Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosim kontrol myweb search
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
Dokoncene , ale ako mam dat log? mam tam len ze vymazat...
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
Aha 
ja tam mam uložiť súbor
myslel som že ten adware
PS: teraz naslo len 19 zabudol som napisat ze som nekjake zmazal Sas-om
tu je log
Malwarebytes' Anti-Malware 1.44
Verzia databázy: 3796
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
26.2.2010 20:15:01
mbam-log-2010-02-26 (20-14-56).txt
Typ kontroly: Úplná (C:\|D:\|)
Objektov kontrolovaných: 179264
Uplynutý cas: 40 minute(s), 44 second(s)
Infikovaných procesov pamäte: 0
Infikovaných modulov pamäte: 0
Infikovaných registracných klúcov: 21
Infikovaných registracných hodnôt: 2
Infikovaných registracných údajov položiek: 0
Infikovaných priecinkov: 0
Infikovaných súborov: 0
Infikovaných procesov pamäte:
(Žiadne škodlivé položky)
Infikovaných modulov pamäte:
(Žiadne škodlivé položky)
Infikovaných registracných klúcov:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
Infikovaných registracných hodnôt:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3popularscreensavers (Adware.MyWebSearch) -> No action taken.
Infikovaných registracných údajov položiek:
(Žiadne škodlivé položky)
Infikovaných priecinkov:
(Žiadne škodlivé položky)
Infikovaných súborov:
(Žiadne škodlivé položky)
ja tam mam uložiť súbor
myslel som že ten adware
PS: teraz naslo len 19 zabudol som napisat ze som nekjake zmazal Sas-om
tu je log
Malwarebytes' Anti-Malware 1.44
Verzia databázy: 3796
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
26.2.2010 20:15:01
mbam-log-2010-02-26 (20-14-56).txt
Typ kontroly: Úplná (C:\|D:\|)
Objektov kontrolovaných: 179264
Uplynutý cas: 40 minute(s), 44 second(s)
Infikovaných procesov pamäte: 0
Infikovaných modulov pamäte: 0
Infikovaných registracných klúcov: 21
Infikovaných registracných hodnôt: 2
Infikovaných registracných údajov položiek: 0
Infikovaných priecinkov: 0
Infikovaných súborov: 0
Infikovaných procesov pamäte:
(Žiadne škodlivé položky)
Infikovaných modulov pamäte:
(Žiadne škodlivé položky)
Infikovaných registracných klúcov:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
Infikovaných registracných hodnôt:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3popularscreensavers (Adware.MyWebSearch) -> No action taken.
Infikovaných registracných údajov položiek:
(Žiadne škodlivé položky)
Infikovaných priecinkov:
(Žiadne škodlivé položky)
Infikovaných súborov:
(Žiadne škodlivé položky)
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
Re: Prosim kontrol myweb search
Vše, co našel MBAM smažte a restartujte PC. Dejte nový log z RSIT http://www.viry.cz/forum/viewtopic.php?f=30&t=82744
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
Logfile of random's system information tool 1.06 (written by random/random)
Run by Lenovo at 2010-02-26 20:23:47
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 30 GB (73%) free of 41 GB
Total RAM: 1014 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:24:27, on 26.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\WINDOWS\system32\spoolsv.exe
C:\QSTART.SYS\config\DVMExportService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LanSchool\student.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
D:\Program files\Mozilla Firefox\firefox.exe
D:\Moje dokumenty\Iné\VIRY.CZ\Nástroje\RSIT.exe
C:\Program Files\trend micro\Lenovo.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Internet Explorer Web Blocker - {1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00} - C:\WINDOWS\system32\Lsk_iBlk.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [EnergyUtility] "C:\Program Files\Lenovo\Energy Management\utility.exe"
O4 - HKLM\..\Run: [RTHDCPL] "RTHDCPL.EXE"
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup ... 6559585796
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 9162241593
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program files\superantispyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM - C:\QSTART.SYS\config\DVMExportService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LanSchool Student Service (LanSchoolStudent) - LanSchool Technologies, llc - C:\Program Files\LanSchool\student.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 7026 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\firefox.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00}]
lsk_WebBlk Class - C:\WINDOWS\system32\Lsk_iBlk.dll [2009-11-06 148784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-22 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-22 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast!"=C:\PROGRA~1\Avast4\ashDisp.exe [2009-11-25 81000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-05-23 1146880]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2008-07-10 4456448]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-02-17 17508864]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2008-08-28 1283984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StudentDOG]
D:\Program files\Student DOG\StudentDOG.exe [2009-12-27 2278912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Teacher]
C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"LanSchoolStudent"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Program files\superantispyware\SASWINLO.dll [2009-09-03 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Program files\superantispyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanSchoolStudent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanSchoolStudent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"HideFastUserSwitching"=0
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoLogoff"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Total Commander\TOTALCMD.EXE"="C:\Program Files\Total Commander\TOTALCMD.EXE:*:Disabled:Total Commander 32 bit international version, file manager replacement for Windows"
"D:\Program files\Warcraft III\Warcraft III.exe"="D:\Program files\Warcraft III\Warcraft III.exe:*:Disabled:Warcraft III"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Program files\ICQ6.5\ICQ.exe"="D:\Program files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
======List of files/folders created in the last 1 months======
2010-02-26 20:22:01 ----HD---- C:\dvmexp
2010-02-26 19:50:24 ----SHD---- C:\RECYCLER
2010-02-26 18:36:43 ----A---- C:\ComboFix.txt
2010-02-26 18:29:11 ----A---- C:\Boot.bak
2010-02-26 18:29:07 ----RASHD---- C:\cmdcons
2010-02-26 18:26:28 ----A---- C:\WINDOWS\zip.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWSC.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWREG.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\sed.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\PEV.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\NIRCMD.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\MBR.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\grep.exe
2010-02-26 18:26:21 ----D---- C:\WINDOWS\ERDNT
2010-02-26 18:26:19 ----D---- C:\ComboFix
2010-02-26 18:26:11 ----D---- C:\Qoobox
2010-02-26 18:02:13 ----D---- C:\VundoFix Backups
2010-02-26 18:02:13 ----A---- C:\VundoFix.txt
2010-02-26 14:17:25 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-02-25 18:27:07 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-02-24 20:34:29 ----D---- C:\WINDOWS\Prefetch
2010-02-24 08:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-22 15:53:54 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-02-22 11:43:15 ----D---- C:\Documents and Settings\All Users\Application Data\IObit
2010-02-17 14:55:56 ----D---- C:\Program Files\trend micro
2010-02-17 14:55:56 ----D---- C:\Documents and Settings\Lenovo\Application Data\gtk-2.0
2010-02-16 16:14:47 ----A---- C:\WINDOWS\ntbtlog.txt
2010-02-16 10:04:26 ----D---- C:\rsit
2010-02-14 16:18:44 ----D---- C:\Documents and Settings\Lenovo\Application Data\Ambient Design
2010-02-14 11:24:01 ----A---- C:\WINDOWS\iesshell.dll
2010-02-14 11:21:03 ----D---- C:\Documents and Settings\All Users\Application Data\Protexis
2010-02-10 08:12:51 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 08:12:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 08:05:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 08:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 08:05:05 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 08:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 08:04:04 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 08:03:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 08:03:09 ----A---- C:\WINDOWS\imsins.BAK
2010-02-10 08:02:51 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-06 18:22:53 ----D---- C:\Documents and Settings\Lenovo\Application Data\Malwarebytes
2010-02-06 14:22:43 ----D---- C:\Documents and Settings\Lenovo\Application Data\GlarySoft
2010-02-05 16:25:16 ----D---- C:\Documents and Settings\All Users\Application Data\OptiTex
2010-02-05 16:15:08 ----AH---- C:\WINDOWS\family007.ini
2010-02-05 15:47:53 ----D---- C:\Documents and Settings\Lenovo\Application Data\vlc
2010-02-04 19:10:26 ----A---- C:\WINDOWS\SpeederXP.INI
2010-02-04 18:52:34 ----D---- C:\Documents and Settings\Lenovo\Application Data\Stellarium
2010-02-04 18:34:12 ----D---- C:\Program Files\Sun
2010-02-04 18:34:12 ----D---- C:\Program Files\Google
2010-02-04 13:59:17 ----A---- C:\WINDOWS\tmps41.txt
2010-02-03 14:54:06 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-02-03 14:53:54 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-02-03 14:53:51 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-02-03 14:52:47 ----D---- C:\WINDOWS\Internet Logs
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-02-03 14:51:41 ----HDC---- C:\Documents and Settings\All Users\Application Data\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2010-02-03 14:13:39 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kecal
2010-02-03 13:52:19 ----D---- C:\Program Files\Common Files\SWF Studio
2010-01-31 15:25:18 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kingston
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\PCDLIB32.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\NPPLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTWND90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTWN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTHK90W.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTKRN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTISI90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTFIL90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTEFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDIS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTANN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWPG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWMF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTIF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTGA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFRAS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPSD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPNG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCT90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMSP90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMAC90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMB90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFKODAK.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFICA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFGIF90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX7.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFAX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFEPS90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFDIC90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCAL90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFBMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAWD90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAVI90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWVIEW32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWRESX32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDENC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDCXC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWCODC32.DLL
2010-01-29 14:25:09 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-01-28 18:11:42 ----N---- C:\WINDOWS\system32\MpSigStub.exe
======List of files/folders modified in the last 1 months======
2010-02-26 20:24:08 ----D---- C:\WINDOWS\Temp
2010-02-26 20:22:59 ----D---- C:\Program Files\LanSchool
2010-02-26 20:22:59 ----D---- C:\LanSchool Files
2010-02-26 20:22:10 ----AD---- C:\WINDOWS
2010-02-26 20:22:01 ----D---- C:\temp
2010-02-26 20:20:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-26 20:20:31 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-26 20:19:35 ----D---- C:\Documents and Settings\Lenovo\Application Data\Skype
2010-02-26 18:34:25 ----A---- C:\WINDOWS\system.ini
2010-02-26 18:33:48 ----D---- C:\Program Files
2010-02-26 18:33:47 ----AD---- C:\WINDOWS\system32
2010-02-26 18:33:46 ----D---- C:\WINDOWS\srchasst
2010-02-26 18:32:12 ----D---- C:\WINDOWS\system32\drivers
2010-02-26 18:32:12 ----D---- C:\WINDOWS\AppPatch
2010-02-26 18:32:07 ----D---- C:\Program Files\Common Files
2010-02-26 18:29:11 ----RASH---- C:\boot.ini
2010-02-26 16:25:23 ----D---- C:\Documents and Settings\Lenovo\Application Data\skypePM
2010-02-26 14:37:16 ----SHD---- C:\WINDOWS\Installer
2010-02-26 14:37:16 ----D---- C:\Config.Msi
2010-02-26 14:17:33 ----D---- C:\WINDOWS\system32\DirectX
2010-02-26 14:17:32 ----HD---- C:\WINDOWS\inf
2010-02-26 13:54:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-25 08:47:34 ----D---- C:\Documents and Settings\Lenovo\Application Data\Google
2010-02-25 08:43:48 ----SD---- C:\WINDOWS\Tasks
2010-02-25 08:02:29 ----ASHDC---- C:\WINDOWS\system32\dllcache
2010-02-24 21:48:05 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-24 21:46:22 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-24 21:35:12 ----D---- C:\WINDOWS\system32\config
2010-02-24 21:34:56 ----D---- C:\WINDOWS\system32\wbem
2010-02-24 21:34:56 ----D---- C:\WINDOWS\Registration
2010-02-24 21:34:25 ----D---- C:\Documents and Settings\Lenovo\Application Data\Macromedia
2010-02-24 20:41:50 ----SHD---- C:\System Volume Information
2010-02-24 20:18:03 ----D---- C:\WINDOWS\pss
2010-02-24 08:45:25 ----D---- C:\WINDOWS\ie8updates
2010-02-24 08:45:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-22 15:20:57 ----D---- C:\WINDOWS\Debug
2010-02-22 14:14:32 ----A---- C:\WINDOWS\win.ini
2010-02-22 13:56:17 ----D---- C:\Documents and Settings\Lenovo\Application Data\IObit
2010-02-19 16:00:07 ----A---- C:\WINDOWS\ARCHPR.INI
2010-02-18 15:31:10 ----D---- C:\QSTART.000
2010-02-18 13:46:48 ----D---- C:\WINDOWS\system32\Restore
2010-02-17 14:55:56 ----SD---- C:\Documents and Settings\Lenovo\Application Data\Microsoft
2010-02-16 16:20:18 ----D---- C:\WINDOWS\Network Diagnostic
2010-02-16 16:15:13 ----D---- C:\Documents and Settings
2010-02-13 07:51:44 ----D---- C:\Documents and Settings\Lenovo\Application Data\Adobe
2010-02-12 17:52:52 ----D---- C:\Program Files\Common Files\Adobe
2010-02-12 17:52:33 ----D---- C:\WINDOWS\WinSxS
2010-02-12 17:13:07 ----D---- C:\Program Files\Adobe
2010-02-12 17:05:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-02-10 21:05:21 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-06 12:11:17 ----D---- C:\WINDOWS\speech
2010-02-06 12:08:32 ----D---- C:\Documents and Settings\Lenovo\Application Data\Mozilla
2010-02-04 18:34:15 ----D---- C:\Program Files\Windows Desktop Search
2010-02-03 19:25:00 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-29 14:05:35 ----RSD---- C:\WINDOWS\Fonts
2010-01-28 19:49:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\D:\Program files\superantispyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\Program files\superantispyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 PMEM;PMEM; \??\C:\WINDOWS\system32\drivers\PMEMNT.SYS []
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\WINDOWS\system32\DRIVERS\AcpiVpc.sys [2008-01-11 9472]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-06-20 176640]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2008-09-11 1386624]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-30 534568]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-01-07 991784]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]
R3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2008-03-10 57384]
R3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2008-02-04 37032]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-02-18 5028352]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2007-02-19 21376]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RTS5121.sys [2008-07-23 157696]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-05-23 225280]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S1 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\WINDOWS\system32\Drivers\eusk2par.sys []
S1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\DOCUME~1\Lenovo\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nhcDriverDevice;Notebook Hardware Control Driver; \??\C:\WINDOWS\system32\drivers\nhcDriver.sys []
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys []
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SASENUM;SASENUM; \??\D:\Program files\superantispyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys []
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
S4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Avast4\ashServ.exe [2009-11-25 138680]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe [2009-01-17 346720]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\QSTART.SYS\config\DVMExportService.exe [2008-11-20 307200]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-22 153376]
R2 LanSchoolStudent;LanSchool Student Service; C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-25 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
-----------------EOF-----------------
Run by Lenovo at 2010-02-26 20:23:47
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 30 GB (73%) free of 41 GB
Total RAM: 1014 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:24:27, on 26.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\WINDOWS\system32\spoolsv.exe
C:\QSTART.SYS\config\DVMExportService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LanSchool\student.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
D:\Program files\Mozilla Firefox\firefox.exe
D:\Moje dokumenty\Iné\VIRY.CZ\Nástroje\RSIT.exe
C:\Program Files\trend micro\Lenovo.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Internet Explorer Web Blocker - {1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00} - C:\WINDOWS\system32\Lsk_iBlk.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [EnergyUtility] "C:\Program Files\Lenovo\Energy Management\utility.exe"
O4 - HKLM\..\Run: [RTHDCPL] "RTHDCPL.EXE"
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup ... 6559585796
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 9162241593
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program files\superantispyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM - C:\QSTART.SYS\config\DVMExportService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LanSchool Student Service (LanSchoolStudent) - LanSchool Technologies, llc - C:\Program Files\LanSchool\student.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 7026 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\firefox.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00}]
lsk_WebBlk Class - C:\WINDOWS\system32\Lsk_iBlk.dll [2009-11-06 148784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-22 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-22 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast!"=C:\PROGRA~1\Avast4\ashDisp.exe [2009-11-25 81000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-05-23 1146880]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2008-07-10 4456448]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-02-17 17508864]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2008-08-28 1283984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StudentDOG]
D:\Program files\Student DOG\StudentDOG.exe [2009-12-27 2278912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Teacher]
C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"LanSchoolStudent"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Program files\superantispyware\SASWINLO.dll [2009-09-03 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Program files\superantispyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanSchoolStudent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanSchoolStudent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"HideFastUserSwitching"=0
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoLogoff"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Total Commander\TOTALCMD.EXE"="C:\Program Files\Total Commander\TOTALCMD.EXE:*:Disabled:Total Commander 32 bit international version, file manager replacement for Windows"
"D:\Program files\Warcraft III\Warcraft III.exe"="D:\Program files\Warcraft III\Warcraft III.exe:*:Disabled:Warcraft III"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Program files\ICQ6.5\ICQ.exe"="D:\Program files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"
"C:\Program Files\LanSchool\student.exe"="C:\Program Files\LanSchool\student.exe:*:Enabled:LanSchool Student"
======List of files/folders created in the last 1 months======
2010-02-26 20:22:01 ----HD---- C:\dvmexp
2010-02-26 19:50:24 ----SHD---- C:\RECYCLER
2010-02-26 18:36:43 ----A---- C:\ComboFix.txt
2010-02-26 18:29:11 ----A---- C:\Boot.bak
2010-02-26 18:29:07 ----RASHD---- C:\cmdcons
2010-02-26 18:26:28 ----A---- C:\WINDOWS\zip.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWSC.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\SWREG.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\sed.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\PEV.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\NIRCMD.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\MBR.exe
2010-02-26 18:26:28 ----A---- C:\WINDOWS\grep.exe
2010-02-26 18:26:21 ----D---- C:\WINDOWS\ERDNT
2010-02-26 18:26:19 ----D---- C:\ComboFix
2010-02-26 18:26:11 ----D---- C:\Qoobox
2010-02-26 18:02:13 ----D---- C:\VundoFix Backups
2010-02-26 18:02:13 ----A---- C:\VundoFix.txt
2010-02-26 14:17:25 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-02-25 18:27:07 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-02-24 20:34:29 ----D---- C:\WINDOWS\Prefetch
2010-02-24 08:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-22 15:53:54 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-02-22 11:43:15 ----D---- C:\Documents and Settings\All Users\Application Data\IObit
2010-02-17 14:55:56 ----D---- C:\Program Files\trend micro
2010-02-17 14:55:56 ----D---- C:\Documents and Settings\Lenovo\Application Data\gtk-2.0
2010-02-16 16:14:47 ----A---- C:\WINDOWS\ntbtlog.txt
2010-02-16 10:04:26 ----D---- C:\rsit
2010-02-14 16:18:44 ----D---- C:\Documents and Settings\Lenovo\Application Data\Ambient Design
2010-02-14 11:24:01 ----A---- C:\WINDOWS\iesshell.dll
2010-02-14 11:21:03 ----D---- C:\Documents and Settings\All Users\Application Data\Protexis
2010-02-10 08:12:51 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 08:12:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 08:05:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 08:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 08:05:05 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 08:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 08:04:04 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 08:03:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 08:03:09 ----A---- C:\WINDOWS\imsins.BAK
2010-02-10 08:02:51 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-06 18:22:53 ----D---- C:\Documents and Settings\Lenovo\Application Data\Malwarebytes
2010-02-06 14:22:43 ----D---- C:\Documents and Settings\Lenovo\Application Data\GlarySoft
2010-02-05 16:25:16 ----D---- C:\Documents and Settings\All Users\Application Data\OptiTex
2010-02-05 16:15:08 ----AH---- C:\WINDOWS\family007.ini
2010-02-05 15:47:53 ----D---- C:\Documents and Settings\Lenovo\Application Data\vlc
2010-02-04 19:10:26 ----A---- C:\WINDOWS\SpeederXP.INI
2010-02-04 18:52:34 ----D---- C:\Documents and Settings\Lenovo\Application Data\Stellarium
2010-02-04 18:34:12 ----D---- C:\Program Files\Sun
2010-02-04 18:34:12 ----D---- C:\Program Files\Google
2010-02-04 13:59:17 ----A---- C:\WINDOWS\tmps41.txt
2010-02-03 14:54:06 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-02-03 14:54:02 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-02-03 14:53:54 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-02-03 14:53:52 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-02-03 14:53:51 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-02-03 14:53:51 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-02-03 14:52:47 ----D---- C:\WINDOWS\Internet Logs
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-02-03 14:52:46 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-02-03 14:51:41 ----HDC---- C:\Documents and Settings\All Users\Application Data\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2010-02-03 14:13:39 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kecal
2010-02-03 13:52:19 ----D---- C:\Program Files\Common Files\SWF Studio
2010-01-31 15:25:18 ----D---- C:\Documents and Settings\Lenovo\Application Data\Kingston
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\PCDLIB32.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\NPPLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTWND90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTWN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTTHK90W.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTKRN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTISI90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTFIL90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTEFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDLG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTDIS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LTANN90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWPG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWMF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFWFX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTIF90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFTGA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFRAS90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPSD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPNG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCX90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCT90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFPCD90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMSP90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFMAC90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMB90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFLMA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFKODAK.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFIMG90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFICA90N.DLL
2010-01-29 15:04:54 ----A---- C:\WINDOWS\system32\LFGIF90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFPX7.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFFAX90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFEPS90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFDIC90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFCAL90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFBMP90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAWD90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\LFAVI90N.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWVIEW32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWRESX32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDENC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWDCXC32.DLL
2010-01-29 15:04:53 ----A---- C:\WINDOWS\system32\AWCODC32.DLL
2010-01-29 14:25:09 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-01-28 18:11:42 ----N---- C:\WINDOWS\system32\MpSigStub.exe
======List of files/folders modified in the last 1 months======
2010-02-26 20:24:08 ----D---- C:\WINDOWS\Temp
2010-02-26 20:22:59 ----D---- C:\Program Files\LanSchool
2010-02-26 20:22:59 ----D---- C:\LanSchool Files
2010-02-26 20:22:10 ----AD---- C:\WINDOWS
2010-02-26 20:22:01 ----D---- C:\temp
2010-02-26 20:20:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-26 20:20:31 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-26 20:19:35 ----D---- C:\Documents and Settings\Lenovo\Application Data\Skype
2010-02-26 18:34:25 ----A---- C:\WINDOWS\system.ini
2010-02-26 18:33:48 ----D---- C:\Program Files
2010-02-26 18:33:47 ----AD---- C:\WINDOWS\system32
2010-02-26 18:33:46 ----D---- C:\WINDOWS\srchasst
2010-02-26 18:32:12 ----D---- C:\WINDOWS\system32\drivers
2010-02-26 18:32:12 ----D---- C:\WINDOWS\AppPatch
2010-02-26 18:32:07 ----D---- C:\Program Files\Common Files
2010-02-26 18:29:11 ----RASH---- C:\boot.ini
2010-02-26 16:25:23 ----D---- C:\Documents and Settings\Lenovo\Application Data\skypePM
2010-02-26 14:37:16 ----SHD---- C:\WINDOWS\Installer
2010-02-26 14:37:16 ----D---- C:\Config.Msi
2010-02-26 14:17:33 ----D---- C:\WINDOWS\system32\DirectX
2010-02-26 14:17:32 ----HD---- C:\WINDOWS\inf
2010-02-26 13:54:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-25 08:47:34 ----D---- C:\Documents and Settings\Lenovo\Application Data\Google
2010-02-25 08:43:48 ----SD---- C:\WINDOWS\Tasks
2010-02-25 08:02:29 ----ASHDC---- C:\WINDOWS\system32\dllcache
2010-02-24 21:48:05 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-24 21:46:22 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-24 21:35:12 ----D---- C:\WINDOWS\system32\config
2010-02-24 21:34:56 ----D---- C:\WINDOWS\system32\wbem
2010-02-24 21:34:56 ----D---- C:\WINDOWS\Registration
2010-02-24 21:34:25 ----D---- C:\Documents and Settings\Lenovo\Application Data\Macromedia
2010-02-24 20:41:50 ----SHD---- C:\System Volume Information
2010-02-24 20:18:03 ----D---- C:\WINDOWS\pss
2010-02-24 08:45:25 ----D---- C:\WINDOWS\ie8updates
2010-02-24 08:45:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-22 15:20:57 ----D---- C:\WINDOWS\Debug
2010-02-22 14:14:32 ----A---- C:\WINDOWS\win.ini
2010-02-22 13:56:17 ----D---- C:\Documents and Settings\Lenovo\Application Data\IObit
2010-02-19 16:00:07 ----A---- C:\WINDOWS\ARCHPR.INI
2010-02-18 15:31:10 ----D---- C:\QSTART.000
2010-02-18 13:46:48 ----D---- C:\WINDOWS\system32\Restore
2010-02-17 14:55:56 ----SD---- C:\Documents and Settings\Lenovo\Application Data\Microsoft
2010-02-16 16:20:18 ----D---- C:\WINDOWS\Network Diagnostic
2010-02-16 16:15:13 ----D---- C:\Documents and Settings
2010-02-13 07:51:44 ----D---- C:\Documents and Settings\Lenovo\Application Data\Adobe
2010-02-12 17:52:52 ----D---- C:\Program Files\Common Files\Adobe
2010-02-12 17:52:33 ----D---- C:\WINDOWS\WinSxS
2010-02-12 17:13:07 ----D---- C:\Program Files\Adobe
2010-02-12 17:05:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-02-10 21:05:21 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-06 12:11:17 ----D---- C:\WINDOWS\speech
2010-02-06 12:08:32 ----D---- C:\Documents and Settings\Lenovo\Application Data\Mozilla
2010-02-04 18:34:15 ----D---- C:\Program Files\Windows Desktop Search
2010-02-03 19:25:00 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-29 14:05:35 ----RSD---- C:\WINDOWS\Fonts
2010-01-28 19:49:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\D:\Program files\superantispyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\Program files\superantispyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 PMEM;PMEM; \??\C:\WINDOWS\system32\drivers\PMEMNT.SYS []
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\WINDOWS\system32\DRIVERS\AcpiVpc.sys [2008-01-11 9472]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-06-20 176640]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2008-09-11 1386624]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-30 534568]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-01-07 991784]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]
R3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2008-03-10 57384]
R3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2008-02-04 37032]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-02-18 5028352]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2007-02-19 21376]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RTS5121.sys [2008-07-23 157696]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-05-23 225280]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S1 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\WINDOWS\system32\Drivers\eusk2par.sys []
S1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\DOCUME~1\Lenovo\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nhcDriverDevice;Notebook Hardware Control Driver; \??\C:\WINDOWS\system32\drivers\nhcDriver.sys []
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys []
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SASENUM;SASENUM; \??\D:\Program files\superantispyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys []
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
S4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Avast4\ashServ.exe [2009-11-25 138680]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe [2009-01-17 346720]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\QSTART.SYS\config\DVMExportService.exe [2008-11-20 307200]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-22 153376]
R2 LanSchoolStudent;LanSchool Student Service; C:\Program Files\LanSchool\student.exe [2009-11-06 1041712]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-25 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
-----------------EOF-----------------
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
No vyskytol sa malý problém, s combofixom nahodne som klikol na instalovanie konzoly... a teraz ked sa PC zapne, tak tam pise vyber konzola pre zotavenie... a Microsoft windows xp...
da sa to nejak uninstalovat?
a uz mozem pc precistit ccleanerom?
da sa to nejak uninstalovat?
a uz mozem pc precistit ccleanerom?
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
Re: Prosim kontrol myweb search
Můžu se zeptat proč Vám Konzole pro zotavení vadí? Já ji naopak doporučuji mít nainstalovanou, pokud systém nenaběhne, hodně věcí se dá vyřešit právě přes konzolu. Určitě se dá odebrat tak, aby nebyla v seznamu OS, ale to Vám potom bude k ničemu...
Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:
ComboFix /Uninstall
stiskněte Enter
Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe
Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
Odinstalujte ComboFix přes:Start >> Spustit, zkopírujte do okénka:
ComboFix /Uninstall
stiskněte Enter
Stáhněte T-Cleanerhttp://sweb.cz/Marinus/T-Cleaner.exe
- Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
- Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.
Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
- Spusťte.
- Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)
- Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
- Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
Záložka Čistič - Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
Záložka Registry - Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
OK Zavřít
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
No, ta konzola mi až tak nevadi ale , predtým som ju ešte neinstaloval a myslel som že teraz vzniknú komplikacie...
ale nevadí, keď hovoríte že sa môže zísť tak si ju nechám
no ale už idem na ten OTC
ale nevadí, keď hovoríte že sa môže zísť tak si ju nechám
no ale už idem na ten OTC
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
No, takže PC je už prečistené, ale stále tu sú komplikáce:
Aj ked som teraz použil OTM tak mi nešlo reštartovať (nešlo mi vypnuť, resp. sa môj pc dlho vypínal (asi 3min.) tak som musel tvrdé vypnutie... a to už aj včera, dokonca aj s programom "super fast shutdown" ... a furt musim použiť gombík...
neviete kde je chyba??
Aj ked som teraz použil OTM tak mi nešlo reštartovať (nešlo mi vypnuť, resp. sa môj pc dlho vypínal (asi 3min.) tak som musel tvrdé vypnutie... a to už aj včera, dokonca aj s programom "super fast shutdown" ... a furt musim použiť gombík...
neviete kde je chyba??
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
Re: Prosim kontrol myweb search
Pokračujte podle návodu AVPTool http://www.viry.cz/forum/viewtopic.php?f=29&t=58179-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
O.K ale ten AVPtool bude až v Pondelok, niečo treba urobiť...
Ale (zda sa mi že som to už spomínal...) to prečistenie pomohlo, PC sa z Hib. prepera rýchlejšie, tá svietiaca obrazovka netrvá dlho
Ale (zda sa mi že som to už spomínal...) to prečistenie pomohlo, PC sa z Hib. prepera rýchlejšie, tá svietiaca obrazovka netrvá dlho
-
Caroprd111
- VIP
- Příspěvky: 13493
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
-
Blluemartin
- Návštěvník
- Příspěvky: 160
- Registrován: 12 led 2010 14:18
Re: Prosim kontrol myweb search
Ach, jaj, ja mam na tie virusy 
asie nejaky magnet.. 
Avast mi hlasil HTML:Iframe-inf a ešte nejaky virus ....
Park krat mi to n ukazalo.....
Hrozne! mam dať ďalší log?
na stranke http://www.learnhowtodraw.com/
teraz uz nie
asie nejaky magnet.. Avast mi hlasil HTML:Iframe-inf a ešte nejaky virus ....
Park krat mi to n ukazalo.....
Hrozne! mam dať ďalší log?
na stranke http://www.learnhowtodraw.com/
teraz uz nie
Přispějete na provoz fóra?