Prośba o sprawdzenie logów OTL

Kakuś · 26 Grudnia 2011

Coś mi neta przerywa, a pewien facet który poczyścił za pomocą OTL'a i mu pomogło - zrywało połączenie, analogicznie jest u mnie, nie wiem czego to już problem jak nie czegoś na kompie...

http://wklej.org/hash/cdb90e3cb2b/

http://wklej.org/hash/329930da946/

filutka78 · 26 Grudnia 2011

Nie widzę tu żadnej infekcji.

Kosmetyka:

Uruchom OTL i w oknie Własne opcje skanowania/Script wklej to:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=3
O4 - HKU\S-1-5-21-216496928-3683348734-811118293-1000..\Run: [ASRockXTU] File not found
O4 - HKU\S-1-5-21-216496928-3683348734-811118293-1000..\Run: [zASRockInstantBoot] File not found
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Oci1gnij przez IDM - Reg Error: Value error. File not found
O8:64bit: - Extra context menu item: Oci1gnij wszystkie linki przez IDM - Reg Error: Value error. File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Oci1gnij przez IDM - Reg Error: Value error. File not found
O8 - Extra context menu item: Oci1gnij wszystkie linki przez IDM - Reg Error: Value error. File not found

:Commands
[emptytemp]

Kliknij w Wykonaj Script. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Użyj >Ad-Remover i kliknij w nim Clean (uruchom z prawokliku "jako Administrator)

Pokaż raport z niego.

Daj log z >MBRCheck

F.

Kakuś · 26 Grudnia 2011

ad-remover

======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 19:18:46 on 26/12/2011, Normal boot

Microsoft Windows 7 Ultimate Service Pack 1 (X64)
FraneKimono@GAMEARENA (To Be Filled By O.E.M. To Be Filled By O.E.M.)

============== ACTION(S) ==============

(!) -- Temporary files deleted.

Key deleted: HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key deleted: HKLM\Software\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key deleted: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key deleted: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key deleted: HKLM\Software\Classes\Toolbar.BandObject
Key deleted: HKLM\Software\Classes\Toolbar.BandObject.1
Key deleted: HKLM\Software\Classes\Toolbar.ToolbarHelperObject
Key deleted: HKLM\Software\Classes\Toolbar.ToolbarHelperObject.1
Key deleted: HKCU\Software\Zugo
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Extensions\{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF}

============== ADDITIONNAL SCAN ==============

**** Mozilla Firefox Version [5.0 (pl)] ****

Plugins\npganymedenet.dll ( )
HKLM_MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0 (x)
HKLM_MozillaPlugins\@idsoftware.com/QuakeLive (x)
HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x)
HKLM_MozillaPlugins\Adobe Reader (x)
HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x)
Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search)
Searchplugins\babylon.xml (hxxp://search.babylon.com/web/{searchTerms})
Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results)
Searchplugins\fcmdSrchddr.xml (hxxp://start.facemoods.com/?a=ddr&f=4&q={searchTerms}/)
Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb)
Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms})
Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj)
Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms})
Components\browsercomps.dll (Mozilla Foundation)
HKCU_Extensions|mozilla_cc@internetdownloadmanager.com - C:\Users\FraneKimono\AppData\Roaming\IDM\idmmzcc3

-- C:\Users\FraneKimono\AppData\Roaming\Mozilla\FireFox\Profiles\wc6vse45.default --
Extensions\AstroToolbar@toolbarnet.com (Astroburn Toolbar)
Extensions\ffxtlbr@babylon.com (Babylon)
Extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F} (StartNow Toolbar)
Extensions\{EEE6C361-6118-11DC-9C72-001320C79847} (SweetIM Toolbar for Firefox)
Searchplugins\absearch-search.xml (hxxp://www.daemon-search.com/search/web?q={searchTerms}/)
Searchplugins\startsear.xml (?)
Searchplugins\sweetim.xml (?)
Searchplugins\yahoo-zugo.xml (?)
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, Web Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://startsear.ch/?aff=3&q=
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, Web Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl,
Prefs.js - browser.search.selectedEngine, SweetIM Search
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=3
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=10a7e2e8000000000000002522a6628d&tlver=1.4.3...
Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl,
Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&affID=19993&mntrId=10a7e2e800...
Prefs.js - browser.search.defaultengine, Web Searchuser_pref(browser.startup.homepage, hxxp://www.astroburn-search.com/startpage|hx...
Prefs.js - browser.search.selectedEngine, DAEMON Search

========================================

**** Google Chrome Version [16.0.912.63] ****

Extension\ihflimipbcaljfnojhhknppphnnciiif (C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoods.crx) (?)
Extension\lifbcibllhkdhoafpjfnlhfpfgnpldfl (C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx) (?)

-- C:\Users\FraneKimono\AppData\Local\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Enabled: true) (hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t)
Preferences - homepage: hxxp://www.google.pl/
Preferences - homepage_is_newtabpage: false
Plugin - Remoting Viewer (Enabled: true) (internal-remoting-viewer) (x)
Plugin - Native Client (Enabled: true) (C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll)
Plugin - Skype Toolbars (Enabled: true) (C:\Users\FraneKimono\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.3.0.7550_0\npSkypeChromePlugin.dll)
Plugin - Pando Web Plugin (Enabled: true) (C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll)
Plugin - Veetle TV Player (Enabled: true) (C:\Program Files (x86)\Veetle\Player\npvlc.dll)
Plugin - Veetle TV Core (Enabled: true) (C:\Program Files (x86)\Veetle\plugins\npVeetle.dll)
Plugin - QUAKE LIVE (Enabled: true) (C:\ProgramData\id Software\QuakeLive\npquakezero.dll)
Plugin - Windows Activation Technologies (Enabled: true) (C:\Windows\system32\Wat\npWatWeb.dll)
Plugin - "Java" (Enabled: true)
Plugin - "Silverlight" (Enabled: true)
Plugin - "Remoting Viewer" (Enabled: true)
Plugin - "Native Client" (Enabled: true)
Plugin - "Skype Toolbars" (Enabled: true)
Plugin - "GanymedeNet.Detector" (Enabled: true)
Plugin - "Picasa" (Enabled: true)
Plugin - "Pando Web Plugin" (Enabled: true)
Plugin - "Veetle TV Player" (Enabled: true)
Plugin - "Veetle TV Core" (Enabled: true)
Plugin - "QUAKE LIVE" (Enabled: true)
Plugin - "Windows Activation Technologies" (Enabled: true)

========================================

**** Internet Explorer Version [9.0.8112.16421] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57} - "Yahoo!" (hxxp://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_nam...)
HKCU_SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} - "Search" (hxxp://start.facemoods.com/?a=ddr&s={searchTerms}&f=4)
HKCU_SearchScopes\{7CC01678-A329-4D77-8CC7-E6420A32D1A6} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKCU_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "Web Search" (hxxp://startsear.ch/?aff=3&q={searchTerms})
HKLM_SearchScopes\{7CC01678-A329-4D77-8CC7-E6420A32D1A6} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKLM_Toolbar|{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} (C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll)
HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\BabylonToolbarTlbr.dll)
HKLM_Toolbar|{5911488E-9D1E-40ec-8CBB-06B231CC153F} (C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll)
HKLM_Toolbar|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll)
HKLM_Toolbar|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll)
HKLM_Toolbar|{EFEED92A-A33D-4873-BA8F-32BAA631E54D} (C:\Program Files (x86)\Astroburn Toolbar\ABToolbar.dll)
HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
HKCU_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{02073B90-44EE-47B1-9633-732376A8A3C8} - C:\Program Files (x86)\Veetle\Player\VeetleNet.exe (?)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{28A36D69-07EA-44CE-B298-1A8B3E8B6FE1} - C:\Program Files (x86)\Skype\Phone\Skype.exe (x)
HKLM_ElevationPolicy\{2CBD2A57-2FD5-4F1A-9FC8-90ED48FA4187} - C:\Program Files (x86)\StartNow Toolbar\ToolbarBroker.exe (?)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\BabylonToolbarsrv.exe (Babylon Ltd.)
HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe (SweetIM Technologies Ltd.)
HKLM_ElevationPolicy\{FFDF9EF3-3C3A-4f05-9A6E-5D3B778EC567} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe (facemoods.com)
BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDMIEHlprObj Class" (C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll)
BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "Babylon toolbar helper" (C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\bh\BabylonToolbar.dll)
BHO\{64182481-4F71-486b-A045-B233BD0DA8FC} - "CescrtHlpr Object" (C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll)
BHO\{6E13D095-45C3-4271-9475-F3B48227DD9F} - "StartNow Toolbar Helper" (C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll)
BHO\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - "IE5BarLauncherBHO Class" (C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{EEE6C35C-6118-11DC-9C72-001320C79847} - "SweetIM Toolbar Helper" (C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll)

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files (x86)\Ad-Remover\Backup: 14 File(s)

C:\Ad-Report-CLEAN[1].txt - 26/12/2011 19:18:53 (17847 Byte(s))

End at: 19:19:50, 26/12/2011

============== E.O.F ==============

mbrcheck

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows 7 Ultimate Edition
Windows Information: Service Pack 1 (build 7601), 64-bit
Base Board Manufacturer: ASRock
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: To Be Filled By O.E.M.
System Product Name: To Be Filled By O.E.M.
Logical Drives Mask: 0x0080025c

Kernel Drivers (total 201):
0x03012000 \SystemRoot\system32\ntoskrnl.exe
0x035FB000 \SystemRoot\system32\hal.dll
0x00B97000 \SystemRoot\system32\kdcom.dll
0x00C1E000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00C6D000 \SystemRoot\system32\PSHED.dll
0x00C81000 \SystemRoot\system32\CLFS.SYS
0x00CDF000 \SystemRoot\system32\CI.dll
0x00EE4000 \SystemRoot\system32\drivers\Wdf01000.sys
0x00F88000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x0100D000 \SystemRoot\System32\Drivers\sptd.sys
0x0116A000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x01173000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x011A2000 \SystemRoot\system32\drivers\ACPI.sys
0x01000000 \SystemRoot\system32\drivers\msisadrv.sys
0x00F97000 \SystemRoot\system32\drivers\vdrvroot.sys
0x00FA4000 \SystemRoot\system32\drivers\pci.sys
0x00FD7000 \SystemRoot\System32\drivers\partmgr.sys
0x00E00000 \SystemRoot\system32\drivers\volmgr.sys
0x00E15000 \SystemRoot\System32\drivers\volmgrx.sys
0x011F9000 \SystemRoot\system32\drivers\pciide.sys
0x00E71000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x00E81000 \SystemRoot\System32\drivers\mountmgr.sys
0x00E9B000 \SystemRoot\system32\drivers\atapi.sys
0x00EA4000 \SystemRoot\system32\drivers\ataport.SYS
0x00ECE000 \SystemRoot\system32\drivers\amdxata.sys
0x00D9F000 \SystemRoot\system32\drivers\fltmgr.sys
0x00FEC000 \SystemRoot\system32\drivers\fileinfo.sys
0x01213000 \SystemRoot\System32\Drivers\Ntfs.sys
0x014E7000 \SystemRoot\System32\Drivers\msrpc.sys
0x01545000 \SystemRoot\System32\Drivers\ksecdd.sys
0x01560000 \SystemRoot\System32\Drivers\cng.sys
0x015D2000 \SystemRoot\System32\drivers\pcw.sys
0x015E3000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x01647000 \SystemRoot\system32\drivers\ndis.sys
0x0173A000 \SystemRoot\system32\drivers\NETIO.SYS
0x0179A000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x01817000 \SystemRoot\System32\drivers\tcpip.sys
0x01A1B000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x01A65000 \SystemRoot\system32\drivers\vmstorfl.sys
0x01A75000 \SystemRoot\system32\drivers\volsnap.sys
0x01AC1000 \SystemRoot\System32\Drivers\spldr.sys
0x01AC9000 \SystemRoot\System32\drivers\rdyboost.sys
0x01B03000 \SystemRoot\System32\Drivers\mup.sys
0x01B15000 \SystemRoot\System32\drivers\hwpolicy.sys
0x01B1E000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x01B58000 \SystemRoot\system32\drivers\disk.sys
0x01B6E000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x01BD4000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x01800000 \SystemRoot\System32\Drivers\Null.SYS
0x01809000 \SystemRoot\System32\Drivers\Beep.SYS
0x017C5000 \SystemRoot\System32\drivers\FNETURPX.SYS
0x017CE000 \SystemRoot\System32\drivers\vga.sys
0x01600000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x01625000 \SystemRoot\System32\drivers\watchdog.sys
0x01635000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x0163E000 \SystemRoot\system32\drivers\rdpencdd.sys
0x017DC000 \SystemRoot\system32\drivers\rdprefmp.sys
0x017E5000 \SystemRoot\System32\Drivers\Msfs.SYS
0x015ED000 \SystemRoot\System32\Drivers\Npfs.SYS
0x01400000 \SystemRoot\system32\DRIVERS\tdx.sys
0x017F0000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x0427E000 \??\C:\Program Files\NetLimiter 3\nltdi.sys
0x01422000 \SystemRoot\system32\drivers\afd.sys
0x04200000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04245000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x0424E000 \SystemRoot\system32\DRIVERS\pacer.sys
0x014AB000 \SystemRoot\system32\DRIVERS\vpcnfltr.sys
0x047EE000 \SystemRoot\system32\DRIVERS\netbios.sys
0x014BF000 \SystemRoot\system32\DRIVERS\serial.sys
0x013B6000 \SystemRoot\system32\DRIVERS\dtsoftbus01.sys
0x00C00000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x0404B000 \SystemRoot\system32\drivers\vpcvmm.sys
0x040A2000 \SystemRoot\system32\DRIVERS\termdd.sys
0x040B6000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x04107000 \SystemRoot\system32\drivers\nsiproxy.sys
0x04113000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x0411E000 \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
0x0413C000 \SystemRoot\System32\drivers\discache.sys
0x0414B000 \SystemRoot\system32\drivers\csc.sys
0x041CE000 \SystemRoot\System32\Drivers\dfsc.sys
0x041EC000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x04000000 \SystemRoot\system32\DRIVERS\avkmgr.sys
0x0400A000 \SystemRoot\system32\DRIVERS\avipbb.sys
0x04030000 \SystemRoot\system32\DRIVERS\AsrAppCharger.sys
0x0742C000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x07452000 \SystemRoot\system32\DRIVERS\atikmpag.sys
0x0823B000 \SystemRoot\system32\DRIVERS\atikmdag.sys
0x08C49000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x08D3D000 \SystemRoot\System32\drivers\dxgmms1.sys
0x08D83000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x08DA7000 \SystemRoot\system32\DRIVERS\HECIx64.sys
0x08DB8000 \SystemRoot\system32\drivers\usbehci.sys
0x074A5000 \SystemRoot\system32\drivers\USBPORT.SYS
0x074FB000 \SystemRoot\system32\DRIVERS\Rt64win7.sys
0x08DC9000 \SystemRoot\System32\Drivers\EtronXHCI.sys
0x08DD9000 \SystemRoot\system32\DRIVERS\fdc.sys
0x08200000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x0821E000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x0822D000 \SystemRoot\system32\DRIVERS\serenum.sys
0x07551000 \SystemRoot\System32\Drivers\arp3hlgw.SYS
0x08DE6000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x07595000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x075A5000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x075BB000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x075DF000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x02E55000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x02E84000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x02E9F000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x02EC0000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x02EDA000 \SystemRoot\system32\DRIVERS\hamachi.sys
0x07817000 \SystemRoot\system32\DRIVERS\nlndis.sys
0x07D79000 \SystemRoot\system32\DRIVERS\rdpbus.sys
0x07D84000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x07D93000 \SystemRoot\system32\DRIVERS\swenum.sys
0x07D95000 \SystemRoot\system32\DRIVERS\ks.sys
0x07DD8000 \SystemRoot\system32\DRIVERS\umbus.sys
0x02EE5000 \SystemRoot\system32\DRIVERS\vpcusb.sys
0x07DEA000 \SystemRoot\system32\DRIVERS\usbrpm.sys
0x07DF9000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x02F02000 \SystemRoot\system32\DRIVERS\vpchbus.sys
0x02F3E000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x07800000 \SystemRoot\System32\Drivers\EtronHub3.sys
0x02F98000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x02FAD000 \SystemRoot\system32\drivers\AtihdW76.sys
0x02E00000 \SystemRoot\system32\drivers\portcls.sys
0x07400000 \SystemRoot\system32\drivers\drmk.sys
0x0780A000 \SystemRoot\system32\drivers\ksthunk.sys
0x09E5C000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x0A0B0000 \SystemRoot\System32\Drivers\crashdmp.sys
0x0A0BE000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x0A0CA000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x0A0D3000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x00000000 \SystemRoot\System32\win32k.sys
0x0A0E6000 \SystemRoot\System32\drivers\Dxapi.sys
0x0A0F2000 \SystemRoot\system32\DRIVERS\monitor.sys
0x005A0000 \SystemRoot\System32\TSDDD.dll
0x00780000 \SystemRoot\System32\cdd.dll
0x0A100000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x0A11D000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x0A12B000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x0A144000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x0A14D000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x0A15B000 \SystemRoot\system32\drivers\luafv.sys
0x0A17E000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0x0A19E000 \SystemRoot\system32\drivers\WudfPf.sys
0x0A1BF000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x0A1D4000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x064FC000 \SystemRoot\system32\drivers\HTTP.sys
0x065C5000 \SystemRoot\system32\DRIVERS\bowser.sys
0x065E3000 \SystemRoot\System32\drivers\mpsdrv.sys
0x06400000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x0642D000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x0647B000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x064EE000 \??\C:\Windows\system32\drivers\cpuz135_x64.sys
0x0649F000 \SystemRoot\system32\DRIVERS\idmwfp.sys
0x064B8000 \SystemRoot\system32\DRIVERS\lirsgt.sys
0x0AEAC000 \SystemRoot\system32\drivers\peauth.sys
0x0AF52000 \SystemRoot\System32\Drivers\secdrv.SYS
0x0AF5D000 \SystemRoot\System32\DRIVERS\srvnet.sys

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows 7 Ultimate Edition
Windows Information: Service Pack 1 (build 7601), 64-bit
Base Board Manufacturer: ASRock
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: To Be Filled By O.E.M.
System Product Name: To Be Filled By O.E.M.
Logical Drives Mask: 0x0080025c

Kernel Drivers (total 201):
0x03012000 \SystemRoot\system32\ntoskrnl.exe
0x035FB000 \SystemRoot\system32\hal.dll
0x00B97000 \SystemRoot\system32\kdcom.dll
0x00C1E000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00C6D000 \SystemRoot\system32\PSHED.dll
0x00C81000 \SystemRoot\system32\CLFS.SYS
0x00CDF000 \SystemRoot\system32\CI.dll
0x00EE4000 \SystemRoot\system32\drivers\Wdf01000.sys
0x00F88000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x0100D000 \SystemRoot\System32\Drivers\sptd.sys
0x0116A000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x01173000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x011A2000 \SystemRoot\system32\drivers\ACPI.sys
0x01000000 \SystemRoot\system32\drivers\msisadrv.sys
0x00F97000 \SystemRoot\system32\drivers\vdrvroot.sys
0x00FA4000 \SystemRoot\system32\drivers\pci.sys
0x00FD7000 \SystemRoot\System32\drivers\partmgr.sys
0x00E00000 \SystemRoot\system32\drivers\volmgr.sys
0x00E15000 \SystemRoot\System32\drivers\volmgrx.sys
0x011F9000 \SystemRoot\system32\drivers\pciide.sys
0x00E71000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x00E81000 \SystemRoot\System32\drivers\mountmgr.sys
0x00E9B000 \SystemRoot\system32\drivers\atapi.sys
0x00EA4000 \SystemRoot\system32\drivers\ataport.SYS
0x00ECE000 \SystemRoot\system32\drivers\amdxata.sys
0x00D9F000 \SystemRoot\system32\drivers\fltmgr.sys
0x00FEC000 \SystemRoot\system32\drivers\fileinfo.sys
0x01213000 \SystemRoot\System32\Drivers\Ntfs.sys
0x014E7000 \SystemRoot\System32\Drivers\msrpc.sys
0x01545000 \SystemRoot\System32\Drivers\ksecdd.sys
0x01560000 \SystemRoot\System32\Drivers\cng.sys
0x015D2000 \SystemRoot\System32\drivers\pcw.sys
0x015E3000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x01647000 \SystemRoot\system32\drivers\ndis.sys
0x0173A000 \SystemRoot\system32\drivers\NETIO.SYS
0x0179A000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x01817000 \SystemRoot\System32\drivers\tcpip.sys
0x01A1B000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x01A65000 \SystemRoot\system32\drivers\vmstorfl.sys
0x01A75000 \SystemRoot\system32\drivers\volsnap.sys
0x01AC1000 \SystemRoot\System32\Drivers\spldr.sys
0x01AC9000 \SystemRoot\System32\drivers\rdyboost.sys
0x01B03000 \SystemRoot\System32\Drivers\mup.sys
0x01B15000 \SystemRoot\System32\drivers\hwpolicy.sys
0x01B1E000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x01B58000 \SystemRoot\system32\drivers\disk.sys
0x01B6E000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x01BD4000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x01800000 \SystemRoot\System32\Drivers\Null.SYS
0x01809000 \SystemRoot\System32\Drivers\Beep.SYS
0x017C5000 \SystemRoot\System32\drivers\FNETURPX.SYS
0x017CE000 \SystemRoot\System32\drivers\vga.sys
0x01600000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x01625000 \SystemRoot\System32\drivers\watchdog.sys
0x01635000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x0163E000 \SystemRoot\system32\drivers\rdpencdd.sys
0x017DC000 \SystemRoot\system32\drivers\rdprefmp.sys
0x017E5000 \SystemRoot\System32\Drivers\Msfs.SYS
0x015ED000 \SystemRoot\System32\Drivers\Npfs.SYS
0x01400000 \SystemRoot\system32\DRIVERS\tdx.sys
0x017F0000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x0427E000 \??\C:\Program Files\NetLimiter 3\nltdi.sys
0x01422000 \SystemRoot\system32\drivers\afd.sys
0x04200000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04245000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x0424E000 \SystemRoot\system32\DRIVERS\pacer.sys
0x014AB000 \SystemRoot\system32\DRIVERS\vpcnfltr.sys
0x047EE000 \SystemRoot\system32\DRIVERS\netbios.sys
0x014BF000 \SystemRoot\system32\DRIVERS\serial.sys
0x013B6000 \SystemRoot\system32\DRIVERS\dtsoftbus01.sys
0x00C00000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x0404B000 \SystemRoot\system32\drivers\vpcvmm.sys
0x040A2000 \SystemRoot\system32\DRIVERS\termdd.sys
0x040B6000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x04107000 \SystemRoot\system32\drivers\nsiproxy.sys
0x04113000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x0411E000 \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
0x0413C000 \SystemRoot\System32\drivers\discache.sys
0x0414B000 \SystemRoot\system32\drivers\csc.sys
0x041CE000 \SystemRoot\System32\Drivers\dfsc.sys
0x041EC000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x04000000 \SystemRoot\system32\DRIVERS\avkmgr.sys
0x0400A000 \SystemRoot\system32\DRIVERS\avipbb.sys
0x04030000 \SystemRoot\system32\DRIVERS\AsrAppCharger.sys
0x0742C000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x07452000 \SystemRoot\system32\DRIVERS\atikmpag.sys
0x0823B000 \SystemRoot\system32\DRIVERS\atikmdag.sys
0x08C49000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x08D3D000 \SystemRoot\System32\drivers\dxgmms1.sys
0x08D83000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x08DA7000 \SystemRoot\system32\DRIVERS\HECIx64.sys
0x08DB8000 \SystemRoot\system32\drivers\usbehci.sys
0x074A5000 \SystemRoot\system32\drivers\USBPORT.SYS
0x074FB000 \SystemRoot\system32\DRIVERS\Rt64win7.sys
0x08DC9000 \SystemRoot\System32\Drivers\EtronXHCI.sys
0x08DD9000 \SystemRoot\system32\DRIVERS\fdc.sys
0x08200000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x0821E000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x0822D000 \SystemRoot\system32\DRIVERS\serenum.sys
0x07551000 \SystemRoot\System32\Drivers\arp3hlgw.SYS
0x08DE6000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x07595000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x075A5000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x075BB000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x075DF000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x02E55000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x02E84000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x02E9F000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x02EC0000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x02EDA000 \SystemRoot\system32\DRIVERS\hamachi.sys
0x07817000 \SystemRoot\system32\DRIVERS\nlndis.sys
0x07D79000 \SystemRoot\system32\DRIVERS\rdpbus.sys
0x07D84000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x07D93000 \SystemRoot\system32\DRIVERS\swenum.sys
0x07D95000 \SystemRoot\system32\DRIVERS\ks.sys
0x07DD8000 \SystemRoot\system32\DRIVERS\umbus.sys
0x02EE5000 \SystemRoot\system32\DRIVERS\vpcusb.sys
0x07DEA000 \SystemRoot\system32\DRIVERS\usbrpm.sys
0x07DF9000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x02F02000 \SystemRoot\system32\DRIVERS\vpchbus.sys
0x02F3E000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x07800000 \SystemRoot\System32\Drivers\EtronHub3.sys
0x02F98000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x02FAD000 \SystemRoot\system32\drivers\AtihdW76.sys
0x02E00000 \SystemRoot\system32\drivers\portcls.sys
0x07400000 \SystemRoot\system32\drivers\drmk.sys
0x0780A000 \SystemRoot\system32\drivers\ksthunk.sys
0x09E5C000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x0A0B0000 \SystemRoot\System32\Drivers\crashdmp.sys
0x0A0BE000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x0A0CA000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x0A0D3000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x00000000 \SystemRoot\System32\win32k.sys
0x0A0E6000 \SystemRoot\System32\drivers\Dxapi.sys
0x0A0F2000 \SystemRoot\system32\DRIVERS\monitor.sys
0x005A0000 \SystemRoot\System32\TSDDD.dll
0x00780000 \SystemRoot\System32\cdd.dll
0x0A100000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x0A11D000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x0A12B000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x0A144000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x0A14D000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x0A15B000 \SystemRoot\system32\drivers\luafv.sys
0x0A17E000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0x0A19E000 \SystemRoot\system32\drivers\WudfPf.sys
0x0A1BF000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x0A1D4000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x064FC000 \SystemRoot\system32\drivers\HTTP.sys
0x065C5000 \SystemRoot\system32\DRIVERS\bowser.sys
0x065E3000 \SystemRoot\System32\drivers\mpsdrv.sys
0x06400000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x0642D000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x0647B000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x064EE000 \??\C:\Windows\system32\drivers\cpuz135_x64.sys
0x0649F000 \SystemRoot\system32\DRIVERS\idmwfp.sys
0x064B8000 \SystemRoot\system32\DRIVERS\lirsgt.sys
0x0AEAC000 \SystemRoot\system32\drivers\peauth.sys
0x0AF52000 \SystemRoot\System32\Drivers\secdrv.SYS
0x0AF5D000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x0AF8E000 \SystemRoot\System32\drivers\tcpipreg.sys
0x0AE00000 \SystemRoot\System32\DRIVERS\srv2.sys
0x0B25A000 \SystemRoot\System32\DRIVERS\srv.sys
0x77380000 \Windows\System32\ntdll.dll
0x483D0000 \Windows\System32\smss.exe
0xFF6A0000 \Windows\System32\apisetschema.dll
0xFF900000 \Windows\System32\autochk.exe
0xFF630000 \Windows\System32\Wldap32.dll
0xFF5B0000 \Windows\System32\difxapi.dll
0x77280000 \Windows\System32\user32.dll
0xFF510000 \Windows\System32\comdlg32.dll
0xFF4C0000 \Windows\System32\ws2_32.dll
0xFF390000 \Windows\System32\rpcrt4.dll
0xFF2F0000 \Windows\System32\clbcatq.dll
0xFF110000 \Windows\System32\setupapi.dll
0xFF070000 \Windows\System32\msvcrt.dll
0xFF050000 \Windows\System32\imagehlp.dll
0x77550000 \Windows\System32\normaliz.dll
0xFEF40000 \Windows\System32\msctf.dll
0x77070000 \Windows\System32\iertutil.dll
0xFED30000 \Windows\System32\ole32.dll
0x76F20000 \Windows\System32\urlmon.dll
0xFED10000 \Windows\System32\sechost.dll
0xFECA0000 \Windows\System32\gdi32.dll
0xFEC20000 \Windows\System32\shlwapi.dll
0xFEC10000 \Windows\System32\nsi.dll
0xFEC00000 \Windows\System32\lpk.dll
0xFEBD0000 \Windows\System32\imm32.dll
0x76DC0000 \Windows\System32\wininet.dll
0xFDE40000 \Windows\System32\shell32.dll
0x76CA0000 \Windows\System32\kernel32.dll
0x77540000 \Windows\System32\psapi.dll
0xFDD60000 \Windows\System32\advapi32.dll
0xFDC90000 \Windows\System32\usp10.dll
0xFDBB0000 \Windows\System32\oleaut32.dll
0xFDB10000 \Windows\System32\comctl32.dll
0xFDAD0000 \Windows\System32\wintrust.dll
0xFDAB0000 \Windows\System32\devobj.dll
0xFDA70000 \Windows\System32\cfgmgr32.dll
0xFD900000 \Windows\System32\crypt32.dll
0xFD890000 \Windows\System32\KernelBase.dll
0xFD880000 \Windows\System32\msasn1.dll

Processes (total 76):
0 System Idle Process
4 System
308 C:\Windows\System32\smss.exe
464 csrss.exe
536 C:\Windows\System32\wininit.exe
564 csrss.exe
596 C:\Windows\System32\services.exe
620 C:\Windows\System32\lsass.exe
628 C:\Windows\System32\lsm.exe
680 C:\Windows\System32\winlogon.exe
784 C:\Windows\System32\svchost.exe
868 C:\Windows\System32\svchost.exe
928 C:\Windows\System32\atiesrxx.exe
1004 C:\Windows\System32\svchost.exe
120 C:\Windows\System32\svchost.exe
340 C:\Windows\System32\svchost.exe
744 C:\Windows\System32\audiodg.exe
1072 C:\Windows\System32\svchost.exe
1176 C:\Windows\System32\svchost.exe
1268 C:\Windows\System32\atieclxx.exe
1316 C:\Windows\System32\spoolsv.exe
1364 C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
1436 C:\Windows\System32\svchost.exe
1564 C:\Windows\System32\dwm.exe
1612 C:\Windows\explorer.exe
1632 C:\Windows\System32\taskhost.exe
1744 C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
1820 C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
1840 C:\Windows\System32\svchost.exe
1868 C:\Program Files\NetLimiter 3\nlsvc.exe
1892 C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
1964 <unknown>
1164 C:\Windows\System32\svchost.exe
1860 C:\Windows\SysWOW64\PnkBstrA.exe
1544 C:\Windows\SysWOW64\PnkBstrB.exe
2072 C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
2092 C:\Windows\System32\svchost.exe
2116 C:\Windows\System32\svchost.exe
2164 C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe
2280 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
2872 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
2896 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
2904 C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
2936 C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
2944 C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
2952 C:\Windows\System32\conhost.exe
3000 C:\Program Files (x86)\Internet Download Manager\IDMan.exe
3032 C:\Program Files\NetLimiter 3\NLClientApp.exe
2404 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
1692 <unknown>
2800 C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
1624 C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
2776 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
3456 C:\Windows\System32\SearchIndexer.exe
3908 C:\Windows\System32\svchost.exe
4032 C:\Windows\System32\svchost.exe
4252 C:\Windows\System32\svchost.exe
4368 C:\Windows\System32\taskhost.exe
4396 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
4444 C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
5076 dllhost.exe
1192 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
3284 C:\Windows\System32\svchost.exe
4472 C:\Windows\System32\svchost.exe
4768 C:\Program Files (x86)\foobar2000\foobar2000.exe
3516 C:\Windows\servicing\TrustedInstaller.exe
1028 C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
2172 C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\chrome.exe
4852 C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\chrome.exe
2316 C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\chrome.exe
1560 C:\Users\FraneKimono\AppData\Local\Google\Chrome\Application\chrome.exe
4844 C:\Windows\System32\dllhost.exe
4596 C:\Windows\System32\SearchProtocolHost.exe
4732 C:\Windows\System32\SearchFilterHost.exe
4352 C:\Users\FraneKimono\Desktop\MBRCheck.exe
3872 C:\Windows\System32\conhost.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`06500000 (NTFS)
\\.\X: --> \\.\PhysicalDrive0 at offset 0x00000018`6a000000 (NTFS)

PhysicalDrive0 Model Number: SAMSUNGHD502HJ, Rev: 1AJ10001

Size Device Name MBR Status
--------------------------------------------
465 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979

Done!

filutka78 · 26 Grudnia 2011

MBRCheck nie wykrył Rootkita w MBR dysku twardego.

Tak więc problem nie wynika z infekcji.

F.

Zaloguj się

Temat został przeniesiony do archiwum

Prośba o sprawdzenie logów OTL

Rekomendowane odpowiedzi

Kakuś 0

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

filutka78 11

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Kakuś 0

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

filutka78 11

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Ostatnio przeglądający 0 użytkowników

Tematy

Odpowiedzi

Aktywni użytkownicy

Przeglądaj

Aktywność