20:01:29.0480 6792 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 20:01:29.0698 6792 ============================================================ 20:01:29.0698 6792 Current date / time: 2013/06/29 20:01:29.0698 20:01:29.0698 6792 SystemInfo: 20:01:29.0698 6792 20:01:29.0698 6792 OS Version: 6.1.7601 ServicePack: 1.0 20:01:29.0698 6792 Product type: Workstation 20:01:29.0698 6792 ComputerName: MATĚJ-PC 20:01:29.0698 6792 UserName: Správce 20:01:29.0698 6792 Windows directory: C:\Windows 20:01:29.0698 6792 System windows directory: C:\Windows 20:01:29.0698 6792 Running under WOW64 20:01:29.0698 6792 Processor architecture: Intel x64 20:01:29.0698 6792 Number of processors: 4 20:01:29.0698 6792 Page size: 0x1000 20:01:29.0698 6792 Boot type: Normal boot 20:01:29.0698 6792 ============================================================ 20:01:30.0041 6792 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb) , SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinde r: 0xFF, Type 'K0', Flags 0x00000040 20:01:30.0041 6792 ============================================================ 20:01:30.0041 6792 \Device\Harddisk0\DR0: 20:01:30.0041 6792 MBR partitions: 20:01:30.0041 6792 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x 1F00800, BlocksNum 0x32000 20:01:30.0041 6792 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x 1F32800, BlocksNum 0x55613000 20:01:30.0041 6792 ============================================================ 20:01:30.0057 6792 C: <-> \Device\Harddisk0\DR0\Partition2 20:01:30.0057 6792 ============================================================ 20:01:30.0057 6792 Initialize success 20:01:30.0057 6792 ============================================================ 20:01:31.0929 8180 ============================================================ 20:01:31.0929 8180 Scan started 20:01:31.0929 8180 Mode: Manual; 20:01:31.0929 8180 ============================================================ 20:01:32.0163 8180 ================ Scan system memory ======================== 20:01:32.0163 8180 System memory - ok 20:01:32.0163 8180 ================ Scan services ============================= 20:01:32.0381 8180 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Wind ows\system32\drivers\1394ohci.sys 20:01:32.0381 8180 1394ohci - ok 20:01:32.0413 8180 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Wind ows\system32\drivers\ACPI.sys 20:01:32.0413 8180 ACPI - ok 20:01:32.0444 8180 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Wind ows\system32\drivers\acpipmi.sys 20:01:32.0444 8180 AcpiPmi - ok 20:01:32.0537 8180 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Prog ram Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 20:01:32.0537 8180 AdobeARMservice - ok 20:01:32.0693 8180 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateS vc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 20:01:32.0693 8180 AdobeFlashPlayerUpdateSvc - ok 20:01:32.0740 8180 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Wind ows\system32\drivers\adp94xx.sys 20:01:32.0740 8180 adp94xx - ok 20:01:32.0771 8180 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Wind ows\system32\drivers\adpahci.sys 20:01:32.0771 8180 adpahci - ok 20:01:32.0787 8180 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Wind ows\system32\drivers\adpu320.sys 20:01:32.0787 8180 adpu320 - ok 20:01:32.0803 8180 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Wind ows\System32\aelupsvc.dll 20:01:32.0803 8180 AeLookupSvc - ok 20:01:32.0865 8180 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Wind ows\system32\drivers\afd.sys 20:01:32.0865 8180 AFD - ok 20:01:32.0881 8180 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Wind ows\system32\drivers\agp440.sys 20:01:32.0881 8180 agp440 - ok 20:01:32.0912 8180 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Wind ows\System32\alg.exe 20:01:32.0912 8180 ALG - ok 20:01:32.0959 8180 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Wind ows\system32\drivers\aliide.sys 20:01:32.0959 8180 aliide - ok 20:01:32.0959 8180 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Wind ows\system32\drivers\amdide.sys 20:01:32.0959 8180 amdide - ok 20:01:32.0990 8180 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Wind ows\system32\drivers\amdk8.sys 20:01:32.0990 8180 AmdK8 - ok 20:01:33.0005 8180 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Wind ows\system32\drivers\amdppm.sys 20:01:33.0005 8180 AmdPPM - ok 20:01:33.0037 8180 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Wind ows\system32\drivers\amdsata.sys 20:01:33.0037 8180 amdsata - ok 20:01:33.0052 8180 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Wind ows\system32\drivers\amdsbs.sys 20:01:33.0052 8180 amdsbs - ok 20:01:33.0083 8180 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Wind ows\system32\drivers\amdxata.sys 20:01:33.0083 8180 amdxata - ok 20:01:33.0115 8180 [ FA766C7988FDD78F2B2D55AA7536FFB4 ] ApfiltrService C:\Wind ows\system32\DRIVERS\Apfiltr.sys 20:01:33.0115 8180 ApfiltrService - ok 20:01:33.0146 8180 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Wind ows\system32\drivers\appid.sys 20:01:33.0146 8180 AppID - ok 20:01:33.0177 8180 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Wind ows\System32\appidsvc.dll 20:01:33.0177 8180 AppIDSvc - ok 20:01:33.0208 8180 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Wind ows\System32\appinfo.dll 20:01:33.0208 8180 Appinfo - ok 20:01:33.0302 8180 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\ Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceSe rvice.exe 20:01:33.0302 8180 Apple Mobile Device - ok 20:01:33.0333 8180 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Wind ows\system32\drivers\arc.sys 20:01:33.0349 8180 arc - ok 20:01:33.0364 8180 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Wind ows\system32\drivers\arcsas.sys 20:01:33.0364 8180 arcsas - ok 20:01:33.0473 8180 [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state C:\Wind ows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 20:01:33.0473 8180 aspnet_state - ok 20:01:33.0505 8180 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk C:\Wind ows\system32\drivers\aswFsBlk.sys 20:01:33.0520 8180 aswFsBlk - ok 20:01:33.0551 8180 [ 890918D53B80B474CFAFB48995B85AF3 ] aswKbd C:\Wind ows\system32\drivers\aswKbd.sys 20:01:33.0551 8180 aswKbd - ok 20:01:33.0583 8180 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt C:\Wind ows\system32\drivers\aswMonFlt.sys 20:01:33.0583 8180 aswMonFlt - ok 20:01:33.0583 8180 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr C:\Wind ows\System32\Drivers\aswrdr2.sys 20:01:33.0598 8180 aswRdr - ok 20:01:33.0661 8180 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt C:\Wind ows\system32\drivers\aswRvrt.sys 20:01:33.0661 8180 aswRvrt - ok 20:01:33.0707 8180 [ 8C0800CDB501CFC1164B286A0478DC10 ] aswSnx C:\Wind ows\system32\drivers\aswSnx.sys 20:01:33.0707 8180 aswSnx - ok 20:01:33.0723 8180 [ 3815DB16CDA62190F5C0A65118F3D714 ] aswSP C:\Wind ows\system32\drivers\aswSP.sys 20:01:33.0723 8180 aswSP - ok 20:01:33.0739 8180 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi C:\Wind ows\system32\drivers\aswTdi.sys 20:01:33.0739 8180 aswTdi - ok 20:01:33.0770 8180 [ 22F521108881DC59837F6FC614E0568F ] aswVmm C:\Wind ows\system32\drivers\aswVmm.sys 20:01:33.0770 8180 aswVmm - ok 20:01:33.0801 8180 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Wind ows\system32\DRIVERS\asyncmac.sys 20:01:33.0801 8180 AsyncMac - ok 20:01:33.0848 8180 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Wind ows\system32\drivers\atapi.sys 20:01:33.0848 8180 atapi - ok 20:01:33.0895 8180 [ 78B183A794A08978EA0A8D017054352B ] AthBTPort C:\Wind ows\system32\DRIVERS\btath_flt.sys 20:01:33.0895 8180 AthBTPort - ok 20:01:33.0941 8180 [ 7E63E24E17B5233FA69E6613E84B5306 ] AtherosSvc C:\Prog ram Files (x86)\Bluetooth Suite\adminservice.exe 20:01:33.0941 8180 AtherosSvc - ok 20:01:34.0019 8180 [ 43E7A4298644526B0190C43AF6489DB1 ] athr C:\Wind ows\system32\DRIVERS\athrx.sys 20:01:34.0035 8180 athr - ok 20:01:34.0082 8180 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C: \Windows\System32\Audiosrv.dll 20:01:34.0082 8180 AudioEndpointBuilder - ok 20:01:34.0097 8180 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Wind ows\System32\Audiosrv.dll 20:01:34.0097 8180 AudioSrv - ok 20:01:34.0191 8180 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Pro gram Files\AVAST Software\Avast\AvastSvc.exe 20:01:34.0191 8180 avast! Antivirus - ok 20:01:34.0238 8180 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Wind ows\System32\AxInstSV.dll 20:01:34.0238 8180 AxInstSV - ok 20:01:34.0269 8180 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Wind ows\system32\drivers\bxvbda.sys 20:01:34.0269 8180 b06bdrv - ok 20:01:34.0331 8180 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Wind ows\system32\DRIVERS\b57nd60a.sys 20:01:34.0331 8180 b57nd60a - ok 20:01:34.0363 8180 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Wind ows\System32\bdesvc.dll 20:01:34.0363 8180 BDESVC - ok 20:01:34.0378 8180 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Wind ows\system32\drivers\Beep.sys 20:01:34.0378 8180 Beep - ok 20:01:34.0409 8180 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Wind ows\System32\bfe.dll 20:01:34.0425 8180 BFE - ok 20:01:34.0472 8180 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Wind ows\System32\qmgr.dll 20:01:34.0487 8180 BITS - ok 20:01:34.0550 8180 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Wind ows\system32\drivers\blbdrive.sys 20:01:34.0565 8180 blbdrive - ok 20:01:34.0628 8180 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Prog ram Files\Bonjour\mDNSResponder.exe 20:01:34.0628 8180 Bonjour Service - ok 20:01:34.0659