0531 2352 Product type: Workstation
10:01:50.0531 2352 ComputerName: NOTEBOOK-ACER
10:01:50.0531 2352 UserName: Valda
10:01:50.0531 2352 Windows directory: C:\WINDOWS
10:01:50.0531 2352 System windows directory: C:\WINDOWS
10:01:50.0531 2352 Processor architecture: Intel x86
10:01:50.0531 2352 Number of processors: 2
10:01:50.0531 2352 Page size: 0x1000
10:01:50.0531 2352 Boot type: Normal boot
10:01:50.0531 2352 ============================================================
10:01:54.0671 2352 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:01:54.0718 2352 ============================================================
10:01:54.0718 2352 \Device\Harddisk0\DR0:
10:01:54.0718 2352 MBR partitions:
10:01:54.0718 2352 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x11618800
10:01:54.0718 2352 ============================================================
10:01:54.0734 2352 C: <-> \Device\Harddisk0\DR0\Partition0
10:01:54.0734 2352 ============================================================
10:01:54.0734 2352 Initialize success
10:01:54.0734 2352 ============================================================
10:03:18.0296 0892 ============================================================
10:03:18.0296 0892 Scan started
10:03:18.0296 0892 Mode: Manual; SigCheck; TDLFS;
10:03:18.0296 0892 ============================================================
10:03:18.0515 0892 Abiosdsk - ok
10:03:18.0546 0892 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
10:03:19.0437 0892 abp480n5 - ok
10:03:19.0500 0892 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:03:19.0875 0892 ACPI - ok
10:03:19.0890 0892 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
10:03:20.0265 0892 ACPIEC - ok
10:03:20.0359 0892 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:03:20.0828 0892 AdobeFlashPlayerUpdateSvc - ok
10:03:20.0875 0892 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
10:03:21.0265 0892 adpu160m - ok
10:03:21.0312 0892 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
10:03:21.0734 0892 aec - ok
10:03:21.0828 0892 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
10:03:22.0000 0892 AFD - ok
10:03:22.0046 0892 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
10:03:22.0421 0892 agp440 - ok
10:03:22.0421 0892 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
10:03:22.0796 0892 agpCPQ - ok
10:03:22.0812 0892 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
10:03:23.0000 0892 Aha154x - ok
10:03:23.0015 0892 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
10:03:23.0421 0892 aic78u2 - ok
10:03:23.0437 0892 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
10:03:23.0796 0892 aic78xx - ok
10:03:23.0843 0892 Alerter (e0a6fa244b8624d78fe5ff6f56a33bae) C:\WINDOWS\system32\alrsvc.dll
10:03:24.0187 0892 Alerter - ok
10:03:24.0250 0892 ALG (88842de939a827577bf24243699ac80a) C:\WINDOWS\System32\alg.exe
10:03:24.0625 0892 ALG - ok
10:03:24.0640 0892 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
10:03:24.0953 0892 AliIde - ok
10:03:24.0984 0892 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
10:03:25.0593 0892 alim1541 - ok
10:03:25.0765 0892 Ambfilt (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
10:03:26.0171 0892 Ambfilt - ok
10:03:26.0343 0892 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
10:03:26.0750 0892 amdagp - ok
10:03:26.0765 0892 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
10:03:26.0953 0892 amsint - ok
10:03:26.0968 0892 AppMgmt - ok
10:03:26.0984 0892 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
10:03:27.0328 0892 asc - ok
10:03:27.0343 0892 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
10:03:27.0531 0892 asc3350p - ok
10:03:27.0546 0892 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
10:03:27.0890 0892 asc3550 - ok
10:03:27.0984 0892 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
10:03:28.0171 0892 aspnet_state - ok
10:03:28.0218 0892 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:03:28.0562 0892 AsyncMac - ok
10:03:28.0593 0892 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
10:03:29.0000 0892 atapi - ok
10:03:29.0015 0892 Atdisk - ok
10:03:29.0046 0892 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:03:29.0468 0892 Atmarpc - ok
10:03:29.0515 0892 AudioSrv (de31b88962a8645dba5a37b993e7b0f1) C:\WINDOWS\System32\audiosrv.dll
10:03:29.0937 0892 AudioSrv - ok
10:03:29.0968 0892 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
10:03:30.0296 0892 audstub - ok
10:03:30.0484 0892 BCM43XX (fe4ed785396eaa554c561992106a35fa) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
10:03:30.0765 0892 BCM43XX - ok
10:03:30.0937 0892 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
10:03:31.0265 0892 Beep - ok
10:03:31.0359 0892 BITS (19395d092fd85ddc2d9c7729cf5a2ac8) C:\WINDOWS\system32\qmgr.dll
10:03:31.0859 0892 BITS - ok
10:03:31.0953 0892 Bonjour Service (73686fe0b2e0469f89fd2075be724704) C:\Program Files\Bonjour\mDNSResponder.exe
10:03:32.0218 0892 Bonjour Service ( UnsignedFile.Multi.Generic ) - warning
10:03:32.0218 0892 Bonjour Service - detected UnsignedFile.Multi.Generic (1)
10:03:32.0250 0892 Browser (249276d3ef1e74b992299cb96099e4d7) C:\WINDOWS\System32\browser.dll
10:03:32.0609 0892 Browser - ok
10:03:32.0718 0892 BTKRNL (75130181fa2fd6cbe83083c5311abe78) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
10:03:32.0875 0892 BTKRNL - ok
10:03:32.0984 0892 btwdins (b90635b00d3d4d6ea8c21ccaf35be55e) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
10:03:33.0234 0892 btwdins - ok
10:03:33.0437 0892 BTWUSB (1166cb501e1c34750a91600579efeab3) C:\WINDOWS\system32\Drivers\btwusb.sys
10:03:33.0546 0892 BTWUSB - ok
10:03:33.0625 0892 catchme - ok
10:03:33.0656 0892 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
10:03:34.0000 0892 cbidf - ok
10:03:34.0000 0892 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
10:03:34.0343 0892 cbidf2k - ok
10:03:34.0375 0892 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:03:34.0750 0892 CCDECODE - ok
10:03:34.0765 0892 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
10:03:34.0937 0892 cd20xrnt - ok
10:03:34.0968 0892 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
10:03:35.0328 0892 Cdaudio - ok
10:03:35.0359 0892 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
10:03:35.0750 0892 Cdfs - ok
10:03:35.0796 0892 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:03:36.0296 0892 Cdrom - ok
10:03:36.0312 0892 Changer - ok
10:03:36.0359 0892 CiSvc (e390dc1d7c461d7d56ec53402f329928) C:\WINDOWS\system32\cisvc.exe
10:03:36.0750 0892 CiSvc - ok
10:03:36.0796 0892 ClipSrv (064507a8dfa8c5c7e2ffddd3e6f424fa) C:\WINDOWS\system32\clipsrv.exe
10:03:37.0234 0892 ClipSrv - ok
10:03:37.0328 0892 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:03:37.0531 0892 clr_optimization_v2.0.50727_32 - ok
10:03:37.0546 0892 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
10:03:37.0890 0892 CmBatt - ok
10:03:38.0234 0892 cmdAgent (907324001ae25ac5959c91eaa34cabae) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
10:03:43.0171 0892 cmdAgent - ok
10:03:43.0437 0892 cmdGuard (bee235831f8e3f0baaca18b39d285cf5) C:\WINDOWS\system32\DRIVERS\cmdguard.sys
10:03:43.0843 0892 cmdGuard - ok
10:03:43.0875 0892 cmdHlp (de548946f36cab62fec2e6aa0149a619) C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
10:03:44.0140 0892 cmdHlp - ok
10:03:44.0187 0892 CmdIde (964d0f042aca51d5644779eb9d9ee40f) C:\WINDOWS\system32\DRIVERS\cmdide.sys
10:03:44.0531 0892 CmdIde - ok
10:03:44.0578 0892 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
10:03:44.0953 0892 Compbatt - ok
10:03:44.0953 0892 COMSysApp - ok
10:03:44.0984 0892 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
10:03:45.0312 0892 Cpqarray - ok
10:03:45.0359 0892 CryptSvc (f3ab0933cbd166d271992f411c27ccaf) C:\WINDOWS\System32\cryptsvc.dll
10:03:45.0750 0892 CryptSvc - ok
10:03:45.0812 0892 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
10:03:46.0203 0892 dac2w2k - ok
10:03:46.0218 0892 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
10:03:46.0546 0892 dac960nt - ok
10:03:46.0625 0892 DcomLaunch (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\system32\rpcss.dll
10:03:46.0875 0892 DcomLaunch - ok
10:03:46.0937 0892 Dhcp (8c9a53e285ac5e6704844d0459ec85be) C:\WINDOWS\System32\dhcpcsvc.dll
10:03:47.0312 0892 Dhcp - ok
10:03:47.0359 0892 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
10:03:47.0703 0892 Disk - ok
10:03:47.0734 0892 DKbFltr (08d30af92c270f2e76787c81589dbad6) C:\WINDOWS\system32\DRIVERS\DKbFltr.sys
10:03:47.0843 0892 DKbFltr - ok
10:03:47.0859 0892 dmadmin - ok
10:03:47.0968 0892 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
10:03:48.0390 0892 dmboot - ok
10:03:48.0421 0892 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
10:03:48.0781 0892 dmio - ok
10:03:48.0796 0892 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
10:03:49.0140 0892 dmload - ok
10:03:49.0171 0892 dmserver (2bfefe9e865655a76982f050450b9591) C:\WINDOWS\System32\dmserver.dll
10:03:49.0562 0892 dmserver - ok
10:03:49.0609 0892 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
10:03:50.0000 0892 DMusic - ok
10:03:50.0046 0892 Dnscache (dfaa406bf19f4ee806a6f8d4342137f7) C:\WINDOWS\System32\dnsrslvr.dll
10:03:50.0203 0892 Dnscache - ok
10:03:50.0250 0892 Dot3svc (4a3e2bd20157a0946751229e92eb8621) C:\WINDOWS\System32\dot3svc.dll
10:03:50.0812 0892 Dot3svc - ok
10:03:50.0859 0892 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
10:03:51.0203 0892 dpti2o - ok
10:03:51.0265 0892 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
10:03:51.0578 0892 drmkaud - ok
10:03:51.0656 0892 EapHost (0887d9c2be8d940778cad1e3b85f2a41) C:\WINDOWS\System32\eapsvc.dll
10:03:52.0093 0892 EapHost - ok
10:03:52.0125 0892 ERSvc (a2a4912798f2be706abadd3d30800d16) C:\WINDOWS\System32\ersvc.dll
10:03:52.0468 0892 ERSvc - ok
10:03:52.0531 0892 Eventlog (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
10:03:52.0718 0892 Eventlog - ok
10:03:52.0765 0892 EventSystem (a371f11ef07653591c8de26afb13ce7f) C:\WINDOWS\system32\es.dll
10:03:52.0968 0892 EventSystem - ok
10:03:53.0078 0892 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
10:03:53.0406 0892 Fastfat - ok
10:03:53.0468 0892 FastUserSwitchingCompatibility (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
10:03:53.0656 0892 FastUserSwitchingCompatibility - ok
10:03:53.0703 0892 Fax (2cd14c70d1d81af054aa5ed8024dcae6) C:\WINDOWS\system32\fxssvc.exe
10:03:54.0187 0892 Fax - ok
10:03:54.0234 0892 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
10:03:54.0593 0892 Fdc - ok
10:03:54.0656 0892 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
10:03:55.0031 0892 Fips - ok
10:03:55.0171 0892 FLEXnet Licensing Service (227846995afeefa70d328bf5334a86a5) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
10:03:55.0546 0892 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - warning
10:03:55.0546 0892 FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic (1)
10:03:55.0640 0892 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
10:03:56.0000 0892 Flpydisk - ok
10:03:56.0046 0892 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:03:56.0406 0892 FltMgr - ok
10:03:56.0531 0892 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:03:56.0656 0892 FontCache3.0.0.0 - ok
10:03:56.0671 0892 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:03:57.0015 0892 Fs_Rec - ok
10:03:57.0046 0892 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:03:57.0390 0892 Ftdisk - ok
10:03:57.0437 0892 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:03:57.0781 0892 Gpc - ok
10:03:57.0906 0892 gusvc (c1b577b2169900f4cf7190c39f085794) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
10:03:58.0109 0892 gusvc - ok
10:03:58.0156 0892 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:03:58.0609 0892 HDAudBus - ok
10:03:58.0687 0892 helpsvc (fcfe31fb75f8a6295b6b0af87a626282) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:03:59.0046 0892 helpsvc - ok
10:03:59.0062 0892 HidServ - ok
10:03:59.0125 0892 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:03:59.0484 0892 HidUsb - ok
10:03:59.0546 0892 hkmsvc (7a6b320928f86bc851530d63c82965d9) C:\WINDOWS\System32\kmsvc.dll
10:03:59.0984 0892 hkmsvc - ok
10:04:00.0031 0892 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
10:04:00.0359 0892 hpn - ok
10:04:00.0421 0892 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
10:04:00.0531 0892 HTTP - ok
10:04:00.0562 0892 HTTPFilter (58fe2f2da3bc5573f4a35b3760d3125f) C:\WINDOWS\System32\w3ssl.dll
10:04:01.0000 0892 HTTPFilter - ok
10:04:01.0031 0892 hwdatacard - ok
10:04:01.0078 0892 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
10:04:01.0406 0892 i2omgmt - ok
10:04:01.0453 0892 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
10:04:01.0828 0892 i2omp - ok
10:04:01.0890 0892 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:04:02.0281 0892 i8042prt - ok
10:04:02.0390 0892 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:04:02.0859 0892 idsvc - ok
10:04:03.0281 0892 igd (8b15d86eb89a7234522acf38de0ef1e7) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
10:04:03.0859 0892 igd - ok
10:04:04.0031 0892 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
10:04:04.0421 0892 Imapi - ok
10:04:04.0500 0892 ImapiService (f7b93aafad33b2320954c17e26c8d361) C:\WINDOWS\system32\imapi.exe
10:04:04.0968 0892 ImapiService - ok
10:04:05.0031 0892 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
10:04:05.0375 0892 ini910u - ok
10:04:05.0468 0892 Inspect (f89849cf13805ef49da64a8a63193af7) C:\WINDOWS\system32\DRIVERS\inspect.sys
10:04:05.0640 0892 Inspect - ok
10:04:06.0437 0892 IntcAzAudAddService (7f33081e463863a38ff231f211a004a9) C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:04:07.0015 0892 IntcAzAudAddService - ok
10:04:07.0171 0892 IntelIde (57d928e548b38502abba7a77a6eb7312) C:\WINDOWS\system32\DRIVERS\intelide.sys
10:04:07.0484 0892 IntelIde - ok
10:04:07.0546 0892 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:04:07.0890 0892 intelppm - ok
10:04:07.0906 0892 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:04:08.0265 0892 Ip6Fw - ok
10:04:08.0281 0892 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:04:08.0656 0892 IpFilterDriver - ok
10:04:08.0671 0892 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:04:09.0015 0892 IpInIp - ok
10:04:09.0062 0892 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:04:09.0453 0892 IpNat - ok
10:04:09.0515 0892 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:04:09.0921 0892 IPSec - ok
10:04:09.0953 0892 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
10:04:10.0140 0892 IRENUM - ok
10:04:10.0218 0892 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:04:10.0562 0892 isapnp - ok
10:04:10.0609 0892 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:04:10.0937 0892 Kbdclass - ok
10:04:11.0046 0892 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:04:11.0375 0892 kbdhid - ok
10:04:11.0437 0892 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
10:04:11.0812 0892 kmixer - ok
10:04:11.0859 0892 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
10:04:12.0093 0892 KSecDD - ok
10:04:12.0140 0892 LanmanServer (3428e8f86f8add36b42fb23542c7b3e4) C:\WINDOWS\System32\srvsvc.dll
10:04:12.0281 0892 LanmanServer - ok
10:04:12.0359 0892 lanmanworkstation (936c1d110232d23b621cb0196e4f80f0) C:\WINDOWS\System32\wkssvc.dll
10:04:12.0578 0892 lanmanworkstation - ok
10:04:12.0593 0892 lbrtfdc - ok
10:04:12.0640 0892 LmHosts (0ab159f536e3e8f7f07113702a07cca5) C:\WINDOWS\System32\lmhsvc.dll
10:04:12.0984 0892 LmHosts - ok
10:04:13.0046 0892 Messenger (221cd1c815b8a6b79389c3f5d1018de8) C:\WINDOWS\System32\msgsvc.dll
10:04:13.0406 0892 Messenger - ok
10:04:13.0453 0892 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
10:04:13.0765 0892 mnmdd - ok
10:04:13.0812 0892 mnmsrvc (9a57d046f88f4b69751b11fd40088a61) C:\WINDOWS\system32\mnmsrvc.exe
10:04:14.0250 0892 mnmsrvc - ok
10:04:14.0281 0892 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
10:04:14.0640 0892 Modem - ok
10:04:14.0781 0892 Monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
10:04:15.0046 0892 Monfilt - ok
10:04:15.0234 0892 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:04:15.0593 0892 Mouclass - ok
10:04:15.0656 0892 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:04:16.0000 0892 mouhid - ok
10:04:16.0046 0892 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
10:04:16.0421 0892 MountMgr - ok
10:04:16.0484 0892 MpFilter (7e34bfa1a7b60bba1da03d677f16cd63) C:\WINDOWS\system32\DRIVERS\MpFilter.sys
10:04:16.0656 0892 MpFilter - ok
10:04:16.0687 0892 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
10:04:17.0046 0892 mraid35x - ok
10:04:17.0078 0892 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:04:17.0406 0892 MRxDAV - ok
10:04:17.0500 0892 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:04:17.0687 0892 MRxSmb - ok
10:04:17.0734 0892 MSDTC (6db4d1521caba9a5ffab54ade0ae867d) C:\WINDOWS\system32\msdtc.exe
10:04:18.0093 0892 MSDTC - ok
10:04:18.0171 0892 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
10:04:18.0656 0892 Msfs - ok
10:04:18.0671 0892 MSIServer - ok
10:04:18.0718 0892 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:04:19.0046 0892 MSKSSRV - ok
10:04:19.0171 0892 MsMpSvc (90dc23d940551db35367fb1e40575b25) c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
10:04:19.0296 0892 MsMpSvc - ok
10:04:19.0312 0892 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:04:19.0656 0892 MSPCLOCK - ok
10:04:19.0671 0892 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
10:04:19.0984 0892 MSPQM - ok
10:04:20.0031 0892 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:04:20.0406 0892 mssmbios - ok
10:04:20.0421 0892 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
10:04:20.0750 0892 MSTEE - ok
10:04:20.0812 0892 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
10:04:20.0984 0892 Mup - ok
10:04:21.0046 0892 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:04:21.0421 0892 NABTSFEC - ok
10:04:21.0531 0892 napagent (6ea362e9db03d44f6b996f4d8be237e9) C:\WINDOWS\System32\qagentrt.dll
10:04:22.0000 0892 napagent - ok
10:04:22.0062 0892 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
10:04:22.0453 0892 NDIS - ok
10:04:22.0484 0892 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:04:22.0828 0892 NdisIP - ok
10:04:22.0875 0892 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:04:23.0015 0892 NdisTapi - ok
10:04:23.0046 0892 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:04:23.0406 0892 Ndisuio - ok
10:04:23.0515 0892 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:04:23.0968 0892 NdisWan - ok
10:04:24.0015 0892 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
10:04:24.0171 0892 NDProxy - ok
10:04:24.0203 0892 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
10:04:24.0593 0892 NetBIOS - ok
10:04:24.0625 0892 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
10:04:25.0031 0892 NetBT - ok
10:04:25.0093 0892 NetDDE (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
10:04:25.0796 0892 NetDDE - ok
10:04:25.0796 0892 NetDDEdsdm (933de774986ec85e48210c44ab431de6) C:\WINDOWS\system32\netdde.exe
10:04:26.0281 0892 NetDDEdsdm - ok
10:04:26.0328 0892 Netlogon (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
10:04:26.0687 0892 Netlogon - ok
10:04:26.0750 0892 Netman (72e1e9e2977be08bdeedb6d8fd9d4d40) C:\WINDOWS\System32\netman.dll
10:04:27.0156 0892 Netman - ok
10:04:27.0250 0892 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:04:27.0390 0892 NetTcpPortSharing - ok
10:04:27.0453 0892 Nla (39ee7c3bfbc64ba87cc8cf67386e814c) C:\WINDOWS\System32\mswsock.dll
10:04:27.0625 0892 Nla - ok
10:04:27.0671 0892 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
10:04:28.0031 0892 Npfs - ok
10:04:28.0109 0892 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
10:04:28.0515 0892 Ntfs - ok
10:04:28.0531 0892 NtLmSsp (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
10:04:28.0859 0892 NtLmSsp - ok
10:04:28.0937 0892 NtmsSvc (023dd70573d644f3d9c8b1258a7bfd08) C:\WINDOWS\system32\ntmssvc.dll
10:04:29.0375 0892 NtmsSvc - ok
10:04:29.0421 0892 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
10:04:29.0734 0892 Null - ok
10:04:29.0781 0892 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:04:30.0109 0892 NwlnkFlt - ok
10:04:30.0140 0892 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:04:30.0500 0892 NwlnkFwd - ok
10:04:30.0656 0892 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:04:31.0031 0892 odserv - ok
10:04:31.0109 0892 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:04:31.0312 0892 ose - ok
10:04:31.0343 0892 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
10:04:31.0781 0892 Parport - ok
10:04:31.0812 0892 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
10:04:32.0156 0892 PartMgr - ok
10:04:32.0187 0892 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
10:04:32.0515 0892 ParVdm - ok
10:04:32.0531 0892 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
10:04:32.0921 0892 PCI - ok
10:04:32.0937 0892 PCIDump - ok
10:04:32.0953 0892 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
10:04:33.0265 0892 PCIIde - ok
10:04:33.0281 0892 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
10:04:33.0656 0892 Pcmcia - ok
10:04:33.0671 0892 PDCOMP - ok
10:04:33.0687 0892 PDFRAME - ok
10:04:33.0703 0892 PDRELI - ok
10:04:33.0718 0892 PDRFRAME - ok
10:04:33.0734 0892 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
10:04:34.0062 0892 perc2 - ok
10:04:34.0078 0892 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
10:04:34.0406 0892 perc2hib - ok
10:04:34.0500 0892 PlugPlay (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
10:04:34.0671 0892 PlugPlay - ok
10:04:34.0703 0892 PolicyAgent (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
10:04:35.0015 0892 PolicyAgent - ok
10:04:35.0062 0892 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:04:35.0453 0892 PptpMiniport - ok
10:04:35.0453 0892 ProtectedStorage (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
10:04:35.0781 0892 ProtectedStorage - ok
10:04:35.0828 0892 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
10:04:36.0312 0892 PSched - ok
10:04:36.0390 0892 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:04:36.0703 0892 Ptilink - ok
10:04:36.0781 0892 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
10:04:37.0125 0892 ql1080 - ok
10:04:37.0140 0892 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
10:04:37.0484 0892 Ql10wnt - ok
10:04:37.0500 0892 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
10:04:37.0843 0892 ql12160 - ok
10:04:37.0859 0892 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
10:04:38.0203 0892 ql1240 - ok
10:04:38.0218 0892 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
10:04:38.0578 0892 ql1280 - ok
10:04:38.0640 0892 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:04:38.0921 0892 RasAcd - ok
10:04:38.0984 0892 RasAuto (2b5e44ea009f2f374b980e1e9a70635d) C:\WINDOWS\System32\rasauto.dll
10:04:39.0390 0892 RasAuto - ok
10:04:39.0421 0892 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:04:39.0781 0892 Rasl2tp - ok
10:04:39.0828 0892 RasMan (d57554c664b64604bd1ee13ea2c07e77) C:\WINDOWS\System32\rasmans.dll
10:04:40.0203 0892 RasMan - ok
10:04:40.0218 0892 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:04:40.0562 0892 RasPppoe - ok
10:04:40.0609 0892 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
10:04:40.0937 0892 Raspti - ok
10:04:40.0984 0892 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:04:41.0328 0892 Rdbss - ok
10:04:41.0375 0892 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:04:41.0687 0892 RDPCDD - ok
10:04:41.0781 0892 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:04:42.0109 0892 rdpdr - ok
10:04:42.0171 0892 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
10:04:42.0406 0892 RDPWD - ok
10:04:42.0500 0892 RDSessMgr (c0d9d9711cb74ee9bc66353d8cbdab0e) C:\WINDOWS\system32\sessmgr.exe
10:04:42.0937 0892 RDSessMgr - ok
10:04:42.0984 0892 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
10:04:43.0390 0892 redbook - ok
10:04:43.0453 0892 RemoteAccess (127c26b5371651043450e52542099aba) C:\WINDOWS\System32\mprdim.dll
10:04:43.0843 0892 RemoteAccess - ok
10:04:43.0906 0892 RpcLocator (718b3bdc0bc3c2f7d065a53d26202af9) C:\WINDOWS\system32\locator.exe
10:04:44.0359 0892 RpcLocator - ok
10:04:44.0437 0892 RpcSs (be27674d1cbc3214aec84b4336a38bbf) C:\WINDOWS\System32\rpcss.dll
10:04:44.0609 0892 RpcSs - ok
10:04:44.0656 0892 RSUSBSTOR (2ab66b8ccd92d4d8e33c98fea874325b) C:\WINDOWS\system32\Drivers\RtsUStor.sys
10:04:44.0796 0892 RSUSBSTOR - ok
10:04:44.0859 0892 RSVP (09ab2e71e58b078038e3bfdba7ffc984) C:\WINDOWS\system32\rsvp.exe
10:04:45.0265 0892 RSVP - ok
10:04:45.0359 0892 RS_Service (8e250687e5f020cd337cc9d8252c0b56) C:\Program Files\Acer\Acer VCM\RS_Service.exe
10:04:45.0906 0892 RS_Service ( UnsignedFile.Multi.Generic ) - warning
10:04:45.0906 0892 RS_Service - detected UnsignedFile.Multi.Generic (1)
10:04:45.0953 0892 RTLE8023xp (f42679371a71a94a451785e714ef2710) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
10:04:46.0171 0892 RTLE8023xp - ok
10:04:46.0187 0892 RtsUIR - ok
10:04:46.0281 0892 SamSs (ed0a176354487ceed65b80a7148ab739) C:\WINDOWS\system32\lsass.exe
10:04:46.0609 0892 SamSs - ok
10:04:46.0671 0892 SCardSvr (410046e401eb11e1e6749e9deea41d4a) C:\WINDOWS\System32\SCardSvr.exe
10:04:47.0109 0892 SCardSvr - ok
10:04:47.0156 0892 Schedule (3ff232a7731621b8902d81d42418c93c) C:\WINDOWS\system32\schedsvc.dll
10:04:47.0562 0892 Schedule - ok
10:04:47.0625 0892 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:04:47.0843 0892 Secdrv - ok
10:04:47.0875 0892 seclogon (477e2c3cc5e4a0d635bcb0ea8dcac3c6) C:\WINDOWS\System32\seclogon.dll
10:04:48.0218 0892 seclogon - ok
10:04:48.0250 0892 SENS (a530b75c10c23c9ab28fdb6ce719e21f) C:\WINDOWS\system32\sens.dll
10:04:48.0609 0892 SENS - ok
10:04:48.0640 0892 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\drivers\Serial.sys
10:04:49.0125 0892 Serial - ok
10:04:49.0187 0892 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
10:04:49.0531 0892 Sfloppy - ok
10:04:49.0593 0892 SharedAccess (f58faca9621d2db01bd0927d9a0a208e) C:\WINDOWS\System32\ipnathlp.dll
10:04:50.0031 0892 SharedAccess - ok
10:04:50.0093 0892 ShellHWDetection (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
10:04:50.0234 0892 ShellHWDetection - ok
10:04:50.0250 0892 Simbad - ok
10:04:50.0312 0892 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
10:04:50.0687 0892 sisagp - ok
10:04:50.0812 0892 SkypeUpdate (ddaa5f4a6b958fc313ebd02dd925752f) C:\Program Files\Skype\Updater\Updater.exe
10:04:51.0531 0892 SkypeUpdate - ok
10:04:51.0562 0892 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:04:51.0921 0892 SLIP - ok
10:04:52.0125 0892 SNP2UVC (0302bc619d4a723317e7f8eb0c362bd3) C:\WINDOWS\system32\DRIVERS\snp2uvc.sys
10:04:52.0453 0892 SNP2UVC - ok
10:04:52.0671 0892 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
10:04:52.0875 0892 Sparrow - ok
10:04:52.0953 0892 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
10:04:53.0265 0892 splitter - ok
10:04:53.0328 0892 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
10:04:53.0484 0892 Spooler - ok
10:04:53.0531 0892 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
10:04:53.0796 0892 sr - ok
10:04:53.0875 0892 srservice (35b91147124f64ac8081a2edb9ea4dee) C:\WINDOWS\system32\srsvc.dll
10:04:54.0125 0892 srservice - ok
10:04:54.0203 0892 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
10:04:54.0343 0892 Srv - ok
10:04:54.0375 0892 SSDPSRV (becd5271dc4e3b7c3d035f790fcbc1e5) C:\WINDOWS\System32\ssdpsrv.dll
10:04:54.0609 0892 SSDPSRV - ok
10:04:54.0671 0892 stisvc (c1cdd9275f6a115bb0ae1d55d8d27ba6) C:\WINDOWS\system32\wiaservc.dll
10:04:55.0109 0892 stisvc - ok
10:04:55.0171 0892 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:04:55.0500 0892 streamip - ok
10:04:55.0546 0892 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
10:04:55.0859 0892 swenum - ok
10:04:55.0890 0892 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
10:04:56.0281 0892 swmidi - ok
10:04:56.0296 0892 SwPrv - ok
10:04:56.0312 0892 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
10:04:56.0640 0892 symc810 - ok
10:04:56.0656 0892 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
10:04:57.0000 0892 symc8xx - ok
10:04:57.0015 0892 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
10:04:57.0359 0892 sym_hi - ok
10:04:57.0375 0892 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
10:04:57.0703 0892 sym_u3 - ok
10:04:57.0765 0892 SynTP (60cd166ae4261920b4008a1a114ae97c) C:\WINDOWS\system32\DRIVERS\SynTP.sys
10:04:57.0890 0892 SynTP - ok
10:04:57.0937 0892 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
10:04:58.0343 0892 sysaudio - ok
10:04:58.0406 0892 SysmonLog (ce06f01b88ace199a1bf460cac29c110) C:\WINDOWS\system32\smlogsvc.exe
10:04:58.0875 0892 SysmonLog - ok
10:04:58.0937 0892 TapiSrv (c2546cd7a398476f9df5614b2ae160e8) C:\WINDOWS\System32\tapisrv.dll
10:04:59.0328 0892 TapiSrv - ok
10:04:59.0406 0892 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:04:59.0531 0892 Tcpip - ok
10:04:59.0593 0892 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
10:04:59.0921 0892 TDPIPE - ok
10:04:59.0937 0892 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
10:05:00.0281 0892 TDTCP - ok
10:05:00.0312 0892 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
10:05:00.0703 0892 TermDD - ok
10:05:00.0781 0892 TermService (a75dd6fc3dbee4fff5ebc9f2c28bb66e) C:\WINDOWS\System32\termsrv.dll
10:05:01.0203 0892 TermService - ok
10:05:01.0265 0892 Themes (ee9a2b9ea968a792a053c9d1a86bf870) C:\WINDOWS\System32\shsvcs.dll
10:05:01.0406 0892 Themes - ok
10:05:01.0484 0892 TosIde (fd4fd7d6fda5c019ed86025d7be1510f) C:\WINDOWS\system32\DRIVERS\toside.sys
10:05:01.0828 0892 TosIde - ok
10:05:01.0875 0892 TrkWks (38853304ccb938d30e0c4cde8d2c2a8a) C:\WINDOWS\system32\trkwks.dll
10:05:02.0234 0892 TrkWks - ok
10:05:02.0250 0892 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
10:05:02.0656 0892 Udfs - ok
10:05:02.0671 0892 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
10:05:02.0875 0892 ultra - ok
10:05:02.0953 0892 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
10:05:03.0296 0892 Update - ok
10:05:03.0375 0892 upnphost (651bd90dcee5b7bdc74a2eb7c9266f9e) C:\WINDOWS\System32\upnphost.dll
10:05:03.0609 0892 upnphost - ok
10:05:03.0656 0892 UPS (20a0f6a11959e92908717d09e87d670d) C:\WINDOWS\System32\ups.exe
10:05:04.0171 0892 UPS - ok
10:05:04.0250 0892 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:05:04.0593 0892 usbccgp - ok
10:05:04.0609 0892 USBCCID - ok
10:05:04.0656 0892 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:05:05.0000 0892 usbehci - ok
10:05:05.0031 0892 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:05:05.0421 0892 usbhub - ok
10:05:05.0453 0892 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:05:05.0765 0892 usbscan - ok
10:05:05.0828 0892 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:05:06.0265 0892 usbstor - ok
10:05:06.0281 0892 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:05:06.0609 0892 usbuhci - ok
10:05:06.0625 0892 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
10:05:06.0968 0892 usbvideo - ok
10:05:06.0984 0892 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
10:05:07.0328 0892 VgaSave - ok
10:05:07.0343 0892 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
10:05:07.0703 0892 viaagp - ok
10:05:07.0718 0892 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
10:05:08.0031 0892 ViaIde - ok
10:05:08.0062 0892 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
10:05:08.0421 0892 VolSnap - ok
10:05:08.0484 0892 VSS (d6ba1a63d9e00933f1cd2a885573afb2) C:\WINDOWS\System32\vssvc.exe
10:05:08.0828 0892 VSS - ok
10:05:08.0875 0892 W32Time (fa4e1cdba256787f2149f4aad07bc91f) C:\WINDOWS\system32\w32time.dll
10:05:09.0250 0892 W32Time - ok
10:05:09.0312 0892 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:05:09.0671 0892 Wanarp - ok
10:05:09.0750 0892 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
10:05:09.0890 0892 Wdf01000 - ok
10:05:09.0906 0892 WDICA - ok
10:05:09.0953 0892 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
10:05:10.0359 0892 wdmaud - ok
10:05:10.0406 0892 WebClient (47ae51048a82dfa1cd6b51d369f7e169) C:\WINDOWS\System32\webclnt.dll
10:05:10.0781 0892 WebClient - ok
10:05:10.0875 0892 winmgmt (e488332126e3b1182d2b8a0c35408ec6) C:\WINDOWS\system32\wbem\WMIsvc.dll
10:05:11.0265 0892 winmgmt - ok
10:05:11.0343 0892 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
10:05:11.0562 0892 WmdmPmSN - ok
10:05:11.0625 0892 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
10:05:11.0968 0892 WmiAcpi - ok
10:05:12.0031 0892 WmiApSrv (23f6f03272f7e5679f1f050aed5acee6) C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:05:12.0515 0892 WmiApSrv - ok
10:05:12.0687 0892 WMPNetworkSvc (3739866d20abd42f26a7b85f9e2560af) C:\Program Files\Windows Media Player\WMPNetwk.exe
10:05:13.0546 0892 WMPNetworkSvc - ok
10:05:13.0609 0892 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
10:05:13.0953 0892 WS2IFSL - ok
10:05:14.0000 0892 wscsvc (4c86d5faf78194995af9cc1075f65dd3) C:\WINDOWS\system32\wscsvc.dll
10:05:14.0406 0892 wscsvc - ok
10:05:14.0421 0892 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:05:14.0734 0892 WSTCODEC - ok
10:05:14.0812 0892 wuauserv (c1364564800ee9784192145324a23308) C:\WINDOWS\system32\wuauserv.dll
10:05:15.0140 0892 wuauserv - ok
10:05:15.0187 0892 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:05:15.0375 0892 WudfPf - ok
10:05:15.0406 0892 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:05:15.0562 0892 WudfRd - ok
10:05:15.0609 0892 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
10:05:15.0734 0892 WudfSvc - ok
10:05:15.0796 0892 WZCSVC (a27d4ba7264c0bf52f32d10405bea1d4) C:\WINDOWS\System32\wzcsvc.dll
10:05:16.0234 0892 WZCSVC - ok
10:05:16.0296 0892 xmlprov (eaa4bb9edb3fb10cf8979fe65e63658f) C:\WINDOWS\System32\xmlprov.dll
10:05:16.0687 0892 xmlprov - ok
10:05:16.0812 0892 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
10:05:17.0843 0892 \Device\Harddisk0\DR0 - ok
10:05:17.0859 0892 Boot (0x1200) (2fbc2936a618ce58f90f2a40c9f28e01) \Device\Harddisk0\DR0\Partition0
10:05:17.0859 0892 \Device\Harddisk0\DR0\Partition0 - ok
10:05:17.0859 0892 ============================================================
10:05:17.0859 0892 Scan finished
10:05:17.0859 0892 ============================================================
10:05:18.0000 3128 Detected object count: 3
10:05:18.0000 3128 Actual detected object count: 3
10:07:32.0625 3128 Bonjour Service ( UnsignedFile.Multi.Generic ) - skipped by user
10:07:32.0625 3128 Bonjour Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:07:32.0625 3128 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
10:07:32.0625 3128 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:07:32.0625 3128 RS_Service ( UnsignedFile.Multi.Generic ) - skipped by user
10:07:32.0625 3128 RS_Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

[cernohous13]

zdá se, že máš čisto
a jestli už nenacházíš nic podivného, tak po nás uklidím

ComboFix odinstalujeme
jdi Start -> Spustit... a zkopíruj ComboFix /Uninstall (pozor, za x je mezera) -> OK

Stáhni a spusť T-cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe - uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš

Stáhni TempFolderCleaner http://oldtimer.geekstogo.com/TFC.exe
Zavři všechny programy a spusť. Po ukončení akce bude PC restartován.
Pokud ne, restartuj sám.
(čistí Temp složky , nečistí URL, historii, prefetch ani cookies)

Vypni Obnovení systému -> restartuj -> zapni Obnovení systému http://www.viry.cz/forum/viewtopic.php?t=47040

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

Po vyčištění by se hodila defragmentace
doporučuji http://www.slunecnice.cz/sw/defraggler/ + čeština