vytizeny procesor, zadost o preventivni kontrolu

Zpráva

jarmyl · #1 Příspěvek od **jarmyl** » 02 bře 2010 05:24

Logfile of random's system information tool 1.06 (written by random/random)
Run by alien at 2010-03-02 05:19:30
Microsoft Windows XP Professional Service Pack 3
System drive C: has 18 GB (8%) free of 233 GB
Total RAM: 3070 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:19:41, on 2.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\TpShocks.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe
C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Program Files\Common Files\Lenovo\Logger\logmon.exe
C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
c:\program files\lenovo\system update\suservice.exe
C:\Program Files\TC UP\totalcmd.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Common Files\Teleca Shared\logger.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\WINDOWS\twain_32\L12U16U2\SrvMod.exe
C:\Program Files\Process Explorer\procexp.exe
C:\Program Files\Ultimate Process Manager\UPM.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\IEPro\MiniDM.exe
C:\Documents and Settings\alien\My Documents\My Downloads\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\alien.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.live.com/sphome.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx
R3 - URLSearchHook: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Password Manager Browser Helper Object - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: DownloadHelper Class - {FF2573AE-E1ED-40e1-83BA-F544CB2EE135} - C:\Program Files\Common Files\Download Helper\DownloadHelper.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O3 - Toolbar: Lenovo ThinkVantage Toolbox - {86B9B5DD-FB75-4035-BD52-3C94F7849CAF} - C:\Program Files\PC-Doctor\ATLPcdToolbar544928.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
O4 - HKLM\..\Run: [ACWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [Message Center Plus] C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe /start
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [TPFNF7] C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe /r
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [LPMailChecker] C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe
O4 - HKLM\..\Run: [AMSG] C:\PROGRA~1\THINKV~2\AMSG\Amsg.exe /startup
O4 - HKLM\..\Run: [cssauth] "C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Bonus.SSR.FR10] "C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TC UP] "C:\Program Files\TC UP\TC UP.exe" /wnd=min
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\alien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKUS\S-1-5-19\..\RunOnce: [3DxAssociateFileExts] C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe "FileExts" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [3DxAssociateFileExts] C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe "FileExts" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [3DxAssociateFileExts] C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe "FileExts" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [3DxAssociateFileExts] C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe "FileExts" (User 'Default user')
O4 - Global Startup: PowerMenu.lnk = C:\Program Files\PowerMenu\PowerMenu.exe
O4 - Global Startup: SrvMod.lnk = C:\WINDOWS\twain_32\L12U16U2\SrvMod.exe
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: Lenovo Password Manager... - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - http://www-307.ibm.com/pc/support/acpir.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour ... se1140.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1200708734
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Lenovo Doze Mode Service (DozeSvc) - Lenovo. - C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo. - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Group Limited - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: TSS Core Service (TSSCoreService) - Lenovo - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: TVT Windows Update Monitor (TVT_UpdateMonitor) - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe

--
End of file - 26065 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005UA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job
C:\WINDOWS\tasks\PMTask.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\SystemToolsDailyTest.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{4D7A596F-BBA6-46AE-A394-28CADDBC5396}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{9E3F8512-5D96-419A-B5FB-0E2DDA6AC9CA}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2009-09-02 777392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}]
WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2010-03-02 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2010-02-11 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2006-02-02 110652]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-05 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-08 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF468356-BB7E-42D7-9F15-4F3B9BCFCED2}]
IePasswordManagerHelper Class - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll [2009-03-04 816440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-13 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-13 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF2573AE-E1ED-40e1-83BA-F544CB2EE135}]
DownloadHelper Class - C:\Program Files\Common Files\Download Helper\DownloadHelper.dll [2009-12-03 592896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{0b876028-b388-4f6d-922f-f52faec8535f} - WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2010-03-02 2349080]
{86B9B5DD-FB75-4035-BD52-3C94F7849CAF} - Lenovo ThinkVantage Toolbox - C:\Program Files\PC-Doctor\ATLPcdToolbar544928.dll [2009-11-22 137712]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-05 279664]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2009-11-19 128296]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1594664]
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2007-01-09 868352]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2009-12-11 337256]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2008-10-08 256576]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-03-13 68976]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2005-05-06 716800]
"LPManager"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe [2009-07-23 185688]
"ISUSPM Startup"=c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184]
"ISUSScheduler"=c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2005-06-02 48752]
"vptray"=C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe [2005-08-19 85696]
"DiskeeperSystray"=C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe [2005-11-29 196696]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-08-24 169472]
"ACTray"=C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [2009-12-10 431464]
"ACWLIcon"=C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe [2009-12-10 181608]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"TVT Scheduler Proxy"=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [2008-03-04 487424]
"Message Center Plus"=C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27 49976]
"LENOVO.TPFNF6R"=C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [2009-08-20 62752]
"TPFNF7"=C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe [2009-08-03 62240]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2005-05-20 925696]
"AwaySch"=C:\Program Files\Lenovo\AwayTask\AwaySch.EXE [2006-11-07 91688]
"LPMailChecker"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe [2009-07-23 124248]
"AMSG"=C:\PROGRA~1\THINKV~2\AMSG\Amsg.exe [2009-09-03 436800]
""= []
"cssauth"=C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [2009-03-04 3093816]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-02-11 198160]
"Bonus.SSR.FR10"=C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2010-01-26 941320]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Adobe_ID0ENQBO"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"TC UP"=C:\Program Files\TC UP\TC UP.exe [2009-10-04 37376]
"PC Suite for Smartphones"=C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-12-25 548864]
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2006-02-02 122940]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]
"Google Update"=C:\Documents and Settings\alien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-01 133104]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-18 204288]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-09 39408]
"mRouterConfig"=C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe [2006-03-02 290816]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-02-27 3037696]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
PowerMenu.lnk - C:\Program Files\PowerMenu\PowerMenu.exe
SrvMod.lnk - C:\WINDOWS\twain_32\L12U16U2\SrvMod.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]
C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll [2009-12-10 32768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-09-29 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
C:\WINDOWS\system32\NavLogon.dll [2005-08-19 43712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2009-12-01 100104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
psqlpwd
ACGina
ACGina
ACGina
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
ACGina

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\TC UP\PLUGINS\Media\uTorrent\utorrent.exe"="C:\Program Files\TC UP\PLUGINS\Media\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module"
"C:\WINDOWS\twain_32\L12U16U2\SrvMod.exe"="C:\WINDOWS\twain_32\L12U16U2\SrvMod.exe:*:Enabled:SrvMod"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe"="C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:*:Enabled:Adobe Version Cue CS4 Server"
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

jarmyl · #2 Příspěvek od **jarmyl** » 02 bře 2010 05:26

druha cast ..

======File associations======

.scr - open - "C:\WINDOWS\notepad.exe" "%1"
.scr - install -
.scr - config -
.vbs - edit -
.vbs - open -

======List of files/folders created in the last 1 months======

2010-03-02 05:19:30 ----D---- C:\rsit
2010-03-02 05:19:30 ----D---- C:\Program Files\trend micro
2010-03-01 01:35:21 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-02-27 22:05:47 ----D---- C:\Program Files\Process Explorer
2010-02-27 22:00:53 ----D---- C:\Program Files\Ultimate Process Manager
2010-02-27 21:35:57 ----HDC---- C:\Documents and Settings\All Users\Application Data\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-02-27 21:35:40 ----D---- C:\Program Files\Lavasoft
2010-02-27 21:35:40 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-02-27 21:32:24 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-02-27 21:32:24 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-02-27 21:10:15 ----D---- C:\Documents and Settings\alien\Application Data\Spyware Terminator
2010-02-27 21:10:03 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2010-02-27 21:10:02 ----D---- C:\Program Files\Spyware Terminator
2010-02-27 21:04:17 ----D---- C:\Program Files\CCleaner
2010-02-25 18:16:03 ----D---- C:\Program Files\TPFanControl
2010-02-24 23:00:23 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-19 20:57:50 ----D---- C:\Documents and Settings\alien\Application Data\ComfortSoftware
2010-02-19 20:57:46 ----D---- C:\Program Files\ComfortKeyboard
2010-02-19 16:58:55 ----D---- C:\Program Files\Stubs
2010-02-19 16:53:40 ----D---- C:\Program Files\Comfort On-Screen Keyboard Pro
2010-02-19 14:49:18 ----A---- C:\WINDOWS\system32\TweakUI.exe
2010-02-18 02:30:46 ----D---- C:\Program Files\Sonic
2010-02-18 02:30:46 ----D---- C:\Program Files\Common Files\SureThing Shared
2010-02-17 01:56:45 ----D---- C:\WINDOWS\system32\DLA
2010-02-17 01:56:45 ----A---- C:\WINDOWS\system32\DLAAPI_W.DLL
2010-02-17 01:56:45 ----A---- C:\WINDOWS\DLA.EXE
2010-02-17 01:56:44 ----D---- C:\Program Files\Multimedia Center for Think Offerings
2010-02-17 01:47:31 ----A---- C:\WINDOWS\sequencer.exe
2010-02-17 01:47:30 ----D---- C:\Program Files\Sonic Icons for Lenovo
2010-02-17 01:32:33 ----D---- C:\Documents and Settings\alien\Application Data\MyPhoneExplorer
2010-02-17 01:03:25 ----D---- C:\Program Files\MyPhoneExplorer
2010-02-17 00:36:11 ----A---- C:\Connector.dll.txt
2010-02-15 19:59:17 ----D---- C:\Program Files\Intuwave
2010-02-15 19:59:13 ----D---- C:\Program Files\Symbian
2010-02-15 19:58:58 ----D---- C:\Program Files\Common Files\Sony Ericsson Shared
2010-02-15 19:58:58 ----D---- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2010-02-15 19:58:54 ----D---- C:\Program Files\Sony Ericsson
2010-02-15 19:58:54 ----D---- C:\Program Files\Common Files\Teleca Shared
2010-02-15 19:58:54 ----D---- C:\Documents and Settings\All Users\Application Data\Teleca
2010-02-15 15:30:13 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-02-14 23:31:58 ----D---- C:\Program Files\Epocware
2010-02-14 23:26:55 ----D---- C:\Documents and Settings\alien\Application Data\Download Helper
2010-02-14 23:26:53 ----D---- C:\Program Files\Common Files\Download Helper
2010-02-14 22:00:28 ----D---- C:\Documents and Settings\alien\Application Data\Miranda
2010-02-13 22:10:00 ----D---- C:\Documents and Settings\alien\Application Data\Graphisoft
2010-02-13 19:45:18 ----HD---- C:\Program Files\Zero G Registry
2010-02-13 19:39:03 ----A---- C:\WINDOWS\system32\WkExt32.dll
2010-02-13 19:39:03 ----A---- C:\WINDOWS\system32\wibuKJni.dll
2010-02-13 19:39:02 ----A---- C:\WINDOWS\system32\WkDos.exe
2010-02-13 19:38:55 ----A---- C:\WINDOWS\system32\WkWin32.dll
2010-02-13 19:38:54 ----D---- C:\Program Files\WIBU-SYSTEMS
2010-02-13 19:38:54 ----D---- C:\Program Files\WIBUKEY
2010-02-13 19:38:44 ----D---- C:\Program Files\Common Files\Graphisoft Shared
2010-02-13 19:35:35 ----D---- C:\Program Files\Graphisoft
2010-02-13 19:30:20 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-02-13 19:30:19 ----D---- C:\Program Files\Common Files\Java
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\javaws.exe
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\javaw.exe
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\java.exe
2010-02-13 00:19:18 ----D---- C:\Documents and Settings\All Users\Application Data\Abvent
2010-02-13 00:19:18 ----D---- C:\Documents and Settings\alien\Application Data\Abvent
2010-02-13 00:19:08 ----D---- C:\Documents and Settings\alien\Application Data\Abvent_Artlantis3
2010-02-13 00:16:50 ----D---- C:\Program Files\Artlantis Studio 3
2010-02-13 00:06:07 ----A---- C:\WINDOWS\unins000.exe
2010-02-13 00:02:39 ----D---- C:\Program Files\Next Limit
2010-02-12 23:54:17 ----D---- C:\Program Files\Common Files\Apple
2010-02-11 23:45:50 ----D---- C:\Program Files\ABBYY FineReader 10
2010-02-11 17:57:12 ----D---- C:\Documents and Settings\alien\Application Data\Ledas
2010-02-11 17:06:21 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-02-11 17:06:14 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-02-11 17:06:14 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-02-11 17:06:13 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-02-11 15:05:27 ----D---- C:\Program Files\IMSIDesign
2010-02-11 15:05:27 ----D---- C:\Documents and Settings\All Users\Application Data\IMSIDesign
2010-02-11 14:53:49 ----D---- C:\Documents and Settings\alien\Application Data\SecondLife
2010-02-11 14:52:51 ----D---- C:\Program Files\SecondLife
2010-02-11 12:46:20 ----D---- C:\Licensing
2010-02-10 23:07:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 23:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 23:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 23:04:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 23:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 23:04:01 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 23:01:25 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 23:01:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 23:01:01 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-08 16:45:19 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2010-02-08 16:44:52 ----A---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2010-02-08 04:59:12 ----D---- C:\Program Files\Common Files\SPBA
2010-02-08 04:38:26 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2010-02-08 04:38:26 ----D---- C:\Documents and Settings\alien\Application Data\Intel
2010-02-08 04:38:03 ----A---- C:\WINDOWS\system32\SET1D9.tmp
2010-02-08 04:37:46 ----D---- C:\Program Files\Common Files\Intel
2010-02-04 23:26:23 ----RHD---- C:\VProRecovery
2010-02-03 02:22:30 ----D---- C:\Documents and Settings\All Users\Application Data\ASGvis

======List of files/folders modified in the last 1 months======

2010-03-02 05:19:33 ----D---- C:\WINDOWS\Temp
2010-03-02 05:19:30 ----D---- C:\Program Files
2010-03-02 05:19:29 ----D---- C:\WINDOWS\Prefetch
2010-03-02 04:59:42 ----D---- C:\Documents and Settings\alien\Application Data\Skype
2010-03-02 04:55:31 ----D---- C:\WINDOWS\system32\drivers
2010-03-02 04:08:35 ----D---- C:\WINDOWS\Microsoft.NET
2010-03-02 02:46:24 ----SD---- C:\WINDOWS\Tasks
2010-03-02 02:44:49 ----D---- C:\Documents and Settings\alien\Application Data\skypePM
2010-03-02 02:44:33 ----A---- C:\sysiclog.txt
2010-03-02 02:43:33 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-02 02:43:20 ----D---- C:\WINDOWS\system32
2010-03-02 02:43:19 ----A---- C:\WINDOWS\system32\ICAutoUpdate.log.bak
2010-03-02 02:42:39 ----A---- C:\WINDOWS\system32\PROCDB.INI
2010-03-02 02:39:53 ----A---- C:\WINDOWS\system32\IPSCtrl.INI
2010-03-02 02:14:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-02 01:50:16 ----D---- C:\WINDOWS
2010-03-02 00:32:32 ----D---- C:\WINDOWS\system
2010-03-01 17:04:54 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-03-01 01:36:25 ----D---- C:\Documents and Settings\alien\Application Data\XnView
2010-02-28 21:06:56 ----SHD---- C:\WINDOWS\Installer
2010-02-28 01:43:41 ----D---- C:\Program Files\DesignCAD 3D MAX Plus
2010-02-28 00:00:24 ----D---- C:\swshare
2010-02-27 21:44:48 ----HD---- C:\WINDOWS\inf
2010-02-27 21:41:40 ----SHD---- C:\Config.Msi
2010-02-27 21:37:12 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-27 21:36:01 ----D---- C:\WINDOWS\WinSxS
2010-02-27 21:09:48 ----D---- C:\WINDOWS\Minidump
2010-02-27 21:09:48 ----D---- C:\WINDOWS\Debug
2010-02-24 23:30:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-24 23:01:10 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-02-24 23:01:07 ----D---- C:\WINDOWS\ie8updates
2010-02-24 23:00:42 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-24 09:16:06 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2010-02-23 21:15:13 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-02-19 20:29:17 ----D---- C:\Program Files\TC UP
2010-02-18 02:30:49 ----A---- C:\WINDOWS\wininit.ini
2010-02-18 02:30:46 ----RD---- C:\Program Files\Common Files
2010-02-17 01:57:06 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-02-17 01:57:05 ----D---- C:\Program Files\Common Files\InstallShield
2010-02-17 01:56:28 ----D---- C:\Program Files\Common Files\Sonic Shared
2010-02-17 01:42:40 ----D---- C:\Program Files\IEPro
2010-02-17 00:56:04 ----D---- C:\Program Files\Common Files\System
2010-02-17 00:53:57 ----A---- C:\WINDOWS\win.ini
2010-02-17 00:46:39 ----SD---- C:\Documents and Settings\alien\Application Data\Microsoft
2010-02-17 00:33:05 ----D---- C:\Documents and Settings\alien\Application Data\Teleca
2010-02-15 23:00:55 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-15 19:59:17 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-15 19:57:18 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-15 16:20:31 ----A---- C:\WINDOWS\DelMR.bat
2010-02-15 15:34:42 ----D---- C:\Program Files\Windows Media Player
2010-02-15 15:29:27 ----D---- C:\Program Files\Windows Media Connect 2
2010-02-15 15:29:23 ----D---- C:\WINDOWS\Help
2010-02-15 14:30:10 ----D---- C:\Program Files\Common Files\Lenovo
2010-02-15 14:30:08 ----D---- C:\Program Files\Lenovo
2010-02-15 01:17:57 ----D---- C:\Documents and Settings\alien\Application Data\HEXelon
2010-02-13 19:29:34 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-02-12 23:55:15 ----D---- C:\Program Files\QuickTime
2010-02-12 23:54:06 ----D---- C:\Program Files\Apple Software Update
2010-02-12 04:20:15 ----D---- C:\Documents and Settings\alien\Application Data\Adobe
2010-02-12 04:12:56 ----D---- C:\Documents and Settings
2010-02-12 03:59:25 ----D---- C:\Program Files\Common Files\Adobe
2010-02-12 03:02:02 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-02-12 02:43:37 ----RSD---- C:\WINDOWS\Fonts
2010-02-11 23:45:50 ----D---- C:\Documents and Settings\All Users\Application Data\ABBYY
2010-02-11 23:41:58 ----D---- C:\temp
2010-02-11 19:19:37 ----RSD---- C:\WINDOWS\assembly
2010-02-11 19:07:52 ----D---- C:\Program Files\ATI Technologies
2010-02-11 18:25:54 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-02-11 17:38:05 ----D---- C:\Program Files\WeFi
2010-02-11 17:07:02 ----D---- C:\Documents and Settings\alien\Application Data\Real
2010-02-11 17:06:11 ----D---- C:\Program Files\Common Files\Real
2010-02-11 16:29:56 ----D---- C:\Program Files\ISL
2010-02-11 14:54:17 ----D---- C:\Documents and Settings\alien\Application Data\Mozilla
2010-02-11 14:46:43 ----D---- C:\Program Files\Nikon
2010-02-08 16:49:45 ----D---- C:\WINDOWS\system32\appmgmt
2010-02-08 16:49:44 ----SHD---- C:\RECYCLER
2010-02-08 04:59:12 ----D---- C:\Program Files\ThinkVantage Fingerprint Software
2010-02-08 04:52:52 ----D---- C:\Documents and Settings\All Users\Application Data\PCDr
2010-02-08 04:39:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-08 04:37:46 ----D---- C:\Program Files\Intel
2010-02-08 04:30:48 ----D---- C:\Program Files\PC-Doctor
2010-02-08 04:22:50 ----D---- C:\WINDOWS\Media
2010-02-06 23:30:59 ----D---- C:\Program Files\Internet Explorer
2010-02-06 23:30:56 ----D---- C:\WINDOWS\AppPatch
2010-02-06 23:30:54 ----D---- C:\Program Files\Microsoft Silverlight
2010-02-06 23:13:18 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-02-06 23:13:11 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-02-06 23:13:00 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-02-06 23:12:13 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-02-06 23:12:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-02-06 23:11:52 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-02-06 23:10:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-02-06 23:10:26 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-02-06 23:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-02-06 23:09:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-02-06 23:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-02-06 23:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-02-06 23:05:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-02-06 23:05:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-02-06 23:03:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-02-06 23:03:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-02-06 23:01:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-02-06 23:01:32 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-02-06 15:11:53 ----D---- C:\Documents and Settings\All Users\Application Data\Lenovo
2010-02-06 15:11:53 ----D---- C:\Documents and Settings\alien\Application Data\Lenovo
2010-02-04 23:26:24 ----SHD---- C:\System Volume Information
2010-02-04 18:32:57 ----SHD---- C:\WINDOWS\CSC
2010-02-04 18:28:14 ----A---- C:\WINDOWS\DUMPdf92.tmp
2010-02-04 18:11:27 ----A---- C:\WINDOWS\DUMPe4b2.tmp
2010-02-04 17:41:33 ----A---- C:\WINDOWS\DUMPdca4.tmp
2010-02-04 17:39:36 ----A---- C:\WINDOWS\DUMPd64b.tmp
2010-02-04 17:37:39 ----A---- C:\WINDOWS\DUMPdc75.tmp
2010-02-04 17:34:33 ----A---- C:\WINDOWS\DUMPe510.tmp
2010-02-04 17:30:31 ----D---- C:\WINDOWS\system32\config
2010-02-04 17:27:49 ----D---- C:\WINDOWS\PeerNet
2010-02-04 17:27:48 ----D---- C:\WINDOWS\mui
2010-02-04 17:26:53 ----D---- C:\WINDOWS\ehome
2010-02-04 17:25:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-02-04 17:25:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-02-04 17:25:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-02-04 17:25:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-02-04 17:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-02-04 17:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-02-04 17:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-02-04 17:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-02-04 17:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2010-02-04 17:25:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-02-04 17:25:37 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2010-02-04 17:25:36 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-02-04 17:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-02-04 17:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2010-02-04 17:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-02-04 17:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-02-04 17:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-02-04 17:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-02-04 17:25:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-02-04 17:25:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-02-04 17:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2010-02-04 17:25:31 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-02-04 17:25:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2010-02-04 17:25:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-02-04 17:25:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-02-04 17:25:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-02-04 17:25:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-02-04 17:25:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-02-04 17:25:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-02-04 17:25:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-02-04 17:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2010-02-04 17:25:27 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-02-04 17:25:27 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$
2010-02-04 17:25:27 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-02-04 17:25:27 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-02-04 17:24:07 ----D---- C:\Program Files\Windows Live SkyDrive
2010-02-04 17:24:07 ----D---- C:\Program Files\Windows Live Safety Center
2010-02-04 17:23:55 ----D---- C:\Program Files\Windows Installer Clean Up
2010-02-04 17:23:55 ----D---- C:\Program Files\Windows Defender
2010-02-04 17:23:34 ----D---- C:\Program Files\SMI2
2010-02-04 17:23:27 ----D---- C:\Program Files\Outlook Express
2010-02-04 17:23:27 ----D---- C:\Program Files\Online Services
2010-02-04 17:23:26 ----D---- C:\Program Files\NetMeeting
2010-02-04 17:23:23 ----D---- C:\Program Files\Movie Maker
2010-02-04 17:23:22 ----D---- C:\Program Files\Microsoft Calculator Plus
2010-02-04 17:23:21 ----D---- C:\Program Files\Messenger
2010-02-04 17:20:27 ----D---- C:\Program Files\IBM ThinkVantage
2010-02-04 17:20:20 ----D---- C:\Program Files\Google
2010-02-04 17:20:19 ----D---- C:\Program Files\Digital Line Detect
2010-02-04 17:20:18 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-04 17:16:58 ----D---- C:\I386
2010-02-04 17:15:48 ----D---- C:\Documents and Settings\alien\Application Data\Windows Desktop Search
2010-02-04 17:15:23 ----D---- C:\Documents and Settings\alien\Application Data\MSNInstaller
2010-02-04 17:12:59 ----RD---- C:\Program Files\Skype
2010-02-04 17:12:57 ----D---- C:\Program Files\Microsoft Works
2010-02-04 17:12:14 ----D---- C:\Program Files\Common Files\Skype
2010-02-04 17:12:01 ----D---- C:\Program Files\Common Files\DESIGNER
2010-02-04 17:12:01 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-02-04 17:11:52 ----D---- C:\Program Files\AutoCAD 2005
2010-02-04 17:11:36 ----D---- C:\Program Files\AnswerWorks 4.0
2010-02-04 17:09:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-02-04 17:09:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-02-04 17:09:53 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2010-02-04 17:09:21 ----D---- C:\Program Files\WeFiBar
2010-02-04 17:04:00 ----D---- C:\Documents and Settings\alien\Application Data\OpenCandy
2010-02-04 17:04:00 ----D---- C:\Documents and Settings\alien\Application Data\MiniDm
2010-02-04 17:03:59 ----D---- C:\Documents and Settings\alien\Application Data\IEPro
2010-02-04 16:53:48 ----A---- C:\WINDOWS\DUMPe03e.tmp
2010-02-04 16:30:38 ----A---- C:\WINDOWS\DUMPfdf7.tmp
2010-02-04 16:26:42 ----A---- C:\WINDOWS\DUMP06d1.tmp
2010-02-04 16:24:59 ----A---- C:\WINDOWS\DUMP0115.tmp
2010-02-04 16:23:12 ----A---- C:\WINDOWS\DUMP0589.tmp
2010-02-04 16:19:06 ----A---- C:\WINDOWS\DUMPffeb.tmp
2010-02-04 16:17:24 ----A---- C:\WINDOWS\DUMP04ae.tmp
2010-02-04 16:15:09 ----A---- C:\WINDOWS\DUMPfef1.tmp
2010-02-04 16:13:00 ----A---- C:\WINDOWS\DUMPf443.tmp
2010-02-04 16:10:49 ----A---- C:\WINDOWS\DUMP047f.tmp
2010-02-04 16:08:41 ----A---- C:\WINDOWS\DUMP0114.tmp
2010-02-04 16:06:32 ----A---- C:\WINDOWS\DUMP022d.tmp
2010-02-04 16:04:17 ----A---- C:\WINDOWS\DUMPff5f.tmp
2010-02-04 16:02:04 ----A---- C:\WINDOWS\DUMP01ef.tmp
2010-02-04 15:59:56 ----A---- C:\WINDOWS\DUMP01d0.tmp
2010-02-04 15:57:46 ----A---- C:\WINDOWS\DUMPf56c.tmp
2010-02-04 15:55:40 ----A---- C:\WINDOWS\DUMP0421.tmp
2010-02-04 06:01:58 ----D---- C:\Documents and Settings\alien\Application Data\Desktopicon

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ANC;ANC; C:\WINDOWS\System32\drivers\ANC.SYS [2009-11-17 11520]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-11-18 5660]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-11-18 22684]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 IBMTPCHK;IBMTPCHK; \??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 SAVRT;SAVRT; \??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\savrt.sys []
R1 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\Savrtpel.sys []
R1 Smapint;Smapint; C:\WINDOWS\System32\drivers\Smapint.sys [2006-10-02 14848]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-04-05 267192]
R1 TDSMAPI;TDSMAPI; C:\WINDOWS\System32\drivers\TDSMAPI.SYS [2006-10-02 9343]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2009-12-16 4442]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2009-08-03 4608]
R1 tvtumon;tvtumon; C:\WINDOWS\system32\DRIVERS\tvtumon.sys [2008-07-11 46144]
R1 VD_FileDisk;VD_FileDisk; C:\WINDOWS\system32\drivers\VD_FileDisk.sys [2006-01-13 15872]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2006-02-02 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2006-02-02 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2006-02-02 86652]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2006-02-02 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2006-02-02 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2006-02-02 87036]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2006-02-02 94332]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-11-18 40544]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
R2 ibmfilter;ibmfilter; \??\C:\WINDOWS\system32\drivers\ibmfilter.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2009-06-17 10384]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 MLPTDR_C;MLPTDR_C; \??\C:\WINDOWS\system32\MLPTDR_C.SYS []
R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []
R2 PROCDD;IPS Helper Driver; C:\WINDOWS\system32\DRIVERS\PROCDD.SYS [2006-11-06 12080]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2009-08-10 13952]
R2 smi2;smi2; \??\C:\Program Files\SMI2\smi2.sys []
R2 smihlp2;SMI Helper Driver (smihlp2); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys []
R2 tvtfilter;tvtfilter; C:\WINDOWS\system32\DRIVERS\tvtfilter.sys [2009-08-27 33536]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\WINDOWS\SYSTEM32\DRIVERS\WibuKey.sys [2006-11-22 72704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-06-20 178688]
R3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-09-29 3565056]
R3 atmeltpm;atmeltpm; C:\WINDOWS\system32\DRIVERS\atmeltpm.sys [2005-05-17 15872]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-11-01 1342122]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2009-06-18 234496]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2007-11-01 989696]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2007-11-01 211456]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2009-11-18 26608]
R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2003-09-11 21060]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091219.003\naveng.sys []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091219.003\navex15.sys []
R3 NETw5x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-09-15 5977216]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2009-08-26 17536]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-04-05 11512]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-04-05 173208]
R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-04-05 36984]
R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SCFIDS~1\20090925.001\symidsco.sys []
R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-04-05 47192]
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-04-05 17976]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-10-06 225696]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2008-12-09 50832]
R3 TVTI2C;Lenovo SM bus driver; C:\WINDOWS\system32\DRIVERS\Tvti2c.sys [2008-02-22 37312]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2007-11-01 731520]
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); C:\WINDOWS\system32\DRIVERS\zebrceb.sys [2008-01-15 63360]
S3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-17 117760]
S3 EraserUtilDrvI9;EraserUtilDrvI9; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrvI9.sys []
S3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\hsxhwazl.sys [2005-12-06 192512]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys []
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-11-27 1427968]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zebrbus;Sony Ericsson Composite Device driver; C:\WINDOWS\system32\DRIVERS\zebrbus.sys [2008-01-15 83200]
S3 zebrmdfl;Sony Ericsson Modem Filter; C:\WINDOWS\system32\DRIVERS\zebrmdfl.sys [2008-01-15 14848]
S3 zebrmdm;Sony Ericsson Port (WDM); C:\WINDOWS\system32\DRIVERS\zebrmdm.sys [2008-01-15 109568]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM); C:\WINDOWS\system32\DRIVERS\zebrmdmc.sys [2008-01-15 109568]
S3 zebrsce;Sony Ericsson PC-Connect Port; C:\WINDOWS\system32\DRIVERS\zebrsce.sys [2008-01-15 91264]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-13 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-22 814344]
R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2009-12-10 103784]
R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2009-12-10 230760]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-09-29 602112]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2005-11-01 258103]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe [2005-06-02 185968]
R2 ccProxy;Symantec Network Proxy; C:\Program Files\Common Files\Symantec Shared\ccProxy.exe [2005-06-02 239216]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe [2005-06-02 161392]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 DefWatch;Symantec AntiVirus Definition Watcher; C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe [2005-08-19 19648]
R2 Diskeeper;Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2005-12-14 622700]
R2 DozeSvc;Lenovo Doze Mode Service; C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE [2009-12-16 132456]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 858384]
R2 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2009-11-18 38248]
R2 IPSSVC;IPS Core Service; C:\WINDOWS\system32\IPSSVC.EXE [2007-01-30 108080]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ISSVC;IS Service; C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe [2005-07-20 79488]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-02-13 153376]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2009-12-16 53248]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 473360]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2009-09-21 954368]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe [2005-04-05 206552]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-02-27 488960]
R2 SUService;System Update; c:\program files\lenovo\system update\suservice.exe [2009-06-12 28672]
R2 Symantec AntiVirus;Symantec AntiVirus; C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe [2005-08-19 1730240]
R2 SymSecurePort;Symantec SecurePort; C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe [2005-07-20 202368]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2009-03-04 750904]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2009-07-15 62320]
R2 TpKmpSVC;IBM KCU Service; C:\WINDOWS\system32\TpKmpSVC.exe [2006-06-29 32768]
R2 TSSCoreService;TSS Core Service; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [2009-03-04 779576]
R2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [2007-12-05 520192]
R2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2007-12-05 950272]
R2 TVT Scheduler;TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2008-03-04 1122304]
R2 TVT_UpdateMonitor;TVT Windows Update Monitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [2008-10-09 360448]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-11 135664]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-02-27 1229232]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2009-07-03 45424]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-09-02 74360]
S3 ccPwdSvc;Symantec Password Validation; C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe [2005-06-02 83568]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-19 655624]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-10 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 121360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PsaSrv;IBM PSA Access Driver Control; C:\WINDOWS\system32\PsaSrv.exe []
S3 SavRoam;SAVRoam; C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe [2005-08-19 124608]
S3 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe [2005-03-31 992864]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2009-10-09 39976]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Unlimited_Killer

Dobré dopoledne.

1) ComboFix

Stáhněte a uložte na Plochu ComboFix.
Ještě před spuštěním vypněte rezidentní štít antiviru, či antispywaru.
Spusťte ho s administrátorským oprávněním.
Po spuštění se Vám zobrazí licenční podmínky, klikněte na 'Ano'.
Budete také dotázáni na instalaci konzole pro zotavení, taktéž klikněte na 'Ano'.
Celý sken bude trvat tak 5-10 minut, v závislosti na tom, kolika soubory se bude CF prodírat.
Váš PC bude pravděpodobně restartován, tak se toho nelekněte.
Než úplně skončí sken, nic nedělejte, hlavně neklikejte do spuštěného okna s ComboFixem.
Po skončení skenu (či následném restartu) na Vás 'vypadne' log, který vkopírujete ve formě textu sem.
Pokud žádný log 'nevypadne', naleznete jej v umístění C:\ComboFix.txt

jarmyl · #4 Příspěvek od **jarmyl** » 02 bře 2010 19:21

ComboFix 10-03-01.04 - Administrator 02.03.2010 18:52:50.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.3070.2055 [GMT 1:00]
Spuštěný z: c:\documents and settings\alien\My Documents\My Downloads\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\alien\Application Data\Desktopicon
c:\documents and settings\alien\Application Data\Desktopicon\config.ini
c:\documents and settings\All Users\Start Menu\Programs\Startup\PowerMenu.lnk

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-02 do 2010-03-02 )))))))))))))))))))))))))))))))
.

2010-03-02 17:31 . 2010-03-02 17:31 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\ESET
2010-03-02 17:25 . 2010-03-02 17:25 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\Download Helper
2010-03-02 17:25 . 2010-03-02 17:25 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\Windows Search
2010-03-02 17:24 . 2010-03-02 17:24 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Local Settings\Application Data\Conduit
2010-03-02 17:24 . 2010-03-02 17:25 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Local Settings\Application Data\WeFiBar
2010-03-02 17:24 . 2010-03-02 17:24 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\IEPro
2010-03-02 17:23 . 2010-03-02 17:23 -------- d-sh--w- c:\documents and settings\Administrator.LENOVO-767C12D9\IECompatCache
2010-03-02 17:23 . 2010-03-02 17:23 -------- d-sh--w- c:\documents and settings\Administrator.LENOVO-767C12D9\PrivacIE
2010-03-02 13:48 . 2010-03-02 13:48 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Local Settings\Application Data\PCHealth
2010-03-02 13:44 . 2010-03-02 13:44 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Local Settings\Application Data\Adobe
2010-03-02 13:44 . 2010-03-02 13:44 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\Sony Ericsson
2010-03-02 13:43 . 2010-03-02 13:43 101320 ----a-w- c:\documents and settings\Administrator.LENOVO-767C12D9\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-03-02 13:43 . 2010-03-02 13:44 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\Lenovo
2010-03-02 13:43 . 2010-03-02 13:43 -------- d-sh--w- c:\documents and settings\Administrator.LENOVO-767C12D9\IETldCache
2010-03-02 13:28 . 2010-03-02 13:29 -------- d-----w- c:\program files\ophcrack
2010-03-02 04:19 . 2010-03-02 04:19 -------- d-----w- C:\rsit
2010-03-02 04:19 . 2010-03-02 04:19 -------- d-----w- c:\program files\trend micro
2010-03-01 00:35 . 2010-02-27 20:37 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-02-27 21:05 . 2010-02-27 21:06 -------- d-----w- c:\program files\Process Explorer
2010-02-27 21:00 . 2010-03-02 04:33 -------- d-----w- c:\program files\Ultimate Process Manager
2010-02-27 20:37 . 2010-02-04 15:53 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-02-27 20:37 . 2010-02-27 20:37 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-02-27 20:35 . 2010-02-27 20:35 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-02-27 20:35 . 2010-02-27 20:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-02-27 20:35 . 2010-02-27 20:36 -------- d-----w- c:\program files\Lavasoft
2010-02-27 20:32 . 2010-02-28 04:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-02-27 20:32 . 2010-02-27 20:34 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-27 20:10 . 2010-02-27 20:10 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2010-02-27 20:10 . 2010-03-01 23:35 -------- d-----w- c:\documents and settings\alien\Application Data\Spyware Terminator
2010-02-27 20:10 . 2010-03-02 10:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Spyware Terminator
2010-02-27 20:10 . 2010-03-02 04:36 -------- d-----w- c:\program files\Spyware Terminator
2010-02-27 20:04 . 2010-02-27 20:04 -------- d-----w- c:\program files\CCleaner
2010-02-25 17:16 . 2010-03-01 23:32 -------- d-----w- c:\program files\TPFanControl
2010-02-19 19:57 . 2010-03-01 23:32 -------- d-----w- c:\documents and settings\alien\Application Data\ComfortSoftware
2010-02-19 19:57 . 2010-03-01 23:32 -------- d-----w- c:\program files\ComfortKeyboard
2010-02-19 15:58 . 2010-02-19 16:01 -------- d-----w- c:\program files\Stubs
2010-02-19 15:53 . 2010-03-01 23:35 -------- d-----w- c:\program files\Comfort On-Screen Keyboard Pro
2010-02-19 13:49 . 2003-06-25 15:05 266360 ----a-w- c:\windows\system32\TweakUI.exe
2010-02-18 01:30 . 2010-02-18 01:30 -------- d-----w- c:\program files\Common Files\SureThing Shared
2010-02-18 01:30 . 2010-02-18 01:30 -------- d-----w- c:\program files\Sonic
2010-02-17 00:56 . 2006-03-01 02:30 89472 ----a-w- c:\windows\system32\drivers\DRVMCDB.SYS
2010-02-17 00:56 . 2005-11-18 11:02 5660 ----a-w- c:\windows\system32\drivers\DLACDBHM.SYS
2010-02-17 00:56 . 2005-11-18 11:02 22684 ----a-w- c:\windows\system32\drivers\DLARTL_N.SYS
2010-02-17 00:56 . 2005-11-18 04:20 40544 ----a-w- c:\windows\system32\drivers\DRVNDDM.SYS
2010-02-17 00:56 . 2010-02-17 01:03 -------- d-----w- c:\windows\system32\DLA
2010-02-17 00:56 . 2006-02-02 04:20 94263 ----a-w- c:\windows\DLA.EXE
2010-02-17 00:56 . 2006-02-02 04:20 61500 ----a-w- c:\windows\system32\DLAAPI_W.DLL
2010-02-17 00:56 . 2010-02-17 00:56 -------- d-----w- c:\program files\Multimedia Center for Think Offerings
2010-02-17 00:47 . 2005-09-22 19:28 163896 ----a-w- c:\windows\sequencer.exe
2010-02-17 00:47 . 2010-02-17 00:47 -------- d-----w- c:\program files\Sonic Icons for Lenovo
2010-02-17 00:32 . 2010-02-17 00:32 -------- d-----w- c:\documents and settings\alien\Application Data\MyPhoneExplorer
2010-02-17 00:03 . 2010-02-17 00:32 -------- d-----w- c:\program files\MyPhoneExplorer
2010-02-15 19:01 . 2008-01-15 10:44 91264 ----a-r- c:\windows\system32\drivers\zebrsce.sys
2010-02-15 19:01 . 2008-01-15 10:44 109568 ----a-r- c:\windows\system32\drivers\zebrmdm.sys
2010-02-15 19:01 . 2008-01-15 10:44 14848 ----a-r- c:\windows\system32\drivers\zebrmdfl.sys
2010-02-15 19:01 . 2008-01-15 10:44 109568 ----a-r- c:\windows\system32\drivers\zebrmdmc.sys
2010-02-15 19:01 . 2008-01-15 10:44 12160 ----a-r- c:\windows\system32\drivers\zebrcmnt.sys
2010-02-15 19:01 . 2008-01-15 10:44 12160 ----a-r- c:\windows\system32\drivers\zebrcm.sys
2010-02-15 19:00 . 2008-01-15 10:44 83200 ----a-r- c:\windows\system32\drivers\zebrbus.sys
2010-02-15 18:59 . 2008-01-15 10:44 12160 ----a-r- c:\windows\system32\drivers\zebrwhnt.sys
2010-02-15 18:59 . 2008-01-15 10:44 12160 ----a-r- c:\windows\system32\drivers\zebrwh.sys
2010-02-15 18:59 . 2008-01-15 10:44 63360 ----a-r- c:\windows\system32\drivers\zebrceb.sys
2010-02-15 18:59 . 2010-02-15 18:59 -------- d-----w- c:\documents and settings\alien\Local Settings\Application Data\Sony Ericsson
2010-02-15 18:59 . 2010-02-15 18:59 -------- d-----w- c:\program files\Intuwave
2010-02-15 18:59 . 2010-02-15 18:59 -------- d-----w- c:\program files\Symbian
2010-02-15 18:58 . 2010-02-15 18:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony Ericsson
2010-02-15 18:58 . 2010-02-15 18:58 -------- d-----w- c:\program files\Common Files\Sony Ericsson Shared
2010-02-15 18:58 . 2010-03-02 04:42 -------- d-----w- c:\program files\Common Files\Teleca Shared
2010-02-15 18:58 . 2010-02-15 18:59 -------- d-----w- c:\program files\Sony Ericsson
2010-02-15 18:58 . 2010-02-15 18:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Teleca
2010-02-14 22:31 . 2010-02-14 22:31 -------- d-----w- c:\program files\Epocware
2010-02-14 22:26 . 2010-02-14 22:26 -------- d-----w- c:\documents and settings\alien\Application Data\Download Helper
2010-02-14 22:26 . 2010-02-14 22:26 -------- d-----w- c:\program files\Common Files\Download Helper
2010-02-14 21:00 . 2010-02-14 21:00 -------- d-----w- c:\documents and settings\alien\Application Data\Miranda
2010-02-13 21:10 . 2010-02-13 21:10 -------- d-----w- c:\documents and settings\alien\Local Settings\Application Data\Graphisoft
2010-02-13 21:10 . 2010-02-13 21:15 -------- d-----w- c:\documents and settings\alien\Application Data\Graphisoft
2010-02-13 21:10 . 2010-02-13 21:12 -------- d-----w- c:\documents and settings\alien\Graphisoft
2010-02-13 20:35 . 2010-02-13 20:35 -------- d-----w- c:\documents and settings\alien\All Users
2010-02-13 18:45 . 2010-02-13 18:45 -------- d--h--w- c:\program files\Zero G Registry
2010-02-13 18:45 . 2010-02-13 18:45 -------- d--h--w- c:\documents and settings\alien\InstallAnywhere
2010-02-13 18:39 . 2006-11-22 05:20 348160 ----a-w- c:\windows\system32\WkExt32.dll
2010-02-13 18:39 . 2006-11-02 05:20 479232 ----a-w- c:\windows\system32\wibuKJni.dll
2010-02-13 18:39 . 2000-10-18 02:00 57552 ----a-w- c:\windows\system32\WkDos.exe
2010-02-13 18:38 . 2006-11-09 05:20 16384 ----a-w- c:\windows\system32\drivers\Wibukey2.sys
2010-02-13 18:38 . 2006-11-22 05:20 72704 ----a-w- c:\windows\system32\drivers\WibuKey.sys
2010-02-13 18:38 . 2006-11-22 05:20 159744 ----a-w- c:\windows\system32\WkWin32.dll
2010-02-13 18:38 . 2010-02-13 18:38 -------- d-----w- c:\program files\WIBUKEY
2010-02-13 18:38 . 2010-02-13 18:38 -------- d-----w- c:\program files\WIBU-SYSTEMS
2010-02-13 18:38 . 2010-02-13 18:38 -------- d-----w- c:\program files\Common Files\Graphisoft Shared
2010-02-13 18:35 . 2010-02-13 18:35 -------- d-----w- c:\program files\Graphisoft
2010-02-13 18:30 . 2010-02-13 18:30 -------- d-----w- c:\program files\Common Files\Java
2010-02-12 23:19 . 2010-02-12 23:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Abvent
2010-02-12 23:19 . 2010-02-12 23:19 -------- d-----w- c:\documents and settings\alien\Application Data\Abvent
2010-02-12 23:19 . 2010-02-12 23:26 -------- d-----w- c:\documents and settings\alien\Application Data\Abvent_Artlantis3
2010-02-12 23:16 . 2010-02-12 23:18 -------- d-----w- c:\program files\Artlantis Studio 3
2010-02-12 23:06 . 2010-02-12 23:06 5989 ----a-w- c:\windows\unins000.dat
2010-02-12 23:06 . 2010-02-12 23:06 684377 ----a-w- c:\windows\unins000.exe
2010-02-12 23:02 . 2010-02-12 23:11 -------- d-----w- c:\program files\Next Limit
2010-02-12 22:54 . 2010-02-12 22:54 -------- d-----w- c:\program files\Common Files\Apple
2010-02-12 03:12 . 2010-02-12 03:12 -------- d-----w- c:\documents and settings\Administrator
2010-02-11 22:45 . 2010-02-19 13:42 -------- d-----w- c:\program files\ABBYY FineReader 10
2010-02-11 22:41 . 2010-02-11 22:42 -------- d-----w- c:\temp\ABBYY FineReader 10
2010-02-11 16:57 . 2010-02-11 16:57 -------- d-----w- c:\documents and settings\alien\Application Data\Ledas
2010-02-11 14:05 . 2010-02-11 14:05 -------- d-----w- c:\program files\IMSIDesign
2010-02-11 14:05 . 2010-02-11 14:05 -------- d-----w- c:\documents and settings\All Users\Application Data\IMSIDesign
2010-02-11 13:53 . 2010-02-11 13:55 -------- d-----w- c:\documents and settings\alien\Application Data\SecondLife
2010-02-11 13:53 . 2010-02-11 15:53 -------- d-----w- c:\documents and settings\alien\Local Settings\Application Data\SecondLife
2010-02-11 13:52 . 2010-02-11 13:53 -------- d-----w- c:\program files\SecondLife
2010-02-11 11:46 . 2010-02-11 11:46 -------- d-----w- C:\Licensing
2010-02-08 15:44 . 2009-08-07 08:49 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2010-02-08 03:59 . 2010-02-08 03:59 -------- d-----w- c:\program files\Common Files\SPBA
2010-02-08 03:38 . 2010-02-08 03:38 -------- d-----w- c:\documents and settings\Guest\Application Data\Intel
2010-02-08 03:38 . 2010-02-08 03:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Intel
2010-02-08 03:38 . 2010-02-08 03:38 -------- d-----w- c:\documents and settings\alien\Application Data\Intel
2010-02-08 03:38 . 2010-02-08 03:38 -------- d-----w- c:\documents and settings\NetworkService\Application Data\Intel
2010-02-08 03:37 . 2010-02-08 03:37 -------- d-----w- c:\program files\Common Files\Intel
2010-02-04 22:26 . 2010-02-04 22:26 -------- d-----r- C:\VProRecovery
2010-02-03 01:22 . 2010-02-03 01:22 -------- d-----w- c:\documents and settings\All Users\Application Data\ASGvis
2010-02-01 16:52 . 2009-12-16 00:12 24304 ------w- c:\windows\system32\drivers\DOZEHDD.SYS
2010-02-01 01:08 . 2010-02-01 01:08 -------- d-----w- c:\documents and settings\alien\Application Data\Uniblue
2010-02-01 01:07 . 2010-02-01 01:07 -------- d-----w- c:\program files\Uniblue

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-02 18:08 . 2009-08-31 23:41 -------- d-----w- c:\documents and settings\alien\Application Data\Skype
2010-03-02 18:01 . 2009-12-25 21:20 1443360 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-03-02 14:43 . 2009-09-16 00:24 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2010-03-02 14:11 . 2009-08-24 22:22 -------- d-----w- c:\program files\Symantec Client Security
2010-03-02 14:11 . 2009-10-09 17:33 -------- d-----w- c:\program files\ESET
2010-03-02 14:07 . 2009-08-24 22:22 -------- d-----w- c:\program files\Symantec
2010-03-02 14:07 . 2009-08-24 22:22 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-02 14:07 . 2009-08-24 22:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2010-03-02 14:05 . 2009-08-24 22:23 40 ----a-w- c:\windows\system32\profile.dat
2010-03-02 12:11 . 2009-08-31 15:26 -------- d-----w- c:\documents and settings\alien\Application Data\XnView
2010-03-02 10:38 . 2009-08-31 23:44 -------- d-----w- c:\documents and settings\alien\Application Data\skypePM
2010-02-28 00:43 . 2009-08-30 19:58 -------- d-----w- c:\program files\DesignCAD 3D MAX Plus
2010-02-24 08:16 . 2009-10-07 10:22 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-23 20:15 . 2009-08-28 13:19 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-02-19 19:29 . 2009-09-01 20:00 -------- d-----w- c:\program files\TC UP
2010-02-17 00:57 . 2009-08-24 22:04 -------- d-----w- c:\program files\Common Files\InstallShield
2010-02-17 00:56 . 2009-08-24 22:19 -------- d-----w- c:\program files\Common Files\Sonic Shared
2010-02-17 00:42 . 2009-08-25 22:33 -------- d-----w- c:\program files\IEPro
2010-02-16 23:33 . 2009-08-28 17:07 -------- d-----w- c:\documents and settings\alien\Application Data\Teleca
2010-02-15 18:59 . 2009-08-24 22:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-15 15:20 . 2009-10-30 04:30 146 ----a-w- c:\windows\DelMR.bat
2010-02-15 14:29 . 2009-08-25 14:29 -------- d-----w- c:\program files\Windows Media Connect 2
2010-02-15 13:30 . 2009-08-26 00:19 -------- d-----w- c:\program files\Common Files\Lenovo
2010-02-15 13:30 . 2009-08-24 22:04 -------- d-----w- c:\program files\Lenovo
2010-02-15 03:18 . 2010-01-07 12:57 20 ---h--w- c:\documents and settings\All Users\Application Data\PKP_DLdu.DAT
2010-02-15 00:17 . 2009-08-31 15:22 -------- d-----w- c:\documents and settings\alien\Application Data\HEXelon
2010-02-13 18:29 . 2009-12-01 02:13 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-02-12 22:55 . 2009-12-18 00:33 -------- d-----w- c:\program files\QuickTime
2010-02-12 22:54 . 2009-12-18 00:33 -------- d-----w- c:\program files\Apple Software Update
2010-02-12 02:59 . 2009-08-31 15:54 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-12 02:15 . 2009-08-24 23:22 101320 ----a-w- c:\documents and settings\alien\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-11 22:45 . 2009-12-08 17:38 -------- d-----w- c:\documents and settings\All Users\Application Data\ABBYY
2010-02-11 18:07 . 2009-08-24 22:11 -------- d-----w- c:\program files\ATI Technologies
2010-02-11 17:25 . 2009-08-30 19:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-02-11 17:15 . 2010-01-07 12:59 20 ---h--w- c:\documents and settings\All Users\Application Data\PKP_DLdw.DAT
2010-02-11 16:38 . 2009-09-21 21:21 -------- d-----w- c:\program files\WeFi
2010-02-11 16:06 . 2009-09-08 00:08 -------- d-----w- c:\program files\Common Files\Real
2010-02-11 15:29 . 2009-10-11 16:29 -------- d-----w- c:\program files\ISL
2010-02-11 13:46 . 2010-01-07 12:58 -------- d-----w- c:\program files\Nikon
2010-02-08 15:45 . 2010-02-08 15:45 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01009.Wdf
2010-02-08 15:45 . 2010-02-08 15:45 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
2010-02-08 03:59 . 2009-08-24 22:07 -------- d-----w- c:\program files\ThinkVantage Fingerprint Software
2010-02-08 03:52 . 2009-08-26 04:35 -------- d-----w- c:\documents and settings\All Users\Application Data\PCDr
2010-02-08 03:38 . 2010-03-02 13:42 -------- d-----w- c:\documents and settings\Administrator.LENOVO-767C12D9\Application Data\Intel
2010-02-08 03:37 . 2009-08-24 22:05 -------- d-----w- c:\program files\Intel
2010-02-08 03:30 . 2009-11-30 17:45 -------- d-----w- c:\program files\PC-Doctor
2010-02-06 22:30 . 2009-08-25 11:31 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-06 14:11 . 2009-08-25 21:40 -------- d-----w- c:\documents and settings\alien\Application Data\Lenovo
2010-02-06 14:11 . 2009-08-24 22:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Lenovo
2010-02-04 17:28 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPdf92.tmp
2010-02-04 17:11 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPe4b2.tmp
2010-02-04 16:41 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPdca4.tmp
2010-02-04 16:39 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPd64b.tmp
2010-02-04 16:37 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPdc75.tmp
2010-02-04 16:34 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPe510.tmp
2010-02-04 16:24 . 2009-08-25 11:42 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-02-04 16:24 . 2009-08-25 11:09 -------- d-----w- c:\program files\Windows Live Safety Center
2010-02-04 16:23 . 2009-08-26 16:52 -------- d-----w- c:\program files\Windows Installer Clean Up
2010-02-04 16:23 . 2009-08-25 14:39 -------- d-----w- c:\program files\Windows Defender
2010-02-04 16:23 . 2009-08-24 22:28 -------- d-----w- c:\program files\SMI2
2010-02-04 16:23 . 2009-08-25 14:35 -------- d-----w- c:\program files\Microsoft Calculator Plus
2010-02-04 16:20 . 2009-08-24 22:21 -------- d-----w- c:\program files\IBM ThinkVantage
2010-02-04 16:20 . 2009-08-24 22:28 -------- d-----w- c:\program files\Google
2010-02-04 16:20 . 2009-08-26 06:30 -------- d-----w- c:\program files\Digital Line Detect
2010-02-04 16:20 . 2009-08-24 22:07 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-02-04 16:15 . 2009-08-25 21:07 -------- d-----w- c:\documents and settings\alien\Application Data\Windows Desktop Search
2010-02-04 16:15 . 2009-08-28 02:15 -------- d-----w- c:\documents and settings\alien\Application Data\MSNInstaller
2010-02-04 16:12 . 2009-08-31 23:41 -------- d-----r- c:\program files\Skype
2010-02-04 16:12 . 2009-08-30 19:16 -------- d-----w- c:\program files\Microsoft Works
2010-02-04 16:12 . 2009-08-31 23:41 -------- d-----w- c:\program files\Common Files\Skype
2010-02-04 16:12 . 2009-09-02 01:52 -------- d-----w- c:\program files\Common Files\Autodesk Shared
2010-02-04 16:11 . 2009-09-02 01:52 -------- d-----w- c:\program files\AutoCAD 2005
2010-02-04 16:11 . 2009-09-02 01:53 -------- d-----w- c:\program files\AnswerWorks 4.0
2010-02-04 16:09 . 2009-09-21 21:22 -------- d-----w- c:\program files\WeFiBar
2010-02-04 16:04 . 2009-09-21 21:20 -------- d-----w- c:\documents and settings\alien\Application Data\OpenCandy
2010-02-04 16:04 . 2009-08-25 22:36 -------- d-----w- c:\documents and settings\alien\Application Data\MiniDm
2010-02-04 16:03 . 2009-08-25 22:33 -------- d-----w- c:\documents and settings\alien\Application Data\IEPro
2010-02-04 15:53 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPe03e.tmp
2010-02-04 15:30 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPfdf7.tmp
2010-02-04 15:26 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP06d1.tmp
2010-02-04 15:24 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP0115.tmp
2010-02-04 15:23 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP0589.tmp
2010-02-04 15:19 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPffeb.tmp
2010-02-04 15:17 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP04ae.tmp
2010-02-04 15:15 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPfef1.tmp
2010-02-04 15:13 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPf443.tmp
2010-02-04 15:10 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP047f.tmp
2010-02-04 15:08 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP0114.tmp
2010-02-04 15:06 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP022d.tmp
2010-02-04 15:04 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPff5f.tmp
2010-02-04 15:02 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP01ef.tmp
2010-02-04 14:59 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP01d0.tmp
2010-02-04 14:57 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMPf56c.tmp
2010-02-04 14:55 . 2009-08-24 21:47 102400 ----a-w- c:\windows\DUMP0421.tmp
2010-02-01 00:24 . 2009-11-06 16:59 -------- d-----w- c:\program files\Mobiola Web Camera for UIQ 3
2010-01-26 23:10 . 2010-01-26 23:10 -------- d-----w- c:\program files\Xenocode
2010-01-25 22:40 . 2010-01-25 22:40 -------- d-----w- c:\program files\LiveUpload
2010-01-25 22:37 . 2010-01-25 22:37 -------- d-----w- c:\program files\Live Mesh
2010-01-25 22:36 . 2010-01-25 22:37 9040 ----a-w- c:\windows\system32\drivers\rdpdispm.sys
2010-01-25 22:36 . 2010-01-25 22:37 19408 ----a-w- c:\windows\system32\drivers\rdpvmp.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0b876028-b388-4f6d-922f-f52faec8535f}"= "c:\program files\WeFiBar\tbWeF1.dll" [2010-03-02 2349080]

[HKEY_CLASSES_ROOT\clsid\{0b876028-b388-4f6d-922f-f52faec8535f}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}]
2010-03-02 01:49 2349080 ----a-w- c:\program files\WeFiBar\tbWeF1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF2573AE-E1ED-40e1-83BA-F544CB2EE135}]
2009-12-03 11:25 592896 ----a-w- c:\program files\Common Files\Download Helper\DownloadHelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{0b876028-b388-4f6d-922f-f52faec8535f}"= "c:\program files\WeFiBar\tbWeF1.dll" [2010-03-02 2349080]

[HKEY_CLASSES_ROOT\clsid\{0b876028-b388-4f6d-922f-f52faec8535f}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{0B876028-B388-4F6D-922F-F52FAEC8535F}"= "c:\program files\WeFiBar\tbWeF1.dll" [2010-03-02 2349080]

[HKEY_CLASSES_ROOT\clsid\{0b876028-b388-4f6d-922f-f52faec8535f}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-07-16 25604904]
"Google Update"="c:\documents and settings\alien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-09-01 133104]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 204288]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-09 39408]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-02-27 3037696]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2009-11-19 128296]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-11-19 1594664]
"TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352]
"TpShocks"="TpShocks.exe" [2009-12-11 337256]
"TP4EX"="tp4ex.exe" [2005-10-17 65536]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2008-10-08 256576]
"TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2009-03-13 68976]
"LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2009-07-23 185688]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"DiskeeperSystray"="c:\program files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2005-11-29 196696]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-08-24 169472]
"ACTray"="c:\program files\ThinkPad\ConnectUtilities\ACTray.exe" [2009-12-10 431464]
"ACWLIcon"="c:\program files\ThinkPad\ConnectUtilities\ACWLIcon.exe" [2009-12-10 181608]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2009-12-16 513384]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2009-12-16 208896]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584]
"Message Center Plus"="c:\program files\LENOVO\Message Center Plus\MCPLaunch.exe" [2009-05-27 49976]
"LENOVO.TPFNF6R"="c:\program files\Lenovo\HOTKEY\TPFNF6R.exe" [2009-08-20 62752]
"TPFNF7"="c:\progra~1\Lenovo\NPDIRECT\TPFNF7SP.exe" [2009-08-03 62240]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"AwaySch"="c:\program files\Lenovo\AwayTask\AwaySch.EXE" [2006-11-07 91688]
"LPMailChecker"="c:\progra~1\THINKV~2\PrdCtr\LPMLCHK.exe" [2009-07-23 124248]
"AMSG"="c:\progra~1\THINKV~2\AMSG\Amsg.exe" [2009-09-03 436800]
"cssauth"="c:\program files\Lenovo\Client Security Solution\cssauth.exe" [2009-03-04 3093816]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-02-11 198160]
"Bonus.SSR.FR10"="c:\program files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe" [2010-01-26 941320]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"TC UP"="c:\program files\TC UP\TC UP.exe" [2009-10-04 37376]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-12-25 548864]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-02-02 122940]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-09-11 2054360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 435096]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ACNotify]
2009-12-10 20:39 32768 ----a-w- c:\program files\ThinkPad\ConnectUtilities\ACNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 10:28 72208 ------w- c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2009-12-01 12:41 100104 ----a-w- c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2006-09-06 14:37 34344 ------w- c:\program files\Lenovo\HOTKEY\notifyf2.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\TC UP\\PLUGINS\\Media\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS4\\Server\\bin\\VersionCueCS4.exe"=
"c:\\Program Files\\IEPro\\MiniDM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"3703:TCP"= 3703:TCP:Adobe Version Cue CS4 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS4 Server
"51000:TCP"= 51000:TCP:Adobe Version Cue CS4 Server
"51001:TCP"= 51001:TCP:Adobe Version Cue CS4 Server

R0 DozeHDD;DozeHDD;c:\windows\system32\drivers\DOZEHDD.SYS [1.2.2010 17:52 24304]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [27.2.2010 21:37 64288]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [9.10.2009 12:10 20520]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [27.2.2010 21:10 142592]
R1 tvtumon;tvtumon;c:\windows\system32\drivers\tvtumon.sys [5.12.2007 15:42 46144]
R1 VD_FileDisk;VD_FileDisk;c:\windows\system32\drivers\vd_filedisk.sys [13.1.2006 14:00 15872]
R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [22.12.2009 1:08 814344]
R2 DozeSvc;Lenovo Doze Mode Service;c:\program files\ThinkPad\Utilities\DOZESVC.EXE [1.2.2010 17:52 132456]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [11.9.2009 7:24 735960]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [25.8.2009 12:49 54752]
R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [28.8.2009 14:51 10384]
R2 smi2;smi2;c:\program files\SMI2\smi2.sys [22.12.2005 0:45 3968]
R2 smihlp2;SMI Helper Driver (smihlp2);c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [13.3.2009 13:47 12560]
R2 TPHKSVC;On Screen Display;c:\program files\Lenovo\HOTKEY\TPHKSVC.exe [21.5.2009 19:48 62320]
R2 TVT_UpdateMonitor;TVT Windows Update Monitor;c:\program files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [5.12.2007 15:42 360448]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 18:19 13592]
R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [22.5.2007 13:59 37312]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [11.11.2009 2:15 135664]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\Lenovo\HOTKEY\micmute.exe [21.5.2009 19:48 45424]
S2 MLPTDR_C;MLPTDR_C;c:\windows\system32\MLPTDR_C.SYS [3.9.2002 18:31 19296]
S2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.EXE --> c:\program files\ThinkPad\Utilities\PWMDBSVC.EXE [?]
S2 TVT Backup Protection Service;TVT Backup Protection Service;"c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe" --> c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe [?]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15.8.2008 5:46 284016]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\Windows Live\Family Safety\fsssvc.exe [5.8.2009 21:48 704864]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [4.2.2010 16:52 1229232]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-04 20:36]

2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-11 01:15]

2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-11 01:15]

2010-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005Core.job
- c:\documents and settings\alien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-01 01:03]

2010-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005UA.job
- c:\documents and settings\alien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-01 01:03]

2010-03-02 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]

2010-02-12 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\PC-Doctor\pcdlauncher.exe [2009-11-20 10:12]

2010-03-02 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2009-08-24 00:12]

2009-08-24 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2009-08-24 00:32]

2010-03-02 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\PC-Doctor\pcdr5cuiw32.exe [2009-11-22 09:14]

2010-03-02 c:\windows\Tasks\User_Feed_Synchronization-{4D7A596F-BBA6-46AE-A394-28CADDBC5396}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2010-03-02 c:\windows\Tasks\User_Feed_Synchronization-{9E3F8512-5D96-419A-B5FB-0E2DDA6AC9CA}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = iexplore
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Send To &Bluetooth - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-AdobeBridge - (no file)
HKLM-Run-TVT Scheduler Proxy - c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
HKU-Default-RunOnce-3DxAssociateFileExts - c:\program files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe
Notify-NavLogon - (no file)
AddRemove-Miranda IM - c:\program files\TC UP\PLUGINS\Media\MirandaIM\Uninstall.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-02 19:05
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-889452823-1660516758-1856188132-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1488)
c:\program files\ThinkPad\ConnectUtilities\ACNotify.dll
c:\program files\ThinkPad\ConnectUtilities\AcSvcStub.dll
c:\program files\ThinkPad\ConnectUtilities\AcLocSettings.dll
c:\program files\ThinkPad\ConnectUtilities\ACHelper.dll
c:\windows\system32\Ati2evxx.dll
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
c:\program files\common files\logishrd\bluetooth\LBTServ.dll
c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll
c:\program files\ThinkVantage Fingerprint Software\homepass.dll
c:\program files\ThinkVantage Fingerprint Software\bio.dll
c:\program files\ThinkVantage Fingerprint Software\qlbase.dll
c:\program files\ThinkVantage Fingerprint Software\ps2css.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll

- - - - - - - > 'explorer.exe'(4020)
c:\windows\system32\WININET.dll
c:\program files\Lenovo\Client Security Solution\tvtpwm_windows_hook.dll
c:\program files\Lenovo\Client Security Solution\tvtpwm_interface.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
c:\program files\PC-Doctor\ATLPcdToolbar544928.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\ibmpmsvc.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\IPSSVC.EXE
c:\program files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
c:\program files\Intel\WiFi\bin\EvtEng.exe
c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
c:\program files\Lenovo\Client Security Solution\tvttcsd.exe
c:\program files\Lenovo\Rescue and Recovery\rrservice.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\ThinkPad\ConnectUtilities\AcSvc.exe
c:\program files\Windows Media Player\WMPNetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
c:\windows\system32\TpShocks.exe
c:\program files\Lenovo\HOTKEY\TPONSCR.exe
c:\program files\Lenovo\Zoom\TpScrex.exe
c:\windows\system32\rundll32.exe
c:\program files\Google\Google Desktop Search\GoogleDesktopIndex.exe
c:\program files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
c:\program files\TC UP\totalcmd.exe
c:\program files\Lenovo\Client Security Solution\password_manager.exe
c:\program files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
c:\progra~1\Intuwave\Shared\MROUTE~1\MRB39E~1.EXE
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2010-03-02 19:16:34 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-02 18:16

Před spuštěním: 18 573 307 904 bytes free
Po spuštění: 18 799 992 832 bytes free

- - End Of File - - 6BE407E6FF8E9980B15F996DBAE267A8

Unlimited_Killer

Pokračujeme. ↓

1) OTMoveit3

Stáhněte OTM3 na Plochu.
Spusťte ho dvojklikem na OTM.exe, pokud to nepůjde, zkuste to s adminskými právy.

Do levého okna 'Paste Instructions for Items to be Moved' vkopírujte následující skript:

Kód: Vybrat vše

:processes
explorer.exe

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0b876028-b388-4f6d-922f-f52faec8535f}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{0b876028-b388-4f6d-922f-f52faec8535f}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DiskeeperSystray"=-
""=-
"Adobe Reader Speed Launcher"=-
"TkBellExe"=-
"Adobe Acrobat Speed Launcher"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
"DLA"=-
"KernelFaultCheck"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
"swg"=-
[-HKEY_CLASSES_ROOT\clsid\{0b876028-b388-4f6d-922f-f52faec8535f}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{0B876028-B388-4F6D-922F-F52FAEC8535F}"=-

:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\Program Files\WeFiBar
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005UA.job


:services
JavaQuickStarterService

:commands
[emptytemp]
[reboot]

Poté klikněte na červené tlačítko 'MoveIt!'.
V zeleném okně vpravo by se měl zobrazit log, ten vkopírujete sem do fóra.
Pokud se zobrazí hláška k restartování, klikněte na Yes.
Po restartu se log otevře sám, nebo ho najdete v C:\_OTM\MovedFiles

2) VirusTotal

Otestujte na VirusTotal soubory:

Kód: Vybrat vše

C:\Program Files\Common Files\Download Helper\DownloadHelper.dll
C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe
C:\Program Files\TC UP\TC UP.exe
C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxViewer\register.exe
C:\WINDOWS\system32\TweakUI.exe
c:\windows\system32\drivers\DOZEHDD.SYS
c:\program files\PC-Doctor\pcdr5cuiw32.exe

Jednoduše tam vkopírujete cesty, co jsem napsal do code.
Jestliže Vám to napíše, že soubor byl již testován, nechte ho otestovat znovu.
Poté sem vložíte linky (odkazy) na jednotlivé testy.

3) Nový RSIT log

jarmyl · #6 Příspěvek od **jarmyl** » 09 bře 2010 03:19

1.
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0b876028-b388-4f6d-922f-f52faec8535f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{0b876028-b388-4f6d-922f-f52faec8535f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DiskeeperSystray deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Acrobat Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DLA deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry key HKEY_CLASSES_ROOT\clsid\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser\\{0B876028-B388-4F6D-922F-F52FAEC8535F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B876028-B388-4F6D-922F-F52FAEC8535F}\ not found.
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET104.tmp moved successfully.
C:\WINDOWS\system32\SET1D9.tmp moved successfully.
C:\WINDOWS\system32\SETC0.tmp moved successfully.
C:\WINDOWS\system32\SETC3.tmp moved successfully.
C:\WINDOWS\system32\SETC9.tmp moved successfully.
C:\WINDOWS\system32\SETCC.tmp moved successfully.
C:\WINDOWS\system32\SETE3.tmp moved successfully.
C:\WINDOWS\system32\SETE6.tmp moved successfully.
C:\WINDOWS\system32\SETE9.tmp moved successfully.
C:\WINDOWS\system32\SETEF.tmp moved successfully.
C:\WINDOWS\system32\SETF2.tmp moved successfully.
C:\WINDOWS\002882_.tmp moved successfully.
C:\WINDOWS\DUMP0114.tmp moved successfully.
C:\WINDOWS\DUMP0115.tmp moved successfully.
C:\WINDOWS\DUMP01d0.tmp moved successfully.
C:\WINDOWS\DUMP01ef.tmp moved successfully.
C:\WINDOWS\DUMP022d.tmp moved successfully.
C:\WINDOWS\DUMP0421.tmp moved successfully.
C:\WINDOWS\DUMP047f.tmp moved successfully.
C:\WINDOWS\DUMP04ae.tmp moved successfully.
C:\WINDOWS\DUMP0589.tmp moved successfully.
C:\WINDOWS\DUMP06d1.tmp moved successfully.
C:\WINDOWS\DUMPd64b.tmp moved successfully.
C:\WINDOWS\DUMPdc75.tmp moved successfully.
C:\WINDOWS\DUMPdca4.tmp moved successfully.
C:\WINDOWS\DUMPdf92.tmp moved successfully.
C:\WINDOWS\DUMPe03e.tmp moved successfully.
C:\WINDOWS\DUMPe4b2.tmp moved successfully.
C:\WINDOWS\DUMPe510.tmp moved successfully.
C:\WINDOWS\DUMPf443.tmp moved successfully.
C:\WINDOWS\DUMPf56c.tmp moved successfully.
C:\WINDOWS\DUMPfdf7.tmp moved successfully.
C:\WINDOWS\DUMPfef1.tmp moved successfully.
C:\WINDOWS\DUMPff5f.tmp moved successfully.
C:\WINDOWS\DUMPffeb.tmp moved successfully.
C:\WINDOWS\msdownld.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP277.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP353.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP375.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP80A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8BD.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP99A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9C2.tmp folder moved successfully.
C:\WINDOWS\CSC\csc1.tmp moved successfully.
C:\WINDOWS\Installer\MSI285.tmp moved successfully.
C:\WINDOWS\Installer\MSIDC.tmp moved successfully.
C:\WINDOWS\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\wlt1B5.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\Temp\HTT425.tmp moved successfully.
C:\WINDOWS\Temp\~_C1346.tmp moved successfully.
C:\WINDOWS\Temp\~_C231.tmp moved successfully.
C:\WINDOWS\Temp\~_C5BBB.tmp moved successfully.
C:\WINDOWS\Temp\~_C6B21.tmp moved successfully.
C:\WINDOWS\Temp\~_C742F.tmp moved successfully.
C:\WINDOWS\Temp\~_CC4D.tmp moved successfully.
C:\Program Files\WeFiBar folder moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005Core.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-889452823-1660516758-1856188132-1005UA.job moved successfully.
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: Administrator.LENOVO-767C12D9
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 297047 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 589 bytes

User: alien
->Temp folder emptied: 373825 bytes
->Temporary Internet Files folder emptied: 591872679 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 190387651 bytes
->Flash cache emptied: 51929 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 332026 bytes
->Flash cache emptied: 1394 bytes

User: NetworkService
->Temp folder emptied: 8028 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 141757 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 90126 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 373924143 bytes

Total Files Cleaned = 1 104,00 mb

OTM by OldTimer - Version 3.1.10.0 log created on 03092010_030245

Files moved on Reboot...
File C:\Documents and Settings\alien\Local Settings\Temp\~DF239D.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DF23A9.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DF90AA.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DF90B8.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DFD2A3.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DFD2AF.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DFD35A.tmp not found!
File C:\Documents and Settings\alien\Local Settings\Temp\~DFD366.tmp not found!
C:\Documents and Settings\alien\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
C:\Documents and Settings\alien\Local Settings\Temporary Internet Files\SuggestedSites.dat moved successfully.

Registry entries deleted on Reboot...

jarmyl · #7 Příspěvek od **jarmyl** » 09 bře 2010 04:07

2.1.
http://www.virustotal.com/cs/analisis/d ... 1268103632
2.2.
http://www.virustotal.com/cs/analisis/4 ... 1268103540
2.3.
http://www.virustotal.com/cs/analisis/1 ... 1268103115
2.4.
http://www.virustotal.com/cs/analisis/d ... 1268103713
2.5.
http://www.virustotal.com/cs/analisis/7 ... 1268103777
2.6.
http://www.virustotal.com/cs/analisis/f ... 1268103858
2.7.
http://www.virustotal.com/cs/analisis/5 ... 1268103961

jarmyl · #8 Příspěvek od **jarmyl** » 09 bře 2010 04:10

3.
Logfile of random's system information tool 1.06 (written by random/random)
Run by alien at 2010-03-09 04:08:44
Microsoft Windows XP Professional Service Pack 3
System drive C: has 32 GB (14%) free of 233 GB
Total RAM: 3070 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:08:54, on 9.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\TpShocks.exe
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe
C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe
C:\PROGRA~1\THINKV~2\AMSG\Amsg.exe
C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
C:\PROGRA~1\Intuwave\Shared\MROUTE~1\MRB39E~1.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\alien\Desktop\RSIT.exe
C:\Program Files\trend micro\alien.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Password Manager Browser Helper Object - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: DownloadHelper Class - {FF2573AE-E1ED-40e1-83BA-F544CB2EE135} - C:\Program Files\Common Files\Download Helper\DownloadHelper.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Lenovo ThinkVantage Toolbox - {86B9B5DD-FB75-4035-BD52-3C94F7849CAF} - C:\Program Files\PC-Doctor\ATLPcdToolbar544928.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
O4 - HKLM\..\Run: [ACWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Message Center Plus] C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe /start
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [TPFNF7] C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe /r
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [LPMailChecker] C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe
O4 - HKLM\..\Run: [AMSG] C:\PROGRA~1\THINKV~2\AMSG\Amsg.exe /startup
O4 - HKLM\..\Run: [cssauth] "C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Bonus.SSR.FR10] "C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: SrvMod.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: Lenovo Password Manager... - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - http://www-307.ibm.com/pc/support/acpir.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour ... se1140.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1200708734
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Unknown owner - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (file missing)
O23 - Service: Diskeeper - Unknown owner - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe (file missing)
O23 - Service: Lenovo Doze Mode Service (DozeSvc) - Lenovo. - C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo. - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Group Limited - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE (file missing)
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Unknown owner - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Unknown owner - C:\Program Files\Spyware Terminator\sp_rsser.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - c:\program files\lenovo\system update\suservice.exe (file missing)
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe (file missing)
O23 - Service: TSS Core Service (TSSCoreService) - Lenovo - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe (file missing)
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (file missing)
O23 - Service: TVT Windows Update Monitor (TVT_UpdateMonitor) - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe

--
End of file - 20972 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job
C:\WINDOWS\tasks\PMTask.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\SystemToolsDailyTest.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{4D7A596F-BBA6-46AE-A394-28CADDBC5396}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{9E3F8512-5D96-419A-B5FB-0E2DDA6AC9CA}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2009-09-02 777392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2010-02-11 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2006-02-02 110652]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-05 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-08 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF468356-BB7E-42D7-9F15-4F3B9BCFCED2}]
IePasswordManagerHelper Class - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll [2009-03-04 816440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-13 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-13 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF2573AE-E1ED-40e1-83BA-F544CB2EE135}]
DownloadHelper Class - C:\Program Files\Common Files\Download Helper\DownloadHelper.dll [2009-12-03 592896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{86B9B5DD-FB75-4035-BD52-3C94F7849CAF} - Lenovo ThinkVantage Toolbox - C:\Program Files\PC-Doctor\ATLPcdToolbar544928.dll [2009-11-22 137712]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-05 279664]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2009-11-19 128296]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1594664]
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2007-01-09 868352]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2009-12-11 337256]
"TP4EX"=C:\WINDOWS\system32\tp4ex.exe [2005-10-17 65536]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2008-10-08 256576]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-03-13 68976]
"LPManager"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe [2009-07-23 185688]
"ISUSPM Startup"=c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184]
"ISUSScheduler"=c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-08-24 169472]
"ACTray"=C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [2009-12-10 431464]
"ACWLIcon"=C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe [2009-12-10 181608]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"Message Center Plus"=C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27 49976]
"LENOVO.TPFNF6R"=C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [2009-08-20 62752]
"TPFNF7"=C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe [2009-08-03 62240]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2005-05-20 925696]
"AwaySch"=C:\Program Files\Lenovo\AwayTask\AwaySch.EXE [2006-11-07 91688]
"LPMailChecker"=C:\PROGRA~1\THINKV~2\PrdCtr\LPMLCHK.exe [2009-07-23 124248]
"AMSG"=C:\PROGRA~1\THINKV~2\AMSG\Amsg.exe [2009-09-03 436800]
"cssauth"=C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [2009-03-04 3093816]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Bonus.SSR.FR10"=C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2010-01-26 941320]
"PC Suite for Smartphones"=C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-12-25 548864]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-09-11 2054360]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Adobe_ID0ENQBO"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-11-10 417792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-18 204288]
"mRouterConfig"=C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe [2006-03-02 290816]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-02-27 3037696]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-09 39408]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
SrvMod.lnk -

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]
C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll [2009-12-10 32768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-09-29 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2009-12-01 100104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\TC UP\PLUGINS\Media\uTorrent\utorrent.exe"="C:\Program Files\TC UP\PLUGINS\Media\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module"
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"
"C:\Program Files\TC UP\PLUGINS\Media\OperaUSB\OperaUSB.exe"="C:\Program Files\TC UP\PLUGINS\Media\OperaUSB\OperaUSB.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe"="C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:*:Enabled:Adobe Version Cue CS4 Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe"="C:\Program Files\ThinkVantage\SystemUpdate\jre\bin\javaw.exe:*:Enabled:ThinkVantage System Update"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - "C:\WINDOWS\notepad.exe" "%1"
.scr - install -
.scr - config -

jarmyl · #9 Příspěvek od **jarmyl** » 09 bře 2010 04:11

3. .. POKRACOVANI

======List of files/folders created in the last 1 months======

2010-03-09 03:02:45 ----D---- C:\_OTM
2010-03-08 21:16:57 ----D---- C:\Documents and Settings\alien\Application Data\inkscape
2010-03-08 16:01:00 ----D---- C:\Documents and Settings\All Users\Application Data\ALM
2010-03-08 15:38:15 ----RA---- C:\WINDOWS\system32\AdobePDFUI.dll
2010-03-08 15:38:15 ----RA---- C:\WINDOWS\system32\AdobePDF.dll
2010-03-08 14:45:50 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-03-06 13:11:33 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-03-04 16:58:49 ----D---- C:\Program Files\foldit
2010-03-04 16:58:49 ----D---- C:\Documents and Settings\All Users\Application Data\foldit
2010-03-03 03:12:24 ----SHD---- C:\RECYCLER
2010-03-02 19:16:34 ----A---- C:\ComboFix.txt
2010-03-02 18:46:15 ----A---- C:\Boot.bak
2010-03-02 18:46:05 ----RASHD---- C:\cmdcons
2010-03-02 18:45:09 ----A---- C:\WINDOWS\zip.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\SWSC.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\SWREG.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\sed.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\PEV.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\NIRCMD.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\MBR.exe
2010-03-02 18:45:09 ----A---- C:\WINDOWS\grep.exe
2010-03-02 14:57:05 ----D---- C:\WINDOWS\ERDNT
2010-03-02 14:50:14 ----D---- C:\Qoobox
2010-03-02 14:43:06 ----A---- C:\WINDOWS\OEWABLog.txt
2010-03-02 05:19:30 ----D---- C:\rsit
2010-03-02 05:19:30 ----D---- C:\Program Files\trend micro
2010-03-01 01:35:21 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-02-27 22:05:47 ----D---- C:\Program Files\Process Explorer
2010-02-27 22:00:53 ----D---- C:\Program Files\Ultimate Process Manager
2010-02-27 21:35:57 ----HDC---- C:\Documents and Settings\All Users\Application Data\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-02-27 21:35:40 ----D---- C:\Program Files\Lavasoft
2010-02-27 21:35:40 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-02-27 21:32:24 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-02-27 21:32:24 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-02-27 21:10:15 ----D---- C:\Documents and Settings\alien\Application Data\Spyware Terminator
2010-02-27 21:10:03 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2010-02-27 21:10:02 ----D---- C:\Program Files\Spyware Terminator
2010-02-27 21:04:17 ----D---- C:\Program Files\CCleaner
2010-02-25 18:16:03 ----D---- C:\Program Files\TPFanControl
2010-02-24 23:00:23 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-19 20:57:50 ----D---- C:\Documents and Settings\alien\Application Data\ComfortSoftware
2010-02-19 20:57:46 ----D---- C:\Program Files\ComfortKeyboard
2010-02-19 16:58:55 ----D---- C:\Program Files\Stubs
2010-02-19 16:53:40 ----D---- C:\Program Files\Comfort On-Screen Keyboard Pro
2010-02-19 14:49:18 ----A---- C:\WINDOWS\system32\TweakUI.exe
2010-02-18 02:30:46 ----D---- C:\Program Files\Sonic
2010-02-18 02:30:46 ----D---- C:\Program Files\Common Files\SureThing Shared
2010-02-17 01:56:45 ----D---- C:\WINDOWS\system32\DLA
2010-02-17 01:56:45 ----A---- C:\WINDOWS\system32\DLAAPI_W.DLL
2010-02-17 01:56:45 ----A---- C:\WINDOWS\DLA.EXE
2010-02-17 01:56:44 ----D---- C:\Program Files\Multimedia Center for Think Offerings
2010-02-17 01:47:31 ----A---- C:\WINDOWS\sequencer.exe
2010-02-17 01:47:30 ----D---- C:\Program Files\Sonic Icons for Lenovo
2010-02-17 01:32:33 ----D---- C:\Documents and Settings\alien\Application Data\MyPhoneExplorer
2010-02-17 01:03:25 ----D---- C:\Program Files\MyPhoneExplorer
2010-02-17 00:36:11 ----A---- C:\Connector.dll.txt
2010-02-15 19:59:17 ----D---- C:\Program Files\Intuwave
2010-02-15 19:59:13 ----D---- C:\Program Files\Symbian
2010-02-15 19:58:58 ----D---- C:\Program Files\Common Files\Sony Ericsson Shared
2010-02-15 19:58:58 ----D---- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2010-02-15 19:58:54 ----D---- C:\Program Files\Sony Ericsson
2010-02-15 19:58:54 ----D---- C:\Program Files\Common Files\Teleca Shared
2010-02-15 19:58:54 ----D---- C:\Documents and Settings\All Users\Application Data\Teleca
2010-02-15 15:30:13 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-02-14 23:31:58 ----D---- C:\Program Files\Epocware
2010-02-14 23:26:55 ----D---- C:\Documents and Settings\alien\Application Data\Download Helper
2010-02-14 23:26:53 ----D---- C:\Program Files\Common Files\Download Helper
2010-02-14 22:00:28 ----D---- C:\Documents and Settings\alien\Application Data\Miranda
2010-02-13 22:10:00 ----D---- C:\Documents and Settings\alien\Application Data\Graphisoft
2010-02-13 19:45:18 ----HD---- C:\Program Files\Zero G Registry
2010-02-13 19:39:03 ----A---- C:\WINDOWS\system32\WkExt32.dll
2010-02-13 19:39:03 ----A---- C:\WINDOWS\system32\wibuKJni.dll
2010-02-13 19:39:02 ----A---- C:\WINDOWS\system32\WkDos.exe
2010-02-13 19:38:55 ----A---- C:\WINDOWS\system32\WkWin32.dll
2010-02-13 19:38:54 ----D---- C:\Program Files\WIBU-SYSTEMS
2010-02-13 19:38:54 ----D---- C:\Program Files\WIBUKEY
2010-02-13 19:38:44 ----D---- C:\Program Files\Common Files\Graphisoft Shared
2010-02-13 19:35:35 ----D---- C:\Program Files\Graphisoft
2010-02-13 19:30:20 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-02-13 19:30:19 ----D---- C:\Program Files\Common Files\Java
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\javaws.exe
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\javaw.exe
2010-02-13 19:29:44 ----A---- C:\WINDOWS\system32\java.exe
2010-02-13 00:19:18 ----D---- C:\Documents and Settings\All Users\Application Data\Abvent
2010-02-13 00:19:18 ----D---- C:\Documents and Settings\alien\Application Data\Abvent
2010-02-13 00:19:08 ----D---- C:\Documents and Settings\alien\Application Data\Abvent_Artlantis3
2010-02-13 00:16:50 ----D---- C:\Program Files\Artlantis Studio 3
2010-02-13 00:06:07 ----A---- C:\WINDOWS\unins000.exe
2010-02-13 00:02:39 ----D---- C:\Program Files\Next Limit
2010-02-12 23:54:17 ----D---- C:\Program Files\Common Files\Apple
2010-02-11 23:45:50 ----D---- C:\Program Files\ABBYY FineReader 10
2010-02-11 17:57:12 ----D---- C:\Documents and Settings\alien\Application Data\Ledas
2010-02-11 17:06:21 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-02-11 17:06:14 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-02-11 17:06:14 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-02-11 17:06:13 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-02-11 15:05:27 ----D---- C:\Program Files\IMSIDesign
2010-02-11 15:05:27 ----D---- C:\Documents and Settings\All Users\Application Data\IMSIDesign
2010-02-11 14:53:49 ----D---- C:\Documents and Settings\alien\Application Data\SecondLife
2010-02-11 14:52:51 ----D---- C:\Program Files\SecondLife
2010-02-11 12:46:20 ----D---- C:\Licensing
2010-02-10 23:07:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 23:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 23:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 23:04:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 23:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 23:04:01 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 23:01:25 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 23:01:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 23:01:01 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$

======List of files/folders modified in the last 1 months======

2010-03-09 04:08:47 ----D---- C:\WINDOWS\Temp
2010-03-09 03:19:40 ----D---- C:\Documents and Settings\alien\Application Data\Skype
2010-03-09 03:14:56 ----D---- C:\Documents and Settings\alien\Application Data\skypePM
2010-03-09 03:14:13 ----A---- C:\sysiclog.txt
2010-03-09 03:13:58 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-09 03:13:49 ----SD---- C:\WINDOWS\Tasks
2010-03-09 03:13:02 ----D---- C:\Documents and Settings\alien\Application Data\Adobe
2010-03-09 03:12:26 ----D---- C:\WINDOWS\Prefetch
2010-03-09 03:11:12 ----D---- C:\WINDOWS\system32
2010-03-09 03:11:07 ----A---- C:\WINDOWS\system32\PROCDB.INI
2010-03-09 03:10:51 ----A---- C:\WINDOWS\system32\IPSCtrl.INI
2010-03-09 03:10:37 ----A---- C:\WINDOWS\system32\ICAutoUpdate.log.bak
2010-03-09 03:09:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-09 03:04:18 ----HD---- C:\WINDOWS\inf
2010-03-09 03:04:02 ----D---- C:\Program Files
2010-03-09 03:03:35 ----SHD---- C:\WINDOWS\Installer
2010-03-09 03:03:28 ----SHD---- C:\WINDOWS\CSC
2010-03-09 03:03:02 ----D---- C:\WINDOWS
2010-03-09 02:51:45 ----D---- C:\Program Files\TC UP
2010-03-09 02:45:30 ----D---- C:\WINDOWS\Microsoft.NET
2010-03-09 01:27:21 ----D---- C:\Program Files\DesignCAD 3D MAX Plus
2010-03-08 17:40:39 ----D---- C:\Documents and Settings\alien\Application Data\XnView
2010-03-08 16:07:51 ----D---- C:\Config.Msi
2010-03-08 16:06:24 ----D---- C:\Program Files\Common Files\Adobe
2010-03-08 15:55:05 ----D---- C:\Program Files\Adobe
2010-03-08 15:54:38 ----D---- C:\WINDOWS\system32\drivers
2010-03-08 15:35:19 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-03-08 15:34:15 ----RSD---- C:\WINDOWS\Fonts
2010-03-08 14:45:50 ----RD---- C:\Program Files\Common Files
2010-03-05 01:11:58 ----D---- C:\Program Files\IEPro
2010-03-05 01:11:19 ----D---- C:\Documents and Settings\alien\Application Data\OpenCandy
2010-03-02 19:04:54 ----A---- C:\WINDOWS\system.ini
2010-03-02 19:00:44 ----D---- C:\WINDOWS\system32\config
2010-03-02 18:56:12 ----D---- C:\WINDOWS\AppPatch
2010-03-02 18:46:15 ----RASH---- C:\BOOT.INI
2010-03-02 15:11:40 ----D---- C:\Program Files\Symantec Client Security
2010-03-02 15:11:15 ----D---- C:\Program Files\ESET
2010-03-02 15:07:51 ----D---- C:\WINDOWS\system32\appmgmt
2010-03-02 15:07:34 ----D---- C:\Program Files\Symantec
2010-03-02 15:07:34 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-03-02 15:07:30 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2010-03-02 14:42:52 ----D---- C:\Documents and Settings
2010-03-02 00:32:32 ----D---- C:\WINDOWS\system
2010-02-28 00:00:24 ----D---- C:\swshare
2010-02-27 21:37:12 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-27 21:36:01 ----D---- C:\WINDOWS\WinSxS
2010-02-27 21:09:48 ----D---- C:\WINDOWS\Minidump
2010-02-27 21:09:48 ----D---- C:\WINDOWS\Debug
2010-02-24 23:30:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-24 23:01:10 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-02-24 23:01:07 ----D---- C:\WINDOWS\ie8updates
2010-02-24 23:00:42 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-24 09:16:06 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2010-02-23 21:15:13 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-02-18 02:30:49 ----A---- C:\WINDOWS\wininit.ini
2010-02-17 01:57:06 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-02-17 01:57:05 ----D---- C:\Program Files\Common Files\InstallShield
2010-02-17 01:56:28 ----D---- C:\Program Files\Common Files\Sonic Shared
2010-02-17 00:56:04 ----D---- C:\Program Files\Common Files\System
2010-02-17 00:53:57 ----A---- C:\WINDOWS\win.ini
2010-02-17 00:46:39 ----SD---- C:\Documents and Settings\alien\Application Data\Microsoft
2010-02-17 00:33:05 ----D---- C:\Documents and Settings\alien\Application Data\Teleca
2010-02-15 23:00:55 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-15 19:59:17 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-15 19:57:18 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-15 16:20:31 ----A---- C:\WINDOWS\DelMR.bat
2010-02-15 15:34:42 ----D---- C:\Program Files\Windows Media Player
2010-02-15 15:29:27 ----D---- C:\Program Files\Windows Media Connect 2
2010-02-15 15:29:23 ----D---- C:\WINDOWS\Help
2010-02-15 14:30:10 ----D---- C:\Program Files\Common Files\Lenovo
2010-02-15 14:30:08 ----D---- C:\Program Files\Lenovo
2010-02-15 01:17:57 ----D---- C:\Documents and Settings\alien\Application Data\HEXelon
2010-02-13 19:29:34 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-02-12 23:55:15 ----D---- C:\Program Files\QuickTime
2010-02-12 23:54:06 ----D---- C:\Program Files\Apple Software Update
2010-02-11 23:45:50 ----D---- C:\Documents and Settings\All Users\Application Data\ABBYY
2010-02-11 23:41:58 ----D---- C:\temp
2010-02-11 19:19:37 ----RSD---- C:\WINDOWS\assembly
2010-02-11 19:07:52 ----D---- C:\Program Files\ATI Technologies
2010-02-11 18:25:54 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-02-11 17:38:05 ----D---- C:\Program Files\WeFi
2010-02-11 17:07:02 ----D---- C:\Documents and Settings\alien\Application Data\Real
2010-02-11 17:06:11 ----D---- C:\Program Files\Common Files\Real
2010-02-11 16:29:56 ----D---- C:\Program Files\ISL
2010-02-11 14:54:17 ----D---- C:\Documents and Settings\alien\Application Data\Mozilla
2010-02-11 14:46:43 ----D---- C:\Program Files\Nikon

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ANC;ANC; C:\WINDOWS\System32\drivers\ANC.SYS [2009-11-17 11520]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-11-18 5660]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-11-18 22684]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-11 108792]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-09-11 55768]
R1 IBMTPCHK;IBMTPCHK; \??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 Smapint;Smapint; C:\WINDOWS\System32\drivers\Smapint.sys [2006-10-02 14848]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 TDSMAPI;TDSMAPI; C:\WINDOWS\System32\drivers\TDSMAPI.SYS [2006-10-02 9343]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2009-12-16 4442]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2009-08-03 4608]
R1 tvtumon;tvtumon; C:\WINDOWS\system32\DRIVERS\tvtumon.sys [2008-07-11 46144]
R1 VD_FileDisk;VD_FileDisk; C:\WINDOWS\system32\drivers\VD_FileDisk.sys [2006-01-13 15872]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2006-02-02 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2006-02-02 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2006-02-02 86652]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2006-02-02 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2006-02-02 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2006-02-02 87036]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2006-02-02 94332]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-11-18 40544]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-09-11 135048]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
R2 ibmfilter;ibmfilter; \??\C:\WINDOWS\system32\drivers\ibmfilter.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2009-06-17 10384]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []
R2 PROCDD;IPS Helper Driver; C:\WINDOWS\system32\DRIVERS\PROCDD.SYS [2006-11-06 12080]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2009-08-10 13952]
R2 smi2;smi2; \??\C:\Program Files\SMI2\smi2.sys []
R2 smihlp2;SMI Helper Driver (smihlp2); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys []
R2 tvtfilter;tvtfilter; C:\WINDOWS\system32\DRIVERS\tvtfilter.sys [2009-08-27 33536]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\WINDOWS\SYSTEM32\DRIVERS\WibuKey.sys [2006-11-22 72704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-06-20 178688]
R3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-09-29 3565056]
R3 atmeltpm;atmeltpm; C:\WINDOWS\system32\DRIVERS\atmeltpm.sys [2005-05-17 15872]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-11-01 1342122]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2009-06-18 234496]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2007-11-01 989696]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2007-11-01 211456]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2009-11-18 26608]
R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2003-09-11 21060]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NETw5x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-09-15 5977216]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2009-08-26 17536]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-10-06 225696]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2008-12-09 50832]
R3 TVTI2C;Lenovo SM bus driver; C:\WINDOWS\system32\DRIVERS\Tvti2c.sys [2008-02-22 37312]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2007-11-01 731520]
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); C:\WINDOWS\system32\DRIVERS\zebrceb.sys [2008-01-15 63360]
S2 MLPTDR_C;MLPTDR_C; \??\C:\WINDOWS\system32\MLPTDR_C.SYS []
S3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-17 117760]
S3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\hsxhwazl.sys [2005-12-06 192512]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-11-27 1427968]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zebrbus;Sony Ericsson Composite Device driver; C:\WINDOWS\system32\DRIVERS\zebrbus.sys [2008-01-15 83200]
S3 zebrmdfl;Sony Ericsson Modem Filter; C:\WINDOWS\system32\DRIVERS\zebrmdfl.sys [2008-01-15 14848]
S3 zebrmdm;Sony Ericsson Port (WDM); C:\WINDOWS\system32\DRIVERS\zebrmdm.sys [2008-01-15 109568]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM); C:\WINDOWS\system32\DRIVERS\zebrmdmc.sys [2008-01-15 109568]
S3 zebrsce;Sony Ericsson PC-Connect Port; C:\WINDOWS\system32\DRIVERS\zebrsce.sys [2008-01-15 91264]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-13 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-22 814344]
R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2009-12-10 103784]
R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2009-12-10 230760]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-09-29 602112]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 DozeSvc;Lenovo Doze Mode Service; C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE [2009-12-16 132456]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-09-11 735960]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 858384]
R2 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2009-11-18 38248]
R2 IPSSVC;IPS Core Service; C:\WINDOWS\system32\IPSSVC.EXE [2007-01-30 108080]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 473360]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2009-03-04 750904]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2009-07-15 62320]
R2 TSSCoreService;TSS Core Service; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [2009-03-04 779576]
R2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2007-12-05 950272]
R2 TVT_UpdateMonitor;TVT Windows Update Monitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [2008-10-09 360448]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe []
S2 Diskeeper;Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-11 135664]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2009-07-03 45424]
S2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE []
S2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe []
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe []
S2 SUService;System Update; c:\program files\lenovo\system update\suservice.exe []
S2 TpKmpSVC;IBM KCU Service; C:\WINDOWS\system32\TpKmpSVC.exe []
S2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe []
S2 TVT Scheduler;TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe []
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-09-02 74360]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-09-11 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-08 655624]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-10 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-02-27 1229232]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 121360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PsaSrv;IBM PSA Access Driver Control; C:\WINDOWS\system32\PsaSrv.exe []
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2009-10-09 39976]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Unlimited_Killer

0K.

1) Odinstalace ComboFixu

Proklikejte se přes Start do Spustit [klávesová zkratka je Win+R].
Do textového pole napište:
Kód: Vybrat vše
```
ComboFix /Uninstall
```
Stiskněte Enter.
Spustí se odinstalace ComboFixu, která smaže všechny jeho součásti.

2) OTCleaner

Stáhněte OTC a dvojklikem ho spusťte.
Vyskočí okénko, kde kliknete na 'CleanUp!'.
Potvrdíte kliknutím na 'Yes'.
Poté se ještě zeptá, zda chcete restartovat PC - to proveďte opět kliknutím na 'Yes'.

3) CCleaner

Stáhněte si program jménem CCleaner.
Normálně nainstalujte, jen dávejte pozor a odškrtněte položku 'Instalovat Yahoo! Toolbar'.
Spusťte ho.
- Záložka Čistič → nechte zatrženo vše, jak je, a klikněte na 'Spustit CCleaner'.
- Záložka Registry → klikněte na 'Hledej problémy'. Vyhledá problémy v registru, až dokončí analyzování, klikněte na 'Opravit vybrané problémy'. Nabídne Vám vytvoření zálohy - pro jistotu ji vytvořte a uložte například na Plochu.
CCleaner doporučuji používat pravidelně, celkem rapidně dokáže zrychlit PC.

4) Defragmentace

Defragmentujte disk.
Lze to udělat několika způsoby ↓
- Přes defragmentaci integrovanou ve Windows [Start → Spustit → dfrg.msc → Enter]. Toto není příliš účinný způsob.
- Přes jednoduchý a přehledný program jménem Defraggler.
- Přes geniální program, který se nemusí instalovat a je hodně jednoduchý - JKDefrag.

5) FileHippo.com UpdateChecker

Během procesu čištění jsem zvyklý odstraňovat zbytečné aplikace spouštěné po startu.
Mezi ně patří například Java Update. Nesmyslně užírá RAM paměť jelikož neustále sonduje, zda není novější verze.
Abyste měl/a přehled o aktualizacích, doporučuji stáhnout program FileHippo.com UpdateChecker.
- Běžně ho nainstalujte.
- Spouštějte ho například jednou až dvakrát týdně.
- Přehledně zobrazí všechny programy, které jsou neaktualizované, nabídne stažení novější verze (což doporučuji).

6) Jak se chová PC + nový RSIT log

VIRY.CZ

vytizeny procesor, zadost o preventivni kontrolu

vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu

Re: vytizeny procesor, zadost o preventivni kontrolu