Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Проверка за вируси

Just Human..
в Премахване на зловреден софтуер

Featured Replies

Здравейте колеги, днес инсталирах Аваст (бях без антивирусна около 1 месец). Инсталирах я защото почнаха да се показват сини еркани (температурите са ми в норма), както и това, че не мога да спирам някой процеси от мениджъра на задачите (с Край на задачата даже). Такива проблеми ми правят BIttorrent както и днес mbam. Eто и логовете от DDS:

DDS (Ver_2011-09-30.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.5.0_17

Run by sControl at 21:14:32 on 2012-07-16

Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1023.344 [GMT 3:00]

.

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

.

============== Running Processes ================

.

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\AVAST Software\Avast\avastUI.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Application Updater\ApplicationUpdater.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\VentSrv\ventrilo_svc.exe

C:\Program Files\VentSrv\ventrilo_srv.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\DAEMON Tools Lite\DTLite.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k imgsvc

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2790392

uURLSearchHooks: YouTube Downloader Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\youtube downloader toolbar\ie\6.0\youtubedownloaderToolbarIE.dll

uURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBitT.dll

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll

BHO: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBitT.dll

BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: KMP Media Toolbar: {daf5b34c-1aa3-4c33-ae24-766a370635d2} -

BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: YouTube Downloader Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\youtube downloader toolbar\ie\6.0\youtubedownloaderToolbarIE.dll

TB: KMP Media Toolbar: {daf5b34c-1aa3-4c33-ae24-766a370635d2} -

TB: YouTube Downloader Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\youtube downloader toolbar\ie\6.0\youtubedownloaderToolbarIE.dll

TB: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBitT.dll

TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized

uRun: [Anders Kjersem: TransBar] d:\sniper control\programs\themes\transbar\TransBar.exe /NoConfig

uRun: [speedConnectStartUp] <no file>

mRun: [soundMan] SOUNDMAN.EXE

mRun: [RivaTunerStartupDaemon] "d:\sniper control\programs\overclock\rivatuner v2.24 msi master overclocking arena 2009 edition\RivaTuner.exe" /S

mRun: [searchSettings] "c:\program files\common files\spigot\search settings\SearchSettings.exe"

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray

mRun: [KernelFaultCheck] c:\windows\system32\dumprep 0 -k

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

LSP: d:\sniper control\programs\we fi\vmware\vsocklib.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

TCP: Interfaces\{2B6DBC23-3083-4CC0-939A-35E8873DFCCF} : NameServer = 192.168.15.12,195.24.48.5

TCP: Interfaces\{31014428-4498-43C5-88BE-764AF0B4A0CC} : NameServer = 192.168.15.12,195.24.48.5

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\scontrol\application data\mozilla\firefox\profiles\8zg5gh6y.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=

FF - prefs.js: network.proxy.type - 0

FF - plugin: c:\documents and settings\scontrol\application data\mozilla\firefox\profiles\8zg5gh6y.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\plugins\np-mswmp.dll

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\goalbitsolutions\goalbit\npgoalbit.dll

FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll

FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll

FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll

FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-7-16 721000]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-7-16 353688]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-3-8 242240]

R1 SysTool;SysTool Overclocking Utility;c:\windows\system32\drivers\SysTool.sys [2006-11-10 24064]

R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2012-6-27 791488]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-7-16 21256]

R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-7-16 44808]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-3-28 655944]

R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [2011-3-25 70768]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-3-28 22344]

R3 ULI5261XP;ULi M526X Ethernet NT Driver;c:\windows\system32\drivers\ULILAN51.SYS [2012-4-22 28672]

S0 NVStrap;NVStrap;c:\windows\system32\drivers\NVStrap.sys [2012-3-8 4224]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [2012-5-12 1763584]

S3 AsrOcDrv;AsrOcDrv;\??\c:\windows\system32\drivers\asrocdrv.sys --> c:\windows\system32\drivers\AsrOcDrv.sys [?]

S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena plus\room\safedrv.sys --> c:\program files\garena plus\room\safedrv.sys [?]

S3 GPU-Z;GPU-Z;\??\c:\docume~1\scontrol\locals~1\temp\gpu-z.sys --> c:\docume~1\scontrol\locals~1\temp\GPU-Z.sys [?]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-7-16 40776]

S3 NPF;Netgroup Packet Filter;c:\windows\system32\drivers\npf.sys [2012-5-30 32512]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

S4 AODService;AODService;c:\program files\amd\overdrive\AODAssist.exe [2009-10-22 136544]

S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-3-8 136176]

S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-3-8 136176]

S4 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-25 113120]

S4 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]

S4 VMUSBArbService;VMware USB Arbitration Service;c:\program files\common files\vmware\usb\vmware-usbarbitrator.exe [2011-3-25 539248]

.

=============== Created Last 30 ================

.

2012-07-16 15:15:31 558133 ----a-w- c:\windows\system32\sqlite3.dll

2012-07-16 12:26:56 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2012-07-16 12:26:06 41224 ----a-w- c:\windows\avastSS.scr

2012-07-16 12:25:45 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2012-07-16 12:16:00 -------- d-----w- c:\program files\ESET

2012-07-16 10:26:55 0 ----a-w- c:\program files\GUT96B.tmp

2012-07-16 10:26:55 -------- d-----w- c:\program files\GUM96A.tmp

2012-07-14 19:48:04 -------- d-----w- c:\documents and settings\scontrol\local settings\application data\CRE

2012-07-14 19:47:54 -------- d-----w- c:\program files\Conduit

2012-07-14 19:47:53 -------- d-----w- c:\documents and settings\scontrol\local settings\application data\BitTorrentBar

2012-07-14 19:47:52 -------- d-----w- c:\documents and settings\scontrol\local settings\application data\Conduit

2012-07-14 19:47:51 -------- d-----w- c:\program files\BitTorrentBar

2012-07-14 19:47:32 -------- d-----w- c:\program files\BitTorrent

2012-07-14 19:47:14 -------- d-----w- c:\documents and settings\scontrol\application data\BitTorrent

2012-07-13 08:02:03 -------- d-----w- c:\program files\The KMPlayer

2012-07-13 08:01:54 -------- d-----w- c:\documents and settings\all users\application data\Ask

2012-07-10 16:30:27 -------- d-----w- c:\documents and settings\scontrol\application data\NVIDIA

2012-07-10 16:19:42 -------- d-----w- C:\NVIDIA

2012-07-06 06:07:13 -------- d-----w- c:\documents and settings\scontrol\local settings\application data\Identities

2012-07-03 06:46:15 -------- d-----w- c:\program files\VentSrv

2012-07-02 15:38:39 -------- d-sh--w- C:\$RECYCLE.BIN

2012-07-02 13:31:43 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll

2012-07-02 13:31:42 470880 ----a-w- c:\windows\system32\d3dx10_43.dll

2012-07-02 13:31:34 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll

2012-07-01 15:14:27 -------- d-----w- c:\documents and settings\scontrol\application data\wtxpcom

2012-07-01 14:24:17 -------- d-----w- c:\documents and settings\scontrol\application data\YouTube Downloader

2012-07-01 14:23:39 -------- d-----w- c:\documents and settings\scontrol\application data\Search Settings

2012-07-01 14:23:30 -------- d-----w- c:\program files\Application Updater

2012-07-01 14:23:29 -------- d-----w- c:\program files\common files\Spigot

2012-07-01 14:23:28 -------- d-----w- c:\program files\YouTube Downloader Toolbar

2012-06-30 09:13:17 -------- d-----w- c:\program files\GPU-Z

2012-06-29 11:25:05 -------- d-----w- c:\windows\RegisteredPackages

2012-06-29 11:23:03 -------- d-----w- c:\windows\system32\AGEIA

2012-06-25 10:56:49 -------- d-----w- c:\documents and settings\all users\application data\Panda Security

2012-06-23 07:03:30 -------- d-sh--w- C:\found.001

2012-06-17 18:15:32 770384 ----a-w- c:\program files\mozilla firefox\msvcr100.dll

2012-06-17 18:15:32 421200 ----a-w- c:\program files\mozilla firefox\msvcp100.dll

.

==================== Find3M ====================

.

2012-07-15 13:15:38 1075248 ----a-w- c:\windows\system32\nvdrsdb1.bin

2012-07-15 13:15:38 1 ----a-w- c:\windows\system32\nvdrssel.bin

2012-07-15 13:15:35 1075248 ----a-w- c:\windows\system32\nvdrsdb0.bin

2012-07-03 10:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-06-12 19:36:57 60416 ----a-w- c:\windows\ALCFDRTM.VER

2012-05-29 11:49:05 224016 --s---r- c:\windows\system32\TABCTL32.OCX

2012-05-29 11:49:05 1010720 --s---r- c:\windows\system32\MSCHRT20.OCX

2012-05-29 11:49:04 152848 --s---r- c:\windows\system32\COMDLG32.OCX

2012-05-29 11:48:50 1081616 --s---r- c:\windows\system32\MSCOMCTL.OCX

2012-05-28 12:01:55 2076 ----a-w- c:\windows\system32\ealregsnapshot1.reg

2012-05-15 10:18:00 883008 ----a-w- c:\windows\system32\nvgenco32.dll

2012-05-15 10:18:00 65536 ----a-w- c:\windows\system32\OpenCL.dll

2012-05-15 10:18:00 6012928 ----a-w- c:\windows\system32\nvcuda.dll

2012-05-15 10:18:00 4373248 ----a-w- c:\windows\system32\nv4_disp.dll

2012-05-15 10:18:00 2530624 ----a-w- c:\windows\system32\nvcuvid.dll

2012-05-15 10:18:00 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll

2012-05-15 10:18:00 2359808 ----a-w- c:\windows\system32\nvapi.dll

2012-05-15 10:18:00 18771968 ----a-w- c:\windows\system32\nvoglnt.dll

2012-05-15 10:18:00 17543168 ----a-w- c:\windows\system32\nvcompiler.dll

2012-05-15 10:18:00 14014656 ----a-w- c:\windows\system32\drivers\nv4_mini.sys

2012-05-15 10:18:00 1000768 ----a-w- c:\windows\system32\nvdispco32.dll

2012-05-15 09:40:26 54272 ----a-w- c:\windows\system32\nvwddi.dll

2012-05-15 09:40:02 15504192 ----a-w- c:\windows\system32\nvcpl.dll

2012-05-15 09:40:02 143680 ----a-w- c:\windows\system32\nvcolor.exe

2012-05-15 09:40:01 164160 ----a-w- c:\windows\system32\nvsvc32.exe

2012-05-15 09:40:01 108352 ----a-w- c:\windows\system32\nvmctray.dll

2012-04-22 10:51:40 592896 ----a-w- c:\windows\system32\drivers\umdf\PCCSWpdDriver.dll

2012-04-22 10:51:40 1837296 ----a-w- c:\windows\system32\WUDFUpdate_01009.dll

2012-04-22 10:51:38 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys

.

============= FINISH: 21:15:17.60 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-09-30.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 3/8/2012 17:20:43

System Uptime: 7/16/2012 18:35:35 (3 hours ago)

.

Motherboard: | | 939Dual-SATA2

Processor: AMD Athlon™ 64 Processor 3700+ | CPUSocket | 2420/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 100 GiB total, 58.075 GiB free.

D: is FIXED (NTFS) - 198 GiB total, 138.553 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: Realtek RTL8139 Family PCI Fast Ethernet NIC

Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_813910EC&REV_10\4&3B8BE48B&0&3030

Manufacturer: Realtek

Name: Realtek RTL8139 Family PCI Fast Ethernet NIC

PNP Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_813910EC&REV_10\4&3B8BE48B&0&3030

Service: rtl8139

.

==== System Restore Points ===================

.

RP33: 4/18/2012 23:50:58 - Installed DirectX

RP34: 4/19/2012 15:32:37 - Installed HP USB Disk Storage Format Tool

RP35: 4/19/2012 23:36:58 - avast! Pro Antivirus Setup

RP36: 4/19/2012 23:39:07 - Installed Kaspersky Anti-Virus 2012.

RP37: 4/19/2012 23:43:22 - Installed Kaspersky Anti-Virus 2012.

RP38: 4/22/2012 18:44:50 - Контролна точка на системата

RP39: 4/25/2012 21:24:51 - Контролна точка на системата

RP40: 4/27/2012 21:54:00 - Контролна точка на системата

RP41: 4/30/2012 10:58:52 - Installed Microsoft Virtual PC 2007

RP42: 4/30/2012 11:42:09 - Installed Oracle VM VirtualBox 4.1.2

RP43: 4/30/2012 12:10:13 - Removed Microsoft Virtual PC 2007

RP44: 4/30/2012 12:10:47 - Removed Oracle VM VirtualBox 4.1.2

RP45: 4/30/2012 12:12:02 - Removed HDD Regenerator

RP46: 4/30/2012 21:22:00 - Installed NVIDIA Performance

RP47: 4/30/2012 21:23:00 - Installed NVIDIA System Monitor

RP48: 4/30/2012 22:05:37 - Операция за възстановяване

RP49: 4/30/2012 22:27:22 - Removed Kaspersky Anti-Virus 2012.

RP50: 4/30/2012 23:06:33 - Installed NVIDIA nTune

RP51: 4/30/2012 23:21:49 - Installed AMD OverDrive.

RP52: 5/1/2012 09:53:38 - Software Distribution Service 3.0

RP53: 5/2/2012 13:05:16 - Контролна точка на системата

RP54: 5/2/2012 20:09:53 - Removed League of Legends

RP55: 5/2/2012 21:20:57 - Операция за възстановяване

RP56: 5/2/2012 21:30:21 - Software Distribution Service 3.0

RP57: 5/3/2012 22:31:00 - Software Distribution Service 3.0

RP58: 5/4/2012 14:27:34 - Installed Iron Man.

RP59: 5/5/2012 10:25:18 - Software Distribution Service 3.0

RP60: 5/6/2012 01:53:29 - Software Distribution Service 3.0

RP61: 5/6/2012 13:26:31 - Installed DirectX

RP62: 5/7/2012 07:50:07 - Software Distribution Service 3.0

RP63: 5/8/2012 10:02:10 - Software Distribution Service 3.0

RP64: 5/9/2012 14:57:54 - Software Distribution Service 3.0

RP65: 5/10/2012 16:35:29 - Контролна точка на системата

RP66: 5/10/2012 21:08:12 - Software Distribution Service 3.0

RP67: 5/12/2012 10:16:55 - Software Distribution Service 3.0

RP68: 5/12/2012 10:28:47 - Installed Windows KB954550-v5.

RP69: 5/12/2012 10:28:55 - Printer Driver Microsoft XPS Document Writer Installed

RP70: 5/12/2012 10:29:02 - Printer Driver Microsoft XPS Document Writer Installed

RP71: 5/12/2012 10:31:28 - Installed inSSIDer

RP72: 5/12/2012 13:14:08 - Installed TP-LINK Wireless Configuration Utility and Driver

RP73: 5/12/2012 13:15:47 - Инсталиране на неподписан драйвер

RP74: 5/13/2012 02:07:12 - Software Distribution Service 3.0

RP75: 5/14/2012 12:15:45 - Контролна точка на системата

RP76: 5/15/2012 22:41:09 - Контролна точка на системата

RP77: 5/17/2012 12:16:36 - Installed Spider-Man 3™

RP78: 5/19/2012 20:35:06 - Installed Windows XP Wdf01009.

RP79: 5/19/2012 20:36:26 - Installed Windows XP Wudf01009.

RP80: 5/20/2012 21:46:25 - Инсталиране на неподписан драйвер

RP81: 5/22/2012 07:37:02 - Контролна точка на системата

RP82: 5/23/2012 12:15:38 - Контролна точка на системата

RP83: 5/23/2012 17:39:00 - Removed Enemy Territory - QUAKE Wars™

RP84: 5/24/2012 18:41:54 - Контролна точка на системата

RP85: 5/26/2012 10:00:23 - Контролна точка на системата

RP86: 5/27/2012 13:28:16 - Контролна точка на системата

RP87: 5/27/2012 15:36:06 - Configured EA Download Manager

RP88: 5/27/2012 15:36:50 - Configured EA Download Manager

RP89: 5/28/2012 14:40:02 - Removed Burnout™ Paradise The Ultimate Box

RP90: 5/28/2012 14:54:01 - Installed Burnout™ Paradise The Ultimate Box

RP91: 5/28/2012 15:01:55 - Configured EA Download Manager

RP92: 5/30/2012 15:00:35 - Installed Pro Evolution Soccer 2012.

RP93: 5/31/2012 19:17:50 - Контролна точка на системата

RP94: 6/2/2012 18:57:15 - Контролна точка на системата

RP95: 6/4/2012 22:34:45 - Контролна точка на системата

RP96: 6/6/2012 11:52:13 - Контролна точка на системата

RP97: 6/6/2012 22:22:18 - Installed OSCAR Editor

RP98: 6/8/2012 14:01:34 - Контролна точка на системата

RP99: 6/10/2012 14:06:33 - Контролна точка на системата

RP100: 6/17/2012 15:49:28 - Контролна точка на системата

RP101: 6/21/2012 15:40:13 - Контролна точка на системата

RP102: 6/24/2012 20:33:33 - Контролна точка на системата

RP103: 6/27/2012 12:01:33 - Removed Ventrilo Client

RP104: 6/27/2012 12:01:47 - Removed Ventrilo Client

RP105: 6/27/2012 12:02:37 - Installed Ventrilo Client

RP106: 6/27/2012 12:08:43 - Installed Ventrilo Server

RP107: 6/29/2012 11:17:36 - Контролна точка на системата

RP108: 6/29/2012 14:16:12 - Installed Tom Clancy's Ghost Recon Advanced Warfighter® 2

RP109: 6/29/2012 14:23:00 - Installed AGEIA PhysX v7.05.17

RP110: 6/29/2012 14:24:43 - Installed DirectX

RP111: 7/1/2012 00:16:21 - Removed Ventrilo Client

RP112: 7/1/2012 22:16:27 - Removed HP USB Disk Storage Format Tool

RP113: 7/1/2012 22:16:57 - Removed inSSIDer

RP114: 7/1/2012 22:21:33 - Removed Iron Man.

RP115: 7/1/2012 22:31:45 - Removed Nokia Connectivity Cable Driver

RP116: 7/1/2012 22:33:35 - Removed Spider-Man 3™

RP117: 7/2/2012 16:31:33 - Installed DirectX

RP118: 7/3/2012 09:45:41 - Removed Ventrilo Server

RP119: 7/3/2012 09:46:15 - Installed Ventrilo Server

RP120: 7/10/2012 19:16:05 - Configured NVIDIA nTune

RP121: 7/14/2012 15:39:51 - Контролна точка на системата

RP122: 7/15/2012 16:55:41 - Removed FIFA 10

RP123: 7/15/2012 16:56:44 - Installed FIFA 10

RP124: 7/16/2012 15:25:35 - avast! Free Antivirus Setup

.

==== Installed Programs ======================

.

A-Mac Address Change 5.0

Adobe AIR

Adobe Community Help

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop CS5.1

Adobe Reader X (10.1.3)

AGEIA PhysX v7.05.17

AMD OverDrive

AMD Processor Driver

Anders Kjersem: TransBar

avast! Free Antivirus

BitTorrent

BitTorrentBar Toolbar

BS.Player PRO

Burnout™ Paradise The Ultimate Box

Counter-Strike

Cracked Steam

DAEMON Tools Lite

DFX for Winamp

Easy WiFi Radar 1.0.3

ESET Online Scanner v3

FIFA 10

Garena Plus

Goalbit web plugins

GOM Player

Google Chrome

Google Update Helper

HD Tune 2.52

HDD Regenerator

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows Media Player 11 (KB939683)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB970653-v3)

J2SE Runtime Environment 5.0 Update 17

Java Auto Updater

Java™ 6 Update 31

K-Lite Codec Pack 8.4.0 (Basic)

League of Legends

Malwarebytes Anti-Malware, версия 1.62.0.1300

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

Microsoft User-Mode Driver Framework Feature Pack 1.9

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft_VC100_CRT_SP1_x86

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Mozilla Firefox 13.0.1 (x86 bg)

Mozilla Maintenance Service

MSVC80_x86_v2

MSVC90_x86

NVIDIA Control Panel 301.42

NVIDIA Graphics Driver 301.42

NVIDIA Install Application

Opera 12.00

Origin

OSCAR Editor

Pando Media Booster

PC Connectivity Solution

PDF Settings CS5

Pro Evolution Soccer 2012

qBittorrent 2.9.5

Realtek AC'97 Audio

SeaTools for Windows

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Windows Internet Explorer 8 (KB2675157)

Security Update for Windows Media Player 11 (KB954154)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2296199)

Security Update for Windows XP (KB2524375)

Security Update for Windows XP (KB2621440)

Security Update for Windows XP (KB2641653)

Security Update for Windows XP (KB2647518)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB938464)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB973346)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980232)

Skype™ 3.8

SpeedConnect XP Internet Accelerator 6.5

System Requirements Lab

System Requirements Lab CYRI

SysTool Overclocking Utility

TeamSpeak 3 Client

TeamViewer 7

Technitium MAC Address Changer v6.0.3

TechPowerUp GPU-Z

The KMPlayer (remove only)

TL-WN721N/TL-WN722N Driver

Tom Clancy's Ghost Recon Advanced Warfighter® 2

tools-freebsd

tools-linux

tools-netware

tools-solaris

tools-windows

tools-winPre2k

ULi LAN Driver

ULi SATA Driver

Update for Windows XP (KB2607712)

Ventrilo Server

VLC media player 1.1.10

VMware Workstation

WebFldrs XP

Winamp (remove only)

Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)

Windows Internet Explorer 8

WinRAR archiver

YouTube Downloader Toolbar v6.0

.

==== Event Viewer Messages From Past Week ========

.

7/9/2012 23:05:30, error: Service Control Manager [7034] - The Application Updater service terminated unexpectedly. It has done this 1 time(s).

7/16/2012 15:19:54, error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s).

7/16/2012 14:03:23, error: System Error [1003] - Error code 1000000a, parameter1 00000000, parameter2 00000002, parameter3 00000001, parameter4 8051ee8e.

7/16/2012 14:03:23, error: System Error [1003] - Error code 1000000a, parameter1 00000000, parameter2 00000002, parameter3 00000000, parameter4 805345ba.

7/16/2012 14:03:22, error: System Error [1003] - Error code 100000d1, parameter1 00000000, parameter2 00000002, parameter3 00000001, parameter4 f53fd10d.

7/16/2012 14:03:21, error: System Error [1003] - Error code 100000d1, parameter1 e36fcdad, parameter2 00000002, parameter3 00000008, parameter4 e36fcdad.

7/16/2012 14:03:21, error: System Error [1003] - Error code 000000f4, parameter1 00000003, parameter2 8708c020, parameter3 8708c194, parameter4 805c8c7c.

7/16/2012 14:03:20, error: System Error [1003] - Error code 100000d1, parameter1 ff3769c1, parameter2 00000002, parameter3 00000000, parameter4 f58bb7bc.

7/16/2012 14:03:19, error: System Error [1003] - Error code 1000000a, parameter1 46f57fdc, parameter2 00000002, parameter3 00000001, parameter4 80500d1c.

7/16/2012 14:03:17, error: System Error [1003] - Error code 100000d0, parameter1 068030f8, parameter2 00000002, parameter3 00000001, parameter4 80542de7.

7/16/2012 14:03:15, error: System Error [1003] - Error code 100000d1, parameter1 fef83f92, parameter2 00000002, parameter3 00000000, parameter4 f5264220.

7/16/2012 14:03:13, error: System Error [1003] - Error code 1000000a, parameter1 2eb8974d, parameter2 00000002, parameter3 00000001, parameter4 805009c8.

7/16/2012 14:03:08, error: System Error [1003] - Error code 1000007f, parameter1 00000008, parameter2 80042000, parameter3 00000000, parameter4 00000000.

7/14/2012 23:36:22, error: nv [14] - Unknown error on L0 -> L0

7/13/2012 18:38:04, error: atapi [9] - The device, \Device\Ide\IdePort1, did not respond within the timeout period.

7/13/2012 10:33:39, error: Service Control Manager [7034] - The NVIDIA Update Service Daemon service terminated unexpectedly. It has done this 1 time(s).

7/12/2012 23:04:23, error: Service Control Manager [7034] - The Ventrilo service terminated unexpectedly. It has done this 1 time(s).

7/12/2012 21:25:00, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gupdate with arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

7/12/2012 19:54:06, error: Service Control Manager [7000] - The Vstor2 WS60 Virtual Storage Driver service failed to start due to the following error: The system cannot find the path specified.

7/10/2012 19:15:12, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

.

==== End Of File ===========================

След като инсталирах Аваст започна да пищи докато съм в Мозилата или операта и показва ето това:

Публикувано изображение

Редактирано от icotonev (преглед на промените)

Здравейте..!Да направим още няколко проверки:

Публикувано изображение Моля, изтеглете aswMBR и го запазете на вашия десктоп.

  • Кликнете с двоен клин на мишката върху файла aswMBR.exe за да го стартирате.
  • Изчакайте да изтегли дефинициите на avast!
  • От падащото меню посочете дял C: както е на снимката:
Публикувано изображение
  • Изберете Scan бутона, за да започне проверката.
  • Когато проверката завърши, натиснете бутона save log, запазете съдържанието на лог файла на десктопа и публикувайте съдържанието му в следващия си коментар.
Публикувано изображение Моля, изтеглете последната версия на TDSSKiller - оттук и я запазете на вашия декстоп.
  • Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

    Публикувано изображение

  • Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

    Публикувано изображение

  • Натиснете бутона Start Scan.

    Публикувано изображение

  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

    Публикувано изображение

  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

    Публикувано изображение

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

  • Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

Публикувано изображение Изтеглете ComboFix Публикувано изображение от тук и го запазете на десктопа си.

  • Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.
Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs
  • Стартирайте Combo-Fix.com Публикувано изображение и следвайте инструкциите.
Бележка: ComboFix ще се стартира без инсталирана Recovery Console.
  • Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.
  • Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.
** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.

Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.

Бележка:

  • Моля, не движете мишката, докато ComboFix работи. Това може да наруши процеса на работа.
  • ComboFix ще нулира всички настройки на Microsoft Internet Explorer, включително да направи IE браузър по подразбиране.
  • ComboFix ще изключи autorun функцията на ВСИЧКИ CD, Floppy и USB устройства, за да помогне при премахването на зловредния софтуер и Ви защити от бъдещи вируси/заплахи, които поразяват чрез autorun. Ако това е проблем за вас - моля, уведомете ме.
  • ComboFix ще изключи вашата интернет връзка. Интернет връзката ще се възстанови автоматично, преди ComboFix да завърши процеса на работа. При проблем, той ще прекрати интернет връзката. За да възстановите интернет връзката си, рестартирайте компютъра си.
  • В случай на проблем с ComboFix, той може да създаде лог файл. Моля, включете съдържанието на C:BUG.txt в следващия Ви коментар в тази тема.
Публикувано изображение Моля, не прикачвайте лог файла/овете от програмата, а го/ги копирайте и поставете в следващия Ви коментар в тази тема.Архивирайте папката C:Qoobox и я качете тук . Изпратете линка на лична за да го прегледам.
  • Автор

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-07-20 16:03:16 ----------------------------- 16:03:16.343 OS Version: Windows 5.1.2600 Service Pack 3 16:03:16.359 Number of processors: 1 586 0x2701 16:03:16.359 ComputerName: SCONTROL-1FB11E UserName: sControl 16:03:21.406 Initialize success 16:03:23.437 AVAST engine defs: 12071902 16:03:51.218 Disk 0 (boot) DeviceHarddisk0DR0 -> DeviceIdeIdeDeviceP1T0L0-7 16:03:51.218 Disk 0 Vendor: ST3320418AS CC37 Size: 305245MB BusType: 3 16:03:51.234 Disk 0 MBR read successfully 16:03:51.234 Disk 0 MBR scan 16:03:51.265 Disk 0 Windows XP default MBR code 16:03:51.265 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 102554 MB offset 63 16:03:51.328 Disk 0 Partition - 00 0F Extended LBA 202680 MB offset 210031920 16:03:51.343 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 202680 MB offset 210031983 16:03:51.343 Disk 0 scanning sectors +625121280 16:03:51.484 Disk 0 scanning C:WINDOWSsystem32drivers 16:04:03.234 Service scanning 16:04:04.890 Service ACPI C:WINDOWSsystem32DRIVERSACPI.sys **LOCKED** 32 16:04:20.359 Modules scanning 16:04:27.828 Disk 0 trace - called modules: 16:04:27.843 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys >>UNKNOWN [0x8708e1f1]<< 16:04:27.843 1 nt!IofCallDriver -> DeviceHarddisk0DR0[0x8718dab8] 16:04:27.843 3 CLASSPNP.SYS[f765cfd7] -> nt!IofCallDriver -> Device00000075[0x87190f18] 16:04:27.843 5 ACPI.sys[f74f3620] -> nt!IofCallDriver -> DeviceIdeIdeDeviceP1T0L0-7[0x8718e940] 16:04:28.953 AVAST engine scan C: 16:21:35.703 Disk 0 MBR has been saved successfully to "C:Documents and SettingssControlDesktopMBR.dat" 16:21:35.703 The log file has been saved successfully to "C:Documents and SettingssControlDesktopaswMBR.txt" Сега пускам и tdskiller :) 16:22:39.0609 1700 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11 16:22:39.0703 1700 ============================================================ 16:22:39.0703 1700 Current date / time: 2012/07/20 16:22:39.0703 16:22:39.0703 1700 SystemInfo: 16:22:39.0703 1700 16:22:39.0703 1700 OS Version: 5.1.2600 ServicePack: 3.0 16:22:39.0703 1700 Product type: Workstation 16:22:39.0703 1700 ComputerName: SCONTROL-1FB11E 16:22:39.0703 1700 UserName: sControl 16:22:39.0703 1700 Windows directory: C:WINDOWS 16:22:39.0703 1700 System windows directory: C:WINDOWS 16:22:39.0703 1700 Processor architecture: Intel x86 16:22:39.0703 1700 Number of processors: 1 16:22:39.0703 1700 Page size: 0x1000 16:22:39.0703 1700 Boot type: Normal boot 16:22:39.0703 1700 ============================================================ 16:22:43.0578 1700 Drive DeviceHarddisk0DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0xA181, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054 16:22:43.0593 1700 ============================================================ 16:22:43.0593 1700 DeviceHarddisk0DR0: 16:22:43.0593 1700 MBR partitions: 16:22:43.0593 1700 DeviceHarddisk0DR0Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC84D4F1 16:22:43.0593 1700 DeviceHarddisk0DR0Partition1: MBR, Type 0x7, StartLBA 0xC84D56F, BlocksNum 0x18BDC291 16:22:43.0593 1700 ============================================================ 16:22:43.0625 1700 C: <-> DeviceHarddisk0DR0Partition0 16:22:43.0656 1700 D: <-> DeviceHarddisk0DR0Partition1 16:22:43.0703 1700 ============================================================ 16:22:43.0703 1700 Initialize success 16:22:43.0703 1700 ============================================================ 16:23:02.0875 2924 ============================================================ 16:23:02.0875 2924 Scan started 16:23:02.0875 2924 Mode: Manual; SigCheck; TDLFS; 16:23:02.0875 2924 ============================================================ 16:23:03.0609 2924 Aavmker4 (0b27ae82c113d3687024d18459440426) C:WINDOWSsystem32driversAavmker4.sys 16:23:03.0796 2924 Aavmker4 - ok 16:23:03.0796 2924 Abiosdsk - ok 16:23:03.0828 2924 abp480n5 - ok 16:23:03.0906 2924 ACPI (ea38c961260f29295c6d03070fa9d0b5) C:WINDOWSsystem32DRIVERSACPI.sys 16:23:03.0921 2924 Suspicious file (Forged): C:WINDOWSsystem32DRIVERSACPI.sys. Real md5: ea38c961260f29295c6d03070fa9d0b5, Fake md5: 8fd99680a539792a30e97944fdaecf17 16:23:03.0921 2924 ACPI ( Virus.Win32.Rloader.a ) - infected 16:23:03.0921 2924 ACPI - detected Virus.Win32.Rloader.a (0) 16:23:03.0968 2924 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:WINDOWSsystem32driversACPIEC.sys 16:23:04.0953 2924 ACPIEC - ok 16:23:04.0953 2924 adpu160m - ok 16:23:04.0984 2924 aec (8bed39e3c35d6a489438b8141717a557) C:WINDOWSsystem32driversaec.sys 16:23:05.0156 2924 aec - ok 16:23:05.0203 2924 AFD (7e775010ef291da96ad17ca4b17137d7) C:WINDOWSSystem32driversafd.sys 16:23:05.0312 2924 AFD - ok 16:23:05.0328 2924 Aha154x - ok 16:23:05.0328 2924 aic78u2 - ok 16:23:05.0343 2924 aic78xx - ok 16:23:05.0593 2924 ALCXWDM (dd8520280304b6145a6be31008748c7c) C:WINDOWSsystem32driversALCXWDM.SYS 16:23:09.0484 2924 ALCXWDM - ok 16:23:09.0593 2924 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:WINDOWSsystem32alrsvc.dll 16:23:09.0812 2924 Alerter - ok 16:23:09.0828 2924 ALG (8c515081584a38aa007909cd02020b3d) C:WINDOWSSystem32alg.exe 16:23:09.0906 2924 ALG - ok 16:23:09.0937 2924 AliIde (74b6def7039ecb239a1639c7fcd1bdac) C:WINDOWSsystem32DRIVERSaliide.sys 16:23:09.0953 2924 AliIde - ok 16:23:10.0000 2924 AmdK8 (efbb0956baed786e137351b5ca272aef) C:WINDOWSsystem32DRIVERSAmdK8.sys 16:23:10.0140 2924 AmdK8 - ok 16:23:10.0140 2924 amsint - ok 16:23:10.0250 2924 AODService (89122a637c5c90b0f9f05ff3abea843a) C:Program FilesAMDOverDriveAODAssist.exe 16:23:10.0296 2924 AODService - ok 16:23:10.0375 2924 Application Updater (b4a30f0a7494cdbec73f6bd30fb619d9) C:Program FilesApplication UpdaterApplicationUpdater.exe 16:23:10.0421 2924 Application Updater - ok 16:23:10.0437 2924 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:WINDOWSSystem32appmgmts.dll 16:23:10.0500 2924 AppMgmt - ok 16:23:10.0593 2924 AR9271 (7141e281d840699d9d79b18f4062dd58) C:WINDOWSsystem32DRIVERSathuw.sys 16:23:10.0687 2924 AR9271 ( UnsignedFile.Multi.Generic ) - warning 16:23:10.0687 2924 AR9271 - detected UnsignedFile.Multi.Generic (1) 16:23:10.0781 2924 asc - ok 16:23:10.0781 2924 asc3350p - ok 16:23:10.0796 2924 asc3550 - ok 16:23:10.0859 2924 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:WINDOWSMicrosoft.NETFrameworkv4.0.30319aspnet_state.exe 16:23:10.0890 2924 aspnet_state - ok 16:23:10.0890 2924 AsrOcDrv - ok 16:23:10.0937 2924 aswFsBlk (1c1f3d6dddc046c920c493a779649f66) C:WINDOWSsystem32driversaswFsBlk.sys 16:23:10.0953 2924 aswFsBlk - ok 16:23:10.0984 2924 aswMon2 (9e912fe7b41650701ef2b227aca440f3) C:WINDOWSsystem32driversaswMon2.sys 16:23:11.0015 2924 aswMon2 - ok 16:23:11.0031 2924 AswRdr (982e275d1c5801042fe94209fb0160fb) C:WINDOWSsystem32driversAswRdr.sys 16:23:11.0046 2924 AswRdr - ok 16:23:11.0093 2924 aswSnx (73dbcf808e00580f2a47f93dd9b03876) C:WINDOWSsystem32driversaswSnx.sys 16:23:11.0156 2924 aswSnx - ok 16:23:11.0187 2924 aswSP (6cbd7d3a33f498d09c831cdd732da2e0) C:WINDOWSsystem32driversaswSP.sys 16:23:11.0218 2924 aswSP - ok 16:23:11.0281 2924 aswTdi (7109a9aa551f37cd168c02368465957e) C:WINDOWSsystem32driversaswTdi.sys 16:23:11.0281 2924 aswTdi - ok 16:23:11.0312 2924 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:WINDOWSsystem32DRIVERSasyncmac.sys 16:23:11.0437 2924 AsyncMac - ok 16:23:11.0468 2924 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:WINDOWSsystem32DRIVERSatapi.sys 16:23:11.0625 2924 atapi - ok 16:23:11.0640 2924 Atdisk - ok 16:23:11.0656 2924 Atmarpc (9916c1225104ba14794209cfa8012159) C:WINDOWSsystem32DRIVERSatmarpc.sys 16:23:11.0828 2924 Atmarpc - ok 16:23:11.0843 2924 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:WINDOWSSystem32audiosrv.dll 16:23:12.0015 2924 AudioSrv - ok 16:23:12.0046 2924 audstub (d9f724aa26c010a217c97606b160ed68) C:WINDOWSsystem32DRIVERSaudstub.sys 16:23:12.0203 2924 audstub - ok 16:23:12.0312 2924 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:Program FilesAVAST SoftwareAvastAvastSvc.exe 16:23:12.0328 2924 avast! Antivirus - ok 16:23:12.0359 2924 Beep (da1f27d85e0d1525f6621372e7b685e9) C:WINDOWSsystem32driversBeep.sys 16:23:12.0515 2924 Beep - ok 16:23:12.0546 2924 BITS (574738f61fca2935f5265dc4e5691314) C:WINDOWSsystem32qmgr.dll 16:23:12.0812 2924 BITS - ok 16:23:12.0843 2924 Browser (a06ce3399d16db864f55faeb1f1927a9) C:WINDOWSSystem32browser.dll 16:23:13.0062 2924 Browser - ok 16:23:13.0078 2924 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:WINDOWSsystem32driverscbidf2k.sys 16:23:13.0250 2924 cbidf2k - ok 16:23:13.0265 2924 cd20xrnt - ok 16:23:13.0281 2924 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:WINDOWSsystem32driversCdaudio.sys 16:23:13.0468 2924 Cdaudio - ok 16:23:13.0500 2924 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:WINDOWSsystem32driversCdfs.sys 16:23:13.0687 2924 Cdfs - ok 16:23:13.0703 2924 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:WINDOWSsystem32DRIVERScdrom.sys 16:23:13.0875 2924 Cdrom - ok 16:23:13.0875 2924 Changer - ok 16:23:13.0906 2924 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:WINDOWSsystem32cisvc.exe 16:23:14.0078 2924 CiSvc - ok 16:23:14.0093 2924 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:WINDOWSsystem32clipsrv.exe 16:23:14.0265 2924 ClipSrv - ok 16:23:14.0328 2924 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe 16:23:14.0343 2924 clr_optimization_v2.0.50727_32 - ok 16:23:14.0375 2924 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:WINDOWSMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe 16:23:14.0406 2924 clr_optimization_v4.0.30319_32 - ok 16:23:14.0421 2924 CmdIde - ok 16:23:14.0421 2924 COMSysApp - ok 16:23:14.0437 2924 Cpqarray - ok 16:23:14.0468 2924 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:WINDOWSSystem32cryptsvc.dll 16:23:14.0640 2924 CryptSvc - ok 16:23:14.0656 2924 dac2w2k - ok 16:23:14.0671 2924 dac960nt - ok 16:23:14.0703 2924 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:WINDOWSsystem32rpcss.dll 16:23:14.0750 2924 DcomLaunch - ok 16:23:14.0765 2924 Dhcp (5e38d7684a49cacfb752b046357e0589) C:WINDOWSSystem32dhcpcsvc.dll 16:23:14.0921 2924 Dhcp - ok 16:23:14.0968 2924 Disk (044452051f3e02e7963599fc8f4f3e25) C:WINDOWSsystem32DRIVERSdisk.sys 16:23:15.0187 2924 Disk - ok 16:23:15.0203 2924 dmadmin - ok 16:23:15.0250 2924 dmboot (d992fe1274bde0f84ad826acae022a41) C:WINDOWSsystem32driversdmboot.sys 16:23:15.0437 2924 dmboot - ok 16:23:15.0453 2924 dmio (7c824cf7bbde77d95c08005717a95f6f) C:WINDOWSsystem32driversdmio.sys 16:23:15.0625 2924 dmio - ok 16:23:15.0640 2924 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:WINDOWSsystem32driversdmload.sys 16:23:15.0812 2924 dmload - ok 16:23:15.0843 2924 dmserver (57edec2e5f59f0335e92f35184bc8631) C:WINDOWSSystem32dmserver.dll 16:23:15.0984 2924 dmserver - ok 16:23:16.0015 2924 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:WINDOWSsystem32driversDMusic.sys 16:23:16.0203 2924 DMusic - ok 16:23:16.0234 2924 Dnscache (474b4dc3983173e4b4c9740b0dac98a6) C:WINDOWSSystem32dnsrslvr.dll 16:23:16.0406 2924 Dnscache - ok 16:23:16.0421 2924 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:WINDOWSSystem32dot3svc.dll 16:23:16.0609 2924 Dot3svc - ok 16:23:16.0609 2924 dpti2o - ok 16:23:16.0625 2924 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:WINDOWSsystem32driversdrmkaud.sys 16:23:16.0781 2924 drmkaud - ok 16:23:16.0812 2924 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:WINDOWSsystem32DRIVERSdtsoftbus01.sys 16:23:16.0828 2924 dtsoftbus01 - ok 16:23:16.0843 2924 EapHost (2187855a7703adef0cef9ee4285182cc) C:WINDOWSSystem32eapsvc.dll 16:23:17.0015 2924 EapHost - ok 16:23:17.0031 2924 ERSvc (bc93b4a066477954555966d77fec9ecb) C:WINDOWSSystem32ersvc.dll 16:23:17.0187 2924 ERSvc - ok 16:23:17.0218 2924 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:WINDOWSsystem32services.exe 16:23:17.0234 2924 Eventlog - ok 16:23:17.0250 2924 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:WINDOWSsystem32es.dll 16:23:17.0312 2924 EventSystem - ok 16:23:17.0328 2924 Fastfat (38d332a6d56af32635675f132548343e) C:WINDOWSsystem32driversFastfat.sys 16:23:17.0484 2924 Fastfat - ok 16:23:17.0500 2924 FastUserSwitchingCompatibility (1926899bf9ffe2602b63074971700412) C:WINDOWSSystem32shsvcs.dll 16:23:17.0687 2924 FastUserSwitchingCompatibility - ok 16:23:17.0703 2924 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:WINDOWSsystem32DRIVERSfdc.sys 16:23:17.0859 2924 Fdc - ok 16:23:17.0875 2924 Fips (d45926117eb9fa946a6af572fbe1caa3) C:WINDOWSsystem32driversFips.sys 16:23:18.0031 2924 Fips - ok 16:23:18.0046 2924 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:WINDOWSsystem32DRIVERSflpydisk.sys 16:23:18.0203 2924 Flpydisk - ok 16:23:18.0234 2924 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:WINDOWSsystem32DRIVERSfltMgr.sys 16:23:18.0390 2924 FltMgr - ok 16:23:18.0468 2924 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe 16:23:18.0484 2924 FontCache3.0.0.0 - ok 16:23:18.0515 2924 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:WINDOWSsystem32driversFs_Rec.sys 16:23:18.0687 2924 Fs_Rec - ok 16:23:18.0703 2924 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:WINDOWSsystem32DRIVERSftdisk.sys 16:23:18.0843 2924 Ftdisk - ok 16:23:18.0875 2924 gameenum (065639773d8b03f33577f6cdaea21063) C:WINDOWSsystem32DRIVERSgameenum.sys 16:23:19.0046 2924 gameenum - ok 16:23:19.0125 2924 GGSAFERDriver - ok 16:23:19.0156 2924 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:WINDOWSsystem32DRIVERSmsgpc.sys 16:23:19.0343 2924 Gpc - ok 16:23:19.0546 2924 GPU-Z - ok 16:23:19.0593 2924 gupdate (f02a533f517eb38333cb12a9e8963773) C:Program FilesGoogleUpdateGoogleUpdate.exe 16:23:19.0609 2924 gupdate - ok 16:23:19.0625 2924 gupdatem (f02a533f517eb38333cb12a9e8963773) C:Program FilesGoogleUpdateGoogleUpdate.exe 16:23:19.0640 2924 gupdatem - ok 16:23:19.0671 2924 hcmon (51fa91bb463b15fd8eacd5045c3f2fa6) C:WINDOWSsystem32drivershcmon.sys 16:23:19.0687 2924 hcmon - ok 16:23:19.0750 2924 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:WINDOWSPCHealthHelpCtrBinariespchsvc.dll 16:23:19.0921 2924 helpsvc - ok 16:23:19.0937 2924 HidServ (deb04da35cc871b6d309b77e1443c796) C:WINDOWSSystem32hidserv.dll 16:23:20.0093 2924 HidServ - ok 16:23:20.0125 2924 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:WINDOWSsystem32DRIVERShidusb.sys 16:23:20.0265 2924 hidusb - ok 16:23:20.0296 2924 hkmsvc (8878bd685e490239777bfe51320b88e9) C:WINDOWSSystem32kmsvc.dll 16:23:20.0437 2924 hkmsvc - ok 16:23:20.0453 2924 hpn - ok 16:23:20.0484 2924 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:WINDOWSsystem32DriversHTTP.sys 16:23:20.0625 2924 HTTP - ok 16:23:20.0656 2924 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:WINDOWSSystem32w3ssl.dll 16:23:20.0828 2924 HTTPFilter - ok 16:23:20.0828 2924 i2omgmt - ok 16:23:20.0843 2924 i2omp - ok 16:23:20.0859 2924 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:WINDOWSsystem32DRIVERSi8042prt.sys 16:23:21.0000 2924 i8042prt - ok 16:23:21.0062 2924 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe 16:23:21.0062 2924 IDriverT ( UnsignedFile.Multi.Generic ) - warning 16:23:21.0062 2924 IDriverT - detected UnsignedFile.Multi.Generic (1) 16:23:21.0218 2924 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe 16:23:21.0281 2924 idsvc - ok 16:23:21.0312 2924 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:WINDOWSsystem32DRIVERSimapi.sys 16:23:21.0453 2924 Imapi - ok 16:23:21.0484 2924 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:WINDOWSsystem32imapi.exe 16:23:21.0625 2924 ImapiService - ok 16:23:21.0640 2924 ini910u - ok 16:23:21.0656 2924 IntelIde - ok 16:23:21.0687 2924 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:WINDOWSsystem32DRIVERSIp6Fw.sys 16:23:21.0859 2924 Ip6Fw - ok 16:23:21.0875 2924 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:WINDOWSsystem32DRIVERSipfltdrv.sys 16:23:22.0015 2924 IpFilterDriver - ok 16:23:22.0015 2924 IpInIp (b87ab476dcf76e72010632b5550955f5) C:WINDOWSsystem32DRIVERSipinip.sys 16:23:22.0156 2924 IpInIp - ok 16:23:22.0171 2924 IpNat (cc748ea12c6effde940ee98098bf96bb) C:WINDOWSsystem32DRIVERSipnat.sys 16:23:22.0343 2924 IpNat - ok 16:23:22.0359 2924 IPSec (23c74d75e36e7158768dd63d92789a91) C:WINDOWSsystem32DRIVERSipsec.sys 16:23:22.0515 2924 IPSec - ok 16:23:22.0546 2924 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:WINDOWSsystem32DRIVERSirenum.sys 16:23:22.0609 2924 IRENUM - ok 16:23:22.0640 2924 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:WINDOWSsystem32DRIVERSisapnp.sys 16:23:22.0765 2924 isapnp - ok 16:23:22.0859 2924 JavaQuickStarterService (0a5709543986843d37a92290b7838340) C:Program FilesJavajre6binjqs.exe 16:23:22.0890 2924 JavaQuickStarterService - ok 16:23:22.0921 2924 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:WINDOWSsystem32DRIVERSkbdclass.sys 16:23:23.0062 2924 Kbdclass - ok 16:23:23.0093 2924 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:WINDOWSsystem32DRIVERSkbdhid.sys 16:23:23.0218 2924 kbdhid - ok 16:23:23.0250 2924 kmixer (692bcf44383d056aed41b045a323d378) C:WINDOWSsystem32driverskmixer.sys 16:23:23.0375 2924 kmixer - ok 16:23:23.0390 2924 KSecDD (b467646c54cc746128904e1654c750c1) C:WINDOWSsystem32driversKSecDD.sys 16:23:23.0437 2924 KSecDD - ok 16:23:23.0453 2924 LanmanServer (f385f4b02c535bffe1d70cab80838123) C:WINDOWSSystem32srvsvc.dll 16:23:23.0609 2924 LanmanServer - ok 16:23:23.0656 2924 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:WINDOWSSystem32wkssvc.dll 16:23:23.0687 2924 lanmanworkstation - ok 16:23:23.0687 2924 lbrtfdc - ok 16:23:23.0734 2924 LmHosts (a7db739ae99a796d91580147e919cc59) C:WINDOWSSystem32lmhsvc.dll 16:23:23.0859 2924 LmHosts - ok 16:23:23.0890 2924 MBAMProtector (fb097bbc1a18f044bd17bd2fccf97865) C:WINDOWSsystem32driversmbam.sys 16:23:23.0906 2924 MBAMProtector - ok 16:23:23.0968 2924 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe 16:23:24.0015 2924 MBAMService - ok 16:23:24.0062 2924 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:WINDOWSSystem32msgsvc.dll 16:23:24.0187 2924 Messenger - ok 16:23:24.0218 2924 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:WINDOWSsystem32driversmnmdd.sys 16:23:24.0375 2924 mnmdd - ok 16:23:24.0406 2924 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:WINDOWSsystem32mnmsrvc.exe 16:23:24.0531 2924 mnmsrvc - ok 16:23:24.0546 2924 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:WINDOWSsystem32driversModem.sys 16:23:24.0671 2924 Modem - ok 16:23:24.0703 2924 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:WINDOWSsystem32DRIVERSmouclass.sys 16:23:24.0812 2924 Mouclass - ok 16:23:24.0828 2924 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:WINDOWSsystem32DRIVERSmouhid.sys 16:23:24.0953 2924 mouhid - ok 16:23:24.0968 2924 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:WINDOWSsystem32driversMountMgr.sys 16:23:25.0078 2924 MountMgr - ok 16:23:25.0125 2924 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe 16:23:25.0140 2924 MozillaMaintenance - ok 16:23:25.0156 2924 mraid35x - ok 16:23:25.0171 2924 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:WINDOWSsystem32DRIVERSmrxdav.sys 16:23:25.0296 2924 MRxDAV - ok 16:23:25.0359 2924 MRxSmb (f3aefb11abc521122b67095044169e98) C:WINDOWSsystem32DRIVERSmrxsmb.sys 16:23:25.0421 2924 MRxSmb - ok 16:23:25.0453 2924 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:WINDOWSsystem32msdtc.exe 16:23:25.0578 2924 MSDTC - ok 16:23:25.0593 2924 Msfs (c941ea2454ba8350021d774daf0f1027) C:WINDOWSsystem32driversMsfs.sys 16:23:25.0750 2924 Msfs - ok 16:23:25.0750 2924 MSIServer - ok 16:23:25.0781 2924 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:WINDOWSsystem32driversMSKSSRV.sys 16:23:26.0000 2924 MSKSSRV - ok 16:23:26.0000 2924 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:WINDOWSsystem32driversMSPCLOCK.sys 16:23:26.0265 2924 MSPCLOCK - ok 16:23:26.0281 2924 MSPQM (bad59648ba099da4a17680b39730cb3d) C:WINDOWSsystem32driversMSPQM.sys 16:23:26.0406 2924 MSPQM - ok 16:23:26.0437 2924 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:WINDOWSsystem32DRIVERSmssmbios.sys 16:23:26.0562 2924 mssmbios - ok 16:23:26.0578 2924 Mup (2f625d11385b1a94360bfc70aaefdee1) C:WINDOWSsystem32driversMup.sys 16:23:26.0687 2924 Mup - ok 16:23:26.0718 2924 napagent (0102140028fad045756796e1c685d695) C:WINDOWSSystem32qagentrt.dll 16:23:26.0890 2924 napagent - ok 16:23:26.0937 2924 NDIS (1df7f42665c94b825322fae71721130d) C:WINDOWSsystem32driversNDIS.sys 16:23:27.0140 2924 NDIS - ok 16:23:27.0156 2924 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:WINDOWSsystem32DRIVERSndistapi.sys 16:23:27.0265 2924 NdisTapi - ok 16:23:27.0281 2924 Ndisuio (f927a4434c5028758a842943ef1a3849) C:WINDOWSsystem32DRIVERSndisuio.sys 16:23:27.0390 2924 Ndisuio - ok 16:23:27.0406 2924 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:WINDOWSsystem32DRIVERSndiswan.sys 16:23:27.0531 2924 NdisWan - ok 16:23:27.0531 2924 NDProxy (6215023940cfd3702b46abc304e1d45a) C:WINDOWSsystem32driversNDProxy.sys 16:23:27.0656 2924 NDProxy - ok 16:23:27.0656 2924 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:WINDOWSsystem32DRIVERSnetbios.sys 16:23:27.0781 2924 NetBIOS - ok 16:23:27.0796 2924 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:WINDOWSsystem32DRIVERSnetbt.sys 16:23:27.0921 2924 NetBT - ok 16:23:27.0937 2924 NetDDE (b857ba82860d7ff85ae29b095645563b) C:WINDOWSsystem32netdde.exe 16:23:28.0078 2924 NetDDE - ok 16:23:28.0078 2924 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:WINDOWSsystem32netdde.exe 16:23:28.0265 2924 NetDDEdsdm - ok 16:23:28.0312 2924 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:WINDOWSsystem32lsass.exe 16:23:28.0531 2924 Netlogon - ok 16:23:28.0562 2924 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:WINDOWSSystem32netman.dll 16:23:28.0687 2924 Netman - ok 16:23:28.0781 2924 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe 16:23:28.0812 2924 NetTcpPortSharing - ok 16:23:28.0828 2924 Nla (832e4dd8964ab7acc880b2837cb1ed20) C:WINDOWSSystem32mswsock.dll 16:23:28.0875 2924 Nla - ok 16:23:28.0906 2924 NPF (d21fee8db254ba762656878168ac1db6) C:WINDOWSsystem32driversnpf.sys 16:23:28.0906 2924 NPF ( UnsignedFile.Multi.Generic ) - warning 16:23:28.0906 2924 NPF - detected UnsignedFile.Multi.Generic (1) 16:23:28.0921 2924 Npfs (3182d64ae053d6fb034f44b6def8034a) C:WINDOWSsystem32driversNpfs.sys 16:23:29.0093 2924 Npfs - ok 16:23:29.0171 2924 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:WINDOWSsystem32driversNtfs.sys 16:23:29.0421 2924 Ntfs - ok 16:23:29.0421 2924 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:WINDOWSsystem32lsass.exe 16:23:29.0546 2924 NtLmSsp - ok 16:23:29.0578 2924 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:WINDOWSsystem32ntmssvc.dll 16:23:29.0718 2924 NtmsSvc - ok 16:23:29.0750 2924 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:WINDOWSsystem32driversNull.sys 16:23:30.0000 2924 Null - ok 16:23:31.0171 2924 nv (7b5a17bd54bb9142843dbe99a1caaed8) C:WINDOWSsystem32DRIVERSnv4_mini.sys 16:23:32.0640 2924 nv - ok 16:23:32.0671 2924 NVR0Dev - ok 16:23:32.0765 2924 NVStrap (1b089dd0725dc6b885765a170bbee311) C:WINDOWSsystem32driversNVStrap.sys 16:23:32.0781 2924 NVStrap ( UnsignedFile.Multi.Generic ) - warning 16:23:32.0781 2924 NVStrap - detected UnsignedFile.Multi.Generic (1) 16:23:32.0812 2924 NVSvc (5150b108ea88831e1c599603d8b89621) C:WINDOWSsystem32nvsvc32.exe 16:23:32.0843 2924 NVSvc - ok 16:23:33.0000 2924 nvUpdatusService (83e8ab7bb3c8956c53fec071c94f0bbb) C:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe 16:23:33.0140 2924 nvUpdatusService - ok 16:23:33.0187 2924 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:WINDOWSsystem32DRIVERSnwlnkflt.sys 16:23:33.0531 2924 NwlnkFlt - ok 16:23:33.0531 2924 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:WINDOWSsystem32DRIVERSnwlnkfwd.sys 16:23:33.0765 2924 NwlnkFwd - ok 16:23:33.0812 2924 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:WINDOWSsystem32DRIVERSparport.sys 16:23:33.0984 2924 Parport - ok 16:23:34.0015 2924 PartMgr (beb3ba25197665d82ec7065b724171c6) C:WINDOWSsystem32driversPartMgr.sys 16:23:34.0328 2924 PartMgr - ok 16:23:34.0359 2924 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:WINDOWSsystem32driversParVdm.sys 16:23:34.0500 2924 ParVdm - ok 16:23:34.0531 2924 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:WINDOWSsystem32DRIVERSpccsmcfd.sys 16:23:34.0609 2924 pccsmcfd - ok 16:23:34.0656 2924 PCI (a219903ccf74233761d92bef471a07b1) C:WINDOWSsystem32DRIVERSpci.sys 16:23:35.0015 2924 PCI - ok 16:23:35.0031 2924 PCIDump - ok 16:23:35.0046 2924 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:WINDOWSsystem32DRIVERSpciide.sys 16:23:35.0187 2924 PCIIde - ok 16:23:35.0203 2924 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:WINDOWSsystem32driversPcmcia.sys 16:23:35.0421 2924 Pcmcia - ok 16:23:35.0437 2924 PDCOMP - ok 16:23:35.0468 2924 PDFRAME - ok 16:23:35.0500 2924 PDRELI - ok 16:23:35.0515 2924 PDRFRAME - ok 16:23:35.0531 2924 perc2 - ok 16:23:35.0531 2924 perc2hib - ok 16:23:35.0562 2924 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:WINDOWSsystem32services.exe 16:23:35.0593 2924 PlugPlay - ok 16:23:35.0625 2924 PnkBstrA (c183b7e8c4dd96af66d7ace48d2d9b05) C:WINDOWSsystem32PnkBstrA.exe 16:23:35.0640 2924 PnkBstrA - ok 16:23:35.0656 2924 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:WINDOWSsystem32lsass.exe 16:23:35.0843 2924 PolicyAgent - ok 16:23:35.0859 2924 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:WINDOWSsystem32DRIVERSraspptp.sys 16:23:36.0093 2924 PptpMiniport - ok 16:23:36.0140 2924 Processor (a32bebaf723557681bfc6bd93e98bd26) C:WINDOWSsystem32DRIVERSprocessr.sys 16:23:36.0281 2924 Processor - ok 16:23:36.0296 2924 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:WINDOWSsystem32lsass.exe 16:23:36.0421 2924 ProtectedStorage - ok 16:23:36.0437 2924 PSched (09298ec810b07e5d582cb3a3f9255424) C:WINDOWSsystem32DRIVERSpsched.sys 16:23:36.0718 2924 PSched - ok 16:23:36.0734 2924 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:WINDOWSsystem32DRIVERSptilink.sys 16:23:36.0906 2924 Ptilink - ok 16:23:36.0937 2924 PxHelp20 (81088114178112618b1c414a65e50f7c) C:WINDOWSsystem32DriversPxHelp20.sys 16:23:36.0937 2924 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning 16:23:36.0937 2924 PxHelp20 - detected UnsignedFile.Multi.Generic (1) 16:23:36.0953 2924 ql1080 - ok 16:23:36.0953 2924 Ql10wnt - ok 16:23:36.0968 2924 ql12160 - ok 16:23:36.0984 2924 ql1240 - ok 16:23:36.0984 2924 ql1280 - ok 16:23:37.0000 2924 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:WINDOWSsystem32DRIVERSrasacd.sys 16:23:37.0125 2924 RasAcd - ok 16:23:37.0140 2924 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:WINDOWSSystem32rasauto.dll 16:23:37.0296 2924 RasAuto - ok 16:23:37.0312 2924 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:WINDOWSsystem32DRIVERSrasl2tp.sys 16:23:37.0453 2924 Rasl2tp - ok 16:23:37.0484 2924 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:WINDOWSSystem32rasmans.dll 16:23:37.0625 2924 RasMan - ok 16:23:37.0640 2924 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:WINDOWSsystem32DRIVERSraspppoe.sys 16:23:37.0750 2924 RasPppoe - ok 16:23:37.0765 2924 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:WINDOWSsystem32DRIVERSraspti.sys 16:23:37.0875 2924 Raspti - ok 16:23:37.0890 2924 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:WINDOWSsystem32DRIVERSrdbss.sys 16:23:38.0015 2924 Rdbss - ok 16:23:38.0015 2924 RDPCDD (4912d5b403614ce99c28420f75353332) C:WINDOWSsystem32DRIVERSRDPCDD.sys 16:23:38.0140 2924 RDPCDD - ok 16:23:38.0171 2924 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:WINDOWSsystem32DRIVERSrdpdr.sys 16:23:38.0296 2924 rdpdr - ok 16:23:38.0328 2924 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:WINDOWSsystem32driversRDPWD.sys 16:23:38.0359 2924 RDPWD - ok 16:23:38.0390 2924 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:WINDOWSsystem32sessmgr.exe 16:23:38.0515 2924 RDSessMgr - ok 16:23:38.0531 2924 redbook (f828dd7e1419b6653894a8f97a0094c5) C:WINDOWSsystem32DRIVERSredbook.sys 16:23:38.0640 2924 redbook - ok 16:23:38.0671 2924 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:WINDOWSSystem32mprdim.dll 16:23:38.0781 2924 RemoteAccess - ok 16:23:38.0828 2924 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:WINDOWSsystem32regsvc.dll 16:23:38.0953 2924 RemoteRegistry - ok 16:23:39.0046 2924 RivaTuner32 (c0c8909be3ecc9df8089112bf9be954e) D:Sniper ControlProgramsoverclockRivaTuner v2.24 MSI Master Overclocking Arena 2009 editionRivaTuner32.sys 16:23:39.0062 2924 RivaTuner32 ( UnsignedFile.Multi.Generic ) - warning 16:23:39.0062 2924 RivaTuner32 - detected UnsignedFile.Multi.Generic (1) 16:23:39.0062 2924 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:WINDOWSsystem32locator.exe 16:23:39.0203 2924 RpcLocator - ok 16:23:39.0234 2924 RpcSs (6b27a5c03dfb94b4245739065431322c) C:WINDOWSsystem32rpcss.dll 16:23:39.0265 2924 RpcSs - ok 16:23:39.0281 2924 RSVP (471b3f9741d762abe75e9deea4787e47) C:WINDOWSsystem32rsvp.exe 16:23:39.0453 2924 RSVP - ok 16:23:39.0500 2924 rtl8139 (d507c1400284176573224903819ffda3) C:WINDOWSsystem32DRIVERSRTL8139.SYS 16:23:39.0640 2924 rtl8139 - ok 16:23:39.0671 2924 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:WINDOWSsystem32lsass.exe 16:23:39.0812 2924 SamSs - ok 16:23:39.0828 2924 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:WINDOWSSystem32SCardSvr.exe 16:23:39.0968 2924 SCardSvr - ok 16:23:40.0015 2924 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:WINDOWSsystem32schedsvc.dll 16:23:40.0140 2924 Schedule - ok 16:23:40.0171 2924 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:WINDOWSsystem32DRIVERSsecdrv.sys 16:23:40.0234 2924 Secdrv - ok 16:23:40.0265 2924 seclogon (cbe612e2bb6a10e3563336191eda1250) C:WINDOWSSystem32seclogon.dll 16:23:40.0390 2924 seclogon - ok 16:23:40.0406 2924 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:WINDOWSsystem32sens.dll 16:23:40.0562 2924 SENS - ok 16:23:40.0593 2924 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:WINDOWSsystem32DRIVERSserenum.sys 16:23:40.0703 2924 serenum - ok 16:23:40.0718 2924 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:WINDOWSsystem32DRIVERSserial.sys 16:23:40.0828 2924 Serial - ok 16:23:40.0937 2924 ServiceLayer (c15b813f2fdb44f87f23312472c6e790) C:Program FilesPC Connectivity SolutionServiceLayer.exe 16:23:40.0984 2924 ServiceLayer - ok 16:23:41.0015 2924 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:WINDOWSsystem32driversSfloppy.sys 16:23:41.0140 2924 Sfloppy - ok 16:23:41.0171 2924 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:WINDOWSSystem32ipnathlp.dll 16:23:41.0312 2924 SharedAccess - ok 16:23:41.0328 2924 ShellHWDetection (1926899bf9ffe2602b63074971700412) C:WINDOWSSystem32shsvcs.dll 16:23:41.0468 2924 ShellHWDetection - ok 16:23:41.0484 2924 Simbad - ok 16:23:41.0484 2924 Sparrow - ok 16:23:41.0515 2924 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:WINDOWSsystem32driverssplitter.sys 16:23:41.0718 2924 splitter - ok 16:23:41.0734 2924 Spooler (d8e14a61acc1d4a6cd0d38aebac7fa3b) C:WINDOWSsystem32spoolsv.exe 16:23:41.0968 2924 Spooler - ok 16:23:42.0000 2924 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:WINDOWSsystem32DRIVERSsr.sys 16:23:42.0062 2924 sr - ok 16:23:42.0093 2924 srservice (3805df0ac4296a34ba4bf93b346cc378) C:WINDOWSsystem32srsvc.dll 16:23:42.0156 2924 srservice - ok 16:23:42.0203 2924 Srv (89220b427890aa1dffd1a02648ae51c3) C:WINDOWSsystem32DRIVERSsrv.sys 16:23:42.0265 2924 Srv - ok 16:23:42.0281 2924 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:WINDOWSSystem32ssdpsrv.dll 16:23:42.0359 2924 SSDPSRV - ok 16:23:42.0390 2924 stisvc (8bad69cbac032d4bbacfce0306174c30) C:WINDOWSsystem32wiaservc.dll 16:23:42.0671 2924 stisvc - ok 16:23:42.0703 2924 swenum (3941d127aef12e93addf6fe6ee027e0f) C:WINDOWSsystem32DRIVERSswenum.sys 16:23:42.0875 2924 swenum - ok 16:23:43.0000 2924 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe 16:23:43.0062 2924 SwitchBoard ( UnsignedFile.Multi.Generic ) - warning 16:23:43.0062 2924 SwitchBoard - detected UnsignedFile.Multi.Generic (1) 16:23:43.0093 2924 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:WINDOWSsystem32driversswmidi.sys 16:23:43.0218 2924 swmidi - ok 16:23:43.0218 2924 SwPrv - ok 16:23:43.0234 2924 symc810 - ok 16:23:43.0250 2924 symc8xx - ok 16:23:43.0265 2924 sym_hi - ok 16:23:43.0281 2924 sym_u3 - ok 16:23:43.0328 2924 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:WINDOWSsystem32driverssysaudio.sys 16:23:43.0484 2924 sysaudio - ok 16:23:43.0515 2924 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:WINDOWSsystem32smlogsvc.exe 16:23:43.0671 2924 SysmonLog - ok 16:23:43.0703 2924 SysTool (0e4bb35c5305099ac82053ac992e3e0e) C:WINDOWSsystem32DRIVERSSysTool.sys 16:23:43.0718 2924 SysTool ( UnsignedFile.Multi.Generic ) - warning 16:23:43.0718 2924 SysTool - detected UnsignedFile.Multi.Generic (1) 16:23:43.0734 2924 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:WINDOWSSystem32tapisrv.dll 16:23:43.0890 2924 TapiSrv - ok 16:23:43.0921 2924 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:WINDOWSsystem32DRIVERStcpip.sys 16:23:43.0953 2924 Tcpip - ok 16:23:43.0968 2924 TDPIPE (6471a66807f5e104e4885f5b67349397) C:WINDOWSsystem32driversTDPIPE.sys 16:23:44.0093 2924 TDPIPE - ok 16:23:44.0125 2924 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:WINDOWSsystem32driversTDTCP.sys 16:23:44.0234 2924 TDTCP - ok 16:23:44.0250 2924 TermDD (88155247177638048422893737429d9e) C:WINDOWSsystem32DRIVERStermdd.sys 16:23:44.0359 2924 TermDD - ok 16:23:44.0390 2924 TermService (ff3477c03be7201c294c35f684b3479f) C:WINDOWSSystem32termsrv.dll 16:23:44.0515 2924 TermService - ok 16:23:44.0546 2924 Themes (1926899bf9ffe2602b63074971700412) C:WINDOWSSystem32shsvcs.dll 16:23:44.0656 2924 Themes - ok 16:23:44.0687 2924 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:WINDOWSsystem32tlntsvr.exe 16:23:44.0750 2924 TlntSvr - ok 16:23:44.0750 2924 TosIde - ok 16:23:44.0765 2924 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:WINDOWSsystem32trkwks.dll 16:23:44.0890 2924 TrkWks - ok 16:23:44.0921 2924 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:WINDOWSsystem32driversUdfs.sys 16:23:45.0031 2924 Udfs - ok 16:23:45.0046 2924 ufad-ws60 - ok 16:23:45.0078 2924 ULI5261XP (ce2dd5efb0f773382376faaf9f506542) C:WINDOWSsystem32DRIVERSULILAN51.SYS 16:23:45.0109 2924 ULI5261XP - ok 16:23:45.0109 2924 ultra - ok 16:23:45.0140 2924 Update (402ddc88356b1bac0ee3dd1580c76a31) C:WINDOWSsystem32DRIVERSupdate.sys 16:23:45.0281 2924 Update - ok 16:23:45.0312 2924 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:WINDOWSSystem32upnphost.dll 16:23:45.0375 2924 upnphost - ok 16:23:45.0390 2924 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:WINDOWSSystem32ups.exe 16:23:45.0515 2924 UPS - ok 16:23:45.0546 2924 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:WINDOWSsystem32DRIVERSusbccgp.sys 16:23:45.0656 2924 usbccgp - ok 16:23:45.0687 2924 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:WINDOWSsystem32DRIVERSusbehci.sys 16:23:45.0812 2924 usbehci - ok 16:23:45.0828 2924 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:WINDOWSsystem32DRIVERSusbhub.sys 16:23:45.0953 2924 usbhub - ok 16:23:45.0968 2924 usbohci (0daecce65366ea32b162f85f07c6753b) C:WINDOWSsystem32DRIVERSusbohci.sys 16:23:46.0093 2924 usbohci - ok 16:23:46.0125 2924 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:WINDOWSsystem32driversusbser.sys 16:23:46.0250 2924 usbser - ok 16:23:46.0281 2924 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:WINDOWSsystem32DRIVERSUSBSTOR.SYS 16:23:46.0406 2924 USBSTOR - ok 16:23:46.0468 2924 Ventrilo (9a5724f90fd12cff67cb6b7d7de5e018) C:Program FilesVentSrvventrilo_svc.exe 16:23:46.0468 2924 Ventrilo ( UnsignedFile.Multi.Generic ) - warning 16:23:46.0468 2924 Ventrilo - detected UnsignedFile.Multi.Generic (1) 16:23:46.0500 2924 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:WINDOWSSystem32driversvga.sys 16:23:46.0609 2924 VgaSave - ok 16:23:46.0625 2924 ViaIde - ok 16:23:46.0640 2924 VMAuthdService - ok 16:23:46.0671 2924 vmci (6bf7fef91d45fd2c68d71d454243e46d) C:WINDOWSsystem32Driversvmci.sys 16:23:46.0687 2924 vmci - ok 16:23:46.0703 2924 vmkbd (27df4aece721961f9c9064a31790f2ea) C:WINDOWSsystem32driversVMkbd.sys 16:23:46.0703 2924 vmkbd - ok 16:23:46.0734 2924 VMnetAdapter (e41704d8149992107b333cc7a52c07cc) C:WINDOWSsystem32DRIVERSvmnetadapter.sys 16:23:46.0750 2924 VMnetAdapter - ok 16:23:46.0765 2924 VMnetBridge (03c498bb100ad700377bbfd3adeeb74f) C:WINDOWSsystem32DRIVERSvmnetbridge.sys 16:23:46.0781 2924 VMnetBridge - ok 16:23:46.0812 2924 VMnetDHCP (d5f0d5efab7808fe2b79b5e0df8a8b21) C:WINDOWSsystem32vmnetdhcp.exe 16:23:46.0843 2924 VMnetDHCP - ok 16:23:46.0875 2924 VMnetuserif (79bf063792ecbce9bb065090a60a1e7c) C:WINDOWSsystem32driversvmnetuserif.sys 16:23:46.0875 2924 VMnetuserif - ok 16:23:46.0890 2924 VMparport (e8f328e819e12629eaa80f9e6aab42a3) C:WINDOWSsystem32DriversVMparport.sys 16:23:46.0906 2924 VMparport - ok 16:23:46.0953 2924 vmusb (afb10ad9aa91d2f70c9f0e6bda0d119b) C:WINDOWSsystem32Driversvmusb.sys 16:23:46.0968 2924 vmusb - ok 16:23:47.0031 2924 VMUSBArbService (19368f7c4dc6ef444b826249fc8a0e30) C:Program FilesCommon FilesVMwareUSBvmware-usbarbitrator.exe 16:23:47.0062 2924 VMUSBArbService - ok 16:23:47.0093 2924 VMware NAT Service (d4401b0415023e24e4509ee979f0eae6) C:WINDOWSsystem32vmnat.exe 16:23:47.0156 2924 VMware NAT Service - ok 16:23:47.0218 2924 vmx86 (ba3992252dd311ce41fafe565244fa6f) C:WINDOWSsystem32Driversvmx86.sys 16:23:47.0296 2924 vmx86 - ok 16:23:47.0328 2924 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:WINDOWSsystem32driversVolSnap.sys 16:23:47.0468 2924 VolSnap - ok 16:23:47.0484 2924 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:WINDOWSSystem32vssvc.exe 16:23:47.0593 2924 VSS - ok 16:23:47.0609 2924 vstor2-ws60 - ok 16:23:47.0640 2924 W32Time (54af4b1d5459500ef0937f6d33b1914f) C:WINDOWSsystem32w32time.dll 16:23:47.0796 2924 W32Time - ok 16:23:47.0828 2924 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:WINDOWSsystem32DRIVERSwanarp.sys 16:23:47.0953 2924 Wanarp - ok 16:23:47.0984 2924 Wdf01000 (d918617b46457b9ac28027722e30f647) C:WINDOWSsystem32Driverswdf01000.sys 16:23:48.0015 2924 Wdf01000 - ok 16:23:48.0031 2924 WDICA - ok 16:23:48.0062 2924 wdmaud (6768acf64b18196494413695f0c3a00f) C:WINDOWSsystem32driverswdmaud.sys 16:23:48.0187 2924 wdmaud - ok 16:23:48.0203 2924 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:WINDOWSSystem32webclnt.dll 16:23:48.0328 2924 WebClient - ok 16:23:48.0406 2924 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:WINDOWSsystem32wbemWMIsvc.dll 16:23:48.0515 2924 winmgmt - ok 16:23:48.0546 2924 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:WINDOWSsystem32mspmsnsv.dll 16:23:48.0609 2924 WmdmPmSN - ok 16:23:48.0671 2924 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:WINDOWSSystem32advapi32.dll 16:23:48.0703 2924 Wmi - ok 16:23:48.0734 2924 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:WINDOWSsystem32wbemwmiapsrv.exe 16:23:48.0843 2924 WmiApSrv - ok 16:23:48.0921 2924 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:Program FilesWindows Media PlayerWMPNetwk.exe 16:23:49.0000 2924 WMPNetworkSvc - ok 16:23:49.0093 2924 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:WINDOWSMicrosoft.NETFrameworkv4.0.30319WPFWPFFontCache_v0400.exe 16:23:49.0140 2924 WPFFontCache_v0400 - ok 16:23:49.0218 2924 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:WINDOWSSystem32driversws2ifsl.sys 16:23:49.0390 2924 WS2IFSL - ok 16:23:49.0406 2924 wscsvc (7c278e6408d1dce642230c0585a854d5) C:WINDOWSsystem32wscsvc.dll 16:23:49.0578 2924 wscsvc - ok 16:23:49.0593 2924 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:WINDOWSsystem32wuauserv.dll 16:23:49.0781 2924 wuauserv - ok 16:23:49.0828 2924 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:WINDOWSsystem32DRIVERSWudfPf.sys 16:23:49.0859 2924 WudfPf - ok 16:23:49.0875 2924 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:WINDOWSsystem32DRIVERSwudfrd.sys 16:23:49.0890 2924 WudfRd - ok 16:23:49.0921 2924 WudfSvc (ddee3682fe97037c45f4d7ab467cb8b6) C:WINDOWSSystem32WUDFSvc.dll 16:23:49.0937 2924 WudfSvc - ok 16:23:49.0984 2924 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:WINDOWSSystem32wzcsvc.dll 16:23:50.0140 2924 WZCSVC - ok 16:23:50.0156 2924 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:WINDOWSSystem32xmlprov.dll 16:23:50.0328 2924 xmlprov - ok 16:23:50.0359 2924 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) DeviceHarddisk0DR0 16:23:50.0828 2924 DeviceHarddisk0DR0 - ok 16:23:50.0843 2924 Boot (0x1200) (f32d0b304b00a38d7efa1244c651b70e) DeviceHarddisk0DR0Partition0 16:23:50.0843 2924 DeviceHarddisk0DR0Partition0 - ok 16:23:50.0843 2924 Boot (0x1200) (3305204c65b1e1b7b46ee3dcb6a8c376) DeviceHarddisk0DR0Partition1 16:23:50.0843 2924 DeviceHarddisk0DR0Partition1 - ok 16:23:50.0859 2924 ============================================================ 16:23:50.0859 2924 Scan finished 16:23:50.0859 2924 ============================================================ 16:23:50.0968 1508 Detected object count: 10 16:23:50.0968 1508 Actual detected object count: 10 16:25:23.0906 1508 C:WINDOWSsystem32DRIVERSACPI.sys - copied to quarantine 16:25:24.0234 1508 Backup copy found, using it.. 16:25:24.0281 1508 C:WINDOWSsystem32DRIVERSACPI.sys - will be cured on reboot 16:25:24.0281 1508 ACPI ( Virus.Win32.Rloader.a ) - User select action: Cure 16:25:24.0281 1508 AR9271 ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0281 1508 AR9271 ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0296 1508 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0296 1508 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0296 1508 NPF ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0296 1508 NPF ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0296 1508 NVStrap ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0296 1508 NVStrap ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0296 1508 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0296 1508 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0312 1508 RivaTuner32 ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0312 1508 RivaTuner32 ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0312 1508 SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0312 1508 SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:24.0343 1508 C:WINDOWSsystem32DRIVERSSysTool.sys - copied to quarantine 16:25:24.0375 1508 HKLMSYSTEMControlSet001servicesSysTool - will be deleted on reboot 16:25:24.0437 1508 HKLMSYSTEMControlSet003servicesSysTool - will be deleted on reboot 16:25:24.0453 1508 HKLMSYSTEMControlSet004servicesSysTool - will be deleted on reboot 16:25:24.0468 1508 C:WINDOWSsystem32DRIVERSSysTool.sys - will be deleted on reboot 16:25:24.0468 1508 SysTool ( UnsignedFile.Multi.Generic ) - User select action: Delete 16:25:24.0468 1508 Ventrilo ( UnsignedFile.Multi.Generic ) - skipped by user 16:25:24.0468 1508 Ventrilo ( UnsignedFile.Multi.Generic ) - User select action: Skip 16:25:38.0562 0944 Deinitialize success Ето и лога от комбофикса: ComboFix 12-07-20.02 - sControl 07/20/2012 16:37:21.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1023.402 [GMT 3:00] Running from: c:documents and settingssControlDesktopComboFix.exe AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:windowssystem32driversInstall.exe c:windowssystem32driversnpf.sys c:windowssystem32Packet.dll c:windowssystem32roboot.exe c:windowssystem32WanPacket.dll c:windowssystem32wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------Legacy_NPF -------Service_NPF . . ((((((((((((((((((((((((( Files Created from 2012-06-20 to 2012-07-20 ))))))))))))))))))))))))))))))) . . 2012-07-20 13:25 . 2012-07-20 13:25 -------- d-----w- C:TDSSKiller_Quarantine 2012-07-18 18:58 . 2012-07-18 18:58 -------- d-----w- c:documents and settingssControlApplication Datavlc 2012-07-18 11:09 . 2012-07-18 11:10 -------- d-----w- C:output 2012-07-17 10:40 . 2012-07-03 16:21 21256 ----a-w- c:windowssystem32driversaswFsBlk.sys 2012-07-17 10:40 . 2012-07-03 16:21 353688 ----a-w- c:windowssystem32driversaswSP.sys 2012-07-17 10:40 . 2012-07-03 16:21 54232 ----a-w- c:windowssystem32driversaswTdi.sys 2012-07-17 10:40 . 2012-07-03 16:21 721000 ----a-w- c:windowssystem32driversaswSnx.sys 2012-07-17 10:40 . 2012-07-03 16:21 35928 ----a-w- c:windowssystem32driversaswRdr.sys 2012-07-17 10:40 . 2012-07-03 16:21 97608 ----a-w- c:windowssystem32driversaswmon2.sys 2012-07-17 10:40 . 2012-07-03 16:21 89624 ----a-w- c:windowssystem32driversaswmon.sys 2012-07-17 10:40 . 2012-07-03 16:21 25256 ----a-w- c:windowssystem32driversaavmker4.sys 2012-07-17 10:39 . 2012-07-03 16:21 41224 ----a-w- c:windowsavastSS.scr 2012-07-17 10:39 . 2012-07-03 16:21 227648 ----a-w- c:windowssystem32aswBoot.exe 2012-07-17 10:30 . 2012-07-20 13:25 -------- d-----w- c:documents and settingssControlApplication DatauTorrent 2012-07-17 10:28 . 2012-07-17 10:28 -------- d-----w- c:windowssystem32wbemRepository 2012-07-17 10:27 . 2012-07-17 10:27 -------- d-----w- c:program filesuTorrent 2012-07-17 10:26 . 2012-07-17 10:29 -------- d-----w- c:documents and settingsUpdatusUser 2012-07-17 10:25 . 2012-07-18 20:46 -------- d-----w- c:documents and settingsAll UsersApplication DataNVIDIA Corporation 2012-07-17 10:08 . 2012-07-17 10:08 -------- d-----w- c:program filesRealtek AC97 2012-07-17 10:06 . 2012-07-17 10:06 -------- d-----w- c:program filesCommon FilesAdobe AIR 2012-07-17 09:47 . 2012-07-17 09:55 -------- d-----w- c:windowsLastGood(2) 2012-07-17 09:47 . 2012-07-17 09:46 7429733 ----a-w- c:windowssystem32driversSET10.tmp 2012-07-17 09:27 . 2012-07-18 20:45 1074716 ----a-w- c:windowssystem32nvdrsdb0.bin 2012-07-17 09:27 . 2012-07-18 20:45 1 ----a-w- c:windowssystem32nvdrssel.bin 2012-07-17 09:27 . 2012-07-18 20:45 1074716 ----a-w- c:windowssystem32nvdrsdb1.bin 2012-07-17 09:26 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32(6).dll 2012-07-17 09:26 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32(5).dll 2012-07-17 09:26 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32(4).dll 2012-07-17 09:26 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32(3).dll 2012-07-17 09:26 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32(2).dll 2012-07-17 09:26 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32(6).dll 2012-07-17 09:26 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32(5).dll 2012-07-17 09:26 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32(4).dll 2012-07-17 09:26 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32(3).dll 2012-07-17 09:26 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32(2).dll 2012-07-17 08:21 . 2012-07-17 10:05 -------- d-----w- c:program filesCommon FilesSymantec Shared 2012-07-17 08:21 . 2012-07-17 10:05 -------- d-----w- c:program filesNorton Security Scan 2012-07-17 08:21 . 2012-07-17 10:05 -------- d-----w- c:documents and settingsAll UsersApplication DataNorton 2012-07-17 08:21 . 2012-07-17 08:21 -------- d-----w- c:program filesNortonInstaller 2012-07-17 07:58 . 2012-07-17 07:58 -------- d-----w- c:documents and settingsLocalServiceApplication DataMcAfee 2012-07-17 06:22 . 2012-07-17 06:22 -------- d-----w- c:documents and settingsAll UsersApplication DataMcAfee 2012-07-17 06:22 . 2012-07-17 10:05 -------- d-----w- c:program filesMcAfee Security Scan 2012-07-16 19:43 . 2012-07-16 19:43 -------- d-----w- c:program filesoZone3D 2012-07-16 18:58 . 2012-02-10 04:10 881984 ----a-w- c:windowssystem32nvgenco32(9).dll 2012-07-16 18:58 . 2012-02-10 04:10 881984 ----a-w- c:windowssystem32nvgenco32(8).dll 2012-07-16 18:58 . 2012-02-10 04:10 881984 ----a-w- c:windowssystem32nvgenco32(7).dll 2012-07-16 18:58 . 2012-02-10 04:10 881984 ----a-w- c:windowssystem32nvgenco32(11).dll 2012-07-16 18:58 . 2012-02-10 04:10 881984 ----a-w- c:windowssystem32nvgenco32(10).dll 2012-07-16 18:58 . 2012-02-10 04:10 1000256 ----a-w- c:windowssystem32nvdispco32(9).dll 2012-07-16 18:58 . 2012-02-10 04:10 1000256 ----a-w- c:windowssystem32nvdispco32(8).dll 2012-07-16 18:58 . 2012-02-10 04:10 1000256 ----a-w- c:windowssystem32nvdispco32(7).dll 2012-07-16 18:58 . 2012-02-10 04:10 1000256 ----a-w- c:windowssystem32nvdispco32(11).dll 2012-07-16 18:58 . 2012-02-10 04:10 1000256 ----a-w- c:windowssystem32nvdispco32(10).dll 2012-07-16 13:22 . 2012-07-16 13:22 -------- d-----w- c:documents and settingsLocalServiceLocal SettingsApplication DataGoogle 2012-07-16 12:16 . 2012-07-16 12:16 -------- d-----w- c:program filesESET 2012-07-16 10:26 . 2012-07-16 10:26 0 ----a-w- c:program filesGUT96B.tmp 2012-07-14 19:48 . 2012-07-14 19:48 -------- d-----w- c:documents and settingssControlLocal SettingsApplication DataCRE 2012-07-14 19:47 . 2012-07-17 10:27 -------- d-----w- c:documents and settingssControlApplication DataBitTorrent 2012-07-13 08:02 . 2012-07-19 11:46 -------- d-----w- c:program filesThe KMPlayer 2012-07-13 08:01 . 2012-07-13 08:01 -------- d-----w- c:documents and settingsAll UsersApplication DataAsk 2012-07-10 16:30 . 2012-07-10 16:30 -------- d-----w- c:documents and settingssControlApplication DataNVIDIA 2012-07-10 16:20 . 2012-05-15 10:18 883008 ----a-w- c:windowssystem32nvgenco32.dll 2012-07-10 16:20 . 2012-05-15 10:18 6012928 ----a-w- c:windowssystem32nvcuda.dll 2012-07-10 16:20 . 2012-05-15 10:18 2530624 ----a-w- c:windowssystem32nvcuvid.dll 2012-07-10 16:20 . 2012-05-15 10:18 2445120 ----a-w- c:windowssystem32nvcuvenc.dll 2012-07-10 16:20 . 2012-05-15 10:18 18771968 ----a-w- c:windowssystem32nvoglnt.dll 2012-07-10 16:20 . 2012-05-15 10:18 1000768 ----a-w- c:windowssystem32nvdispco32.dll 2012-07-10 16:20 . 2012-05-15 10:18 2359808 ----a-w- c:windowssystem32nvapi.dll 2012-07-10 16:20 . 2012-05-15 10:18 17543168 ----a-w- c:windowssystem32nvcompiler.dll 2012-07-10 16:19 . 2012-07-16 18:58 -------- d-----w- C:NVIDIA 2012-07-06 06:07 . 2012-07-06 06:07 -------- d-----w- c:documents and settingssControlLocal SettingsApplication DataIdentities 2012-07-03 06:46 . 2012-07-03 06:49 -------- d-----w- c:program filesVentSrv 2012-07-02 13:31 . 2010-05-26 08:41 2106216 ----a-w- c:windowssystem32D3DCompiler_43.dll 2012-07-02 13:31 . 2010-05-26 08:41 470880 ----a-w- c:windowssystem32d3dx10_43.dll 2012-07-02 13:31 . 2010-05-26 08:41 1998168 ----a-w- c:windowssystem32D3DX9_43.dll 2012-07-01 15:14 . 2012-07-01 15:14 -------- d-----w- c:documents and settingssControlApplication Datawtxpcom 2012-07-01 14:24 . 2012-07-01 14:24 -------- d-----w- c:documents and settingssControlApplication DataYouTube Downloader 2012-07-01 14:23 . 2012-07-01 14:23 -------- d-----w- c:documents and settingssControlApplication DataSearch Settings 2012-07-01 14:23 . 2012-07-01 14:23 -------- d-----w- c:windowssystem32configsystemprofileApplication DataApplication Updater 2012-07-01 14:23 . 2012-07-01 14:23 -------- d-----w- c:program filesApplication Updater 2012-07-01 14:23 . 2012-07-01 14:23 -------- d-----w- c:program filesCommon FilesSpigot 2012-07-01 14:23 . 2012-07-01 14:23 -------- d-----w- c:program filesYouTube Downloader Toolbar 2012-06-30 09:13 . 2012-06-30 09:13 -------- d-----w- c:program filesGPU-Z 2012-06-25 10:56 . 2012-06-25 12:40 -------- d-----w- c:documents and settingsAll UsersApplication DataPanda Security 2012-06-23 07:03 . 2012-06-23 07:03 -------- d-----w- C:found.001 . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-07-20 13:25 . 2008-04-14 09:00 187776 ----a-w- c:windowssystem32driversacpi.sys 2012-07-20 10:41 . 2012-03-11 18:16 138184 ----a-w- c:windowssystem32driversPnkBstrK.sys 2012-07-20 10:41 . 2012-03-11 18:15 183112 ----a-w- c:windowssystem32PnkBstrB.exe 2012-06-12 19:36 . 2012-03-09 08:23 60416 ----a-w- c:windowsALCFDRTM.VER 2012-05-29 11:49 . 2012-05-29 11:49 224016 --s---r- c:windowssystem32TABCTL32.OCX 2012-05-29 11:49 . 2012-05-29 11:49 1010720 --s---r- c:windowssystem32MSCHRT20.OCX 2012-05-29 11:49 . 2012-05-29 11:49 152848 --s---r- c:windowssystem32COMDLG32.OCX 2012-05-29 11:48 . 2012-05-29 11:48 1081616 --s---r- c:windowssystem32MSCOMCTL.OCX 2012-05-28 12:01 . 2012-05-27 12:36 2076 ----a-w- c:windowssystem32ealregsnapshot1.reg 2012-05-15 10:18 . 2012-03-08 15:42 4373248 ----a-w- c:windowssystem32nv4_disp.dll 2012-05-15 10:18 . 2012-03-08 15:42 14014656 ----a-w- c:windowssystem32driversnv4_mini.sys 2012-04-22 10:51 . 2012-04-22 10:51 592896 ----a-w- c:windowssystem32driversUMDFPCCSWpdDriver.dll 2012-04-22 10:51 . 2012-04-22 10:51 1837296 ----a-w- c:windowssystem32WUDFUpdate_01009.dll 2012-04-22 10:51 . 2012-05-10 19:22 18816 ----a-w- c:windowssystem32driverspccsmcfd.sys 2012-07-19 12:42 . 2012-04-25 19:40 136672 ----a-w- c:program filesmozilla firefoxcomponentsbrowsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorershelliconoverlayidentifiers00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOTCLSID{472083B0-C522-11CF-8763-00608CC02F24}] 2012-07-03 16:21 121528 ----a-w- c:program filesAVAST SoftwareAvastashShell.dll . [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun] "Skype"="c:program filesSkypePhoneSkype.exe" [2008-09-23 21755688] "Anders Kjersem: TransBar"="d:sniper controlProgramsThemesTransBarTransBar.exe" [2003-06-09 16896] . [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536] "RivaTunerStartupDaemon"="d:sniper controlProgramsoverclockRivaTuner v2.24 MSI Master Overclocking Arena 2009 editionRivaTuner.exe" [2009-08-22 2781184] "SearchSettings"="c:program filesCommon FilesSpigotSearch SettingsSearchSettings.exe" [2012-06-27 1090440] "avast"="c:program filesAVAST SoftwareAvastavastUI.exe" [2012-07-03 4273976] "NvCplDaemon"="c:windowssystem32NvCpl.dll" [2012-05-15 15504192] "NvMediaCenter"="NvMCTray.dll" [2012-05-15 108352] "nwiz"="c:program filesNVIDIA Corporationnviewnwiz.exe" [2012-05-15 1634112] . [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun] "CTFMON.EXE"="c:windowssystem32CTFMON.EXE" [2008-04-14 15360] . [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWudfSvc] @="Service" . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe ARM] 2012-01-03 13:10 843712 ----a-w- c:program filesCommon FilesAdobeARM1.0AdobeARM.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobeAAMUpdater-1.0] 2011-03-15 14:42 499608 ------w- c:program filesCommon FilesAdobeOOBEPDAppUWAupdaterstartuputility.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobeCS5.5ServiceManager] 2011-01-12 04:08 1523360 ----a-w- c:program filesCommon FilesAdobeCS5.5ServiceManagerCS5.5ServiceManager.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCTFMON.EXE] 2008-04-14 09:00 15360 ----a-w- c:windowssystem32ctfmon.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools Lite] 2012-02-13 08:06 3481408 ----a-w- c:program filesDAEMON Tools LiteDTLite.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMalwarebytes' Anti-Malware] 2012-04-04 12:56 462408 ----a-w- c:program filesMalwarebytes' Anti-Malwarembamgui.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvCplDaemon] 2012-05-15 09:40 15504192 ----a-w- c:windowssystem32nvcpl.dll . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvMediaCenter] 2012-05-15 09:40 108352 ----a-w- c:windowssystem32nvmctray.dll . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRivaTunerStartupDaemon] 2009-08-22 18:25 2781184 ----a-w- d:sniper controlProgramsoverclockRivaTuner v2.24 MSI Master Overclocking Arena 2009 editionRivaTuner.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSunJavaUpdateSched] 2012-01-18 11:02 254696 ----a-w- c:program filesCommon FilesJavaJava Updatejusched.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSwitchBoard] 2010-02-19 10:37 517096 ----a-w- c:program filesCommon FilesAdobeSwitchBoardSwitchBoard.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreguTorrent] 2012-05-11 22:15 880496 ----a-w- c:program filesuTorrentuTorrent.exe . [HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices] "gupdatem"=3 (0x3) "gupdate"=2 (0x2) "wuauserv"=2 (0x2) "wscsvc"=2 (0x2) "SwitchBoard"=3 (0x3) "MBAMService"=2 (0x2) "JavaQuickStarterService"=2 (0x2) "WMPNetworkSvc"=3 (0x3) "VMware NAT Service"=2 (0x2) "VMUSBArbService"=2 (0x2) "VMnetDHCP"=2 (0x2) "VMAuthdService"=2 (0x2) "PnkBstrB"=2 (0x2) "PnkBstrA"=2 (0x2) "nTuneService"=2 (0x2) "ufad-ws60"=3 (0x3) "ServiceLayer"=3 (0x3) "MozillaMaintenance"=3 (0x3) "idsvc"=3 (0x3) "AODService"=2 (0x2) . [HKLM~servicessharedaccessparametersfirewallpolicystandardprofile] "EnableFirewall"= 0 (0x0) . [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList] "%windir%Network Diagnosticxpnetdiag.exe"= "%windir%system32sessmgr.exe"= "c:Program FilesOperaopera.exe"= "c:Program FilesqBittorrentqbittorrent.exe"= "c:Program FilesGarena PlusRoomgarena_room.exe"= "c:WINDOWSsystem32PnkBstrA.exe"= "c:WINDOWSsystem32PnkBstrB.exe"= "c:Program FilesPando NetworksMedia BoosterPMB.exe"= "c:Program FilesTeamViewerVersion7TeamViewer.exe"= "c:Program FilesTeamViewerVersion7TeamViewer_Service.exe"= "c:Program FilesMozilla Firefoxplugin-container.exe"= "d:GamesBurnout Paradise The Ultimate BoxBurnoutLauncher.exe"= "d:GamesBurnout Paradise The Ultimate BoxBurnoutConfigTool.exe"= "d:GamesBurnout Paradise The Ultimate BoxBurnoutParadise.exe"= "d:GamesCracked Steamsteam.exe"= "c:Program FilesOperapluginwrapperopera_plugin_wrapper.exe"= "d:GamesCracked Steamsteamappssniper_controlcounter-strikehl.exe"= "c:Program FilesuTorrentuTorrent.exe"= "c:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe"= "c:Program FilesSkypePhoneSkype.exe"= . [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileGloballyOpenPortsList] "57276:TCP"= 57276:TCP:Pando Media Booster "57276:UDP"= 57276:UDP:Pando Media Booster . R1 aswSnx;aswSnx;c:windowssystem32driversaswSnx.sys [7/17/2012 13:40 721000] R1 aswSP;aswSP;c:windowssystem32driversaswSP.sys [7/17/2012 13:40 353688] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32driversdtsoftbus01.sys [3/8/2012 19:03 242240] R2 Application Updater;Application Updater;c:program filesApplication UpdaterApplicationUpdater.exe [6/27/2012 17:01 791488] R2 aswFsBlk;aswFsBlk;c:windowssystem32driversaswFsBlk.sys [7/17/2012 13:40 21256] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:program filesNVIDIA CorporationNVIDIA Update Coredaemonu.exe [7/10/2012 19:21 1262400] R2 vmci;VMware vmci;c:windowssystem32driversvmci.sys [3/25/2011 23:42 70768] R3 ULI5261XP;ULi M526X Ethernet NT Driver;c:windowssystem32driversULILAN51.SYS [4/22/2012 19:37 28672] S0 NVStrap;NVStrap;c:windowssystem32driversNVStrap.sys [3/8/2012 18:46 4224] S3 AR9271;Wireless Network Adapter Service;c:windowssystem32driversathuw.sys [5/12/2012 13:14 1763584] S3 AsrOcDrv;AsrOcDrv;??c:windowssystem32DriversAsrOcDrv.sys --> c:windowssystem32DriversAsrOcDrv.sys [?] S3 GGSAFERDriver;GGSAFER Driver;??c:program filesGarena PlusRoomsafedrv.sys --> c:program filesGarena PlusRoomsafedrv.sys [?] S3 GPU-Z;GPU-Z;??c:docume~1sControlLOCALS~1TempGPU-Z.sys --> c:docume~1sControlLOCALS~1TempGPU-Z.sys [?] S3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [3/28/2012 11:38 22344] S4 AODService;AODService;c:program filesAMDOverDriveAODAssist.exe [10/22/2009 03:49 136544] S4 gupdate;Google Update Service (gupdate);c:program filesGoogleUpdateGoogleUpdate.exe [3/8/2012 19:10 136176] S4 gupdatem;Google Update Service (gupdatem);c:program filesGoogleUpdateGoogleUpdate.exe [3/8/2012 19:10 136176] S4 MBAMService;MBAMService;c:program filesMalwarebytes' Anti-Malwarembamservice.exe [3/28/2012 11:38 654408] S4 MozillaMaintenance;Mozilla Maintenance Service;c:program filesMozilla Maintenance Servicemaintenanceservice.exe [4/25/2012 22:40 113120] S4 SwitchBoard;Adobe SwitchBoard;c:program filesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2/19/2010 13:37 517096] S4 VMUSBArbService;VMware USB Arbitration Service;c:program filesCommon FilesVMwareUSBvmware-usbarbitrator.exe [3/25/2011 22:27 539248] . Contents of the 'Scheduled Tasks' folder . 2012-07-19 c:windowsTasksAdobeAAMUpdater-1.0-SCONTROL-1FB11E-sControl.job - c:program filesCommon FilesAdobeOOBEPDAppUWAupdaterstartuputility.exe [2012-04-06 14:42] . 2012-07-20 c:windowsTasksavast! Emergency Update.job - c:program filesAVAST SoftwareAvastAvastEmUpdate.exe [2012-07-17 16:21] . 2012-07-20 c:windowsTasksGoogleUpdateTaskMachineCore.job - c:program filesGoogleUpdateGoogleUpdate.exe [2012-03-08 16:10] . 2012-07-20 c:windowsTasksGoogleUpdateTaskMachineUA.job - c:program filesGoogleUpdateGoogleUpdate.exe [2012-03-08 16:10] . 2012-07-20 c:windowsTasksUser_Feed_Synchronization-{885C2C9F-E82E-4A5B-8B6D-405D4F78410B}.job - c:windowssystem32msfeedssync.exe [2009-03-08 02:31] . . ------- Supplementary Scan ------- . LSP: d:sniper controlProgramsWe FiVMwarevsocklib.dll TCP: Interfaces{2B6DBC23-3083-4CC0-939A-35E8873DFCCF}: NameServer = 192.168.15.12,195.24.48.5 TCP: Interfaces{31014428-4498-43C5-88BE-764AF0B4A0CC}: NameServer = 192.168.15.12,195.24.48.5 FF - ProfilePath - c:documents and settingssControlApplication DataMozillaFirefoxProfiles8zg5gh6y.default FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:home FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q= . - - - - ORPHANS REMOVED - - - - . HKCU-Run-SpeedConnectStartUp - (no file) HKCU-Run-NVIDIA nTune - c:program filesNVIDIA CorporationnTunenTuneCmd.exe SafeBoot-61380481.sys SafeBoot-WudfPf SafeBoot-WudfRd MSConfigStartUp-BitTorrent - c:program filesBitTorrentBitTorrent.exe MSConfigStartUp-MSC - c:program filesMicrosoft Security Clientmsseces.exe MSConfigStartUp-NokiaSuite - c:program filesNokiaNokia SuiteNokiaSuite.exe MSConfigStartUp-NVIDIA nTune - c:program filesNVIDIA CorporationnTunenTuneCmd.exe MSConfigStartUp-vmware-tray - d:sniper controlProgramsWe FiVMwarevmware-tray.exe AddRemove-Easy WiFi Radar - c:docume~1sControlDesktopEASYWI~1Setup.exe AddRemove-SpeedConnect XP Internet Accelerator_is1 - c:documents and settingssControlDesktopSpeedConnectXP Internet Accelerator v6.5SpeedConnect XP Internet Acceleratorunins000.exe AddRemove-SysTool - c:documents and settingssControlDesktopSysToolUninstall.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-07-20 16:46 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . HKCUSoftwareMicrosoftWindowsCurrentVersionRun Anders Kjersem: TransBar = d:sniper controlProgramsThemesTransBarTransBar.exe /NoConfig???????(??w????????????????????@??????????? ???????????????@???D?????B~??????????????????_?????&?A~??_?????????N?B~??B~V???????????????????????????(?????B~V???????????P?B~?$@?V???????????????h?? . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'explorer.exe'(340) c:windowssystem32WININET.dll c:windowssystem32ieframe.dll c:windowssystem32wpdshserviceobj.dll c:windowssystem32webcheck.dll c:windowssystem32portabledevicetypes.dll c:windowssystem32portabledeviceapi.dll c:program filesInternet Explorermui0402browselc.dll c:program filesCommon FilesAdobeAcrobatActiveXPDFShell.dll . ------------------------ Other Running Processes ------------------------ . c:program filesAVAST SoftwareAvastAvastSvc.exe c:windowsSOUNDMAN.EXE c:windowssystem32RunDLL32.exe c:windowssystem32nvsvc32.exe c:windowssystem32PnkBstrA.exe c:program filesVentSrvventrilo_svc.exe c:program filesVentSrvventrilo_srv.exe c:windowssystem32wscntfy.exe c:windowssystem32taskmgr.exe . ************************************************************************** . Completion time: 2012-07-20 17:17:49 - machine was rebooted ComboFix-quarantined-files.txt 2012-07-20 14:17 . Pre-Run: 48,134,598,656 bytes free Post-Run: 50,919,682,048 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS [operating systems] c:cmdconsBOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - DCC731E891D7BFAFE8B25703BE5D3D23

Редактирано от Just Human.. (преглед на промените)

Архивирайте папката C:TDSSKiller_Quarantine с парола "virus" го качете тук . Изпратете линка на лична за да го прегледам.

Копирайте текста в карето на notepad и го запазвате с име CFScript.txt на десктопа си:

KILLALL::
ClearJavaCache::

File::
c:windowssystem32driversSET10.tmp
c:program filesGUT96B.tmp

След съхранението преместете CFScript.txt на иконата на ComboFix.exe

Публикувано изображение

Генерирания рапорт прикачете в следващия си пост..!

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.