Stránka 4 z 6

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 07:25
od michajlo
Už sa stalo, ale žiadny log nevyhodilo po reštarte... Všetky programy musím spúšťať pravým tlačidlom a ako administrátor a nedá sa spustiť ani správca úloh.... :(

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 07:36
od motji
:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir


:arrow: Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-souhlaste s instalací konzole pro zotavení

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna :!:

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:15
od michajlo
ComboFix 10-03-08.01 - Andrejko . 03. 2010 8:04.7.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.421.1051.18.3069.2309 [GMT 1:00]
Running from: c:\users\Andrejko\Desktop\ComboFix.exe
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\LOG.TXT

.
((((((((((((((((((((((((( Files Created from 2010-02-09 to 2010-03-09 )))))))))))))))))))))))))))))))
.

2010-03-09 07:11 . 2010-03-09 07:11 -------- d-----w- c:\users\Andrejko\AppData\Local\temp
2010-03-09 06:58 . 2010-03-09 06:59 -------- d-----w- C:\32788R22FWJFW
2010-03-09 05:54 . 2010-03-09 05:54 -------- d-----w- C:\$AVG
2010-03-09 05:42 . 2010-03-09 05:42 -------- d-----w- c:\windows\system32\drivers\Avg
2010-03-09 05:42 . 2010-03-09 05:42 -------- d-----w- c:\program files\AVG
2010-03-09 05:42 . 2010-03-09 05:42 -------- d-----w- c:\programdata\avg9
2010-03-09 04:35 . 2010-03-09 04:35 -------- d-----w- c:\users\Andrejko\AppData\Roaming\TrojanHunter
2010-03-09 02:10 . 2010-03-09 04:35 -------- d-----w- c:\program files\TrojanHunter 5.1
2010-03-09 00:02 . 2010-03-09 00:02 -------- d-----w- c:\program files\Enigma Software Group
2010-03-08 22:23 . 2010-03-08 22:23 -------- d-----w- c:\users\Andrejko\AppData\Local\ESET
2010-03-08 21:38 . 2010-03-09 04:50 -------- d-----w- c:\programdata\Kaspersky Lab
2010-03-08 16:31 . 2010-03-08 16:31 16925 ----a-w- c:\windows\DIIUnin.dat
2010-03-08 16:31 . 2010-03-08 16:31 2829 ----a-w- c:\windows\DIIUnin.pif
2010-03-08 16:31 . 2010-03-08 16:31 94208 ----a-w- c:\windows\DIIUnin.exe
2010-03-08 16:29 . 2010-03-08 23:41 -------- d-----w- c:\program files\Diablo II
2010-03-07 22:20 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-04 12:33 . 2010-03-04 12:33 -------- d-----w- c:\programdata\PC Suite
2010-03-04 12:33 . 2010-03-04 12:33 -------- d-----w- c:\users\Andrejko\AppData\Roaming\PC Suite
2010-03-04 12:28 . 2010-03-04 12:28 -------- d-----w- c:\programdata\Nokia
2010-03-04 12:24 . 2010-03-04 12:24 -------- d-----w- c:\program files\DIFX
2010-03-04 12:24 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-03-04 12:24 . 2010-03-04 12:24 -------- d-----w- c:\program files\PC Connectivity Solution
2010-03-04 12:20 . 2009-12-30 10:30 91136 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-03-04 12:20 . 2010-03-04 12:20 -------- d-----w- c:\program files\Nokia
2010-03-04 12:20 . 2010-03-04 12:20 -------- d-----w- c:\program files\Common Files\Nokia
2010-03-04 12:20 . 2010-03-02 14:59 34814832 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\NokiaSoftwareUpdaterSetup_sk.exe
2010-03-04 12:18 . 2010-03-04 12:18 36864 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\Sleep.exe
2010-03-04 12:18 . 2010-03-04 12:18 3351812 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\msxml6Exec.exe
2010-03-04 12:18 . 2010-03-04 12:18 3203453 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\vcredistExec.exe
2010-03-04 12:18 . 2010-03-04 12:18 -------- d-----w- c:\programdata\Installations
2010-03-03 08:31 . 2010-03-03 08:31 -------- d-----w- C:\VJVod_Cache
2010-03-02 19:10 . 2010-03-09 00:52 52224 ----a-w- c:\users\Andrejko\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-02-25 11:59 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-25 11:59 . 2010-02-25 11:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-25 11:59 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-24 12:42 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-24 12:29 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-02-24 12:29 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc.dll
2010-02-24 12:29 . 2010-01-25 08:21 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-02-24 12:29 . 2010-01-25 08:21 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-02-24 12:29 . 2010-01-25 08:21 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-02-24 12:29 . 2010-01-25 08:21 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-02-24 12:29 . 2010-01-25 12:00 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-02-24 12:29 . 2010-01-25 12:00 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-02-24 12:29 . 2010-01-25 11:58 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-02-24 12:29 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-02-24 12:29 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-02-24 12:29 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-02-24 10:23 . 2010-02-24 10:28 -------- d-----w- c:\program files\Wise Registry Cleaner
2010-02-24 10:12 . 2010-02-24 10:12 -------- d-----w- c:\program files\VS Revo Group
2010-02-24 07:42 . 2010-03-09 05:41 -------- d-----w- c:\program files\ESET
2010-02-23 15:20 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-17 11:39 . 2010-02-17 11:39 -------- d-----w- c:\program files\Ubisoft
2010-02-10 08:48 . 2009-12-11 11:43 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-02-10 08:48 . 2009-12-11 11:43 98816 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-02-10 08:48 . 2009-12-08 20:01 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-10 08:48 . 2009-12-08 20:01 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-09 06:13 . 2009-11-06 12:43 -------- d-----w- c:\program files\Stylish Profile
2010-03-09 05:44 . 2010-03-09 05:44 360584 ----a-w- c:\programdata\avg9\update\backup\avgtdix.sys
2010-03-09 05:44 . 2010-03-09 05:44 333192 ----a-w- c:\programdata\avg9\update\backup\avgldx86.sys
2010-03-09 05:44 . 2010-03-09 05:44 28424 ----a-w- c:\programdata\avg9\update\backup\avgmfx86.sys
2010-03-09 05:44 . 2010-03-09 05:44 161800 ----a-w- c:\programdata\avg9\update\backup\avgrkx86.sys
2010-03-09 05:44 . 2010-03-09 05:42 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-09 05:44 . 2010-03-09 05:44 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-09 05:44 . 2010-03-09 05:42 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-09 05:44 . 2010-03-09 05:42 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-09 05:44 . 2010-03-09 05:42 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-03-09 05:42 . 2010-03-09 05:43 800536 ----a-w- c:\programdata\avg9\update\backup\avginet.dll
2010-03-09 05:42 . 2010-03-09 05:43 613656 ----a-w- c:\programdata\avg9\update\backup\avgiproxy.exe
2010-03-09 05:42 . 2010-03-09 05:43 1658136 ----a-w- c:\programdata\avg9\update\backup\avgupd.dll
2010-03-09 05:42 . 2010-03-09 05:43 1007896 ----a-w- c:\programdata\avg9\update\backup\avgupd.exe
2010-03-09 00:52 . 2009-03-25 14:18 117760 ----a-w- c:\users\Andrejko\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-03-08 23:41 . 2008-10-27 12:19 -------- d-----w- c:\program files\Common Files\Skype
2010-03-08 21:18 . 2010-01-25 14:02 -------- d-----w- c:\program files\Panda Security
2010-03-08 21:18 . 2008-04-24 06:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-08 20:06 . 2009-10-04 18:31 -------- d-----w- c:\programdata\Norton
2010-03-08 20:02 . 2009-04-22 10:09 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-05 21:33 . 2008-10-22 13:53 1 ----a-w- c:\users\Andrejko\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-03-04 12:33 . 2010-03-04 12:33 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-03-03 09:39 . 2009-07-23 20:21 680 ----a-w- c:\users\Andrejko\AppData\Local\d3d9caps.dat
2010-03-02 20:58 . 2008-11-28 14:33 -------- d-----w- c:\users\Andrejko\AppData\Roaming\dvdcss
2010-02-25 05:24 . 2009-04-23 18:34 130448 ----a-w- c:\users\Andrejko\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 22:58 . 2006-11-02 12:37 -------- d-----w- c:\program files\Microsoft Games
2010-02-24 10:41 . 2008-05-14 05:57 -------- d-----w- c:\program files\Microsoft Works
2010-02-17 11:40 . 2008-10-22 13:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-02-13 21:11 . 2009-11-26 09:43 -------- d-----w- c:\program files\Activision
2010-02-11 21:41 . 2010-01-13 00:43 -------- d-----w- c:\programdata\Media Center Programs
2010-02-11 08:21 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-02-10 21:30 . 2008-04-24 07:18 -------- d-----w- c:\program files\Google
2010-01-31 10:30 . 2010-01-30 21:43 -------- d-----w- c:\program files\Pcsx2
2010-01-31 10:23 . 2010-01-31 10:19 -------- d-----w- c:\program files\QuickTime
2010-01-31 10:22 . 2008-11-20 21:10 -------- d-----w- c:\programdata\Apple Computer
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\program files\Common Files\Apple
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\program files\Apple Software Update
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\programdata\Apple
2010-01-31 10:17 . 2010-01-31 10:17 -------- d-----w- c:\users\Andrejko\AppData\Roaming\Thinstall
2010-01-21 13:53 . 2010-01-21 13:53 18048 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-01-13 09:20 . 2010-01-13 09:20 -------- d-----w- c:\programdata\BioWare
2010-01-13 08:44 . 2010-01-13 07:23 -------- d-----w- c:\program files\Common Files\BioWare
2010-01-13 00:44 . 2008-10-26 15:59 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-11 15:55 . 2010-01-11 15:54 -------- d-----w- c:\users\Andrejko\AppData\Roaming\uTorrent
2010-01-06 15:38 . 2010-02-24 12:29 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-01-06 15:38 . 2010-02-24 12:29 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-01-06 15:38 . 2010-02-24 12:29 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-01-06 15:38 . 2010-02-24 12:29 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll
2010-01-06 10:18 . 2010-01-06 10:18 96 ----a-w- c:\users\Andrejko\AppData\Local\fusioncache.dat
2010-01-02 06:38 . 2010-01-24 20:46 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-24 20:46 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-24 20:46 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-24 20:46 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-30 10:30 . 2009-12-30 10:30 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2009-12-30 10:30 . 2009-12-30 10:30 660480 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-12-30 10:30 . 2009-12-30 10:30 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2009-12-30 10:30 . 2009-12-30 10:30 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2009-12-30 10:25 . 2009-12-30 10:25 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2009-12-30 10:25 . 2009-12-30 10:25 137344 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2009-03-31 20:47 . 2009-04-22 10:33 324976 ----a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll
2009-03-01 22:08 . 2009-03-01 21:15 895008 --sha-w- c:\windows\System32\drivers\fidbox.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2008-01-29 430080]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-29 4911104]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-03-07 198160]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-3-25 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
backup=c:\windows\pss\Bluetooth Manager.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 21:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2009-10-30 11:57 369200 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
2007-06-18 08:51 1507328 ----a-w- c:\program files\IDM\Desktop SMS\DesktopSMS.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 15:40 155648 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
2006-12-06 01:44 366400 ----a-w- c:\program files\Picasa2\PicasaMediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-04-11 06:28 1233920 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):91,64,a1,74,da,51,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2706454667-533331120-2221285752-1000]
"EnableNotificationsRef"=dword:00000001

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-11-25 691696]
R2 gupdate1ca5670872813c8;Služba Google Update (gupdate1ca5670872813c8);c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 133104]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-02-17 7408]
S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2010-03-09 52872]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-03-09 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-03-09 242696]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-03-09 308064]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
vvdsvc REG_MULTI_SZ vvdsvc
.
Contents of the 'Scheduled Tasks' folder

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 19:14]

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 19:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk
mStart Page = about:blank
uInternet Settings,ProxyOverride = local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {4E7532CE-EE46-4735-BEC1-40CECF5761DC} = 10.0.0.254
FF - ProfilePath - c:\users\Andrejko\AppData\Roaming\Mozilla\Firefox\Profiles\vyyfj8i8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\users\Andrejko\AppData\Roaming\Mozilla\Firefox\Profiles\vyyfj8i8.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -

AddRemove-HijackThis - c:\program files\trend micro\HijackThis.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-09 08:11
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2010-03-09 08:13:52
ComboFix-quarantined-files.txt 2010-03-09 07:13

Pre-Run: 63 632 179 200 bytes free
Post-Run: 63 360 126 976 bytes free

- - End Of File - - 01832528EA1B40C6BF3E29CDCE2731C9

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:24
od motji
Jak to ted vypadá s počítačem?

Odinstalujte antiviry a pod, které už nebudete používat, ponechejte si pouze 1antivir, 1antispy s rezidentním štítem a napište který. Ostatní smažeme :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:27
od michajlo
Teraz mám nainštalovanú skúšobnú verziu AVG, ale nezobrazuje mi ju v lište pri hodinkách a ani v procesoch ju nevidno.. Ako keby ani nebol nainštalovaný... Pri hodinkách mám zobrazenú len baterku a pripojenie k internetu, viac nič.. je to čudné. Google mi teraz vypisuje české stránky prezmenu, ale stále nie slovenské.. Mám odinštalovať ten AVG a znova nainštalovať? Keď ho zapnem cez ikonu na ploche, hneď vyskočí aj v správcovi úloh, ale dovtedy tam nie je jeho proces.. čudné..

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:37
od motji
AVg vyhodte uplně, jsou lepší antiviry :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:41
od michajlo
a bude sa mi ten nový už zobrazovať v lište? všetko z tej lišty zmizlo... :D

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:51
od motji
Měl by :)
Nebojte, to pak spravíme :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:53
od michajlo
V lište už mám ikony, super, ale zmizol mi panel s jazykmi... :D Ako ho mám dostať späť? Počítač už pracuje výborne, len ten google... :) Aký antivirus navrhujete? Platený chcem... A ten Vista Internet Security 2010 bol tiež v pohode :D :D

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 08:57
od michajlo
Idem do školy, zatiaľ sa majte.. :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 09:00
od motji
A to si ho koupíte? Stahovat k němu keygen bych Vám opravdu nedoporučovala, nebo Vás tu máme za chvilku zpět.

S těch free Avast nebo Aviru, z placených je asi nejlepší Norton nebo Kašperský.

Až ho budete mít nainstalovaný, poprosím o log ze Rsitu a uklidíme :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 11:48
od michajlo
Chcem platený, ale seriózne, nie cracknuté... Norton nepresvedčil a Kašperák je dosť drahý.. A čo tak NOD? Doteraz som mal platený Norton, ešte mám mesiac licenciu, ale po tých zmenách s googlom ho už nechcem :) A AVG je na tom až tak zle?

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 18:36
od motji
AVG bych Vám moc nedoporučovala, patří k těm horším antivirům.
Norton patří mezi ty nejlepší, Nod je tak standart, vyzkoušejte ho a uvidíte :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 20:02
od michajlo
Nainštaloval som si Kaspersky, super.. Môžme dokončiť ostatné, ako ste spomínali.. posielam log..

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 20:07
od michajlo
Logfile of random's system information tool 1.06 (written by random/random)
Run by Andrejko at 2010-03-09 20:06:23
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 63 GB (53%) free of 119 GB
Total RAM: 3069 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:06:29, on 9. 3. 2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Andrejko\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Andrejko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pre aplikáciu Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll
O2 - BHO: tom for ie - {8AA217B9-D729-4ee0-AED7-E93D695E94A2} - C:\Program Files\Stylish Profile\tom4ie.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: &Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4E7532CE-EE46-4735-BEC1-40CECF5761DC}: NameServer = 10.0.0.254
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Služba Google Update (gupdate1ca5670872813c8) (gupdate1ca5670872813c8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 8111 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pre aplikáciu Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8AA217B9-D729-4ee0-AED7-E93D695E94A2}]
TomBHO Class - C:\Program Files\Stylish Profile\tom4ie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-29 4911104]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2007-09-28 75136]
"topi"=C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [2007-07-10 581632]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"Camera Assistant Software"=C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [2007-10-25 413696]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2008-01-17 431456]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2007-10-31 54608]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2008-01-25 509816]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2008-01-22 712704]
"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [2007-05-04 571024]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-03-07 198160]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"PinnacleDriverCheck"=C:\Windows\system32\PSDrvCheck.exe [2003-11-10 406016]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"=C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [2008-01-29 430080]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [2007-06-18 1507328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe [2006-12-06 366400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
C:\Windows\WindowsMobile\wmdSync.exe [2008-01-21 215552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
C:\PROGRA~1\Toshiba\BLUETO~1\TosBtMng.exe [2008-01-25 2938184]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\Windows\System32\avgrsstx.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87e15f13-02a9-11de-8b33-00037a8dd304}]
shell\AutoRun\command - vlvtdflx.exe
shell\open\command - vlvtdflx.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-03-09 20:02:51 ----D---- C:\rsit
2010-03-09 20:02:51 ----D---- C:\Program Files\trend micro
2010-03-09 14:54:14 ----D---- C:\Program Files\Kaspersky Lab
2010-03-09 14:46:17 ----D---- C:\ProgramData\Kaspersky Lab Setup Files
2010-03-09 08:13:56 ----SHD---- C:\$RECYCLE.BIN
2010-03-09 08:13:54 ----D---- C:\Windows\temp
2010-03-09 08:13:53 ----A---- C:\ComboFix.txt
2010-03-09 08:02:23 ----A---- C:\Windows\NIRCMD.exe
2010-03-09 08:02:23 ----A---- C:\Windows\MBR.exe
2010-03-09 08:02:21 ----A---- C:\Windows\PEV.exe
2010-03-09 08:02:20 ----A---- C:\Windows\zip.exe
2010-03-09 08:02:20 ----A---- C:\Windows\SWREG.exe
2010-03-09 08:02:20 ----A---- C:\Windows\sed.exe
2010-03-09 08:02:20 ----A---- C:\Windows\grep.exe
2010-03-09 08:02:19 ----A---- C:\Windows\SWSC.exe
2010-03-09 08:02:05 ----D---- C:\Windows\ERDNT
2010-03-09 07:59:07 ----D---- C:\ComboFix
2010-03-09 07:58:52 ----D---- C:\Qoobox
2010-03-09 07:58:24 ----A---- C:\Windows\SWXCACLS.exe
2010-03-09 07:58:11 ----D---- C:\32788R22FWJFW
2010-03-09 06:42:04 ----D---- C:\Program Files\AVG
2010-03-09 06:31:53 ----D---- C:\Users\Andrejko\AppData\Roaming\ESET
2010-03-09 05:35:29 ----D---- C:\Users\Andrejko\AppData\Roaming\TrojanHunter
2010-03-09 03:10:09 ----R---- C:\Windows\system32\streamhlp.dll
2010-03-09 03:10:08 ----D---- C:\Program Files\TrojanHunter 5.1
2010-03-09 01:02:01 ----D---- C:\Program Files\Enigma Software Group
2010-03-08 23:21:31 ----D---- C:\ProgramData\ESET
2010-03-08 22:38:39 ----D---- C:\ProgramData\Kaspersky Lab
2010-03-08 17:31:32 ----A---- C:\Windows\DIIUnin.exe
2010-03-08 17:29:21 ----D---- C:\Program Files\Diablo II
2010-03-07 23:20:55 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-04 13:33:13 ----D---- C:\ProgramData\PC Suite
2010-03-04 13:33:07 ----D---- C:\Users\Andrejko\AppData\Roaming\PC Suite
2010-03-04 13:28:32 ----D---- C:\ProgramData\Nokia
2010-03-04 13:24:58 ----D---- C:\Program Files\DIFX
2010-03-04 13:24:00 ----D---- C:\Program Files\PC Connectivity Solution
2010-03-04 13:20:35 ----A---- C:\Windows\system32\nmwcdcls.dll
2010-03-04 13:20:07 ----D---- C:\Program Files\Nokia
2010-03-04 13:20:07 ----D---- C:\Program Files\Common Files\Nokia
2010-03-04 13:18:20 ----D---- C:\ProgramData\Installations
2010-03-03 09:31:36 ----HD---- C:\VJVod_Cache
2010-02-25 12:59:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-24 13:42:57 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 13:42:25 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 13:29:39 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 13:29:38 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 13:29:37 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 13:29:37 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 13:29:37 ----A---- C:\Windows\system32\msdrm.dll
2010-02-24 13:29:30 ----A---- C:\Windows\system32\gameux.dll
2010-02-24 13:29:30 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-02-24 13:29:29 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-02-24 11:23:27 ----D---- C:\Program Files\Wise Registry Cleaner
2010-02-24 11:12:46 ----D---- C:\Program Files\VS Revo Group
2010-02-24 08:42:27 ----D---- C:\Program Files\ESET
2010-02-23 16:47:38 ----D---- C:\Windows\pss
2010-02-23 16:20:07 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-17 12:39:54 ----D---- C:\Program Files\Ubisoft
2010-02-10 09:48:04 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-02-10 09:48:04 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-02-10 09:47:42 ----A---- C:\Windows\system32\tsbyuv.dll
2010-02-10 09:47:42 ----A---- C:\Windows\system32\quartz.dll
2010-02-10 09:47:42 ----A---- C:\Windows\system32\msyuv.dll
2010-02-10 09:47:42 ----A---- C:\Windows\system32\msvidc32.dll
2010-02-10 09:47:42 ----A---- C:\Windows\system32\msrle32.dll
2010-02-10 09:47:42 ----A---- C:\Windows\system32\iyuv_32.dll
2010-02-10 09:47:41 ----A---- C:\Windows\system32\msvfw32.dll
2010-02-10 09:47:41 ----A---- C:\Windows\system32\mciavi32.dll
2010-02-10 09:47:41 ----A---- C:\Windows\system32\avifil32.dll

======List of files/folders modified in the last 1 months======

2010-03-09 20:06:22 ----D---- C:\Windows\Prefetch
2010-03-09 20:02:51 ----RD---- C:\Program Files
2010-03-09 17:40:05 ----D---- C:\Windows\inf
2010-03-09 17:40:05 ----AD---- C:\Windows\System32
2010-03-09 17:40:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-09 17:38:41 ----D---- C:\Windows
2010-03-09 15:23:21 ----SHD---- C:\System Volume Information
2010-03-09 14:55:21 ----SHD---- C:\Windows\Installer
2010-03-09 14:55:15 ----D---- C:\Windows\system32\drivers
2010-03-09 14:55:05 ----D---- C:\Windows\system32\catroot
2010-03-09 14:49:04 ----D---- C:\Users\Andrejko\AppData\Roaming\SUPERAntiSpyware.com
2010-03-09 14:49:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-09 14:49:02 ----D---- C:\Program Files\SUPERAntiSpyware
2010-03-09 14:46:17 ----D---- C:\ProgramData
2010-03-09 08:11:46 ----A---- C:\Windows\system.ini
2010-03-09 08:08:44 ----D---- C:\Windows\AppPatch
2010-03-09 08:08:43 ----D---- C:\Program Files\Common Files
2010-03-09 07:13:43 ----D---- C:\Program Files\Stylish Profile
2010-03-09 01:25:23 ----AD---- C:\ProgramData\TEMP
2010-03-09 01:02:06 ----D---- C:\Windows\system32\Tasks
2010-03-09 00:42:52 ----D---- C:\Windows\system32\Msdtc
2010-03-09 00:42:49 ----D---- C:\Windows\system32\wbem
2010-03-09 00:42:08 ----D---- C:\Windows\system32\config
2010-03-09 00:41:56 ----D---- C:\Windows\Tasks
2010-03-09 00:41:56 ----D---- C:\Windows\system32\spool
2010-03-09 00:41:56 ----D---- C:\Windows\system32\catroot2
2010-03-09 00:41:55 ----D---- C:\Program Files\Common Files\Skype
2010-03-09 00:41:53 ----D---- C:\Windows\registration
2010-03-08 22:18:48 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-08 22:18:48 ----D---- C:\Program Files\Panda Security
2010-03-08 21:26:19 ----A---- C:\Windows\win.ini
2010-03-08 21:06:12 ----D---- C:\ProgramData\Norton
2010-03-08 21:02:46 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-03-08 21:02:42 ----DC---- C:\Windows\system32\DRVSTORE
2010-03-07 23:21:11 ----D---- C:\Windows\winsxs
2010-03-04 22:06:08 ----D---- C:\Windows\Minidump
2010-03-02 21:58:37 ----D---- C:\Users\Andrejko\AppData\Roaming\dvdcss
2010-02-24 23:58:08 ----D---- C:\Program Files\Microsoft Games
2010-02-24 23:51:13 ----RSD---- C:\Windows\Fonts
2010-02-24 15:01:03 ----D---- C:\Windows\rescache
2010-02-24 14:42:26 ----D---- C:\Windows\system32\sk-SK
2010-02-24 13:51:27 ----D---- C:\Windows\WindowsMobile
2010-02-24 11:45:04 ----RSD---- C:\Windows\assembly
2010-02-24 11:43:40 ----D---- C:\Program Files\Common Files\microsoft shared
2010-02-24 11:41:54 ----D---- C:\Program Files\Microsoft Works
2010-02-23 16:47:35 ----SD---- C:\ProgramData\Microsoft
2010-02-23 15:53:54 ----D---- C:\Program Files\Mozilla Firefox
2010-02-13 22:11:31 ----D---- C:\Program Files\Activision
2010-02-11 22:52:57 ----D---- C:\Windows\Debug
2010-02-11 22:41:10 ----D---- C:\ProgramData\Media Center Programs
2010-02-11 09:21:04 ----D---- C:\Program Files\Windows Mail
2010-02-10 22:30:40 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2009-09-01 128016]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2010-03-09 311312]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2009-11-03 21520]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-10-02 64128]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-01-30 3483648]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 FwLnk;FwLnk Driver; C:\Windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-30 2058528]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
R3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-21 8192]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-12-28 104448]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2007-12-26 131584]
R3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2007-11-29 36608]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2007-11-29 74240]
R3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-10-18 41856]
R3 usbvideo;Chicony USB 2.0 Camera; C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2007-12-17 18432]
S3 auf04bh0;auf04bh0; C:\Windows\system32\drivers\auf04bh0.sys []
S3 catchme;catchme; \??\C:\Users\Andrejko\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 winusb;WinUSB Service; C:\Windows\system32\DRIVERS\winusb.sys [2009-04-11 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-01-30 643072]
R2 AVP;Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]
R2 ConfigFree Service;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe [2008-01-21 83312]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2007-11-21 129632]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe [2008-01-17 431456]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 128360]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 gupdate1ca5670872813c8;Služba Google Update (gupdate1ca5670872813c8); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-26 133104]
S2 vvdsvc;VJVodClientServices; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 getPlusHelper;@C:\Program Files\NOS\bin\getPlus_Helper.dll,-101; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-24 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]

-----------------EOF-----------------