O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Program files\superantispyware\SASWINLO.dll - D:\Program files\superantispyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program files\superantispyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.03.25 13:54:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\.borland
[2010.03.25 13:52:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared
[2010.03.25 13:46:12 | 000,036,864 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\ibxml.dll
[2010.03.25 13:46:09 | 000,425,984 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\gds32.dll
[2010.03.25 13:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Borland
[2010.03.24 09:56:47 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok (2)
[2010.03.23 17:00:14 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.03.23 16:36:20 | 000,000,000 | ---D | C] -- C:\Program Files\Bradbury
[2010.03.23 15:50:32 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.03.17 17:24:24 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.17 17:18:36 | 000,000,000 | ---D | C] -- C:\novazlozka
[2010.03.17 11:03:12 | 000,484,885 | ---- | C] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.16 16:50:56 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok
[2010.03.15 14:36:24 | 000,000,000 | ---D | C] -- C:\COMLOGO
[2010.03.15 14:31:47 | 000,000,000 | ---D | C] -- C:\D
[2010.03.15 14:05:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Advanced Chemistry Development
[2010.03.14 17:21:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\FreeScreenToVideo
[2010.03.11 08:00:06 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2010.03.09 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\PhotoFiltre
[2010.03.05 13:48:45 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.03.05 13:48:45 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.03.05 13:48:45 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.03.05 13:48:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.03.05 13:48:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.03.05 12:43:58 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe
[2010.03.04 18:08:09 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Bluetooth Exchange Folder
[2010.03.02 14:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\Hide IP NG
[2010.02.27 18:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.02.27 18:30:04 | 000,000,000 | ---D | C] -- C:\rsit
[2010.02.27 10:47:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\Digital Minds Software
[2010.02.26 18:29:07 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.02.26 14:17:25 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2010.02.25 18:27:09 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.02.25 18:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.02.25 18:27:05 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.02.25 08:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010.02.25 08:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010.02.24 20:34:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.02.24 07:55:37 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2009.12.15 17:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\TuneUp Software
[2009.12.14 09:31:26 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009.12.12 12:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2009.08.07 02:47:25 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008.07.21 20:18:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008.07.21 20:18:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
========== Files - Modified Within 30 Days ==========
[2010.03.25 14:10:00 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
[2010.03.25 13:53:10 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.25 13:52:57 | 012,058,624 | ---- | M] () -- C:\Documents and Settings\Lenovo\ntuser.dat
[2010.03.25 13:46:10 | 000,007,188 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\services
[2010.03.24 15:52:10 | 000,000,492 | ---- | M] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 14:45:50 | 000,000,024 | ---- | M] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 11:47:45 | 000,002,617 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.03.24 10:50:11 | 000,240,357 | ---- | M] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 19:14:44 | 000,084,727 | ---- | M] () -- D:\Moje dokumenty\Desktop\Zaklady programovani v Turbo Pascalu.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | M] () -- C:\WINDOWS\SHED.INI
[2010.03.23 18:21:30 | 000,000,218 | ---- | M] () -- C:\WINDOWS\TDW.INI
[2010.03.23 18:21:29 | 000,000,815 | ---- | M] () -- C:\WINDOWS\WIN.INI
[2010.03.23 18:21:29 | 000,000,767 | ---- | M] () -- C:\WINDOWS\GROUPS.B$$
[2010.03.23 18:21:29 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSTEM.INI
[2010.03.23 18:14:54 | 000,000,201 | ---- | M] () -- C:\WINDOWS\BPWINI.OLD
[2010.03.23 16:36:17 | 000,000,735 | ---- | M] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.23 15:56:19 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSINI.OLD
[2010.03.17 14:28:22 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 12:35:28 | 003,716,161 | ---- | M] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.17 11:03:14 | 000,484,885 | ---- | M] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.15 14:28:15 | 000,000,584 | ---- | M] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | M] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | M] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:57 | 000,013,444 | ---- | M] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | M] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | M] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 17:21:14 | 000,020,920 | ---- | M] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.14 15:31:07 | 000,034,053 | ---- | M] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:43 | 000,018,055 | ---- | M] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 14:11:29 | 000,000,144 | ---- | M] () -- C:\WINDOWS\Eudcedit.ini
[2010.03.13 13:57:46 | 000,014,556 | ---- | M] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.12 18:02:38 | 000,261,632 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010.03.12 14:04:50 | 000,010,555 | ---- | M] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.12 10:44:03 | 002,330,194 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.11 15:11:08 | 000,215,011 | ---- | M] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.11 15:07:47 | 000,385,106 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.03.09 14:26:13 | 000,001,968 | ---- | M] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.08 12:46:18 | 000,039,329 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.07 11:46:25 | 000,010,533 | ---- | M] () -- D:\Moje dokumenty\Z.docx
[2010.03.07 11:04:05 | 000,001,908 | ---- | M] () -- C:\WINDOWS\ARCHPR.INI
[2010.03.06 18:26:47 | 000,000,489 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010.03.06 17:54:38 | 000,011,338 | ---- | M] () -- D:\Moje dokumenty\LZ.docx
[2010.03.05 13:58:07 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.03.05 13:48:20 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.05 10:46:05 | 000,015,437 | ---- | M] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.03 09:59:48 | 000,214,957 | ---- | M] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | M] () -- D:\Moje dokumenty\Dok1.docx
[2010.02.28 08:43:31 | 000,106,584 | ---- | M] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010.02.27 16:12:54 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:05:51 | 001,669,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.02.26 18:29:11 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.02.25 08:02:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
========== Files Created - No Company Name ==========
[2010.03.24 15:52:10 | 000,000,492 | ---- | C] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 15:51:16 | 000,000,062 | ---- | C] () -- D:\Moje dokumenty\Desktop\winmenu.pas.dp
[2010.03.24 14:45:50 | 000,000,024 | ---- | C] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 10:50:09 | 000,240,357 | ---- | C] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | C] () -- C:\WINDOWS\SHED.INI
[2010.03.23 16:36:22 | 000,067,584 | ---- | C] () -- C:\WINDOWS\unlite25.exe
[2010.03.23 16:36:17 | 000,000,735 | ---- | C] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.17 17:24:24 | 000,077,312 | ---- | C] () -- C:\Documents and Settings\Lenovo\mbr.cfxxe
[2010.03.17 14:28:22 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 14:26:49 | 1063,702,528 | -HS- | C] () -- C:\hiberfil.sys
[2010.03.17 12:13:01 | 003,716,161 | ---- | C] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.15 14:15:40 | 000,000,584 | ---- | C] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | C] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | C] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:56 | 000,013,444 | ---- | C] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | C] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | C] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 15:31:06 | 000,034,053 | ---- | C] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:42 | 000,018,055 | ---- | C] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 12:26:15 | 000,014,556 | ---- | C] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.13 12:01:55 | 000,020,920 | ---- | C] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.12 14:04:50 | 000,010,555 | ---- | C] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.11 15:11:07 | 000,215,011 | ---- | C] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.09 14:26:13 | 000,001,968 | ---- | C] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.09 12:45:46 | 012,045,818 | ---- | C] () -- D:\Moje dokumenty\dskgfhfsg.pptx
[2010.03.08 12:46:17 | 000,039,329 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.06 12:12:08 | 000,011,338 | ---- | C] () -- D:\Moje dokumenty\LZ.docx
[2010.03.06 10:23:04 | 000,010,533 | ---- | C] () -- D:\Moje dokumenty\Z.docx
[2010.03.05 13:48:45 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.03.05 13:48:45 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.03.05 13:48:45 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.03.05 13:48:45 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.03.05 13:48:45 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.03.05 10:46:05 | 000,015,437 | ---- | C] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.05 10:44:41 | 002,330,194 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.03 09:59:48 | 000,214,957 | ---- | C] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | C] () -- D:\Moje dokumenty\Dok1.docx
[2010.03.02 12:58:38 | 000,385,106 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.02.27 16:12:54 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:47:03 | 000,972,800 | ---- | C] () -- C:\WINDOWS\System32\Scary_Halloween_3D_Screensaver.scr
[2010.02.26 18:29:11 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.02.26 18:29:09 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010.02.25 08:43:48 | 000,001,000 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.02.25 08:43:47 | 000,000,996 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.02.14 15:21:06 | 000,000,128 | ---- | C] () -- C:\WINDOWS\System32\EUSOFT.SYS
[2010.02.05 16:15:08 | 000,000,052 | -H-- | C] () -- C:\WINDOWS\family007.ini
[2010.02.04 19:10:26 | 000,000,055 | ---- | C] () -- C:\WINDOWS\SpeederXP.INI
[2010.01.29 15:04:54 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2010.01.29 15:04:53 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2010.01.29 15:04:53 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\LFFPX90N.DLL
[2010.01.25 09:50:17 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI_SETUP.ini
[2010.01.21 19:33:39 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2010.01.17 11:05:43 | 000,000,111 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
[2010.01.11 14:38:45 | 000,000,146 | ---- | C] () -- C:\WINDOWS\didakta.ini
[2010.01.07 13:55:01 | 000,001,908 | ---- | C] () -- C:\WINDOWS\ARCHPR.INI
[2010.01.02 17:17:25 | 000,000,144 | ---- | C] () -- C:\WINDOWS\Eudcedit.ini
[2009.12.25 16:47:40 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\fusioncache.dat
[2009.12.24 09:18:38 | 000,000,265 | ---- | C] () -- C:\WINDOWS\Ikony.ini
[2009.12.13 19:35:52 | 000,401,928 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009.12.13 13:28:38 | 000,000,489 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.12.05 19:01:52 | 000,003,140 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2009.12.05 19:01:52 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\87F9D435FF.sys
[2009.12.05 14:33:19 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.05 13:35:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009.11.06 14:36:48 | 000,066,352 | ---- | C] () -- C:\WINDOWS\System32\lskhook64.dll
[2009.11.06 14:36:46 | 000,075,056 | ---- | C] () -- C:\WINDOWS\System32\lskhook.dll
[2009.10.26 16:03:22 | 000,003,636 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.10.26 16:00:44 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.10.26 16:00:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009.10.26 16:00:41 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.10.26 16:00:41 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.10.26 16:00:40 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009.10.26 16:00:38 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009.10.26 16:00:37 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.08.07 02:58:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009.08.07 02:29:51 | 009,338,880 | ---- | C] () -- C:\WINDOWS\System32\Facev.dll
[2009.08.07 02:29:51 | 000,491,520 | ---- | C] () -- C:\WINDOWS\System32\picn.dll
[2009.08.07 02:29:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\FunFrm.dll
[2009.08.07 02:29:49 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\EncIcons.dll
[2009.08.07 02:29:49 | 000,507,904 | ---- | C] () -- C:\WINDOWS\System32\SimpleExt.dll
[2009.08.07 02:29:49 | 000,241,752 | ---- | C] () -- C:\WINDOWS\System32\IcnOvrly.dll
[2009.08.07 02:29:48 | 009,502,720 | ---- | C] () -- C:\WINDOWS\System32\FaceVerify.dll
[2009.08.07 02:29:48 | 001,974,272 | ---- | C] () -- C:\WINDOWS\System32\Imagereog.dll
[2009.08.07 02:29:48 | 001,564,672 | ---- | C] () -- C:\WINDOWS\System32\MainOp.dll
[2009.08.07 02:29:48 | 001,167,360 | ---- | C] () -- C:\WINDOWS\System32\PicNotify.dll
[2009.08.07 02:29:48 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\Apblend.dll
[2009.08.07 02:29:48 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\SetDev.dll
[2009.08.07 02:29:48 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\VideoOp.dll
[2009.08.07 02:29:48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\Momo.dll
[2009.08.07 02:29:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\DevFilt.dll
[2009.08.07 02:29:45 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\3DImageRenderer.dll
[2009.08.07 02:23:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009.01.17 10:11:04 | 000,002,045 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\whlprd32a.dll
[2009.01.17 01:55:38 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2008.10.28 19:17:50 | 000,012,240 | ---- | C] () -- C:\WINDOWS\System32\dvmio.sys
[2008.08.13 15:16:45 | 000,000,218 | ---- | C] () -- C:\WINDOWS\TDW.INI
[2008.08.13 15:16:45 | 000,000,201 | ---- | C] () -- C:\WINDOWS\BPW.INI
[2008.07.21 22:08:39 | 000,005,398 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007.09.27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007.09.27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007.09.27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2005.02.17 19:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005.02.17 19:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001.11.14 20:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:319E7F0B
@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8178B8D6
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:302A9871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B7461410
< End of report >
SRV - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.11.22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [On_Demand | Stopped] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2009.11.06 14:38:36 | 001,041,712 | ---- | M] (LanSchool Technologies, llc) [Auto | Running] -- C:\Program Files\LanSchool\student.exe -- (LanSchoolStudent)
SRV - [2009.01.17 01:56:42 | 000,346,720 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2008.11.20 17:15:06 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\QSTART.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2005.05.24 17:22:16 | 002,027,520 | ---- | M] (Borland Software Corporation) [On_Demand | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibserver.exe -- (IBS_gds_db)
SRV - [2005.05.24 17:22:14 | 000,036,864 | ---- | M] (Borland Software Corporation) [Auto | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibguard.exe -- (IBG_gds_db)
========== Driver Services (SafeList) ==========
DRV - [2010.02.22 10:54:44 | 000,066,632 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Running] -- D:\Program files\superantispyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.12.25 12:14:14 | 000,022,528 | ---- | M] (pBUS-167 Software -
http://www.pbus-167.com) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nhcDriver.sys -- (nhcDriverDevice)
DRV - [2009.11.25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.11.25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009.11.25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009.11.22 15:42:54 | 000,486,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2009.09.15 12:56:14 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009.09.15 12:55:30 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.09.15 12:55:19 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.02.18 11:31:04 | 005,028,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.01.07 23:18:58 | 000,991,784 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008.10.30 21:19:14 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008.09.11 03:14:48 | 001,386,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2008.08.05 13:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2008.07.24 09:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008.07.23 03:03:24 | 000,157,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTS5121.sys -- (RSUSBSTOR)
DRV - [2008.06.20 04:43:36 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008.05.30 03:46:12 | 000,534,568 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008.05.23 03:21:26 | 000,225,280 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008.04.14 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.04.14 08:06:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008.04.14 08:06:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008.03.10 10:18:42 | 000,057,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2008.02.15 06:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008.02.04 09:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008.02.04 09:57:30 | 000,037,032 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2008.01.11 22:58:42 | 000,009,472 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV - [2007.02.19 06:56:46 | 000,021,376 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd)
DRV - [2006.04.23 06:33:52 | 000,007,012 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PMEMNT.SYS -- (PMEM)
DRV - [2006.01.04 08:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2004.11.18 11:49:14 | 000,024,786 | ---- | M] (EUTRON) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
DRV - [2001.08.17 22:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001.08.17 22:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001.08.17 22:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001.08.17 22:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001.08.17 22:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001.08.17 21:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001.08.17 21:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001.08.17 21:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001.08.17 21:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001.08.17 21:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001.08.17 21:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001.08.17 21:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001.08.17 21:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001.08.17 21:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001.08.17 21:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001.08.17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
========== Standard Registry (SafeList) ==========