Wykrywa trojany, jest ścieżka, ale nie ma takich plików

[J-Mar]

Witam! Proszę o sprawdzenie logów z Combofixa i HijackThis. Problem jak w temacie AVG wykrywa wirusy Trojan Horse Backdoor.Generic10.AHWP i podaje ściężkę do plików C:\WINDOWS\system32\drivers , ale w tej lokalizacji nie ma takich plików. Jest to denerwujące. Dodatkowo mam również problem z wysyłaniem maili przez Outlook Express. Przy wysyłaniu pojawia się błąd i napis: Wystąpiły błędy podczas przetwarzania danych. Obejrzyj listę błędów poniżej. Ale lista błędów jest pusta, a odbiorcy dostają po kilka razy tego samego maila, dopóki nie usunę go ze skrzynki nadawczej. Jednak z tym powinienem sobie poradzić, bo znalazłem już info na ten temat, więc wirus za to nie odpowiada.

Kod: Zaznacz wszystko

ComboFix 09-02-25.02 - Dariusz Marzec 2009-02-26 12:05:02.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.1014.599 [GMT 1:00]
Uruchomiony z: c:\documents and settings\Dariusz Marzec\Pulpit\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Desktop_.ini
E:\Autorun.inf

.
(((((((((((((((((((((((((((((((((((((((   Sterowniki/Usługi   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Passthru


(((((((((((((((((((((((((   Pliki utworzone od 2009-01-26 do 2009-02-26  )))))))))))))))))))))))))))))))
.

2009-02-26 12:07 . 2009-02-26 12:07   <DIR>   d--------   c:\windows\system32\xircom
2009-02-26 12:07 . 2009-02-26 12:07   <DIR>   d--------   c:\program files\microsoft frontpage
2009-02-26 11:11 . 2009-02-26 11:11   275   --a------   C:\Skrót do Dysk lokalny (E).lnk
2009-02-25 17:00 . 2009-02-25 17:00   <DIR>   d--------   c:\documents and settings\LocalService\Pulpit
2009-02-21 10:56 . 2009-02-21 10:56   67,584   ---h-----   c:\windows\system32\secupdat.dat
2009-02-21 10:56 . 2009-02-21 10:56   11,776   --ah-----   c:\documents and settings\Dariusz Marzec\owvm.exe
2009-02-21 10:19 . 2009-02-21 10:19   <DIR>   d--------   c:\program files\OrangeBS
2009-02-21 10:19 . 2008-09-11 09:18   94,208   --a------   c:\windows\system32\w32n50.dll
2009-02-21 10:19 . 2008-09-11 09:18   34,688   --a------   c:\windows\system32\pcampr5.sys
2009-02-21 10:19 . 2008-09-11 09:18   32,128   --a------   c:\windows\system32\pcandis5.sys
2009-02-21 10:18 . 2009-02-21 10:18   <DIR>   d--------   c:\program files\Common Files\France Telecom
2009-02-21 10:14 . 2008-10-16 10:44   101,120   -ra------   c:\windows\system32\drivers\ewusbmdm.sys
2009-02-21 10:14 . 2008-10-16 10:44   99,840   -ra------   c:\windows\system32\drivers\ewusbfake.sys
2009-02-21 10:13 . 2009-02-21 10:13   <DIR>   d--------   c:\program files\CardDetector
2009-02-17 08:16 . 2009-02-17 09:49   <DIR>   d--------   c:\windows\system32\CatRoot_bak
2009-02-17 08:09 . 2008-02-07 01:00   25,088   --a------   c:\windows\system32\userinit.exe
2009-02-15 22:27 . 2009-02-15 22:27   <DIR>   d--------   c:\program files\MSXML 4.0
2009-02-15 22:26 . 2009-02-15 22:31   <DIR>   d--------   c:\windows\system32\DllCache
2009-02-15 10:07 . 2008-06-14 19:01   273,024   ---------   c:\windows\system32\drivers\bthport.sys
2009-02-15 10:07 . 2008-06-14 19:01   273,024   ---------   c:\windows\system32\DllCache\bthport.sys
2009-02-15 10:03 . 2008-10-16 11:35   1,499,136   ---------   c:\windows\system32\DllCache\shdocvw.dll
2009-02-15 10:03 . 2008-10-16 11:35   620,032   ---------   c:\windows\system32\DllCache\urlmon.dll
2009-02-15 10:03 . 2008-10-16 11:35   251,904   ---------   c:\windows\system32\DllCache\iepeers.dll
2009-02-15 10:03 . 2008-10-16 11:35   96,768   ---------   c:\windows\system32\DllCache\inseng.dll
2009-02-15 10:03 . 2008-10-16 11:35   39,424   ---------   c:\windows\system32\DllCache\pngfilt.dll
2009-02-15 10:03 . 2008-10-16 11:35   16,384   ---------   c:\windows\system32\DllCache\jsproxy.dll
2009-02-15 10:00 . 2008-08-14 14:40   2,187,264   ---------   c:\windows\system32\DllCache\ntoskrnl.exe
2009-02-15 10:00 . 2008-08-14 14:40   2,144,256   ---------   c:\windows\system32\DllCache\ntkrnlmp.exe
2009-02-15 10:00 . 2008-08-14 14:40   2,064,256   ---------   c:\windows\system32\DllCache\ntkrnlpa.exe
2009-02-15 10:00 . 2008-08-14 14:40   2,022,400   ---------   c:\windows\system32\DllCache\ntkrpamp.exe
2009-02-15 10:00 . 2008-09-15 16:17   1,847,168   ---------   c:\windows\system32\DllCache\win32k.sys
2009-02-15 09:59 . 2008-12-12 18:30   3,088,384   ---------   c:\windows\system32\DllCache\mshtml.dll
2009-02-15 09:55 . 2008-10-24 12:25   455,936   ---------   c:\windows\system32\DllCache\mrxsmb.sys
2009-02-15 09:55 . 2008-12-11 11:24   333,184   ---------   c:\windows\system32\DllCache\srv.sys
2009-02-15 09:55 . 2008-05-01 15:33   331,776   ---------   c:\windows\system32\DllCache\msadce.dll
2009-02-15 09:55 . 2008-05-08 13:28   202,752   ---------   c:\windows\system32\DllCache\rmcast.sys
2009-02-15 09:54 . 2008-04-11 19:41   683,520   ---------   c:\windows\system32\DllCache\inetcomm.dll
2009-02-15 09:50 . 2008-09-04 17:46   1,106,944   ---------   c:\windows\system32\DllCache\msxml3.dll
2009-02-15 09:50 . 2008-10-15 17:55   339,456   ---------   c:\windows\system32\DllCache\netapi32.dll
2009-02-15 09:50 . 2008-10-03 11:17   247,326   ---------   c:\windows\system32\DllCache\strmdll.dll
2009-02-15 09:45 . 2008-10-16 14:06   268,648   --a------   c:\windows\system32\mucltui.dll
2009-02-15 09:45 . 2008-10-16 14:06   27,496   --a------   c:\windows\system32\mucltui.dll.mui
2009-01-27 22:55 . 2009-01-27 22:55   6,656   --ahs----   C:\Thumbs.db

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-26 09:48   ---------   d-----w   c:\program files\Lavasoft
2009-02-26 09:48   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\Lavasoft
2009-02-25 20:58   ---------   d-----w   c:\program files\English Translator 3
2009-02-25 15:06   ---------   d-----w   c:\program files\Deutsch Translator 2
2009-02-25 11:56   ---------   d-----w   c:\program files\Gadu-Gadu
2009-02-21 09:56   52,672   ----a-w   c:\windows\system32\drivers\ndisio.sys
2009-02-17 08:18   ---------   d-----w   c:\program files\Windows Live
2009-02-02 06:55   325,128   ----a-w   c:\windows\system32\drivers\avgldx86.sys
2009-02-02 06:55   107,272   ----a-w   c:\windows\system32\drivers\avgtdix.sys
2009-02-02 06:55   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\avg8
2009-01-12 16:22   ---------   d-----w   c:\program files\AVG
2009-01-12 15:54   ---------   d-----w   c:\program files\Windows Live Toolbar
2009-01-12 15:43   ---------   d-----w   c:\program files\CCleaner
2009-01-12 15:25   ---------   d-----w   c:\program files\Common Files\Wise Installation Wizard
2009-01-12 15:23   66   ---ha-w   C:\aaw7boot.cmd
2009-01-11 10:20   ---------   d-----w   c:\program files\Trend Micro
2009-01-10 09:03   ---------   d-----w   c:\documents and settings\Dariusz Marzec\Dane aplikacji\Apple Computer
2009-01-07 14:07   ---------   d-----w   c:\program files\Bonjour
2009-01-07 14:06   ---------   d-----w   c:\program files\iTunes
2009-01-07 14:05   ---------   d-----w   c:\program files\iPod
2009-01-07 14:05   ---------   d-----w   c:\program files\Common Files\Apple
2009-01-07 14:05   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-07 14:03   ---------   d-----w   c:\program files\QuickTime
2009-01-07 13:50   ---------   d-----w   c:\program files\Safari
2008-12-18 15:48   8,000   ----a-w   C:\RNDS2.DLL
.

(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-08-04 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-02 1601304]
"CardDetectorHUAWEI160"="c:\program files\CardDetector\HUAWEI160\CardDetector.exe" [2008-09-29 274432]
"BEWINTERNET-PLSessionManager"="c:\program files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe" [2008-10-13 131824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-02-02 07:55 10520 c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Photosmart Premier - Szybkie uruchomienie.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Photosmart Premier - Szybkie uruchomienie.lnk
backup=c:\windows\pss\HP Photosmart Premier - Szybkie uruchomienie.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
--a------ 2008-11-07 14:16 111936 c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
c:\progra~1\Grisoft\AVG7\avgcc.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 2007-12-19 11:08 159744 c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-10-14 21:17 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
--a------ 2007-08-22 16:31 80896 c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2007-12-19 11:08 135168 c:\windows\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2004-08-04 00:55 1694208 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
-ra------ 2006-01-30 17:00 98304 c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
--a------ 2007-12-19 11:07 131072 c:\windows\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rhetch]
c:\windows\system32\rhetch.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-03-25 03:28 144784 c:\program files\Java\jre1.6.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-r------- 2005-05-03 11:43 69632 c:\windows\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-r------- 2007-03-21 07:49 16126464 c:\windows\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\OrangeBS\\BEWInternet-PL\\Connectivity\\ConnectivityManager.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58156:TCP"= 58156:TCP:Pando P2P TCP Listening Port
"58156:UDP"= 58156:UDP:Pando P2P UDP Listening Port
"80:TCP"= 80:TCP:Promo
"53:UDP"= 53:UDP:Promo

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-01-12 325128]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-01-12 107272]
R2 ASFIPmon;Broadcom ASF IP and SMBIOS Mailbox Monitor;c:\program files\Broadcom\ASFIPMon\AsfIpMon.exe [2006-12-19 79432]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-01-12 903960]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-12 298264]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [2009-02-21 99840]
S3 abcazppc;abcazppc;\??\c:\windows\System32\Drivers\abcazppc.sys --> c:\windows\System32\Drivers\abcazppc.sys [?]
S3 asrcsojk;asrcsojk;\??\c:\windows\System32\Drivers\asrcsojk.sys --> c:\windows\System32\Drivers\asrcsojk.sys [?]
S3 bkjqknxs;bkjqknxs;\??\c:\windows\System32\Drivers\bkjqknxs.sys --> c:\windows\System32\Drivers\bkjqknxs.sys [?]
S3 bmcjfmgp;bmcjfmgp;\??\c:\windows\System32\Drivers\bmcjfmgp.sys --> c:\windows\System32\Drivers\bmcjfmgp.sys [?]
S3 brmsneue;brmsneue;\??\c:\windows\System32\Drivers\brmsneue.sys --> c:\windows\System32\Drivers\brmsneue.sys [?]
S3 cytvrstd;cytvrstd;\??\c:\windows\System32\Drivers\cytvrstd.sys --> c:\windows\System32\Drivers\cytvrstd.sys [?]
S3 dixhmkkj;dixhmkkj;\??\c:\windows\System32\Drivers\dixhmkkj.sys --> c:\windows\System32\Drivers\dixhmkkj.sys [?]
S3 dlxoytqm;dlxoytqm;\??\c:\windows\System32\Drivers\dlxoytqm.sys --> c:\windows\System32\Drivers\dlxoytqm.sys [?]
S3 drnfpyyo;drnfpyyo;\??\c:\windows\System32\Drivers\drnfpyyo.sys --> c:\windows\System32\Drivers\drnfpyyo.sys [?]
S3 dtdscvrv;dtdscvrv;\??\c:\windows\System32\Drivers\dtdscvrv.sys --> c:\windows\System32\Drivers\dtdscvrv.sys [?]
S3 duiiegij;duiiegij;\??\c:\windows\System32\Drivers\duiiegij.sys --> c:\windows\System32\Drivers\duiiegij.sys [?]
S3 etyqodky;etyqodky;\??\c:\windows\System32\Drivers\etyqodky.sys --> c:\windows\System32\Drivers\etyqodky.sys [?]
S3 fixdnlgp;fixdnlgp;\??\c:\windows\System32\Drivers\fixdnlgp.sys --> c:\windows\System32\Drivers\fixdnlgp.sys [?]
S3 gkusmkgr;gkusmkgr;\??\c:\windows\System32\Drivers\gkusmkgr.sys --> c:\windows\System32\Drivers\gkusmkgr.sys [?]
S3 hhtvhtbt;hhtvhtbt;\??\c:\windows\System32\Drivers\hhtvhtbt.sys --> c:\windows\System32\Drivers\hhtvhtbt.sys [?]
S3 hmbeibiv;hmbeibiv;\??\c:\windows\System32\Drivers\hmbeibiv.sys --> c:\windows\System32\Drivers\hmbeibiv.sys [?]
S3 hzuxcmjj;hzuxcmjj;\??\c:\windows\System32\Drivers\hzuxcmjj.sys --> c:\windows\System32\Drivers\hzuxcmjj.sys [?]
S3 ilxkvobn;ilxkvobn;\??\c:\windows\System32\Drivers\ilxkvobn.sys --> c:\windows\System32\Drivers\ilxkvobn.sys [?]
S3 ircuiqpp;ircuiqpp;\??\c:\windows\System32\Drivers\ircuiqpp.sys --> c:\windows\System32\Drivers\ircuiqpp.sys [?]
S3 jnevgddf;jnevgddf;\??\c:\windows\System32\Drivers\jnevgddf.sys --> c:\windows\System32\Drivers\jnevgddf.sys [?]
S3 jursqeif;jursqeif;\??\c:\windows\System32\Drivers\jursqeif.sys --> c:\windows\System32\Drivers\jursqeif.sys [?]
S3 jzwipdiz;jzwipdiz;\??\c:\windows\System32\Drivers\jzwipdiz.sys --> c:\windows\System32\Drivers\jzwipdiz.sys [?]
S3 lfcseijd;lfcseijd;\??\c:\windows\System32\Drivers\lfcseijd.sys --> c:\windows\System32\Drivers\lfcseijd.sys [?]
S3 lmkgamwl;lmkgamwl;\??\c:\windows\System32\Drivers\lmkgamwl.sys --> c:\windows\System32\Drivers\lmkgamwl.sys [?]
S3 lrvezcsg;lrvezcsg;\??\c:\windows\System32\Drivers\lrvezcsg.sys --> c:\windows\System32\Drivers\lrvezcsg.sys [?]
S3 mabwidsh;mabwidsh;\??\c:\windows\System32\Drivers\mabwidsh.sys --> c:\windows\System32\Drivers\mabwidsh.sys [?]
S3 mspljkbf;mspljkbf;\??\c:\windows\System32\Drivers\mspljkbf.sys --> c:\windows\System32\Drivers\mspljkbf.sys [?]
S3 mvjwanti;mvjwanti;\??\c:\windows\System32\Drivers\mvjwanti.sys --> c:\windows\System32\Drivers\mvjwanti.sys [?]
S3 nmmnowxf;nmmnowxf;\??\c:\windows\System32\Drivers\nmmnowxf.sys --> c:\windows\System32\Drivers\nmmnowxf.sys [?]
S3 npfyawza;npfyawza;\??\c:\windows\System32\Drivers\npfyawza.sys --> c:\windows\System32\Drivers\npfyawza.sys [?]
S3 pdxecxqz;pdxecxqz;\??\c:\windows\System32\Drivers\pdxecxqz.sys --> c:\windows\System32\Drivers\pdxecxqz.sys [?]
S3 pmgqepdl;pmgqepdl;\??\c:\windows\System32\Drivers\pmgqepdl.sys --> c:\windows\System32\Drivers\pmgqepdl.sys [?]
S3 pxtrctsh;pxtrctsh;\??\c:\windows\System32\Drivers\pxtrctsh.sys --> c:\windows\System32\Drivers\pxtrctsh.sys [?]
S3 qaqmgwpb;qaqmgwpb;\??\c:\windows\System32\Drivers\qaqmgwpb.sys --> c:\windows\System32\Drivers\qaqmgwpb.sys [?]
S3 qlvzbftj;qlvzbftj;\??\c:\windows\System32\Drivers\qlvzbftj.sys --> c:\windows\System32\Drivers\qlvzbftj.sys [?]
S3 qnlwmkho;qnlwmkho;\??\c:\windows\System32\Drivers\qnlwmkho.sys --> c:\windows\System32\Drivers\qnlwmkho.sys [?]
S3 qpkekhgb;qpkekhgb;\??\c:\windows\System32\Drivers\qpkekhgb.sys --> c:\windows\System32\Drivers\qpkekhgb.sys [?]
S3 rcrsflhd;rcrsflhd;\??\c:\windows\System32\Drivers\rcrsflhd.sys --> c:\windows\System32\Drivers\rcrsflhd.sys [?]
S3 ruaackda;ruaackda;\??\c:\windows\System32\Drivers\ruaackda.sys --> c:\windows\System32\Drivers\ruaackda.sys [?]
S3 sgnphspp;sgnphspp;\??\c:\windows\System32\Drivers\sgnphspp.sys --> c:\windows\System32\Drivers\sgnphspp.sys [?]
S3 sljccesg;sljccesg;\??\c:\windows\System32\Drivers\sljccesg.sys --> c:\windows\System32\Drivers\sljccesg.sys [?]
S3 tloufnmz;tloufnmz;\??\c:\windows\System32\Drivers\tloufnmz.sys --> c:\windows\System32\Drivers\tloufnmz.sys [?]
S3 tpxuirmw;tpxuirmw;\??\c:\windows\System32\Drivers\tpxuirmw.sys --> c:\windows\System32\Drivers\tpxuirmw.sys [?]
S3 uztwfdtf;uztwfdtf;\??\c:\windows\System32\Drivers\uztwfdtf.sys --> c:\windows\System32\Drivers\uztwfdtf.sys [?]
S3 vsokmdyh;vsokmdyh;\??\c:\windows\System32\Drivers\vsokmdyh.sys --> c:\windows\System32\Drivers\vsokmdyh.sys [?]
S3 vtniewoi;vtniewoi;\??\c:\windows\System32\Drivers\vtniewoi.sys --> c:\windows\System32\Drivers\vtniewoi.sys [?]
S3 vxcdrnsm;vxcdrnsm;\??\c:\windows\System32\Drivers\vxcdrnsm.sys --> c:\windows\System32\Drivers\vxcdrnsm.sys [?]
S3 wecolkxa;wecolkxa;\??\c:\windows\System32\Drivers\wecolkxa.sys --> c:\windows\System32\Drivers\wecolkxa.sys [?]
S3 wqcsxawy;wqcsxawy;\??\c:\windows\System32\Drivers\wqcsxawy.sys --> c:\windows\System32\Drivers\wqcsxawy.sys [?]
S3 wzzyjygm;wzzyjygm;\??\c:\windows\System32\Drivers\wzzyjygm.sys --> c:\windows\System32\Drivers\wzzyjygm.sys [?]
S3 xfppluby;xfppluby;\??\c:\windows\System32\Drivers\xfppluby.sys --> c:\windows\System32\Drivers\xfppluby.sys [?]
S3 xipkcdcb;xipkcdcb;\??\c:\windows\System32\Drivers\xipkcdcb.sys --> c:\windows\System32\Drivers\xipkcdcb.sys [?]
S3 xwqznwow;xwqznwow;\??\c:\windows\System32\Drivers\xwqznwow.sys --> c:\windows\System32\Drivers\xwqznwow.sys [?]
S3 yeujpoun;yeujpoun;\??\c:\windows\System32\Drivers\yeujpoun.sys --> c:\windows\System32\Drivers\yeujpoun.sys [?]
S3 ygbkbghx;ygbkbghx;\??\c:\windows\System32\Drivers\ygbkbghx.sys --> c:\windows\System32\Drivers\ygbkbghx.sys [?]
S3 yodnfmkh;yodnfmkh;\??\c:\windows\System32\Drivers\yodnfmkh.sys --> c:\windows\System32\Drivers\yodnfmkh.sys [?]
S3 yuitiymy;yuitiymy;\??\c:\windows\System32\Drivers\yuitiymy.sys --> c:\windows\System32\Drivers\yuitiymy.sys [?]
S3 yvafysss;yvafysss;\??\c:\windows\System32\Drivers\yvafysss.sys --> c:\windows\System32\Drivers\yvafysss.sys [?]
S3 zlcgxrwv;zlcgxrwv;\??\c:\windows\System32\Drivers\zlcgxrwv.sys --> c:\windows\System32\Drivers\zlcgxrwv.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12   REG_MULTI_SZ      Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt   REG_MULTI_SZ      hpqcxs08 hpqddsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e5de2e72-fff7-11dd-ab6c-001e4c2c3066}]
\Shell\AutoRun\command - H:\AutoRunCardDetector.exe
.
Zawartość folderu 'Zaplanowane zadania'

2009-02-20 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 16:53]

2009-02-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.pl/
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
FF - ProfilePath - c:\documents and settings\Dariusz Marzec\Dane aplikacji\Mozilla\Firefox\Profiles\uz1t1ju7.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-26 12:08:21
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\progra~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\[u]0[/u]\FTRTSVC.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Czas ukończenia: 2009-02-26 12:10:40 - komputer został uruchomiony ponownie [Dariusz Marzec]
ComboFix-quarantined-files.txt  2009-02-26 11:10:33
ComboFix2.txt  2009-02-26 08:00:31

Przed: 56,138,780,672 bajtów wolnych
Po: 56,131,051,520 bajtów wolnych

WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

285   --- E O F ---   2009-02-25 07:56:35


Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:59, on 2009-02-26
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\CardDetector\HUAWEI160\CardDetector.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CardDetectorHUAWEI160] C:\Program Files\CardDetector\HUAWEI160\CardDetector.exe
O4 - HKLM\..\Run: [BEWINTERNET-PLSessionManager] "C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202567056250
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 4359 bytes


[wojtas]

Wykonaj to co jest podane w tym temacie


Otworz notatnik i wklej w nim to:

File::
c:\windows\System32\Drivers\abcazppc.sys
c:\windows\System32\Drivers\asrcsojk.sys
c:\windows\System32\Drivers\bkjqknxs.sys
c:\windows\System32\Drivers\bmcjfmgp.sys
c:\windows\System32\Drivers\brmsneue.sys
c:\windows\System32\Drivers\cytvrstd.sys
c:\windows\System32\Drivers\dixhmkkj.sys
c:\windows\System32\Drivers\dlxoytqm.sys
c:\windows\System32\Drivers\drnfpyyo.sys
c:\windows\System32\Drivers\dtdscvrv.sys
c:\windows\System32\Drivers\duiiegij.sys
c:\windows\System32\Drivers\etyqodky.sys
c:\windows\System32\Drivers\fixdnlgp.sys
c:\windows\System32\Drivers\gkusmkgr.sys
c:\windows\System32\Drivers\hhtvhtbt.sys
c:\windows\System32\Drivers\hmbeibiv.sys
c:\windows\System32\Drivers\hzuxcmjj.sys
c:\windows\System32\Drivers\ilxkvobn.sys
c:\windows\System32\Drivers\ircuiqpp.sys
c:\windows\System32\Drivers\jnevgddf.sys
c:\windows\System32\Drivers\jursqeif.sys
c:\windows\System32\Drivers\jzwipdiz.sys
c:\windows\System32\Drivers\lfcseijd.sys
c:\windows\System32\Drivers\lmkgamwl.sys
c:\windows\System32\Drivers\lrvezcsg.sys
c:\windows\System32\Drivers\mabwidsh.sys
c:\windows\System32\Drivers\mspljkbf.sys
c:\windows\System32\Drivers\mvjwanti.sys
c:\windows\System32\Drivers\nmmnowxf.sys
c:\windows\System32\Drivers\npfyawza.sys
c:\windows\System32\Drivers\pdxecxqz.sys
c:\windows\System32\Drivers\pmgqepdl.sys
c:\windows\System32\Drivers\pxtrctsh.sys
c:\windows\System32\Drivers\qaqmgwpb.sys
c:\windows\System32\Drivers\qlvzbftj.sys
c:\windows\System32\Drivers\qnlwmkho.sys
c:\windows\System32\Drivers\qpkekhgb.sys
c:\windows\System32\Drivers\rcrsflhd.sys
c:\windows\System32\Drivers\ruaackda.sys
c:\windows\System32\Drivers\sgnphspp.sys
c:\windows\System32\Drivers\sljccesg.sys
c:\windows\System32\Drivers\tloufnmz.sys
c:\windows\System32\Drivers\tpxuirmw.sys
c:\windows\System32\Drivers\uztwfdtf.sys
c:\windows\System32\Drivers\vsokmdyh.sys
c:\windows\System32\Drivers\vtniewoi.sys
c:\windows\System32\Drivers\vxcdrnsm.sys
c:\windows\System32\Drivers\wecolkxa.sys
c:\windows\System32\Drivers\wqcsxawy.sys
c:\windows\System32\Drivers\wzzyjygm.sys
c:\windows\System32\Drivers\xfppluby.sys
c:\windows\System32\Drivers\xipkcdcb.sys
c:\windows\System32\Drivers\xwqznwow.sys
c:\windows\System32\Drivers\yeujpoun.sys
c:\windows\System32\Drivers\ygbkbghx.sys
c:\windows\System32\Drivers\yodnfmkh.sys
c:\windows\System32\Drivers\yuitiymy.sys
c:\windows\System32\Drivers\yvafysss.sys
c:\windows\System32\Drivers\zlcgxrwv.sys

Driver::
abcazppc
asrcsojk
bkjqknxs
bmcjfmgp
brmsneue
cytvrstd
dixhmkkj
dlxoytqm
drnfpyyo
dtdscvrv
duiiegij
etyqodky
fixdnlgp
gkusmkgr
hhtvhtbt
hmbeibiv
hzuxcmjj
ilxkvobn
ircuiqpp
jnevgddf
jursqeif
jzwipdiz
lfcseijd
lmkgamwl
lrvezcsg
mabwidsh
mspljkbf
mvjwanti
nmmnowxf
npfyawza
pdxecxqz
pmgqepdl
pxtrctsh
qaqmgwpb
qlvzbftj
qnlwmkho
qpkekhgb
rcrsflhd
ruaackda
sgnphspp
sljccesg
tloufnmz
tpxuirmw
uztwfdtf
vsokmdyh
vtniewoi
vxcdrnsm
wecolkxa
wqcsxawy
wzzyjygm
xfppluby
xipkcdcb
xwqznwow
yeujpoun
yodnfmkh
yuitiymy
yvafysss
zlcgxrwv

>>Plik>>Zapisz jako... >>> CFScript
Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe
-->
Ma się rozpocząć usuwanie. (i powstanie log).Daj ten log, który powstanie w trakcie usuwania.

Autor postu otrzymał pochwałę

[J-Mar]

Wklejam loga z ComboFixa po usuwaniu:

Kod: Zaznacz wszystko

ComboFix 09-04-04.01 - Dariusz Marzec 2009-04-08 12:05:11.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.1014.622 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Dariusz Marzec\Pulpit\ComboFix.exe
Użyto następujących komend :: c:\documents and settings\Dariusz Marzec\Pulpit\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
* Utworzono nowy punkt przywracania

UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!

FILE ::
c:\windows\System32\Drivers\abcazppc.sys
c:\windows\System32\Drivers\asrcsojk.sys
c:\windows\System32\Drivers\bkjqknxs.sys
c:\windows\System32\Drivers\bmcjfmgp.sys
c:\windows\System32\Drivers\brmsneue.sys
c:\windows\System32\Drivers\cytvrstd.sys
c:\windows\System32\Drivers\dixhmkkj.sys
c:\windows\System32\Drivers\dlxoytqm.sys
c:\windows\System32\Drivers\drnfpyyo.sys
c:\windows\System32\Drivers\dtdscvrv.sys
c:\windows\System32\Drivers\duiiegij.sys
c:\windows\System32\Drivers\etyqodky.sys
c:\windows\System32\Drivers\fixdnlgp.sys
c:\windows\System32\Drivers\gkusmkgr.sys
c:\windows\System32\Drivers\hhtvhtbt.sys
c:\windows\System32\Drivers\hmbeibiv.sys
c:\windows\System32\Drivers\hzuxcmjj.sys
c:\windows\System32\Drivers\ilxkvobn.sys
c:\windows\System32\Drivers\ircuiqpp.sys
c:\windows\System32\Drivers\jnevgddf.sys
c:\windows\System32\Drivers\jursqeif.sys
c:\windows\System32\Drivers\jzwipdiz.sys
c:\windows\System32\Drivers\lfcseijd.sys
c:\windows\System32\Drivers\lmkgamwl.sys
c:\windows\System32\Drivers\lrvezcsg.sys
c:\windows\System32\Drivers\mabwidsh.sys
c:\windows\System32\Drivers\mspljkbf.sys
c:\windows\System32\Drivers\mvjwanti.sys
c:\windows\System32\Drivers\nmmnowxf.sys
c:\windows\System32\Drivers\npfyawza.sys
c:\windows\System32\Drivers\pdxecxqz.sys
c:\windows\System32\Drivers\pmgqepdl.sys
c:\windows\System32\Drivers\pxtrctsh.sys
c:\windows\System32\Drivers\qaqmgwpb.sys
c:\windows\System32\Drivers\qlvzbftj.sys
c:\windows\System32\Drivers\qnlwmkho.sys
c:\windows\System32\Drivers\qpkekhgb.sys
c:\windows\System32\Drivers\rcrsflhd.sys
c:\windows\System32\Drivers\ruaackda.sys
c:\windows\System32\Drivers\sgnphspp.sys
c:\windows\System32\Drivers\sljccesg.sys
c:\windows\System32\Drivers\tloufnmz.sys
c:\windows\System32\Drivers\tpxuirmw.sys
c:\windows\System32\Drivers\uztwfdtf.sys
c:\windows\System32\Drivers\vsokmdyh.sys
c:\windows\System32\Drivers\vtniewoi.sys
c:\windows\System32\Drivers\vxcdrnsm.sys
c:\windows\System32\Drivers\wecolkxa.sys
c:\windows\System32\Drivers\wqcsxawy.sys
c:\windows\System32\Drivers\wzzyjygm.sys
c:\windows\System32\Drivers\xfppluby.sys
c:\windows\System32\Drivers\xipkcdcb.sys
c:\windows\System32\Drivers\xwqznwow.sys
c:\windows\System32\Drivers\yeujpoun.sys
c:\windows\System32\Drivers\ygbkbghx.sys
c:\windows\System32\Drivers\yodnfmkh.sys
c:\windows\System32\Drivers\yuitiymy.sys
c:\windows\System32\Drivers\yvafysss.sys
c:\windows\System32\Drivers\zlcgxrwv.sys
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Dariusz Marzec\Dane aplikacji\wiaserva.log
c:\windows\system32\Desktop_.ini
E:\Autorun.inf

.
(((((((((((((((((((((((((((((((((((((((   Sterowniki/Usługi   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_abcazppc
-------\Service_asrcsojk
-------\Service_bkjqknxs
-------\Service_bmcjfmgp
-------\Service_brmsneue
-------\Service_dixhmkkj
-------\Service_dlxoytqm
-------\Service_drnfpyyo
-------\Service_dtdscvrv
-------\Service_duiiegij
-------\Service_etyqodky
-------\Service_gkusmkgr
-------\Service_hhtvhtbt
-------\Service_hmbeibiv
-------\Service_hzuxcmjj
-------\Service_ilxkvobn
-------\Service_ircuiqpp
-------\Service_jnevgddf
-------\Service_jursqeif
-------\Service_jzwipdiz
-------\Service_lfcseijd
-------\Service_lmkgamwl
-------\Service_lrvezcsg
-------\Service_mabwidsh
-------\Service_mspljkbf
-------\Service_mvjwanti
-------\Service_nmmnowxf
-------\Service_npfyawza
-------\Service_Passthru
-------\Service_pdxecxqz
-------\Service_pmgqepdl
-------\Service_pxtrctsh
-------\Service_qaqmgwpb
-------\Service_qlvzbftj
-------\Service_qnlwmkho
-------\Service_qpkekhgb
-------\Service_rcrsflhd
-------\Service_ruaackda
-------\Service_sgnphspp
-------\Service_sljccesg
-------\Service_tloufnmz
-------\Service_tpxuirmw
-------\Service_uztwfdtf
-------\Service_vtniewoi
-------\Service_vxcdrnsm
-------\Service_wecolkxa
-------\Service_wqcsxawy
-------\Service_wzzyjygm
-------\Service_xfppluby
-------\Service_xipkcdcb
-------\Service_xwqznwow
-------\Service_yeujpoun
-------\Service_yodnfmkh
-------\Service_yvafysss
-------\Service_zlcgxrwv


(((((((((((((((((((((((((   Pliki utworzone od 2009-03-08 do 2009-04-08  )))))))))))))))))))))))))))))))
.

2009-04-08 12:08 . 2009-04-08 12:08   <DIR>   d--------   c:\windows\system32\xircom
2009-04-08 12:08 . 2009-04-08 12:08   <DIR>   d--------   c:\program files\microsoft frontpage
2009-04-08 07:51 . 2009-04-08 07:51   33,920   --a------   c:\windows\system32\drivers\paidyyuw.sys
2009-04-07 23:12 . 2009-04-07 23:12   33,920   --a------   c:\windows\system32\drivers\kicikokw.sys
2009-04-07 23:10 . 2009-04-07 23:10   0   --a------   c:\windows\system32\drivers\lojxyvrv.sys
2009-04-07 06:00 . 2009-04-07 06:00   33,920   --a------   c:\windows\system32\drivers\rmwyilpq.sys
2009-04-06 20:40 . 2009-04-06 20:40   33,920   --a------   c:\windows\system32\drivers\ajinfhdc.sys
2009-04-04 07:17 . 2009-04-04 07:17   33,920   --a------   c:\windows\system32\drivers\feohglzw.sys
2009-04-03 22:23 . 2009-04-03 22:23   33,920   --a------   c:\windows\system32\drivers\drjsnevi.sys
2009-04-03 21:33 . 2009-04-03 21:33   0   --a------   c:\windows\system32\drivers\brzgzzim.sys
2009-04-03 19:38 . 2009-04-03 19:38   33,920   --a------   c:\windows\system32\drivers\pfhjccdc.sys
2009-04-03 18:24 . 2009-04-03 18:24   33,920   --a------   c:\windows\system32\drivers\xjdlaica.sys
2009-03-27 17:15 . 2009-03-27 17:15   136,192   --a------   c:\windows\system32\drivers\ethbzbha.sys

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-08 09:46   ---------   d-----w   c:\program files\English Translator 3
2009-04-08 09:46   ---------   d-----w   c:\program files\Deutsch Translator 2
2009-04-08 09:02   ---------   d-----w   c:\program files\Gadu-Gadu
2009-03-05 11:16   64,160   ----a-w   c:\windows\system32\drivers\Lbd.sys
2009-02-26 11:13   ---------   d--h--w   c:\documents and settings\All Users\Dane aplikacji\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-02-26 09:48   ---------   d-----w   c:\program files\Lavasoft
2009-02-26 09:48   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\Lavasoft
2009-02-21 09:56   52,672   ----a-w   c:\windows\system32\drivers\ndisio.sys
2009-02-21 09:19   ---------   d-----w   c:\program files\OrangeBS
2009-02-21 09:18   ---------   d-----w   c:\program files\Common Files\France Telecom
2009-02-21 09:13   ---------   d-----w   c:\program files\CardDetector
2009-02-17 08:18   ---------   d-----w   c:\program files\Windows Live
2009-02-15 21:27   ---------   d-----w   c:\program files\MSXML 4.0
2009-01-12 15:23   66   ---ha-w   C:\aaw7boot.cmd
.

-- Migawka wyzerowana --
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-08-04 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-02 1601304]
"CardDetectorHUAWEI160"="c:\program files\CardDetector\HUAWEI160\CardDetector.exe" [2008-09-29 274432]
"BEWINTERNET-PLSessionManager"="c:\program files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe" [2008-10-13 131824]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-05 515416]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-02-02 08:55 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Photosmart Premier - Szybkie uruchomienie.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Photosmart Premier - Szybkie uruchomienie.lnk
backup=c:\windows\pss\HP Photosmart Premier - Szybkie uruchomienie.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
--a------ 2008-11-07 15:16 111936 c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
c:\progra~1\Grisoft\AVG7\avgcc.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 2007-12-19 12:08 159744 c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-10-14 22:17 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
--a------ 2007-08-22 17:31 80896 c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2007-12-19 12:08 135168 c:\windows\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 14:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2004-08-04 01:55 1694208 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
-ra------ 2006-01-30 18:00 98304 c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
--a------ 2007-12-19 12:07 131072 c:\windows\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 11:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rhetch]
c:\windows\system32\rhetch.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-03-25 04:28 144784 c:\program files\Java\jre1.6.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-r------- 2005-05-03 12:43 69632 c:\windows\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-r------- 2007-03-21 08:49 16126464 c:\windows\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\OrangeBS\\BEWInternet-PL\\Connectivity\\ConnectivityManager.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58156:TCP"= 58156:TCP:Pando P2P TCP Listening Port
"58156:UDP"= 58156:UDP:Pando P2P UDP Listening Port
"53:UDP"= 53:UDP:Promo



Dodano Dzisiaj, 18:14:
część 2

Kod: Zaznacz wszystko

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-02-25 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-01-12 325128]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-01-12 107272]
R2 ASFIPmon;Broadcom ASF IP and SMBIOS Mailbox Monitor;c:\program files\Broadcom\ASFIPMon\AsfIpMon.exe [2006-12-19 79432]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-01-12 903960]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-12 298264]
S1 ethbzbha;ethbzbha;c:\windows\system32\drivers\ethbzbha.sys [2009-03-27 136192]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-02-25 951632]
S3 afuvokgd;afuvokgd;\??\c:\windows\System32\Drivers\afuvokgd.sys --> c:\windows\System32\Drivers\afuvokgd.sys [?]
S3 aitotccj;aitotccj;\??\c:\windows\System32\Drivers\aitotccj.sys --> c:\windows\System32\Drivers\aitotccj.sys [?]
S3 ajaxiopo;ajaxiopo;\??\c:\windows\System32\Drivers\ajaxiopo.sys --> c:\windows\System32\Drivers\ajaxiopo.sys [?]
S3 ajinfhdc;ajinfhdc;c:\windows\system32\drivers\ajinfhdc.sys [2009-04-06 33920]
S3 aklflsvp;aklflsvp;\??\c:\windows\System32\Drivers\aklflsvp.sys --> c:\windows\System32\Drivers\aklflsvp.sys [?]
S3 akyudmsg;akyudmsg;\??\c:\windows\System32\Drivers\akyudmsg.sys --> c:\windows\System32\Drivers\akyudmsg.sys [?]
S3 altflfca;altflfca;\??\c:\windows\System32\Drivers\altflfca.sys --> c:\windows\System32\Drivers\altflfca.sys [?]
S3 altnxjzo;altnxjzo;\??\c:\windows\System32\Drivers\altnxjzo.sys --> c:\windows\System32\Drivers\altnxjzo.sys [?]
S3 apmmecsn;apmmecsn;\??\c:\windows\System32\Drivers\apmmecsn.sys --> c:\windows\System32\Drivers\apmmecsn.sys [?]
S3 auftnqob;auftnqob;\??\c:\windows\System32\Drivers\auftnqob.sys --> c:\windows\System32\Drivers\auftnqob.sys [?]
S3 awengxig;awengxig;\??\c:\windows\System32\Drivers\awengxig.sys --> c:\windows\System32\Drivers\awengxig.sys [?]
S3 axeymgre;axeymgre;\??\c:\windows\System32\Drivers\axeymgre.sys --> c:\windows\System32\Drivers\axeymgre.sys [?]
S3 axhjglut;axhjglut;\??\c:\windows\System32\Drivers\axhjglut.sys --> c:\windows\System32\Drivers\axhjglut.sys [?]
S3 azesavpl;azesavpl;\??\c:\windows\System32\Drivers\azesavpl.sys --> c:\windows\System32\Drivers\azesavpl.sys [?]
S3 aznyogoj;aznyogoj;\??\c:\windows\System32\Drivers\aznyogoj.sys --> c:\windows\System32\Drivers\aznyogoj.sys [?]
S3 bbpccziy;bbpccziy;\??\c:\windows\System32\Drivers\bbpccziy.sys --> c:\windows\System32\Drivers\bbpccziy.sys [?]
S3 bbvadbam;bbvadbam;\??\c:\windows\System32\Drivers\bbvadbam.sys --> c:\windows\System32\Drivers\bbvadbam.sys [?]
S3 bfdmbvgp;bfdmbvgp;\??\c:\windows\System32\Drivers\bfdmbvgp.sys --> c:\windows\System32\Drivers\bfdmbvgp.sys [?]
S3 bjfamytp;bjfamytp;\??\c:\windows\System32\Drivers\bjfamytp.sys --> c:\windows\System32\Drivers\bjfamytp.sys [?]
S3 blzxocqs;blzxocqs;\??\c:\windows\System32\Drivers\blzxocqs.sys --> c:\windows\System32\Drivers\blzxocqs.sys [?]
S3 bocnanum;bocnanum;\??\c:\windows\System32\Drivers\bocnanum.sys --> c:\windows\System32\Drivers\bocnanum.sys [?]
S3 bpcttldm;bpcttldm;\??\c:\windows\System32\Drivers\bpcttldm.sys --> c:\windows\System32\Drivers\bpcttldm.sys [?]
S3 bshcbhdy;bshcbhdy;\??\c:\windows\System32\Drivers\bshcbhdy.sys --> c:\windows\System32\Drivers\bshcbhdy.sys [?]
S3 btdfoocb;btdfoocb;\??\c:\windows\System32\Drivers\btdfoocb.sys --> c:\windows\System32\Drivers\btdfoocb.sys [?]
S3 btlwzfuv;btlwzfuv;\??\c:\windows\System32\Drivers\btlwzfuv.sys --> c:\windows\System32\Drivers\btlwzfuv.sys [?]
S3 bwthaskt;bwthaskt;\??\c:\windows\System32\Drivers\bwthaskt.sys --> c:\windows\System32\Drivers\bwthaskt.sys [?]
S3 bxozkyfy;bxozkyfy;\??\c:\windows\System32\Drivers\bxozkyfy.sys --> c:\windows\System32\Drivers\bxozkyfy.sys [?]
S3 bzhdztuo;bzhdztuo;\??\c:\windows\System32\Drivers\bzhdztuo.sys --> c:\windows\System32\Drivers\bzhdztuo.sys [?]
S3 caggvjsg;caggvjsg;\??\c:\windows\System32\Drivers\caggvjsg.sys --> c:\windows\System32\Drivers\caggvjsg.sys [?]
S3 cbrizccc;cbrizccc;\??\c:\windows\System32\Drivers\cbrizccc.sys --> c:\windows\System32\Drivers\cbrizccc.sys [?]
S3 cdminzyg;cdminzyg;\??\c:\windows\System32\Drivers\cdminzyg.sys --> c:\windows\System32\Drivers\cdminzyg.sys [?]
S3 cdrvxkpt;cdrvxkpt;\??\c:\windows\System32\Drivers\cdrvxkpt.sys --> c:\windows\System32\Drivers\cdrvxkpt.sys [?]
S3 cdryqrwi;cdryqrwi;\??\c:\windows\System32\Drivers\cdryqrwi.sys --> c:\windows\System32\Drivers\cdryqrwi.sys [?]
S3 cidmuxca;cidmuxca;\??\c:\windows\System32\Drivers\cidmuxca.sys --> c:\windows\System32\Drivers\cidmuxca.sys [?]
S3 ckkfttlh;ckkfttlh;\??\c:\windows\System32\Drivers\ckkfttlh.sys --> c:\windows\System32\Drivers\ckkfttlh.sys [?]
S3 clecthbi;clecthbi;\??\c:\windows\System32\Drivers\clecthbi.sys --> c:\windows\System32\Drivers\clecthbi.sys [?]
S3 cnbpowvf;cnbpowvf;\??\c:\windows\System32\Drivers\cnbpowvf.sys --> c:\windows\System32\Drivers\cnbpowvf.sys [?]
S3 cnqlezpm;cnqlezpm;\??\c:\windows\System32\Drivers\cnqlezpm.sys --> c:\windows\System32\Drivers\cnqlezpm.sys [?]
S3 cojsiyzh;cojsiyzh;\??\c:\windows\System32\Drivers\cojsiyzh.sys --> c:\windows\System32\Drivers\cojsiyzh.sys [?]
S3 cpnvhuiv;cpnvhuiv;\??\c:\windows\System32\Drivers\cpnvhuiv.sys --> c:\windows\System32\Drivers\cpnvhuiv.sys [?]
S3 crsccuro;crsccuro;\??\c:\windows\System32\Drivers\crsccuro.sys --> c:\windows\System32\Drivers\crsccuro.sys [?]
S3 csmfryve;csmfryve;\??\c:\windows\System32\Drivers\csmfryve.sys --> c:\windows\System32\Drivers\csmfryve.sys [?]
S3 cxgfnoqw;cxgfnoqw;\??\c:\windows\System32\Drivers\cxgfnoqw.sys --> c:\windows\System32\Drivers\cxgfnoqw.sys [?]
S3 dgjsjexx;dgjsjexx;\??\c:\windows\System32\Drivers\dgjsjexx.sys --> c:\windows\System32\Drivers\dgjsjexx.sys [?]
S3 dgynwmrq;dgynwmrq;\??\c:\windows\System32\Drivers\dgynwmrq.sys --> c:\windows\System32\Drivers\dgynwmrq.sys [?]
S3 djoyddcj;djoyddcj;\??\c:\windows\System32\Drivers\djoyddcj.sys --> c:\windows\System32\Drivers\djoyddcj.sys [?]
S3 dnqslnyo;dnqslnyo;\??\c:\windows\System32\Drivers\dnqslnyo.sys --> c:\windows\System32\Drivers\dnqslnyo.sys [?]
S3 dntxeltp;dntxeltp;\??\c:\windows\System32\Drivers\dntxeltp.sys --> c:\windows\System32\Drivers\dntxeltp.sys [?]
S3 dqpcczrd;dqpcczrd;\??\c:\windows\System32\Drivers\dqpcczrd.sys --> c:\windows\System32\Drivers\dqpcczrd.sys [?]
S3 drjsnevi;drjsnevi;c:\windows\system32\drivers\drjsnevi.sys [2009-04-03 33920]
S3 dtaxwvmf;dtaxwvmf;\??\c:\windows\System32\Drivers\dtaxwvmf.sys --> c:\windows\System32\Drivers\dtaxwvmf.sys [?]
S3 duyddeiz;duyddeiz;\??\c:\windows\System32\Drivers\duyddeiz.sys --> c:\windows\System32\Drivers\duyddeiz.sys [?]
S3 dwrbqukb;dwrbqukb;\??\c:\windows\System32\Drivers\dwrbqukb.sys --> c:\windows\System32\Drivers\dwrbqukb.sys [?]
S3 dwrldkfj;dwrldkfj;\??\c:\windows\System32\Drivers\dwrldkfj.sys --> c:\windows\System32\Drivers\dwrldkfj.sys [?]
S3 dyhlcats;dyhlcats;\??\c:\windows\System32\Drivers\dyhlcats.sys --> c:\windows\System32\Drivers\dyhlcats.sys [?]
S3 dzrvnhes;dzrvnhes;\??\c:\windows\System32\Drivers\dzrvnhes.sys --> c:\windows\System32\Drivers\dzrvnhes.sys [?]
S3 efkhimnr;efkhimnr;\??\c:\windows\System32\Drivers\efkhimnr.sys --> c:\windows\System32\Drivers\efkhimnr.sys [?]
S3 ehazlynp;ehazlynp;\??\c:\windows\System32\Drivers\ehazlynp.sys --> c:\windows\System32\Drivers\ehazlynp.sys [?]
S3 elesbkwt;elesbkwt;\??\c:\windows\System32\Drivers\elesbkwt.sys --> c:\windows\System32\Drivers\elesbkwt.sys [?]
S3 elrwpmmj;elrwpmmj;\??\c:\windows\System32\Drivers\elrwpmmj.sys --> c:\windows\System32\Drivers\elrwpmmj.sys [?]
S3 elugatxq;elugatxq;\??\c:\windows\System32\Drivers\elugatxq.sys --> c:\windows\System32\Drivers\elugatxq.sys [?]
S3 elvjxvtp;elvjxvtp;\??\c:\windows\System32\Drivers\elvjxvtp.sys --> c:\windows\System32\Drivers\elvjxvtp.sys [?]
S3 eodtmlgx;eodtmlgx;\??\c:\windows\System32\Drivers\eodtmlgx.sys --> c:\windows\System32\Drivers\eodtmlgx.sys [?]
S3 eofwffcm;eofwffcm;\??\c:\windows\System32\Drivers\eofwffcm.sys --> c:\windows\System32\Drivers\eofwffcm.sys [?]
S3 eqmftfdr;eqmftfdr;\??\c:\windows\System32\Drivers\eqmftfdr.sys --> c:\windows\System32\Drivers\eqmftfdr.sys [?]
S3 erqyqxzf;erqyqxzf;\??\c:\windows\System32\Drivers\erqyqxzf.sys --> c:\windows\System32\Drivers\erqyqxzf.sys [?]
S3 etuqjkru;etuqjkru;\??\c:\windows\System32\Drivers\etuqjkru.sys --> c:\windows\System32\Drivers\etuqjkru.sys [?]
S3 etxdnvrd;etxdnvrd;\??\c:\windows\System32\Drivers\etxdnvrd.sys --> c:\windows\System32\Drivers\etxdnvrd.sys [?]
S3 exvhkexv;exvhkexv;\??\c:\windows\System32\Drivers\exvhkexv.sys --> c:\windows\System32\Drivers\exvhkexv.sys [?]
S3 eygtthdu;eygtthdu;\??\c:\windows\System32\Drivers\eygtthdu.sys --> c:\windows\System32\Drivers\eygtthdu.sys [?]
S3 eyuhvqne;eyuhvqne;\??\c:\windows\System32\Drivers\eyuhvqne.sys --> c:\windows\System32\Drivers\eyuhvqne.sys [?]
S3 fbohgcub;fbohgcub;\??\c:\windows\System32\Drivers\fbohgcub.sys --> c:\windows\System32\Drivers\fbohgcub.sys [?]
S3 feohglzw;feohglzw;c:\windows\system32\drivers\feohglzw.sys [2009-04-04 33920]
S3 feuhqypb;feuhqypb;\??\c:\windows\System32\Drivers\feuhqypb.sys --> c:\windows\System32\Drivers\feuhqypb.sys [?]
S3 fghsnltn;fghsnltn;\??\c:\windows\System32\Drivers\fghsnltn.sys --> c:\windows\System32\Drivers\fghsnltn.sys [?]
S3 fhixtjie;fhixtjie;\??\c:\windows\System32\Drivers\fhixtjie.sys --> c:\windows\System32\Drivers\fhixtjie.sys [?]
S3 fhtbipwp;fhtbipwp;\??\c:\windows\System32\Drivers\fhtbipwp.sys --> c:\windows\System32\Drivers\fhtbipwp.sys [?]
S3 fkebouux;fkebouux;\??\c:\windows\System32\Drivers\fkebouux.sys --> c:\windows\System32\Drivers\fkebouux.sys [?]
S3 fmccdcxh;fmccdcxh;\??\c:\windows\System32\Drivers\fmccdcxh.sys --> c:\windows\System32\Drivers\fmccdcxh.sys [?]
S3 fsiuyftl;fsiuyftl;\??\c:\windows\System32\Drivers\fsiuyftl.sys --> c:\windows\System32\Drivers\fsiuyftl.sys [?]
S3 fuqnitzw;fuqnitzw;\??\c:\windows\System32\Drivers\fuqnitzw.sys --> c:\windows\System32\Drivers\fuqnitzw.sys [?]
S3 fvqifrwd;fvqifrwd;\??\c:\windows\System32\Drivers\fvqifrwd.sys --> c:\windows\System32\Drivers\fvqifrwd.sys [?]
S3 fvrnxzst;fvrnxzst;\??\c:\windows\System32\Drivers\fvrnxzst.sys --> c:\windows\System32\Drivers\fvrnxzst.sys [?]
S3 gaubmupm;gaubmupm;\??\c:\windows\System32\Drivers\gaubmupm.sys --> c:\windows\System32\Drivers\gaubmupm.sys [?]
S3 gbolrjqn;gbolrjqn;\??\c:\windows\System32\Drivers\gbolrjqn.sys --> c:\windows\System32\Drivers\gbolrjqn.sys [?]
S3 gdzhlidi;gdzhlidi;\??\c:\windows\System32\Drivers\gdzhlidi.sys --> c:\windows\System32\Drivers\gdzhlidi.sys [?]
S3 gfkmfrvp;gfkmfrvp;\??\c:\windows\System32\Drivers\gfkmfrvp.sys --> c:\windows\System32\Drivers\gfkmfrvp.sys [?]
S3 gfxsqvrm;gfxsqvrm;\??\c:\windows\System32\Drivers\gfxsqvrm.sys --> c:\windows\System32\Drivers\gfxsqvrm.sys [?]
S3 ghgowjtb;ghgowjtb;\??\c:\windows\System32\Drivers\ghgowjtb.sys --> c:\windows\System32\Drivers\ghgowjtb.sys [?]
S3 gleuvmkm;gleuvmkm;\??\c:\windows\System32\Drivers\gleuvmkm.sys --> c:\windows\System32\Drivers\gleuvmkm.sys [?]
S3 gocdrdmi;gocdrdmi;\??\c:\windows\System32\Drivers\gocdrdmi.sys --> c:\windows\System32\Drivers\gocdrdmi.sys [?]
S3 gpoakaoe;gpoakaoe;\??\c:\windows\System32\Drivers\gpoakaoe.sys --> c:\windows\System32\Drivers\gpoakaoe.sys [?]
S3 gqbepeqs;gqbepeqs;\??\c:\windows\System32\Drivers\gqbepeqs.sys --> c:\windows\System32\Drivers\gqbepeqs.sys [?]
S3 groblfvm;groblfvm;\??\c:\windows\System32\Drivers\groblfvm.sys --> c:\windows\System32\Drivers\groblfvm.sys [?]
S3 gsmwmhgs;gsmwmhgs;\??\c:\windows\System32\Drivers\gsmwmhgs.sys --> c:\windows\System32\Drivers\gsmwmhgs.sys [?]
S3 gvdvtuvb;gvdvtuvb;\??\c:\windows\System32\Drivers\gvdvtuvb.sys --> c:\windows\System32\Drivers\gvdvtuvb.sys [?]
S3 gxqhuxjk;gxqhuxjk;\??\c:\windows\System32\Drivers\gxqhuxjk.sys --> c:\windows\System32\Drivers\gxqhuxjk.sys [?]
S3 gzvpiobq;gzvpiobq;\??\c:\windows\System32\Drivers\gzvpiobq.sys --> c:\windows\System32\Drivers\gzvpiobq.sys [?]
S3 hbpnzlai;hbpnzlai;\??\c:\windows\System32\Drivers\hbpnzlai.sys --> c:\windows\System32\Drivers\hbpnzlai.sys [?]
S3 heyshdvw;heyshdvw;\??\c:\windows\System32\Drivers\heyshdvw.sys --> c:\windows\System32\Drivers\heyshdvw.sys [?]
S3 hezsmrfy;hezsmrfy;\??\c:\windows\System32\Drivers\hezsmrfy.sys --> c:\windows\System32\Drivers\hezsmrfy.sys [?]
S3 hhcpubhx;hhcpubhx;\??\c:\windows\System32\Drivers\hhcpubhx.sys --> c:\windows\System32\Drivers\hhcpubhx.sys [?]
S3 hjhkbahi;hjhkbahi;\??\c:\windows\System32\Drivers\hjhkbahi.sys --> c:\windows\System32\Drivers\hjhkbahi.sys [?]
S3 hjtjaioc;hjtjaioc;\??\c:\windows\System32\Drivers\hjtjaioc.sys --> c:\windows\System32\Drivers\hjtjaioc.sys [?]
S3 hmivlrpm;hmivlrpm;\??\c:\windows\System32\Drivers\hmivlrpm.sys --> c:\windows\System32\Drivers\hmivlrpm.sys [?]
S3 hnqyydcb;hnqyydcb;\??\c:\windows\System32\Drivers\hnqyydcb.sys --> c:\windows\System32\Drivers\hnqyydcb.sys [?]
S3 hnxmvgzy;hnxmvgzy;\??\c:\windows\System32\Drivers\hnxmvgzy.sys --> c:\windows\System32\Drivers\hnxmvgzy.sys [?]
S3 htxwapeq;htxwapeq;\??\c:\windows\System32\Drivers\htxwapeq.sys --> c:\windows\System32\Drivers\htxwapeq.sys [?]
S3 huetrybs;huetrybs;\??\c:\windows\System32\Drivers\huetrybs.sys --> c:\windows\System32\Drivers\huetrybs.sys [?]
S3 hvtzxcoz;hvtzxcoz;\??\c:\windows\System32\Drivers\hvtzxcoz.sys --> c:\windows\System32\Drivers\hvtzxcoz.sys [?]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [2009-02-21 99840]
S3 iamgoqtj;iamgoqtj;\??\c:\windows\System32\Drivers\iamgoqtj.sys --> c:\windows\System32\Drivers\iamgoqtj.sys [?]
S3 iawltwog;iawltwog;\??\c:\windows\System32\Drivers\iawltwog.sys --> c:\windows\System32\Drivers\iawltwog.sys [?]
S3 ibditbbe;ibditbbe;\??\c:\windows\System32\Drivers\ibditbbe.sys --> c:\windows\System32\Drivers\ibditbbe.sys [?]
S3 iehwpfog;iehwpfog;\??\c:\windows\System32\Drivers\iehwpfog.sys --> c:\windows\System32\Drivers\iehwpfog.sys [?]
S3 ifelszjo;ifelszjo;\??\c:\windows\System32\Drivers\ifelszjo.sys --> c:\windows\System32\Drivers\ifelszjo.sys [?]
S3 iiiyxako;iiiyxako;\??\c:\windows\System32\Drivers\iiiyxako.sys --> c:\windows\System32\Drivers\iiiyxako.sys [?]
S3 iiugxfbr;iiugxfbr;\??\c:\windows\System32\Drivers\iiugxfbr.sys --> c:\windows\System32\Drivers\iiugxfbr.sys [?]
S3 ijmugsny;ijmugsny;\??\c:\windows\System32\Drivers\ijmugsny.sys --> c:\windows\System32\Drivers\ijmugsny.sys [?]
S3 ikkxybna;ikkxybna;\??\c:\windows\System32\Drivers\ikkxybna.sys --> c:\windows\System32\Drivers\ikkxybna.sys [?]
S3 imnmjeng;imnmjeng;\??\c:\windows\System32\Drivers\imnmjeng.sys --> c:\windows\System32\Drivers\imnmjeng.sys [?]
S3 imudxabb;imudxabb;\??\c:\windows\System32\Drivers\imudxabb.sys --> c:\windows\System32\Drivers\imudxabb.sys [?]
S3 imulmhjj;imulmhjj;\??\c:\windows\System32\Drivers\imulmhjj.sys --> c:\windows\System32\Drivers\imulmhjj.sys [?]
S3 inavbqrl;inavbqrl;\??\c:\windows\System32\Drivers\inavbqrl.sys --> c:\windows\System32\Drivers\inavbqrl.sys [?]
S3 ipdagfay;ipdagfay;\??\c:\windows\System32\Drivers\ipdagfay.sys --> c:\windows\System32\Drivers\ipdagfay.sys [?]
S3 iquqewty;iquqewty;\??\c:\windows\System32\Drivers\iquqewty.sys --> c:\windows\System32\Drivers\iquqewty.sys [?]
S3 isfvngeh;isfvngeh;\??\c:\windows\System32\Drivers\isfvngeh.sys --> c:\windows\System32\Drivers\isfvngeh.sys [?]
S3 itiauqxe;itiauqxe;\??\c:\windows\System32\Drivers\itiauqxe.sys --> c:\windows\System32\Drivers\itiauqxe.sys [?]
S3 ivcvmbkt;ivcvmbkt;\??\c:\windows\System32\Drivers\ivcvmbkt.sys --> c:\windows\System32\Drivers\ivcvmbkt.sys [?]
S3 ivyprzgz;ivyprzgz;\??\c:\windows\System32\Drivers\ivyprzgz.sys --> c:\windows\System32\Drivers\ivyprzgz.sys [?]
S3 ixyqbrnb;ixyqbrnb;\??\c:\windows\System32\Drivers\ixyqbrnb.sys --> c:\windows\System32\Drivers\ixyqbrnb.sys [?]
S3 iyiopsbb;iyiopsbb;\??\c:\windows\System32\Drivers\iyiopsbb.sys --> c:\windows\System32\Drivers\iyiopsbb.sys [?]
S3 iztiqccf;iztiqccf;\??\c:\windows\System32\Drivers\iztiqccf.sys --> c:\windows\System32\Drivers\iztiqccf.sys [?]
S3 jbcwjlqp;jbcwjlqp;\??\c:\windows\System32\Drivers\jbcwjlqp.sys --> c:\windows\System32\Drivers\jbcwjlqp.sys [?]
S3 jbmudieh;jbmudieh;\??\c:\windows\System32\Drivers\jbmudieh.sys --> c:\windows\System32\Drivers\jbmudieh.sys [?]
S3 jciyhhja;jciyhhja;\??\c:\windows\System32\Drivers\jciyhhja.sys --> c:\windows\System32\Drivers\jciyhhja.sys [?]
S3 jevcvhqs;jevcvhqs;\??\c:\windows\System32\Drivers\jevcvhqs.sys --> c:\windows\System32\Drivers\jevcvhqs.sys [?]
S3 jfkqownj;jfkqownj;\??\c:\windows\System32\Drivers\jfkqownj.sys --> c:\windows\System32\Drivers\jfkqownj.sys [?]
S3 jmwvhxsb;jmwvhxsb;\??\c:\windows\System32\Drivers\jmwvhxsb.sys --> c:\windows\System32\Drivers\jmwvhxsb.sys [?]
S3 jnrjveai;jnrjveai;\??\c:\windows\System32\Drivers\jnrjveai.sys --> c:\windows\System32\Drivers\jnrjveai.sys [?]
S3 jpqdeowu;jpqdeowu;\??\c:\windows\System32\Drivers\jpqdeowu.sys --> c:\windows\System32\Drivers\jpqdeowu.sys [?]
S3 jqljxylv;jqljxylv;\??\c:\windows\System32\Drivers\jqljxylv.sys --> c:\windows\System32\Drivers\jqljxylv.sys [?]
S3 jrwlhosj;jrwlhosj;\??\c:\windows\System32\Drivers\jrwlhosj.sys --> c:\windows\System32\Drivers\jrwlhosj.sys [?]
S3 jryvccln;jryvccln;\??\c:\windows\System32\Drivers\jryvccln.sys --> c:\windows\System32\Drivers\jryvccln.sys [?]
S3 jtnlcvfh;jtnlcvfh;\??\c:\windows\System32\Drivers\jtnlcvfh.sys --> c:\windows\System32\Drivers\jtnlcvfh.sys [?]
S3 kaylfrko;kaylfrko;\??\c:\windows\System32\Drivers\kaylfrko.sys --> c:\windows\System32\Drivers\kaylfrko.sys [?]
S3 kbkxxxzy;kbkxxxzy;\??\c:\windows\System32\Drivers\kbkxxxzy.sys --> c:\windows\System32\Drivers\kbkxxxzy.sys [?]
S3 kcwzzefx;kcwzzefx;\??\c:\windows\System32\Drivers\kcwzzefx.sys --> c:\windows\System32\Drivers\kcwzzefx.sys [?]
S3 kefucucc;kefucucc;\??\c:\windows\System32\Drivers\kefucucc.sys --> c:\windows\System32\Drivers\kefucucc.sys [?]
S3 kepjtqpu;kepjtqpu;\??\c:\windows\System32\Drivers\kepjtqpu.sys --> c:\windows\System32\Drivers\kepjtqpu.sys [?]
S3 kersqyix;kersqyix;\??\c:\windows\System32\Drivers\kersqyix.sys --> c:\windows\System32\Drivers\kersqyix.sys [?]
S3 kespemei;kespemei;\??\c:\windows\System32\Drivers\kespemei.sys --> c:\windows\System32\Drivers\kespemei.sys [?]
S3 khkypsjz;khkypsjz;\??\c:\windows\System32\Drivers\khkypsjz.sys --> c:\windows\System32\Drivers\khkypsjz.sys [?]
S3 kkobayro;kkobayro;\??\c:\windows\System32\Drivers\kkobayro.sys --> c:\windows\System32\Drivers\kkobayro.sys [?]
S3 kmcjbyfa;kmcjbyfa;\??\c:\windows\System32\Drivers\kmcjbyfa.sys --> c:\windows\System32\Drivers\kmcjbyfa.sys [?]
S3 kobksnmh;kobksnmh;\??\c:\windows\System32\Drivers\kobksnmh.sys --> c:\windows\System32\Drivers\kobksnmh.sys [?]
S3 kptlxwsa;kptlxwsa;\??\c:\windows\System32\Drivers\kptlxwsa.sys --> c:\windows\System32\Drivers\kptlxwsa.sys [?]
S3 kvuuhprh;kvuuhprh;\??\c:\windows\System32\Drivers\kvuuhprh.sys --> c:\windows\System32\Drivers\kvuuhprh.sys [?]
S3 kxkmoupy;kxkmoupy;\??\c:\windows\System32\Drivers\kxkmoupy.sys --> c:\windows\System32\Drivers\kxkmoupy.sys [?]
S3 kxlxmnib;kxlxmnib;\??\c:\windows\System32\Drivers\kxlxmnib.sys --> c:\windows\System32\Drivers\kxlxmnib.sys [?]
S3 kxnmhpwv;kxnmhpwv;\??\c:\windows\System32\Drivers\kxnmhpwv.sys --> c:\windows\System32\Drivers\kxnmhpwv.sys [?]
S3 kyvliizn;kyvliizn;\??\c:\windows\System32\Drivers\kyvliizn.sys --> c:\windows\System32\Drivers\kyvliizn.sys [?]
S3 lbqrsrum;lbqrsrum;\??\c:\windows\System32\Drivers\lbqrsrum.sys --> c:\windows\System32\Drivers\lbqrsrum.sys [?]
S3 ldmwnzkl;ldmwnzkl;\??\c:\windows\System32\Drivers\ldmwnzkl.sys --> c:\windows\System32\Drivers\ldmwnzkl.sys [?]
S3 ldrmruvr;ldrmruvr;\??\c:\windows\System32\Drivers\ldrmruvr.sys --> c:\windows\System32\Drivers\ldrmruvr.sys [?]
S3 lezfpidf;lezfpidf;\??\c:\windows\System32\Drivers\lezfpidf.sys --> c:\windows\System32\Drivers\lezfpidf.sys [?]
S3 lgfwwaam;lgfwwaam;\??\c:\windows\System32\Drivers\lgfwwaam.sys --> c:\windows\System32\Drivers\lgfwwaam.sys [?]
S3 lheqhfan;lheqhfan;\??\c:\windows\System32\Drivers\lheqhfan.sys --> c:\windows\System32\Drivers\lheqhfan.sys [?]
S3 lifzbqkl;lifzbqkl;\??\c:\windows\System32\Drivers\lifzbqkl.sys --> c:\windows\System32\Drivers\lifzbqkl.sys [?]
S3 llqmjjhy;llqmjjhy;\??\c:\windows\System32\Drivers\llqmjjhy.sys --> c:\windows\System32\Drivers\llqmjjhy.sys [?]
S3 lmkdjjgs;lmkdjjgs;\??\c:\windows\System32\Drivers\lmkdjjgs.sys --> c:\windows\System32\Drivers\lmkdjjgs.sys [?]
S3 lndkaqhx;lndkaqhx;\??\c:\windows\System32\Drivers\lndkaqhx.sys --> c:\windows\System32\Drivers\lndkaqhx.sys [?]
S3 lnifinul;lnifinul;\??\c:\windows\System32\Drivers\lnifinul.sys --> c:\windows\System32\Drivers\lnifinul.sys [?]
S3 lqqsktdk;lqqsktdk;\??\c:\windows\System32\Drivers\lqqsktdk.sys --> c:\windows\System32\Drivers\lqqsktdk.sys [?]
S3 lqtmmotc;lqtmmotc;\??\c:\windows\System32\Drivers\lqtmmotc.sys --> c:\windows\System32\Drivers\lqtmmotc.sys [?]
S3 lqzafpck;lqzafpck;\??\c:\windows\System32\Drivers\lqzafpck.sys --> c:\windows\System32\Drivers\lqzafpck.sys [?]
S3 lrrlkosm;lrrlkosm;\??\c:\windows\System32\Drivers\lrrlkosm.sys --> c:\windows\System32\Drivers\lrrlkosm.sys [?]
S3 luaegslz;luaegslz;\??\c:\windows\System32\Drivers\luaegslz.sys --> c:\windows\System32\Drivers\luaegslz.sys [?]
S3 luaocizs;luaocizs;\??\c:\windows\System32\Drivers\luaocizs.sys --> c:\windows\System32\Drivers\luaocizs.sys [?]
S3 mgpimjwn;mgpimjwn;\??\c:\windows\System32\Drivers\mgpimjwn.sys --> c:\windows\System32\Drivers\mgpimjwn.sys [?]
S3 mjbvpzng;mjbvpzng;\??\c:\windows\System32\Drivers\mjbvpzng.sys --> c:\windows\System32\Drivers\mjbvpzng.sys [?]
S3 mjfpfqfd;mjfpfqfd;\??\c:\windows\System32\Drivers\mjfpfqfd.sys --> c:\windows\System32\Drivers\mjfpfqfd.sys [?]
S3 mjlsfmbu;mjlsfmbu;\??\c:\windows\System32\Drivers\mjlsfmbu.sys --> c:\windows\System32\Drivers\mjlsfmbu.sys [?]
S3 mkjukktj;mkjukktj;\??\c:\windows\System32\Drivers\mkjukktj.sys --> c:\windows\System32\Drivers\mkjukktj.sys [?]
S3 mpanvmfl;mpanvmfl;\??\c:\windows\System32\Drivers\mpanvmfl.sys --> c:\windows\System32\Drivers\mpanvmfl.sys [?]
S3 mqdnodnc;mqdnodnc;\??\c:\windows\System32\Drivers\mqdnodnc.sys --> c:\windows\System32\Drivers\mqdnodnc.sys [?]
S3 mqthbzbz;mqthbzbz;\??\c:\windows\System32\Drivers\mqthbzbz.sys --> c:\windows\System32\Drivers\mqthbzbz.sys [?]
S3 mwwyfkek;mwwyfkek;\??\c:\windows\System32\Drivers\mwwyfkek.sys --> c:\windows\System32\Drivers\mwwyfkek.sys [?]
S3 mygbulpy;mygbulpy;\??\c:\windows\System32\Drivers\mygbulpy.sys --> c:\windows\System32\Drivers\mygbulpy.sys [?]
S3 nfznmopa;nfznmopa;\??\c:\windows\System32\Drivers\nfznmopa.sys --> c:\windows\System32\Drivers\nfznmopa.sys [?]
S3 nhhbsqqr;nhhbsqqr;\??\c:\windows\System32\Drivers\nhhbsqqr.sys --> c:\windows\System32\Drivers\nhhbsqqr.sys [?]
S3 nithtnvb;nithtnvb;\??\c:\windows\System32\Drivers\nithtnvb.sys --> c:\windows\System32\Drivers\nithtnvb.sys [?]
S3 nkksoklr;nkksoklr;\??\c:\windows\System32\Drivers\nkksoklr.sys --> c:\windows\System32\Drivers\nkksoklr.sys [?]
S3 nndytypw;nndytypw;\??\c:\windows\System32\Drivers\nndytypw.sys --> c:\windows\System32\Drivers\nndytypw.sys [?]
S3 nnvhyfsw;nnvhyfsw;\??\c:\windows\System32\Drivers\nnvhyfsw.sys --> c:\windows\System32\Drivers\nnvhyfsw.sys [?]
S3 noatspsg;noatspsg;\??\c:\windows\System32\Drivers\noatspsg.sys --> c:\windows\System32\Drivers\noatspsg.sys [?]
S3 noknqdbg;noknqdbg;\??\c:\windows\System32\Drivers\noknqdbg.sys --> c:\windows\System32\Drivers\noknqdbg.sys [?]
S3 ntrzqkhv;ntrzqkhv;\??\c:\windows\System32\Drivers\ntrzqkhv.sys --> c:\windows\System32\Drivers\ntrzqkhv.sys [?]
S3 nxssesny;nxssesny;\??\c:\windows\System32\Drivers\nxssesny.sys --> c:\windows\System32\Drivers\nxssesny.sys [?]
S3 oadjrjnd;oadjrjnd;\??\c:\windows\System32\Drivers\oadjrjnd.sys --> c:\windows\System32\Drivers\oadjrjnd.sys [?]
S3 obzqqzbp;obzqqzbp;\??\c:\windows\System32\Drivers\obzqqzbp.sys --> c:\windows\System32\Drivers\obzqqzbp.sys [?]
S3 oerlyybo;oerlyybo;\??\c:\windows\System32\Drivers\oerlyybo.sys --> c:\windows\System32\Drivers\oerlyybo.sys [?]
S3 ogifxpwj;ogifxpwj;\??\c:\windows\System32\Drivers\ogifxpwj.sys --> c:\windows\System32\Drivers\ogifxpwj.sys [?]
S3 ohgfeeaw;ohgfeeaw;\??\c:\windows\System32\Drivers\ohgfeeaw.sys --> c:\windows\System32\Drivers\ohgfeeaw.sys [?]
S3 ohggtoxi;ohggtoxi;\??\c:\windows\System32\Drivers\ohggtoxi.sys --> c:\windows\System32\Drivers\ohggtoxi.sys [?]
S3 ohhnsimk;ohhnsimk;\??\c:\windows\System32\Drivers\ohhnsimk.sys --> c:\windows\System32\Drivers\ohhnsimk.sys [?]
S3 oinfyofv;oinfyofv;\??\c:\windows\System32\Drivers\oinfyofv.sys --> c:\windows\System32\Drivers\oinfyofv.sys [?]
S3 oiufcxoe;oiufcxoe;\??\c:\windows\System32\Drivers\oiufcxoe.sys --> c:\windows\System32\Drivers\oiufcxoe.sys [?]
S3 okqbevrz;okqbevrz;\??\c:\windows\System32\Drivers\okqbevrz.sys --> c:\windows\System32\Drivers\okqbevrz.sys [?]
S3 olepuyif;olepuyif;\??\c:\windows\System32\Drivers\olepuyif.sys --> c:\windows\System32\Drivers\olepuyif.sys [?]
S3 onpcrimw;onpcrimw;\??\c:\windows\System32\Drivers\onpcrimw.sys --> c:\windows\System32\Drivers\onpcrimw.sys [?]
S3 oqmvowud;oqmvowud;\??\c:\windows\System32\Drivers\oqmvowud.sys --> c:\windows\System32\Drivers\oqmvowud.sys [?]
S3 otthcxxg;otthcxxg;\??\c:\windows\System32\Drivers\otthcxxg.sys --> c:\windows\System32\Drivers\otthcxxg.sys [?]
S3 ougwdwkv;ougwdwkv;\??\c:\windows\System32\Drivers\ougwdwkv.sys --> c:\windows\System32\Drivers\ougwdwkv.sys [?]
S3 ovwhyohq;ovwhyohq;\??\c:\windows\System32\Drivers\ovwhyohq.sys --> c:\windows\System32\Drivers\ovwhyohq.sys [?]
S3 owihqcvn;owihqcvn;\??\c:\windows\System32\Drivers\owihqcvn.sys --> c:\windows\System32\Drivers\owihqcvn.sys [?]
S3 owpoonrs;owpoonrs;\??\c:\windows\System32\Drivers\owpoonrs.sys --> c:\windows\System32\Drivers\owpoonrs.sys [?]
S3 owyyzmak;owyyzmak;\??\c:\windows\System32\Drivers\owyyzmak.sys --> c:\windows\System32\Drivers\owyyzmak.sys [?]
S3 oygeutog;oygeutog;\??\c:\windows\System32\Drivers\oygeutog.sys --> c:\windows\System32\Drivers\oygeutog.sys [?]
S3 oyytfvnq;oyytfvnq;\??\c:\windows\System32\Drivers\oyytfvnq.sys --> c:\windows\System32\Drivers\oyytfvnq.sys [?]
S3 ozfssolz;ozfssolz;\??\c:\windows\System32\Drivers\ozfssolz.sys --> c:\windows\System32\Drivers\ozfssolz.sys [?]
S3 paidyyuw;paidyyuw;c:\windows\system32\drivers\paidyyuw.sys [2009-04-08 33920]
S3 pbvhihmc;pbvhihmc;\??\c:\windows\System32\Drivers\pbvhihmc.sys --> c:\windows\System32\Drivers\pbvhihmc.sys [?]
S3 pdnzjylc;pdnzjylc;\??\c:\windows\System32\Drivers\pdnzjylc.sys --> c:\windows\System32\Drivers\pdnzjylc.sys [?]
S3 pfhjccdc;pfhjccdc;c:\windows\system32\drivers\pfhjccdc.sys [2009-04-03 33920]
S3 pgmeobra;pgmeobra;\??\c:\windows\System32\Drivers\pgmeobra.sys --> c:\windows\System32\Drivers\pgmeobra.sys [?]
S3 pgnoyqeh;pgnoyqeh;\??\c:\windows\System32\Drivers\pgnoyqeh.sys --> c:\windows\System32\Drivers\pgnoyqeh.sys [?]
S3 pgpoigkw;pgpoigkw;\??\c:\windows\System32\Drivers\pgpoigkw.sys --> c:\windows\System32\Drivers\pgpoigkw.sys [?]
S3 pivrhycb;pivrhycb;\??\c:\windows\System32\Drivers\pivrhycb.sys --> c:\windows\System32\Drivers\pivrhycb.sys [?]
S3 pkgizrde;pkgizrde;\??\c:\windows\System32\Drivers\pkgizrde.sys --> c:\windows\System32\Drivers\pkgizrde.sys [?]
S3 pladrvrc;pladrvrc;\??\c:\windows\System32\Drivers\pladrvrc.sys --> c:\windows\System32\Drivers\pladrvrc.sys [?]
S3 pohwbynn;pohwbynn;\??\c:\windows\System32\Drivers\pohwbynn.sys --> c:\windows\System32\Drivers\pohwbynn.sys [?]
S3 ppahamdt;ppahamdt;\??\c:\windows\System32\Drivers\ppahamdt.sys --> c:\windows\System32\Drivers\ppahamdt.sys [?]
S3 pqaqgqev;pqaqgqev;\??\c:\windows\System32\Drivers\pqaqgqev.sys --> c:\windows\System32\Drivers\pqaqgqev.sys [?]
S3 pvnnsmee;pvnnsmee;\??\c:\windows\System32\Drivers\pvnnsmee.sys --> c:\windows\System32\Drivers\pvnnsmee.sys [?]
S3 pwaqzhla;pwaqzhla;\??\c:\windows\System32\Drivers\pwaqzhla.sys --> c:\windows\System32\Drivers\pwaqzhla.sys [?]
S3 pwifyvfb;pwifyvfb;\??\c:\windows\System32\Drivers\pwifyvfb.sys --> c:\windows\System32\Drivers\pwifyvfb.sys [?]
S3 pwiqwtkx;pwiqwtkx;\??\c:\windows\System32\Drivers\pwiqwtkx.sys --> c:\windows\System32\Drivers\pwiqwtkx.sys [?]
S3 pziljcee;pziljcee;\??\c:\windows\System32\Drivers\pziljcee.sys --> c:\windows\System32\Drivers\pziljcee.sys [?]
S3 qaiapkfm;qaiapkfm;\??\c:\windows\System32\Drivers\qaiapkfm.sys --> c:\windows\System32\Drivers\qaiapkfm.sys [?]
S3 qcdhcstz;qcdhcstz;\??\c:\windows\System32\Drivers\qcdhcstz.sys --> c:\windows\System32\Drivers\qcdhcstz.sys [?]
S3 qclhrkcd;qclhrkcd;\??\c:\windows\System32\Drivers\qclhrkcd.sys --> c:\windows\System32\Drivers\qclhrkcd.sys [?]
S3 qdecytlb;qdecytlb;\??\c:\windows\System32\Drivers\qdecytlb.sys --> c:\windows\System32\Drivers\qdecytlb.sys [?]
S3 qdiindmc;qdiindmc;\??\c:\windows\System32\Drivers\qdiindmc.sys --> c:\windows\System32\Drivers\qdiindmc.sys [?]
S3 qefmdapo;qefmdapo;\??\c:\windows\System32\Drivers\qefmdapo.sys --> c:\windows\System32\Drivers\qefmdapo.sys [?]
S3 qeundytg;qeundytg;\??\c:\windows\System32\Drivers\qeundytg.sys --> c:\windows\System32\Drivers\qeundytg.sys [?]
S3 qfawdkll;qfawdkll;\??\c:\windows\System32\Drivers\qfawdkll.sys --> c:\windows\System32\Drivers\qfawdkll.sys [?]
S3 qfjyiaga;qfjyiaga;\??\c:\windows\System32\Drivers\qfjyiaga.sys --> c:\windows\System32\Drivers\qfjyiaga.sys [?]
S3 qgipqwrm;qgipqwrm;\??\c:\windows\System32\Drivers\qgipqwrm.sys --> c:\windows\System32\Drivers\qgipqwrm.sys [?]
S3 qhrlaedw;qhrlaedw;\??\c:\windows\System32\Drivers\qhrlaedw.sys --> c:\windows\System32\Drivers\qhrlaedw.sys [?]
S3 qibntfup;qibntfup;\??\c:\windows\System32\Drivers\qibntfup.sys --> c:\windows\System32\Drivers\qibntfup.sys [?]
S3 qjxkpyei;qjxkpyei;\??\c:\windows\System32\Drivers\qjxkpyei.sys --> c:\windows\System32\Drivers\qjxkpyei.sys [?]
S3 qoatqxdj;qoatqxdj;\??\c:\windows\System32\Drivers\qoatqxdj.sys --> c:\windows\System32\Drivers\qoatqxdj.sys [?]
S3 qpjpifwc;qpjpifwc;\??\c:\windows\System32\Drivers\qpjpifwc.sys --> c:\windows\System32\Drivers\qpjpifwc.sys [?]
S3 qroqchqk;qroqchqk;\??\c:\windows\System32\Drivers\qroqchqk.sys --> c:\windows\System32\Drivers\qroqchqk.sys [?]
S3 qsewpezq;qsewpezq;\??\c:\windows\System32\Drivers\qsewpezq.sys --> c:\windows\System32\Drivers\qsewpezq.sys [?]
S3 qslcfdub;qslcfdub;\??\c:\windows\System32\Drivers\qslcfdub.sys --> c:\windows\System32\Drivers\qslcfdub.sys [?]
S3 qtjlydez;qtjlydez;\??\c:\windows\System32\Drivers\qtjlydez.sys --> c:\windows\System32\Drivers\qtjlydez.sys [?]
S3 qwpznxcb;qwpznxcb;\??\c:\windows\System32\Drivers\qwpznxcb.sys --> c:\windows\System32\Drivers\qwpznxcb.sys [?]
S3 qxiobpfa;qxiobpfa;\??\c:\windows\System32\Drivers\qxiobpfa.sys --> c:\windows\System32\Drivers\qxiobpfa.sys [?]
S3 rgdhusbp;rgdhusbp;\??\c:\windows\System32\Drivers\rgdhusbp.sys --> c:\windows\System32\Drivers\rgdhusbp.sys [?]
S3 rgpbbjor;rgpbbjor;\??\c:\windows\System32\Drivers\rgpbbjor.sys --> c:\windows\System32\Drivers\rgpbbjor.sys [?]
S3 rigcdedm;rigcdedm;\??\c:\windows\System32\Drivers\rigcdedm.sys --> c:\windows\System32\Drivers\rigcdedm.sys [?]
S3 rlwzmruz;rlwzmruz;\??\c:\windows\System32\Drivers\rlwzmruz.sys --> c:\windows\System32\Drivers\rlwzmruz.sys [?]
S3 rmraklcv;rmraklcv;\??\c:\windows\System32\Drivers\rmraklcv.sys --> c:\windows\System32\Drivers\rmraklcv.sys [?]
S3 rmwyilpq;rmwyilpq;c:\windows\system32\drivers\rmwyilpq.sys [2009-04-07 33920]
S3 rpusgwjc;rpusgwjc;\??\c:\windows\System32\Drivers\rpusgwjc.sys --> c:\windows\System32\Drivers\rpusgwjc.sys [?]
S3 rqkpdkgm;rqkpdkgm;\??\c:\windows\System32\Drivers\rqkpdkgm.sys --> c:\windows\System32\Drivers\rqkpdkgm.sys [?]
S3 rqrthtgb;rqrthtgb;\??\c:\windows\System32\Drivers\rqrthtgb.sys --> c:\windows\System32\Drivers\rqrthtgb.sys [?]
S3 rrumvjrh;rrumvjrh;\??\c:\windows\System32\Drivers\rrumvjrh.sys --> c:\windows\System32\Drivers\rrumvjrh.sys [?]
S3 rsaowmxg;rsaowmxg;\??\c:\windows\System32\Drivers\rsaowmxg.sys --> c:\windows\System32\Drivers\rsaowmxg.sys [?]
S3 rsictybw;rsictybw;\??\c:\windows\System32\Drivers\rsictybw.sys --> c:\windows\System32\Drivers\rsictybw.sys [?]
S3 rvydrvmn;rvydrvmn;\??\c:\windows\System32\Drivers\rvydrvmn.sys --> c:\windows\System32\Drivers\rvydrvmn.sys [?]
S3 rwpzqfdz;rwpzqfdz;\??\c:\windows\System32\Drivers\rwpzqfdz.sys --> c:\windows\System32\Drivers\rwpzqfdz.sys [?]
S3 rzfmwsfa;rzfmwsfa;\??\c:\windows\System32\Drivers\rzfmwsfa.sys --> c:\windows\System32\Drivers\rzfmwsfa.sys [?]
S3 samokutm;samokutm;\??\c:\windows\System32\Drivers\samokutm.sys --> c:\windows\System32\Drivers\samokutm.sys [?]
S3 scjvvzza;scjvvzza;\??\c:\windows\System32\Drivers\scjvvzza.sys --> c:\windows\System32\Drivers\scjvvzza.sys [?]
S3 sfddkjro;sfddkjro;\??\c:\windows\System32\Drivers\sfddkjro.sys --> c:\windows\System32\Drivers\sfddkjro.sys [?]
S3 sfxnmhcr;sfxnmhcr;\??\c:\windows\System32\Drivers\sfxnmhcr.sys --> c:\windows\System32\Drivers\sfxnmhcr.sys [?]
S3 smfpddtp;smfpddtp;\??\c:\windows\System32\Drivers\smfpddtp.sys --> c:\windows\System32\Drivers\smfpddtp.sys [?]
S3 ssrxgcjr;ssrxgcjr;\??\c:\windows\System32\Drivers\ssrxgcjr.sys --> c:\windows\System32\Drivers\ssrxgcjr.sys [?]
S3 ssxgysjq;ssxgysjq;\??\c:\windows\System32\Drivers\ssxgysjq.sys --> c:\windows\System32\Drivers\ssxgysjq.sys [?]
S3 suuiqcwu;suuiqcwu;\??\c:\windows\System32\Drivers\suuiqcwu.sys --> c:\windows\System32\Drivers\suuiqcwu.sys [?]
S3 svolkwen;svolkwen;\??\c:\windows\System32\Drivers\svolkwen.sys --> c:\windows\System32\Drivers\svolkwen.sys [?]
S3 tqjhczdw;tqjhczdw;\??\c:\windows\System32\Drivers\tqjhczdw.sys --> c:\windows\System32\Drivers\tqjhczdw.sys [?]
S3 tucwqrdr;tucwqrdr;\??\c:\windows\System32\Drivers\tucwqrdr.sys --> c:\windows\System32\Drivers\tucwqrdr.sys [?]
S3 tudefjav;tudefjav;\??\c:\windows\System32\Drivers\tudefjav.sys --> c:\windows\System32\Drivers\tudefjav.sys [?]
S3 tuhhjwfg;tuhhjwfg;\??\c:\windows\System32\Drivers\tuhhjwfg.sys --> c:\windows\System32\Drivers\tuhhjwfg.sys [?]
S3 txuxspef;txuxspef;\??\c:\windows\System32\Drivers\txuxspef.sys --> c:\windows\System32\Drivers\txuxspef.sys [?]
S3 tybbhicl;tybbhicl;\??\c:\windows\System32\Drivers\tybbhicl.sys --> c:\windows\System32\Drivers\tybbhicl.sys [?]
S3 ubnxxgvs;ubnxxgvs;\??\c:\windows\System32\Drivers\ubnxxgvs.sys --> c:\windows\System32\Drivers\ubnxxgvs.sys [?]
S3 uebvpviw;uebvpviw;\??\c:\windows\System32\Drivers\uebvpviw.sys --> c:\windows\System32\Drivers\uebvpviw.sys [?]
S3 ufxswrtd;ufxswrtd;\??\c:\windows\System32\Drivers\ufxswrtd.sys --> c:\windows\System32\Drivers\ufxswrtd.sys [?]
S3 uhbzurkg;uhbzurkg;\??\c:\windows\System32\Drivers\uhbzurkg.sys --> c:\windows\System32\Drivers\uhbzurkg.sys [?]
S3 uhyplvub;uhyplvub;\??\c:\windows\System32\Drivers\uhyplvub.sys --> c:\windows\System32\Drivers\uhyplvub.sys [?]
S3 uifmieiq;uifmieiq;\??\c:\windows\System32\Drivers\uifmieiq.sys --> c:\windows\System32\Drivers\uifmieiq.sys [?]
S3 unjfixrj;unjfixrj;\??\c:\windows\System32\Drivers\unjfixrj.sys --> c:\windows\System32\Drivers\unjfixrj.sys [?]
S3 uotdajtg;uotdajtg;\??\c:\windows\System32\Drivers\uotdajtg.sys --> c:\windows\System32\Drivers\uotdajtg.sys [?]
S3 uphbcsal;uphbcsal;\??\c:\windows\System32\Drivers\uphbcsal.sys --> c:\windows\System32\Drivers\uphbcsal.sys [?]
S3 uqruhfso;uqruhfso;\??\c:\windows\System32\Drivers\uqruhfso.sys --> c:\windows\System32\Drivers\uqruhfso.sys [?]
S3 urhrfvmx;urhrfvmx;\??\c:\windows\System32\Drivers\urhrfvmx.sys --> c:\windows\System32\Drivers\urhrfvmx.sys [?]
S3 urppuztw;urppuztw;\??\c:\windows\System32\Drivers\urppuztw.sys --> c:\windows\System32\Drivers\urppuztw.sys [?]
S3 uswckyom;uswckyom;\??\c:\windows\System32\Drivers\uswckyom.sys --> c:\windows\System32\Drivers\uswckyom.sys [?]
S3 utjxkckr;utjxkckr;\??\c:\windows\System32\Drivers\utjxkckr.sys --> c:\windows\System32\Drivers\utjxkckr.sys [?]
S3 utobrsba;utobrsba;\??\c:\windows\System32\Drivers\utobrsba.sys --> c:\windows\System32\Drivers\utobrsba.sys [?]
S3 utyvggpm;utyvggpm;\??\c:\windows\System32\Drivers\utyvggpm.sys --> c:\windows\System32\Drivers\utyvggpm.sys [?]
S3 uvfllegu;uvfllegu;\??\c:\windows\System32\Drivers\uvfllegu.sys --> c:\windows\System32\Drivers\uvfllegu.sys [?]
S3 uwpswtsx;uwpswtsx;\??\c:\windows\System32\Drivers\uwpswtsx.sys --> c:\windows\System32\Drivers\uwpswtsx.sys [?]
S3 uyprcqri;uyprcqri;\??\c:\windows\System32\Drivers\uyprcqri.sys --> c:\windows\System32\Drivers\uyprcqri.sys [?]
S3 uytdennq;uytdennq;\??\c:\windows\System32\Drivers\uytdennq.sys --> c:\windows\System32\Drivers\uytdennq.sys [?]
S3 vajqtgyy;vajqtgyy;\??\c:\windows\System32\Drivers\vajqtgyy.sys --> c:\windows\System32\Drivers\vajqtgyy.sys [?]
S3 vcflfske;vcflfske;\??\c:\windows\System32\Drivers\vcflfske.sys --> c:\windows\System32\Drivers\vcflfske.sys [?]
S3 vclzsvci;vclzsvci;\??\c:\windows\System32\Drivers\vclzsvci.sys --> c:\windows\System32\Drivers\vclzsvci.sys [?]
S3 vcuyywqc;vcuyywqc;\??\c:\windows\System32\Drivers\vcuyywqc.sys --> c:\windows\System32\Drivers\vcuyywqc.sys [?]
S3 veaotwbj;veaotwbj;\??\c:\windows\System32\Drivers\veaotwbj.sys --> c:\windows\System32\Drivers\veaotwbj.sys [?]
S3 vfwsrdzi;vfwsrdzi;\??\c:\windows\System32\Drivers\vfwsrdzi.sys --> c:\windows\System32\Drivers\vfwsrdzi.sys [?]
S3 vgiysbdw;vgiysbdw;\??\c:\windows\System32\Drivers\vgiysbdw.sys --> c:\windows\System32\Drivers\vgiysbdw.sys [?]
S3 viwzxjin;viwzxjin;\??\c:\windows\System32\Drivers\viwzxjin.sys --> c:\windows\System32\Drivers\viwzxjin.sys [?]
S3 vjpngqlv;vjpngqlv;\??\c:\windows\System32\Drivers\vjpngqlv.sys --> c:\windows\System32\Drivers\vjpngqlv.sys [?]
S3 vlfyfnhx;vlfyfnhx;\??\c:\windows\System32\Drivers\vlfyfnhx.sys --> c:\windows\System32\Drivers\vlfyfnhx.sys [?]
S3 vnjratng;vnjratng;\??\c:\windows\System32\Drivers\vnjratng.sys --> c:\windows\System32\Drivers\vnjratng.sys [?]
S3 vnttazhf;vnttazhf;\??\c:\windows\System32\Drivers\vnttazhf.sys --> c:\windows\System32\Drivers\vnttazhf.sys [?]
S3 vrndaqrb;vrndaqrb;\??\c:\windows\System32\Drivers\vrndaqrb.sys --> c:\windows\System32\Drivers\vrndaqrb.sys [?]
S3 vrqxagba;vrqxagba;\??\c:\windows\System32\Drivers\vrqxagba.sys --> c:\windows\System32\Drivers\vrqxagba.sys [?]
S3 vrunpdrz;vrunpdrz;\??\c:\windows\System32\Drivers\vrunpdrz.sys --> c:\windows\System32\Drivers\vrunpdrz.sys [?]
S3 vvrtvsrm;vvrtvsrm;\??\c:\windows\System32\Drivers\vvrtvsrm.sys --> c:\windows\System32\Drivers\vvrtvsrm.sys [?]
S3 wbjedsfs;wbjedsfs;\??\c:\windows\System32\Drivers\wbjedsfs.sys --> c:\windows\System32\Drivers\wbjedsfs.sys [?]
S3 wfuveimi;wfuveimi;\??\c:\windows\System32\Drivers\wfuveimi.sys --> c:\windows\System32\Drivers\wfuveimi.sys [?]
S3 wgboxafm;wgboxafm;\??\c:\windows\System32\Drivers\wgboxafm.sys --> c:\windows\System32\Drivers\wgboxafm.sys [?]
S3 wkphguwv;wkphguwv;\??\c:\windows\System32\Drivers\wkphguwv.sys --> c:\windows\System32\Drivers\wkphguwv.sys [?]
S3 wlegvvxs;wlegvvxs;\??\c:\windows\System32\Drivers\wlegvvxs.sys --> c:\windows\System32\Drivers\wlegvvxs.sys [?]
S3 wprahfxq;wprahfxq;\??\c:\windows\System32\Drivers\wprahfxq.sys --> c:\windows\System32\Drivers\wprahfxq.sys [?]
S3 wqlxiuos;wqlxiuos;\??\c:\windows\System32\Drivers\wqlxiuos.sys --> c:\windows\System32\Drivers\wqlxiuos.sys [?]
S3 wtmqugju;wtmqugju;\??\c:\windows\System32\Drivers\wtmqugju.sys --> c:\windows\System32\Drivers\wtmqugju.sys [?]
S3 wuqzgyex;wuqzgyex;\??\c:\windows\System32\Drivers\wuqzgyex.sys --> c:\windows\System32\Drivers\wuqzgyex.sys [?]
S3 wvemglkc;wvemglkc;\??\c:\windows\System32\Drivers\wvemglkc.sys --> c:\windows\System32\Drivers\wvemglkc.sys [?]
S3 wvfkzfox;wvfkzfox;\??\c:\windows\System32\Drivers\wvfkzfox.sys --> c:\windows\System32\Drivers\wvfkzfox.sys [?]
S3 wwqpkrpa;wwqpkrpa;\??\c:\windows\System32\Drivers\wwqpkrpa.sys --> c:\windows\System32\Drivers\wwqpkrpa.sys [?]
S3 wxbldsjg;wxbldsjg;\??\c:\windows\System32\Drivers\wxbldsjg.sys --> c:\windows\System32\Drivers\wxbldsjg.sys [?]
S3 wxrupbdo;wxrupbdo;\??\c:\windows\System32\Drivers\wxrupbdo.sys --> c:\windows\System32\Drivers\wxrupbdo.sys [?]
S3 xafbddri;xafbddri;\??\c:\windows\System32\Drivers\xafbddri.sys --> c:\windows\System32\Drivers\xafbddri.sys [?]
S3 xbrzfnrw;xbrzfnrw;\??\c:\windows\System32\Drivers\xbrzfnrw.sys --> c:\windows\System32\Drivers\xbrzfnrw.sys [?]
S3 xcxbxutr;xcxbxutr;\??\c:\windows\System32\Drivers\xcxbxutr.sys --> c:\windows\System32\Drivers\xcxbxutr.sys [?]
S3 xcyvatka;xcyvatka;\??\c:\windows\System32\Drivers\xcyvatka.sys --> c:\windows\System32\Drivers\xcyvatka.sys [?]
S3 xfiblapk;xfiblapk;\??\c:\windows\System32\Drivers\xfiblapk.sys --> c:\windows\System32\Drivers\xfiblapk.sys [?]
S3 xgnkqjuk;xgnkqjuk;\??\c:\windows\System32\Drivers\xgnkqjuk.sys --> c:\windows\System32\Drivers\xgnkqjuk.sys [?]
S3 xjdlaica;xjdlaica;c:\windows\system32\drivers\xjdlaica.sys [2009-04-03 33920]
S3 xlfqtdou;xlfqtdou;\??\c:\windows\System32\Drivers\xlfqtdou.sys --> c:\windows\System32\Drivers\xlfqtdou.sys [?]
S3 xlzoupwe;xlzoupwe;\??\c:\windows\System32\Drivers\xlzoupwe.sys --> c:\windows\System32\Drivers\xlzoupwe.sys [?]
S3 xmtmidra;xmtmidra;\??\c:\windows\System32\Drivers\xmtmidra.sys --> c:\windows\System32\Drivers\xmtmidra.sys [?]
S3 xtdxzuci;xtdxzuci;\??\c:\windows\System32\Drivers\xtdxzuci.sys --> c:\windows\System32\Drivers\xtdxzuci.sys [?]
S3 xtumvheh;xtumvheh;\??\c:\windows\System32\Drivers\xtumvheh.sys --> c:\windows\System32\Drivers\xtumvheh.sys [?]
S3 xuaztrrh;xuaztrrh;\??\c:\windows\System32\Drivers\xuaztrrh.sys --> c:\windows\System32\Drivers\xuaztrrh.sys [?]
S3 xuurrbld;xuurrbld;\??\c:\windows\System32\Drivers\xuurrbld.sys --> c:\windows\System32\Drivers\xuurrbld.sys [?]
S3 yckobzds;yckobzds;\??\c:\windows\System32\Drivers\yckobzds.sys --> c:\windows\System32\Drivers\yckobzds.sys [?]
S3 ydplzhot;ydplzhot;\??\c:\windows\System32\Drivers\ydplzhot.sys --> c:\windows\System32\Drivers\ydplzhot.sys [?]
S3 ygerlgxf;ygerlgxf;\??\c:\windows\System32\Drivers\ygerlgxf.sys --> c:\windows\System32\Drivers\ygerlgxf.sys [?]
S3 ygsyqxgj;ygsyqxgj;\??\c:\windows\System32\Drivers\ygsyqxgj.sys --> c:\windows\System32\Drivers\ygsyqxgj.sys [?]
S3 yngwvxub;yngwvxub;\??\c:\windows\System32\Drivers\yngwvxub.sys --> c:\windows\System32\Drivers\yngwvxub.sys [?]
S3 yovvccyq;yovvccyq;\??\c:\windows\System32\Drivers\yovvccyq.sys --> c:\windows\System32\Drivers\yovvccyq.sys [?]
S3 yqgznamy;yqgznamy;\??\c:\windows\System32\Drivers\yqgznamy.sys --> c:\windows\System32\Drivers\yqgznamy.sys [?]
S3 yqhylfqp;yqhylfqp;\??\c:\windows\System32\Drivers\yqhylfqp.sys --> c:\windows\System32\Drivers\yqhylfqp.sys [?]
S3 yrjjhmro;yrjjhmro;\??\c:\windows\System32\Drivers\yrjjhmro.sys --> c:\windows\System32\Drivers\yrjjhmro.sys [?]
S3 ytzkoiwm;ytzkoiwm;\??\c:\windows\System32\Drivers\ytzkoiwm.sys --> c:\windows\System32\Drivers\ytzkoiwm.sys [?]
S3 yuandnul;yuandnul;\??\c:\windows\System32\Drivers\yuandnul.sys --> c:\windows\System32\Drivers\yuandnul.sys [?]
S3 yuvpxohi;yuvpxohi;\??\c:\windows\System32\Drivers\yuvpxohi.sys --> c:\windows\System32\Drivers\yuvpxohi.sys [?]
S3 yveyneea;yveyneea;\??\c:\windows\System32\Drivers\yveyneea.sys --> c:\windows\System32\Drivers\yveyneea.sys [?]
S3 yviqkzwp;yviqkzwp;\??\c:\windows\System32\Drivers\yviqkzwp.sys --> c:\windows\System32\Drivers\yviqkzwp.sys [?]
S3 yvvkvrpi;yvvkvrpi;\??\c:\windows\System32\Drivers\yvvkvrpi.sys --> c:\windows\System32\Drivers\yvvkvrpi.sys [?]
S3 ywknnrvm;ywknnrvm;\??\c:\windows\System32\Drivers\ywknnrvm.sys --> c:\windows\System32\Drivers\ywknnrvm.sys [?]
S3 yxwppqdv;yxwppqdv;\??\c:\windows\System32\Drivers\yxwppqdv.sys --> c:\windows\System32\Drivers\yxwppqdv.sys [?]
S3 yzvrypbj;yzvrypbj;\??\c:\windows\System32\Drivers\yzvrypbj.sys --> c:\windows\System32\Drivers\yzvrypbj.sys [?]
S3 yzxgpmoo;yzxgpmoo;\??\c:\windows\System32\Drivers\yzxgpmoo.sys --> c:\windows\System32\Drivers\yzxgpmoo.sys [?]
S3 zcsecbjs;zcsecbjs;\??\c:\windows\System32\Drivers\zcsecbjs.sys --> c:\windows\System32\Drivers\zcsecbjs.sys [?]
S3 zdenndak;zdenndak;\??\c:\windows\System32\Drivers\zdenndak.sys --> c:\windows\System32\Drivers\zdenndak.sys [?]
S3 zekzdkuc;zekzdkuc;\??\c:\windows\System32\Drivers\zekzdkuc.sys --> c:\windows\System32\Drivers\zekzdkuc.sys [?]
S3 zijgkxaz;zijgkxaz;\??\c:\windows\System32\Drivers\zijgkxaz.sys --> c:\windows\System32\Drivers\zijgkxaz.sys [?]
S3 zkggrxao;zkggrxao;\??\c:\windows\System32\Drivers\zkggrxao.sys --> c:\windows\System32\Drivers\zkggrxao.sys [?]
S3 znwotkdc;znwotkdc;\??\c:\windows\System32\Drivers\znwotkdc.sys --> c:\windows\System32\Drivers\znwotkdc.sys [?]
S3 zqbumvvq;zqbumvvq;\??\c:\windows\System32\Drivers\zqbumvvq.sys --> c:\windows\System32\Drivers\zqbumvvq.sys [?]
S3 zrjkshfe;zrjkshfe;\??\c:\windows\System32\Drivers\zrjkshfe.sys --> c:\windows\System32\Drivers\zrjkshfe.sys [?]
S3 zsmorfyr;zsmorfyr;\??\c:\windows\System32\Drivers\zsmorfyr.sys --> c:\windows\System32\Drivers\zsmorfyr.sys [?]
S3 ztpglfea;ztpglfea;\??\c:\windows\System32\Drivers\ztpglfea.sys --> c:\windows\System32\Drivers\ztpglfea.sys [?]
S3 zudyoups;zudyoups;\??\c:\windows\System32\Drivers\zudyoups.sys --> c:\windows\System32\Drivers\zudyoups.sys [?]
S3 zweoqkep;zweoqkep;\??\c:\windows\System32\Drivers\zweoqkep.sys --> c:\windows\System32\Drivers\zweoqkep.sys [?]
S3 zwscrjxr;zwscrjxr;\??\c:\windows\System32\Drivers\zwscrjxr.sys --> c:\windows\System32\Drivers\zwscrjxr.sys [?]
S3 zyzkrvyk;zyzkrvyk;\??\c:\windows\System32\Drivers\zyzkrvyk.sys --> c:\windows\System32\Drivers\zyzkrvyk.sys [?]
S3 zzuywmcr;zzuywmcr;\??\c:\windows\System32\Drivers\zzuywmcr.sys --> c:\windows\System32\Drivers\zzuywmcr.sys [?]



[Okocza]

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

Autor postu otrzymał pochwałę

[J-Mar]

3 część loga:

Kod: Zaznacz wszystko

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12   REG_MULTI_SZ      Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt   REG_MULTI_SZ      hpqcxs08 hpqddsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e5de2e72-fff7-11dd-ab6c-001e4c2c3066}]
\Shell\AutoRun\command - H:\AutoRunCardDetector.exe
.
Zawartość folderu 'Zaplanowane zadania'

2009-04-03 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 17:53]

2009-04-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-05 13:15]

2009-04-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.pl/
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
FF - ProfilePath - c:\documents and settings\Dariusz Marzec\Dane aplikacji\Mozilla\Firefox\Profiles\uz1t1ju7.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-08 12:10:14
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\progra~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\[u]0[/u]\FTRTSVC.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
.
**************************************************************************
.
Czas ukończenia: 2009-04-08 12:13:00 - komputer został uruchomiony ponownie [Dariusz Marzec]
ComboFix-quarantined-files.txt  2009-04-08 10:12:58
ComboFix2.txt  2009-02-26 11:10:42
ComboFix3.txt  2009-02-26 08:00:31

Przed: 47 654 539 264 bajtów wolnych
Po: 47,731,859,456 bajtów wolnych

691   --- E O F ---   2009-02-25 07:56:35



Dodano Dzisiaj, 09:02:
Czyli z tego loga wynika, że ComboFix nie usunął tamtego wirusa jeszcze? Postaram się to zrobić jutro, co mi napisałeś. Dzięki

[Okocza]

heban, założ swój temat i zastosuj się do zasad panujących w zdiale bezpieczeństwo.